./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor135977057 <...> Warning: Permanently added '10.128.0.156' (ED25519) to the list of known hosts. execve("./syz-executor135977057", ["./syz-executor135977057"], 0x7ffe0d056fc0 /* 10 vars */) = 0 brk(NULL) = 0x555555a9c000 brk(0x555555a9cd40) = 0x555555a9cd40 arch_prctl(ARCH_SET_FS, 0x555555a9c3c0) = 0 set_tid_address(0x555555a9c690) = 5045 set_robust_list(0x555555a9c6a0, 24) = 0 rseq(0x555555a9cce0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor135977057", 4096) = 27 getrandom("\xdf\x4c\xf3\x44\x80\x25\x92\x1a", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555555a9cd40 brk(0x555555abdd40) = 0x555555abdd40 brk(0x555555abe000) = 0x555555abe000 mprotect(0x7efc02728000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 mount(NULL, "/proc/sys/fs/binfmt_misc", "binfmt_misc", 0, NULL) = -1 EBUSY (Device or resource busy) openat(AT_FDCWD, "/proc/sys/fs/binfmt_misc/register", O_WRONLY|O_CLOEXEC) = 3 write(3, "\x3a\x73\x79\x7a\x30\x3a\x4d\x3a\x30\x3a\x01\x3a\x3a\x2e\x2f\x66\x69\x6c\x65\x30\x3a", 21) = 21 close(3) = 0 openat(AT_FDCWD, "/proc/sys/fs/binfmt_misc/register", O_WRONLY|O_CLOEXEC) = 3 write(3, "\x3a\x73\x79\x7a\x31\x3a\x4d\x3a\x31\x3a\x02\x3a\x3a\x2e\x2f\x66\x69\x6c\x65\x30\x3a\x50\x4f\x43", 24) = 24 close(3) = 0 mkdir("./syzkaller.Q6bs2a", 0700) = 0 chmod("./syzkaller.Q6bs2a", 0777) = 0 chdir("./syzkaller.Q6bs2a") = 0 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9c690) = 5046 ./strace-static-x86_64: Process 5046 attached [pid 5046] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5046] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5046] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5046] setsid() = 1 [pid 5046] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5046] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5046] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5046] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5046] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5046] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5046] unshare(CLONE_NEWNS) = 0 [pid 5046] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5046] unshare(CLONE_NEWIPC) = 0 [pid 5046] unshare(CLONE_NEWCGROUP) = 0 [pid 5046] unshare(CLONE_NEWUTS) = 0 [pid 5046] unshare(CLONE_SYSVSEM) = 0 [pid 5046] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5046] write(3, "16777216", 8) = 8 [pid 5046] close(3) = 0 [pid 5046] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5046] write(3, "536870912", 9) = 9 [pid 5046] close(3) = 0 [pid 5046] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5046] write(3, "1024", 4) = 4 [pid 5046] close(3) = 0 [pid 5046] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5046] write(3, "8192", 4) = 4 [pid 5046] close(3) = 0 [pid 5046] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5046] write(3, "1024", 4) = 4 [pid 5046] close(3) = 0 [pid 5046] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5046] write(3, "1024", 4) = 4 [pid 5046] close(3) = 0 [pid 5046] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5046] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5046] close(3) = 0 [pid 5046] getpid() = 1 [pid 5046] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< {parent_tid=[3]}, 88) = 3 [pid 5056] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5056] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5056] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5057 attached [pid 5057] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5057] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5057] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5057] memfd_create("syzkaller", 0) = 3 [pid 5057] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5057] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5057] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5057] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5057] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5057] close(3) = 0 [pid 5057] mkdir("./file0", 0777) = 0 [pid 5057] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5057] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5057] chdir("./file0") = 0 [pid 5057] ioctl(4, LOOP_CLR_FD) = 0 [pid 5057] close(4) = 0 [pid 5057] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5056] <... futex resumed>) = 0 [pid 5057] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5056] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5057] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5056] <... futex resumed>) = 0 [pid 5056] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5057] <... open resumed>) = 4 [pid 5057] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] <... futex resumed>) = 0 [pid 5056] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5056] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5057] <... futex resumed>) = 1 [pid 5057] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5057] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5056] <... futex resumed>) = 0 [pid 5056] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] ftruncate(5, 33587195 [pid 5056] <... futex resumed>) = 0 [pid 5057] <... ftruncate resumed>) = 0 [pid 5056] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5057] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5057] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5056] <... futex resumed>) = 0 [pid 5056] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5057] <... futex resumed>) = 0 [pid 5057] sendfile(4, 5, NULL, 4 [pid 5056] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5057] <... sendfile resumed>) = 4 [pid 5057] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] <... futex resumed>) = 0 [pid 5056] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5056] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5056] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5057] <... futex resumed>) = 1 [pid 5056] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5056] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5056] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5061 attached [pid 5061] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5057] sendfile(4, 5, NULL, 281474978811909 [pid 5061] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5061] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5061] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5056] <... clone3 resumed> => {parent_tid=[4]}, 88) = 4 [pid 5056] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5056] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5056] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5061] <... futex resumed>) = 0 [pid 5061] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [ 91.018089][ T5057] loop0: detected capacity change from 0 to 2048 [ 91.045720][ T5057] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5061] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5061] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5056] <... futex resumed>) = 0 [pid 5056] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5056] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5061] <... futex resumed>) = 0 [ 91.110454][ T5061] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 91.126845][ T5061] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 45 with error 28 [ 91.139825][ T5061] EXT4-fs (loop0): This should not happen!! Data will be lost [ 91.139825][ T5061] [ 91.150376][ T5061] EXT4-fs (loop0): Total free blocks count 0 [pid 5061] prlimit64(0, RLIMIT_CPU, NULL, [pid 5056] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5056] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5061] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5061] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5061] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5057] <... sendfile resumed>) = 94208 [pid 5057] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5057] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5056] close(3) = 0 [pid 5056] close(4) = 0 [pid 5056] close(5) = 0 [pid 5056] close(6) = -1 EBADF (Bad file descriptor) [pid 5056] close(7) = -1 EBADF (Bad file descriptor) [pid 5056] close(8) = -1 EBADF (Bad file descriptor) [pid 5056] close(9) = -1 EBADF (Bad file descriptor) [pid 5056] close(10) = -1 EBADF (Bad file descriptor) [pid 5056] close(11) = -1 EBADF (Bad file descriptor) [pid 5056] close(12) = -1 EBADF (Bad file descriptor) [pid 5056] close(13) = -1 EBADF (Bad file descriptor) [pid 5056] close(14) = -1 EBADF (Bad file descriptor) [pid 5056] close(15) = -1 EBADF (Bad file descriptor) [pid 5056] close(16) = -1 EBADF (Bad file descriptor) [pid 5056] close(17) = -1 EBADF (Bad file descriptor) [pid 5056] close(18) = -1 EBADF (Bad file descriptor) [pid 5056] close(19) = -1 EBADF (Bad file descriptor) [pid 5056] close(20) = -1 EBADF (Bad file descriptor) [pid 5056] close(21) = -1 EBADF (Bad file descriptor) [pid 5056] close(22) = -1 EBADF (Bad file descriptor) [pid 5056] close(23) = -1 EBADF (Bad file descriptor) [pid 5056] close(24) = -1 EBADF (Bad file descriptor) [pid 5056] close(25) = -1 EBADF (Bad file descriptor) [pid 5056] close(26) = -1 EBADF (Bad file descriptor) [pid 5056] close(27) = -1 EBADF (Bad file descriptor) [pid 5056] close(28) = -1 EBADF (Bad file descriptor) [pid 5056] close(29) = -1 EBADF (Bad file descriptor) [pid 5056] exit_group(0 [pid 5057] <... futex resumed>) = ? [pid 5057] +++ exited with 0 +++ [pid 5061] <... futex resumed>) = ? [pid 5061] +++ exited with 0 +++ [pid 5056] <... exit_group resumed>) = ? [pid 5056] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./0/binderfs") = 0 [ 91.157021][ T5061] EXT4-fs (loop0): Free/Dirty block details [ 91.163042][ T5061] EXT4-fs (loop0): free_blocks=2415919104 [ 91.169126][ T5061] EXT4-fs (loop0): dirty_blocks=48 [ 91.174286][ T5061] EXT4-fs (loop0): Block reservation details [ 91.180599][ T5061] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 91.192320][ T5057] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 46 with max blocks 1 with error 28 [pid 5046] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./0/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./0") = 0 [pid 5046] mkdir("./1", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5062 attached , child_tidptr=0x555555a9c690) = 5 [pid 5062] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5062] chdir("./1") = 0 [pid 5062] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5062] setpgid(0, 0) = 0 [pid 5062] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5062] write(3, "1000", 4) = 4 [pid 5062] close(3) = 0 [pid 5062] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5062] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5062] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5062] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5062] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5062] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5062] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5062] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5062] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0} => {parent_tid=[6]}, 88) = 6 [pid 5062] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5063 attached NULL, 8) = 0 [pid 5063] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053 [pid 5062] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... rseq resumed>) = 0 [pid 5063] set_robust_list(0x7efc0265e9a0, 24 [pid 5062] <... futex resumed>) = 0 [pid 5063] <... set_robust_list resumed>) = 0 [pid 5062] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5063] memfd_create("syzkaller", 0) = 3 [pid 5063] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5063] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5063] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5063] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5063] close(3) = 0 [pid 5063] mkdir("./file0", 0777) = 0 [pid 5063] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5063] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5063] chdir("./file0") = 0 [pid 5063] ioctl(4, LOOP_CLR_FD) = 0 [pid 5063] close(4) = 0 [pid 5063] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... futex resumed>) = 0 [pid 5062] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... futex resumed>) = 1 [pid 5063] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5062] <... futex resumed>) = 0 [pid 5062] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5063] <... open resumed>) = 4 [pid 5063] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5062] <... futex resumed>) = 0 [pid 5062] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5062] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5063] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5063] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... futex resumed>) = 0 [pid 5062] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5062] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5063] <... futex resumed>) = 1 [pid 5063] ftruncate(5, 33587195) = 0 [pid 5063] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5063] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] <... futex resumed>) = 0 [pid 5062] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... futex resumed>) = 0 [pid 5062] <... futex resumed>) = 1 [pid 5063] sendfile(4, 5, NULL, 4 [pid 5062] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5063] <... sendfile resumed>) = 4 [pid 5063] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5062] <... futex resumed>) = 0 [pid 5063] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5062] <... futex resumed>) = 0 [pid 5063] sendfile(4, 5, NULL, 281474978811909 [pid 5062] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5062] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5062] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5062] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5062] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5066 attached [pid 5066] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5062] <... clone3 resumed> => {parent_tid=[7]}, 88) = 7 [pid 5066] <... rseq resumed>) = 0 [pid 5062] rt_sigprocmask(SIG_SETMASK, [], [pid 5066] set_robust_list(0x7efbfa33d9a0, 24 [pid 5062] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5066] <... set_robust_list resumed>) = 0 [pid 5062] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] rt_sigprocmask(SIG_SETMASK, [], [pid 5062] <... futex resumed>) = 0 [pid 5066] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5062] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 91.343412][ T5063] loop0: detected capacity change from 0 to 2048 [ 91.361803][ T5063] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5066] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5066] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5062] <... futex resumed>) = 0 [pid 5066] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5062] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5066] prlimit64(0, RLIMIT_CPU, NULL, [pid 5062] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 91.433680][ T5063] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 91.451461][ T5063] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 124 with max blocks 1 with error 28 [ 91.466449][ T5063] EXT4-fs (loop0): This should not happen!! Data will be lost [ 91.466449][ T5063] [ 91.477833][ T5063] EXT4-fs (loop0): Total free blocks count 0 [pid 5063] <... sendfile resumed>) = 253952 [pid 5063] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5063] <... futex resumed>) = 0 [pid 5066] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5066] <... futex resumed>) = 0 [pid 5066] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] close(3) = 0 [pid 5062] close(4) = 0 [pid 5062] close(5) = 0 [pid 5062] close(6) = -1 EBADF (Bad file descriptor) [pid 5062] close(7) = -1 EBADF (Bad file descriptor) [pid 5062] close(8) = -1 EBADF (Bad file descriptor) [pid 5062] close(9) = -1 EBADF (Bad file descriptor) [pid 5062] close(10) = -1 EBADF (Bad file descriptor) [pid 5062] close(11) = -1 EBADF (Bad file descriptor) [pid 5062] close(12) = -1 EBADF (Bad file descriptor) [pid 5062] close(13) = -1 EBADF (Bad file descriptor) [pid 5062] close(14) = -1 EBADF (Bad file descriptor) [pid 5062] close(15) = -1 EBADF (Bad file descriptor) [pid 5062] close(16) = -1 EBADF (Bad file descriptor) [pid 5062] close(17) = -1 EBADF (Bad file descriptor) [pid 5062] close(18) = -1 EBADF (Bad file descriptor) [pid 5062] close(19) = -1 EBADF (Bad file descriptor) [pid 5062] close(20) = -1 EBADF (Bad file descriptor) [pid 5062] close(21) = -1 EBADF (Bad file descriptor) [pid 5062] close(22) = -1 EBADF (Bad file descriptor) [pid 5062] close(23) = -1 EBADF (Bad file descriptor) [pid 5062] close(24) = -1 EBADF (Bad file descriptor) [pid 5062] close(25) = -1 EBADF (Bad file descriptor) [pid 5062] close(26) = -1 EBADF (Bad file descriptor) [pid 5062] close(27) = -1 EBADF (Bad file descriptor) [pid 5062] close(28) = -1 EBADF (Bad file descriptor) [pid 5062] close(29) = -1 EBADF (Bad file descriptor) [pid 5062] exit_group(0 [pid 5066] <... futex resumed>) = ? [pid 5063] <... futex resumed>) = ? [pid 5062] <... exit_group resumed>) = ? [pid 5066] +++ exited with 0 +++ [pid 5063] +++ exited with 0 +++ [pid 5062] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 91.483946][ T5063] EXT4-fs (loop0): Free/Dirty block details [ 91.491500][ T5063] EXT4-fs (loop0): free_blocks=2415919104 [ 91.498604][ T5063] EXT4-fs (loop0): dirty_blocks=128 [ 91.503864][ T5063] EXT4-fs (loop0): Block reservation details [ 91.510665][ T5063] EXT4-fs (loop0): i_reserved_data_blocks=8 [ 91.518671][ T5066] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 124 with error 28 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./1/binderfs") = 0 [pid 5046] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./1/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./1") = 0 [pid 5046] mkdir("./2", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5067 attached , child_tidptr=0x555555a9c690) = 8 [pid 5067] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5067] chdir("./2") = 0 [pid 5067] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5067] setpgid(0, 0) = 0 [pid 5067] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5067] write(3, "1000", 4) = 4 [pid 5067] close(3) = 0 [pid 5067] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5067] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5067] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5067] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5067] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5067] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5067] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5067] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5067] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0} => {parent_tid=[9]}, 88) = 9 [pid 5067] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5067] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5067] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5068 attached [pid 5068] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5068] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5068] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5068] memfd_create("syzkaller", 0) = 3 [pid 5068] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5068] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5068] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5068] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5068] close(3) = 0 [pid 5068] mkdir("./file0", 0777) = 0 [pid 5068] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5068] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5068] chdir("./file0") = 0 [pid 5068] ioctl(4, LOOP_CLR_FD) = 0 [pid 5068] close(4) = 0 [pid 5068] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5068] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] <... futex resumed>) = 0 [pid 5067] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5068] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5068] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5067] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... open resumed>) = 4 [pid 5068] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5068] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] <... futex resumed>) = 0 [pid 5067] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... futex resumed>) = 0 [pid 5067] <... futex resumed>) = 1 [pid 5068] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5067] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... open resumed>) = 5 [pid 5068] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... futex resumed>) = 0 [pid 5068] <... futex resumed>) = 1 [pid 5067] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5068] ftruncate(5, 33587195 [pid 5067] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... ftruncate resumed>) = 0 [pid 5068] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5068] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] <... futex resumed>) = 0 [pid 5067] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5068] <... futex resumed>) = 0 [pid 5067] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] sendfile(4, 5, NULL, 4) = 4 [pid 5068] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... futex resumed>) = 0 [pid 5068] <... futex resumed>) = 1 [pid 5067] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] sendfile(4, 5, NULL, 281474978811909 [pid 5067] <... futex resumed>) = 0 [pid 5067] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5067] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5067] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5067] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5067] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5071 attached [pid 5071] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5071] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5071] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5071] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] <... clone3 resumed> => {parent_tid=[10]}, 88) = 10 [pid 5067] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5067] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] <... futex resumed>) = 0 [pid 5067] <... futex resumed>) = 1 [pid 5071] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000 [pid 5067] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5071] <... mmap resumed>) = 0x20000000 [pid 5071] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... futex resumed>) = 0 [ 91.664845][ T5068] loop0: detected capacity change from 0 to 2048 [ 91.682102][ T5068] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5067] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5071] <... futex resumed>) = 1 [pid 5071] prlimit64(0, RLIMIT_CPU, NULL, [ 91.750008][ T5071] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 91.766005][ T5071] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 59 with error 28 [ 91.779771][ T5071] EXT4-fs (loop0): This should not happen!! Data will be lost [ 91.779771][ T5071] [ 91.790418][ T5071] EXT4-fs (loop0): Total free blocks count 0 [pid 5067] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5071] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5071] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... sendfile resumed>) = 122880 [pid 5071] <... futex resumed>) = 0 [pid 5071] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5068] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5068] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] close(3) = 0 [pid 5067] close(4) = 0 [pid 5067] close(5) = 0 [pid 5067] close(6) = -1 EBADF (Bad file descriptor) [pid 5067] close(7) = -1 EBADF (Bad file descriptor) [pid 5067] close(8) = -1 EBADF (Bad file descriptor) [pid 5067] close(9) = -1 EBADF (Bad file descriptor) [pid 5067] close(10) = -1 EBADF (Bad file descriptor) [pid 5067] close(11) = -1 EBADF (Bad file descriptor) [pid 5067] close(12) = -1 EBADF (Bad file descriptor) [pid 5067] close(13) = -1 EBADF (Bad file descriptor) [pid 5067] close(14) = -1 EBADF (Bad file descriptor) [pid 5067] close(15) = -1 EBADF (Bad file descriptor) [pid 5067] close(16) = -1 EBADF (Bad file descriptor) [pid 5067] close(17) = -1 EBADF (Bad file descriptor) [pid 5067] close(18) = -1 EBADF (Bad file descriptor) [pid 5067] close(19) = -1 EBADF (Bad file descriptor) [pid 5067] close(20) = -1 EBADF (Bad file descriptor) [pid 5067] close(21) = -1 EBADF (Bad file descriptor) [pid 5067] close(22) = -1 EBADF (Bad file descriptor) [pid 5067] close(23) = -1 EBADF (Bad file descriptor) [pid 5067] close(24) = -1 EBADF (Bad file descriptor) [pid 5067] close(25) = -1 EBADF (Bad file descriptor) [pid 5067] close(26) = -1 EBADF (Bad file descriptor) [pid 5067] close(27) = -1 EBADF (Bad file descriptor) [pid 5067] close(28) = -1 EBADF (Bad file descriptor) [pid 5067] close(29) = -1 EBADF (Bad file descriptor) [pid 5067] exit_group(0 [pid 5071] <... futex resumed>) = ? [pid 5071] +++ exited with 0 +++ [pid 5068] <... futex resumed>) = ? [pid 5067] <... exit_group resumed>) = ? [pid 5068] +++ exited with 0 +++ [pid 5067] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5046] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./2/binderfs") = 0 [ 91.796517][ T5071] EXT4-fs (loop0): Free/Dirty block details [ 91.802587][ T5071] EXT4-fs (loop0): free_blocks=2415919104 [ 91.808918][ T5071] EXT4-fs (loop0): dirty_blocks=64 [ 91.814108][ T5071] EXT4-fs (loop0): Block reservation details [ 91.820386][ T5071] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 91.832239][ T5068] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 60 with max blocks 1 with error 28 [pid 5046] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./2/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./2") = 0 [pid 5046] mkdir("./3", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5072 attached , child_tidptr=0x555555a9c690) = 11 [pid 5072] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5072] chdir("./3") = 0 [pid 5072] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5072] setpgid(0, 0) = 0 [pid 5072] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5072] write(3, "1000", 4) = 4 [pid 5072] close(3) = 0 [pid 5072] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5072] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5072] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5072] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5072] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5072] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5072] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5072] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5072] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5073 attached => {parent_tid=[12]}, 88) = 12 [pid 5073] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053 [pid 5072] rt_sigprocmask(SIG_SETMASK, [], [pid 5073] <... rseq resumed>) = 0 [pid 5073] set_robust_list(0x7efc0265e9a0, 24 [pid 5072] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5073] <... set_robust_list resumed>) = 0 [pid 5072] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] rt_sigprocmask(SIG_SETMASK, [], [pid 5072] <... futex resumed>) = 0 [pid 5073] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5073] memfd_create("syzkaller", 0) = 3 [pid 5073] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5072] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5073] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5073] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5073] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5073] close(3) = 0 [pid 5073] mkdir("./file0", 0777) = 0 [pid 5073] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5073] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5073] chdir("./file0") = 0 [pid 5073] ioctl(4, LOOP_CLR_FD) = 0 [pid 5073] close(4) = 0 [pid 5073] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] <... futex resumed>) = 0 [pid 5072] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... futex resumed>) = 1 [pid 5072] <... futex resumed>) = 0 [pid 5073] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5072] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5073] <... open resumed>) = 4 [pid 5073] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5073] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5072] <... futex resumed>) = 0 [pid 5072] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... futex resumed>) = 0 [pid 5072] <... futex resumed>) = 1 [pid 5073] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5073] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5073] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5072] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5072] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... futex resumed>) = 0 [pid 5073] ftruncate(5, 33587195) = 0 [pid 5073] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5073] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5072] <... futex resumed>) = 1 [pid 5072] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5072] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... futex resumed>) = 0 [pid 5073] sendfile(4, 5, NULL, 4) = 4 [pid 5073] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5073] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5072] <... futex resumed>) = 1 [pid 5072] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5072] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... futex resumed>) = 0 [pid 5073] sendfile(4, 5, NULL, 281474978811909 [pid 5072] <... futex resumed>) = 1 [pid 5072] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5072] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5072] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5072] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5072] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5076 attached [pid 5076] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5076] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5076] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5076] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5072] <... clone3 resumed> => {parent_tid=[13]}, 88) = 13 [pid 5072] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5072] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... futex resumed>) = 0 [pid 5072] <... futex resumed>) = 1 [pid 5076] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000 [pid 5072] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... mmap resumed>) = 0x20000000 [pid 5076] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] <... futex resumed>) = 0 [pid 5076] <... futex resumed>) = 1 [pid 5072] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5076] prlimit64(0, RLIMIT_CPU, NULL, [ 91.963143][ T5073] loop0: detected capacity change from 0 to 2048 [ 91.981140][ T5073] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.044563][ T5076] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 92.063326][ T5073] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 46 with max blocks 1 with error 28 [ 92.076055][ T5076] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 46 with error 28 [pid 5072] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5073] <... sendfile resumed>) = 94208 [pid 5073] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 92.076722][ T5073] EXT4-fs (loop0): This should not happen!! Data will be lost [ 92.076722][ T5073] [ 92.092493][ T5076] EXT4-fs (loop0): This should not happen!! Data will be lost [ 92.092493][ T5076] [ 92.101474][ T5073] EXT4-fs (loop0): Total free blocks count 0 [ 92.114213][ T1155] cfg80211: failed to load regulatory.db [ 92.116531][ T5073] EXT4-fs (loop0): Free/Dirty block details [ 92.127683][ T5076] EXT4-fs (loop0): Total free blocks count 0 [ 92.131798][ T5073] EXT4-fs (loop0): free_blocks=2415919104 [pid 5073] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5076] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5076] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5076] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5072] close(3) = 0 [pid 5072] close(4) = 0 [pid 5072] close(5) = 0 [pid 5072] close(6) = -1 EBADF (Bad file descriptor) [pid 5072] close(7) = -1 EBADF (Bad file descriptor) [pid 5072] close(8) = -1 EBADF (Bad file descriptor) [pid 5072] close(9) = -1 EBADF (Bad file descriptor) [pid 5072] close(10) = -1 EBADF (Bad file descriptor) [pid 5072] close(11) = -1 EBADF (Bad file descriptor) [pid 5072] close(12) = -1 EBADF (Bad file descriptor) [pid 5072] close(13) = -1 EBADF (Bad file descriptor) [pid 5072] close(14) = -1 EBADF (Bad file descriptor) [pid 5072] close(15) = -1 EBADF (Bad file descriptor) [pid 5072] close(16) = -1 EBADF (Bad file descriptor) [pid 5072] close(17) = -1 EBADF (Bad file descriptor) [pid 5072] close(18) = -1 EBADF (Bad file descriptor) [pid 5072] close(19) = -1 EBADF (Bad file descriptor) [pid 5072] close(20) = -1 EBADF (Bad file descriptor) [pid 5072] close(21) = -1 EBADF (Bad file descriptor) [pid 5072] close(22) = -1 EBADF (Bad file descriptor) [pid 5072] close(23) = -1 EBADF (Bad file descriptor) [pid 5072] close(24) = -1 EBADF (Bad file descriptor) [pid 5072] close(25) = -1 EBADF (Bad file descriptor) [pid 5072] close(26) = -1 EBADF (Bad file descriptor) [pid 5072] close(27) = -1 EBADF (Bad file descriptor) [pid 5072] close(28) = -1 EBADF (Bad file descriptor) [pid 5072] close(29) = -1 EBADF (Bad file descriptor) [pid 5072] exit_group(0 [pid 5076] <... futex resumed>) = ? [pid 5072] <... exit_group resumed>) = ? [pid 5076] +++ exited with 0 +++ [pid 5073] <... futex resumed>) = ? [pid 5073] +++ exited with 0 +++ [pid 5072] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=11, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./3/binderfs") = 0 [ 92.133688][ T5076] EXT4-fs (loop0): Free/Dirty block details [pid 5046] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./3/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./3") = 0 [pid 5046] mkdir("./4", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9c690) = 14 ./strace-static-x86_64: Process 5077 attached [pid 5077] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5077] chdir("./4") = 0 [pid 5077] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5077] setpgid(0, 0) = 0 [pid 5077] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5077] write(3, "1000", 4) = 4 [pid 5077] close(3) = 0 [pid 5077] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5077] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5077] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5077] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5077] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5077] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5077] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5077] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5077] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5078 attached => {parent_tid=[15]}, 88) = 15 [pid 5078] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053 [pid 5077] rt_sigprocmask(SIG_SETMASK, [], [pid 5078] <... rseq resumed>) = 0 [pid 5077] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5078] set_robust_list(0x7efc0265e9a0, 24 [pid 5077] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... set_robust_list resumed>) = 0 [pid 5077] <... futex resumed>) = 0 [pid 5077] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5078] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5078] memfd_create("syzkaller", 0) = 3 [pid 5078] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5078] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5078] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5078] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5078] close(3) = 0 [pid 5078] mkdir("./file0", 0777) = 0 [pid 5078] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5078] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5078] chdir("./file0") = 0 [pid 5078] ioctl(4, LOOP_CLR_FD) = 0 [pid 5078] close(4) = 0 [pid 5078] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5077] <... futex resumed>) = 0 [pid 5077] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5077] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5078] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... futex resumed>) = 0 [pid 5077] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5077] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... futex resumed>) = 1 [pid 5078] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5078] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5077] <... futex resumed>) = 0 [pid 5078] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5077] <... futex resumed>) = 0 [pid 5077] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] ftruncate(5, 33587195) = 0 [pid 5078] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... futex resumed>) = 0 [pid 5077] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5077] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... futex resumed>) = 1 [pid 5078] sendfile(4, 5, NULL, 4) = 4 [pid 5078] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5078] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] <... futex resumed>) = 0 [pid 5077] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... futex resumed>) = 0 [pid 5077] <... futex resumed>) = 1 [pid 5078] sendfile(4, 5, NULL, 281474978811909 [pid 5077] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5077] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [ 92.279806][ T5078] loop0: detected capacity change from 0 to 2048 [ 92.301080][ T5078] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5077] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5077] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5077] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5081 attached [pid 5081] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5077] <... clone3 resumed> => {parent_tid=[16]}, 88) = 16 [pid 5077] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5077] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5077] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... rseq resumed>) = 0 [pid 5081] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5081] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5081] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5081] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5077] <... futex resumed>) = 0 [pid 5081] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5077] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 92.383991][ T5081] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 92.399332][ T5081] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 48 with error 28 [ 92.411837][ T5081] EXT4-fs (loop0): This should not happen!! Data will be lost [ 92.411837][ T5081] [ 92.411931][ T5078] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 48 with max blocks 1 with error 28 [pid 5081] prlimit64(0, RLIMIT_CPU, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5081] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5081] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] <... futex resumed>) = 0 [pid 5078] <... sendfile resumed>) = 98304 [pid 5078] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5078] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] close(3) = 0 [pid 5077] close(4) = 0 [pid 5077] close(5) = 0 [pid 5077] close(6) = -1 EBADF (Bad file descriptor) [pid 5077] close(7) = -1 EBADF (Bad file descriptor) [pid 5077] close(8) = -1 EBADF (Bad file descriptor) [pid 5077] close(9) = -1 EBADF (Bad file descriptor) [pid 5077] close(10) = -1 EBADF (Bad file descriptor) [pid 5077] close(11) = -1 EBADF (Bad file descriptor) [pid 5077] close(12) = -1 EBADF (Bad file descriptor) [pid 5077] close(13) = -1 EBADF (Bad file descriptor) [pid 5077] close(14) = -1 EBADF (Bad file descriptor) [pid 5077] close(15) = -1 EBADF (Bad file descriptor) [pid 5077] close(16) = -1 EBADF (Bad file descriptor) [pid 5077] close(17) = -1 EBADF (Bad file descriptor) [pid 5077] close(18) = -1 EBADF (Bad file descriptor) [pid 5077] close(19) = -1 EBADF (Bad file descriptor) [pid 5077] close(20) = -1 EBADF (Bad file descriptor) [pid 5077] close(21) = -1 EBADF (Bad file descriptor) [pid 5077] close(22) = -1 EBADF (Bad file descriptor) [pid 5077] close(23) = -1 EBADF (Bad file descriptor) [pid 5077] close(24) = -1 EBADF (Bad file descriptor) [pid 5077] close(25) = -1 EBADF (Bad file descriptor) [pid 5077] close(26) = -1 EBADF (Bad file descriptor) [pid 5077] close(27) = -1 EBADF (Bad file descriptor) [pid 5077] close(28) = -1 EBADF (Bad file descriptor) [pid 5077] close(29) = -1 EBADF (Bad file descriptor) [pid 5077] exit_group(0 [pid 5081] <... futex resumed>) = ? [pid 5078] <... futex resumed>) = ? [pid 5077] <... exit_group resumed>) = ? [pid 5081] +++ exited with 0 +++ [pid 5078] +++ exited with 0 +++ [pid 5077] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=14, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./4/binderfs") = 0 [ 92.421738][ T5081] EXT4-fs (loop0): Total free blocks count 0 [ 92.421765][ T5081] EXT4-fs (loop0): Free/Dirty block details [ 92.421786][ T5081] EXT4-fs (loop0): free_blocks=2415919104 [ 92.421809][ T5081] EXT4-fs (loop0): dirty_blocks=64 [ 92.421828][ T5081] EXT4-fs (loop0): Block reservation details [ 92.421844][ T5081] EXT4-fs (loop0): i_reserved_data_blocks=4 [pid 5046] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./4/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./4") = 0 [pid 5046] mkdir("./5", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5082 attached [pid 5082] set_robust_list(0x555555a9c6a0, 24 [pid 5046] <... clone resumed>, child_tidptr=0x555555a9c690) = 17 [pid 5082] <... set_robust_list resumed>) = 0 [pid 5082] chdir("./5") = 0 [pid 5082] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5082] setpgid(0, 0) = 0 [pid 5082] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5082] write(3, "1000", 4) = 4 [pid 5082] close(3) = 0 [pid 5082] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5082] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5082] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5082] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5082] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5082] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5082] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5082] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5082] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5083 attached [pid 5083] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053 [pid 5082] <... clone3 resumed> => {parent_tid=[18]}, 88) = 18 [pid 5083] <... rseq resumed>) = 0 [pid 5082] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5082] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5083] set_robust_list(0x7efc0265e9a0, 24 [pid 5082] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5083] <... set_robust_list resumed>) = 0 [pid 5083] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5083] memfd_create("syzkaller", 0) = 3 [pid 5083] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5083] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5083] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5083] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5083] close(3) = 0 [pid 5083] mkdir("./file0", 0777) = 0 [pid 5083] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5083] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5083] chdir("./file0") = 0 [pid 5083] ioctl(4, LOOP_CLR_FD) = 0 [pid 5083] close(4) = 0 [pid 5083] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5083] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5082] <... futex resumed>) = 0 [pid 5082] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5082] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... futex resumed>) = 0 [pid 5083] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5083] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5082] <... futex resumed>) = 0 [pid 5083] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5082] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5082] <... futex resumed>) = 0 [pid 5083] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5082] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... open resumed>) = 5 [pid 5083] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... futex resumed>) = 0 [pid 5083] <... futex resumed>) = 1 [pid 5082] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] ftruncate(5, 33587195 [pid 5082] <... futex resumed>) = 0 [pid 5083] <... ftruncate resumed>) = 0 [pid 5082] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5083] <... futex resumed>) = 0 [pid 5082] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] sendfile(4, 5, NULL, 4 [pid 5082] <... futex resumed>) = 0 [pid 5082] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... sendfile resumed>) = 4 [pid 5083] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5082] <... futex resumed>) = 0 [pid 5083] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5082] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... futex resumed>) = 0 [pid 5082] <... futex resumed>) = 1 [pid 5083] sendfile(4, 5, NULL, 281474978811909 [pid 5082] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5082] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5082] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5082] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5082] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0} => {parent_tid=[19]}, 88) = 19 [pid 5082] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5082] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5082] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5086 attached [pid 5086] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5086] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5086] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5086] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [ 92.610193][ T5083] loop0: detected capacity change from 0 to 2048 [ 92.631357][ T5083] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5086] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5086] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5082] <... futex resumed>) = 0 [pid 5082] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5086] <... futex resumed>) = 0 [pid 5082] <... futex resumed>) = 1 [pid 5086] prlimit64(0, RLIMIT_CPU, NULL, [pid 5082] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 92.707021][ T5086] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 92.723848][ T5086] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 84 with error 28 [ 92.738529][ T5083] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 84 with max blocks 1 with error 28 [pid 5083] <... sendfile resumed>) = 172032 [pid 5083] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5083] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5086] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5086] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5086] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5082] close(3) = 0 [pid 5082] close(4) = 0 [pid 5082] close(5) = 0 [pid 5082] close(6) = -1 EBADF (Bad file descriptor) [pid 5082] close(7) = -1 EBADF (Bad file descriptor) [pid 5082] close(8) = -1 EBADF (Bad file descriptor) [pid 5082] close(9) = -1 EBADF (Bad file descriptor) [pid 5082] close(10) = -1 EBADF (Bad file descriptor) [pid 5082] close(11) = -1 EBADF (Bad file descriptor) [pid 5082] close(12) = -1 EBADF (Bad file descriptor) [pid 5082] close(13) = -1 EBADF (Bad file descriptor) [pid 5082] close(14) = -1 EBADF (Bad file descriptor) [pid 5082] close(15) = -1 EBADF (Bad file descriptor) [pid 5082] close(16) = -1 EBADF (Bad file descriptor) [pid 5082] close(17) = -1 EBADF (Bad file descriptor) [pid 5082] close(18) = -1 EBADF (Bad file descriptor) [pid 5082] close(19) = -1 EBADF (Bad file descriptor) [pid 5082] close(20) = -1 EBADF (Bad file descriptor) [pid 5082] close(21) = -1 EBADF (Bad file descriptor) [pid 5082] close(22) = -1 EBADF (Bad file descriptor) [pid 5082] close(23) = -1 EBADF (Bad file descriptor) [pid 5082] close(24) = -1 EBADF (Bad file descriptor) [pid 5082] close(25) = -1 EBADF (Bad file descriptor) [pid 5082] close(26) = -1 EBADF (Bad file descriptor) [pid 5082] close(27) = -1 EBADF (Bad file descriptor) [ 92.752443][ T5083] EXT4-fs (loop0): This should not happen!! Data will be lost [ 92.752443][ T5083] [ 92.762290][ T5086] EXT4-fs (loop0): This should not happen!! Data will be lost [ 92.762290][ T5086] [ 92.772541][ T5083] EXT4-fs (loop0): Total free blocks count 0 [ 92.778801][ T5086] EXT4-fs (loop0): Total free blocks count 0 [ 92.784878][ T5083] EXT4-fs (loop0): Free/Dirty block details [ 92.791366][ T5086] EXT4-fs (loop0): Free/Dirty block details [ 92.797406][ T5086] EXT4-fs (loop0): free_blocks=2415919104 [pid 5082] close(28) = -1 EBADF (Bad file descriptor) [pid 5082] close(29) = -1 EBADF (Bad file descriptor) [pid 5082] exit_group(0 [pid 5086] <... futex resumed>) = ? [pid 5083] <... futex resumed>) = ? [pid 5082] <... exit_group resumed>) = ? [pid 5083] +++ exited with 0 +++ [pid 5086] +++ exited with 0 +++ [pid 5082] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=17, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./5/binderfs") = 0 [pid 5046] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./5/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./5") = 0 [pid 5046] mkdir("./6", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5087 attached , child_tidptr=0x555555a9c690) = 20 [pid 5087] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5087] chdir("./6") = 0 [pid 5087] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5087] setpgid(0, 0) = 0 [pid 5087] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5087] write(3, "1000", 4) = 4 [pid 5087] close(3) = 0 [pid 5087] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5087] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5087] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5087] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5087] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5087] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5087] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5087] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5087] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5088 attached [pid 5088] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053 [pid 5087] <... clone3 resumed> => {parent_tid=[21]}, 88) = 21 [pid 5088] <... rseq resumed>) = 0 [pid 5087] rt_sigprocmask(SIG_SETMASK, [], [pid 5088] set_robust_list(0x7efc0265e9a0, 24 [pid 5087] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5088] <... set_robust_list resumed>) = 0 [pid 5087] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] rt_sigprocmask(SIG_SETMASK, [], [pid 5087] <... futex resumed>) = 0 [pid 5088] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5087] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5088] memfd_create("syzkaller", 0) = 3 [pid 5088] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5088] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5088] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5088] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5088] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5088] close(3) = 0 [pid 5088] mkdir("./file0", 0777) = 0 [pid 5088] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5088] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5088] chdir("./file0") = 0 [pid 5088] ioctl(4, LOOP_CLR_FD) = 0 [pid 5088] close(4) = 0 [pid 5088] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5087] <... futex resumed>) = 0 [pid 5087] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5087] <... futex resumed>) = 0 [pid 5087] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5088] <... open resumed>) = 4 [pid 5088] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] <... futex resumed>) = 0 [pid 5087] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] <... futex resumed>) = 1 [pid 5087] <... futex resumed>) = 0 [pid 5088] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5087] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5088] <... open resumed>) = 5 [pid 5088] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] <... futex resumed>) = 0 [pid 5088] <... futex resumed>) = 1 [pid 5088] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5087] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] ftruncate(5, 33587195 [pid 5087] <... futex resumed>) = 0 [pid 5088] <... ftruncate resumed>) = 0 [pid 5087] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5088] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5087] <... futex resumed>) = 0 [pid 5087] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5088] sendfile(4, 5, NULL, 4 [pid 5087] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5088] <... sendfile resumed>) = 4 [pid 5088] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] <... futex resumed>) = 0 [pid 5087] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] <... futex resumed>) = 1 [pid 5087] <... futex resumed>) = 0 [pid 5088] sendfile(4, 5, NULL, 281474978811909 [pid 5087] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5087] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [ 92.961727][ T5088] loop0: detected capacity change from 0 to 2048 [ 92.992723][ T5088] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5087] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5087] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5087] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5091 attached [pid 5091] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5091] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5091] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5091] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5087] <... clone3 resumed> => {parent_tid=[22]}, 88) = 22 [pid 5087] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5087] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5087] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5091] <... futex resumed>) = 0 [pid 5091] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5091] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5087] <... futex resumed>) = 0 [pid 5091] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5087] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5091] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5087] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 93.067822][ T5091] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 93.084208][ T5091] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 127 with error 28 [ 93.096897][ T5091] EXT4-fs (loop0): This should not happen!! Data will be lost [ 93.096897][ T5091] [ 93.106572][ T5091] EXT4-fs (loop0): Total free blocks count 0 [pid 5091] prlimit64(0, RLIMIT_CPU, NULL, [pid 5087] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5091] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5091] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5091] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5088] <... sendfile resumed>) = 262144 [pid 5088] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5088] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5087] close(3) = 0 [pid 5087] close(4) = 0 [pid 5087] close(5) = 0 [pid 5087] close(6) = -1 EBADF (Bad file descriptor) [pid 5087] close(7) = -1 EBADF (Bad file descriptor) [pid 5087] close(8) = -1 EBADF (Bad file descriptor) [pid 5087] close(9) = -1 EBADF (Bad file descriptor) [pid 5087] close(10) = -1 EBADF (Bad file descriptor) [pid 5087] close(11) = -1 EBADF (Bad file descriptor) [pid 5087] close(12) = -1 EBADF (Bad file descriptor) [pid 5087] close(13) = -1 EBADF (Bad file descriptor) [pid 5087] close(14) = -1 EBADF (Bad file descriptor) [pid 5087] close(15) = -1 EBADF (Bad file descriptor) [pid 5087] close(16) = -1 EBADF (Bad file descriptor) [pid 5087] close(17) = -1 EBADF (Bad file descriptor) [pid 5087] close(18) = -1 EBADF (Bad file descriptor) [pid 5087] close(19) = -1 EBADF (Bad file descriptor) [pid 5087] close(20) = -1 EBADF (Bad file descriptor) [pid 5087] close(21) = -1 EBADF (Bad file descriptor) [pid 5087] close(22) = -1 EBADF (Bad file descriptor) [pid 5087] close(23) = -1 EBADF (Bad file descriptor) [pid 5087] close(24) = -1 EBADF (Bad file descriptor) [pid 5087] close(25) = -1 EBADF (Bad file descriptor) [pid 5087] close(26) = -1 EBADF (Bad file descriptor) [pid 5087] close(27) = -1 EBADF (Bad file descriptor) [pid 5087] close(28) = -1 EBADF (Bad file descriptor) [pid 5087] close(29) = -1 EBADF (Bad file descriptor) [pid 5087] exit_group(0 [pid 5091] <... futex resumed>) = ? [pid 5088] <... futex resumed>) = ? [pid 5087] <... exit_group resumed>) = ? [pid 5091] +++ exited with 0 +++ [pid 5088] +++ exited with 0 +++ [pid 5087] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=20, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5046] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./6/binderfs") = 0 [ 93.112698][ T5091] EXT4-fs (loop0): Free/Dirty block details [ 93.119475][ T5091] EXT4-fs (loop0): free_blocks=2415919104 [ 93.125615][ T5091] EXT4-fs (loop0): dirty_blocks=128 [ 93.131370][ T5091] EXT4-fs (loop0): Block reservation details [ 93.138652][ T5091] EXT4-fs (loop0): i_reserved_data_blocks=8 [ 93.150569][ T5088] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 128 with max blocks 1 with error 28 [pid 5046] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./6/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./6") = 0 [pid 5046] mkdir("./7", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5092 attached , child_tidptr=0x555555a9c690) = 23 [pid 5092] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5092] chdir("./7") = 0 [pid 5092] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5092] setpgid(0, 0) = 0 [pid 5092] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5092] write(3, "1000", 4) = 4 [pid 5092] close(3) = 0 [pid 5092] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5092] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5092] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5092] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5092] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5092] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5092] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5092] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5092] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0} => {parent_tid=[24]}, 88) = 24 [pid 5092] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5092] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5092] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5093 attached [pid 5093] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5093] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5093] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5093] memfd_create("syzkaller", 0) = 3 [pid 5093] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5093] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5093] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5093] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5093] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5093] close(3) = 0 [pid 5093] mkdir("./file0", 0777) = 0 [pid 5093] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5093] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5093] chdir("./file0") = 0 [pid 5093] ioctl(4, LOOP_CLR_FD) = 0 [pid 5093] close(4) = 0 [pid 5093] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5092] <... futex resumed>) = 0 [pid 5093] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5092] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5093] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5092] <... futex resumed>) = 0 [pid 5093] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5092] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5093] <... open resumed>) = 4 [pid 5093] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5092] <... futex resumed>) = 0 [pid 5093] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5092] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5093] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5092] <... futex resumed>) = 0 [pid 5092] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5093] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5093] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5092] <... futex resumed>) = 0 [pid 5093] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5092] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5093] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5092] <... futex resumed>) = 0 [pid 5093] ftruncate(5, 33587195 [pid 5092] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5093] <... ftruncate resumed>) = 0 [pid 5093] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5092] <... futex resumed>) = 0 [pid 5093] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5092] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5093] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5092] <... futex resumed>) = 0 [pid 5093] sendfile(4, 5, NULL, 4 [pid 5092] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5093] <... sendfile resumed>) = 4 [pid 5093] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5092] <... futex resumed>) = 0 [pid 5093] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5092] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5093] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5092] <... futex resumed>) = 0 [pid 5093] sendfile(4, 5, NULL, 281474978811909 [pid 5092] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5092] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5092] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5092] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5092] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5096 attached [pid 5096] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5096] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5096] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 93.281770][ T5093] loop0: detected capacity change from 0 to 2048 [ 93.301177][ T5093] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5092] <... clone3 resumed> => {parent_tid=[25]}, 88) = 25 [pid 5096] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5092] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5092] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5096] <... futex resumed>) = 0 [pid 5092] <... futex resumed>) = 1 [pid 5092] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5096] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5096] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5092] <... futex resumed>) = 0 [pid 5096] prlimit64(0, RLIMIT_CPU, NULL, [pid 5092] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 93.367567][ T5096] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 93.386385][ T5093] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 70 with max blocks 1 with error 28 [ 93.386857][ T5096] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 70 with error 28 [pid 5092] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5096] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5096] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5096] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5092] <... futex resumed>) = 0 [pid 5093] <... sendfile resumed>) = 143360 [pid 5093] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5093] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5092] close(3) = 0 [pid 5092] close(4) = 0 [pid 5092] close(5) = 0 [pid 5092] close(6) = -1 EBADF (Bad file descriptor) [pid 5092] close(7) = -1 EBADF (Bad file descriptor) [pid 5092] close(8) = -1 EBADF (Bad file descriptor) [pid 5092] close(9) = -1 EBADF (Bad file descriptor) [pid 5092] close(10) = -1 EBADF (Bad file descriptor) [pid 5092] close(11) = -1 EBADF (Bad file descriptor) [pid 5092] close(12) = -1 EBADF (Bad file descriptor) [pid 5092] close(13) = -1 EBADF (Bad file descriptor) [pid 5092] close(14) = -1 EBADF (Bad file descriptor) [pid 5092] close(15) = -1 EBADF (Bad file descriptor) [pid 5092] close(16) = -1 EBADF (Bad file descriptor) [pid 5092] close(17) = -1 EBADF (Bad file descriptor) [pid 5092] close(18) = -1 EBADF (Bad file descriptor) [pid 5092] close(19) = -1 EBADF (Bad file descriptor) [pid 5092] close(20) = -1 EBADF (Bad file descriptor) [pid 5092] close(21) = -1 EBADF (Bad file descriptor) [pid 5092] close(22) = -1 EBADF (Bad file descriptor) [pid 5092] close(23) = -1 EBADF (Bad file descriptor) [pid 5092] close(24) = -1 EBADF (Bad file descriptor) [pid 5092] close(25) = -1 EBADF (Bad file descriptor) [pid 5092] close(26) = -1 EBADF (Bad file descriptor) [pid 5092] close(27) = -1 EBADF (Bad file descriptor) [pid 5092] close(28) = -1 EBADF (Bad file descriptor) [pid 5092] close(29) = -1 EBADF (Bad file descriptor) [pid 5092] exit_group(0 [pid 5096] <... futex resumed>) = ? [pid 5093] <... futex resumed>) = ? [pid 5092] <... exit_group resumed>) = ? [pid 5096] +++ exited with 0 +++ [pid 5093] +++ exited with 0 +++ [pid 5092] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=23, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 93.399886][ T5093] EXT4-fs (loop0): This should not happen!! Data will be lost [ 93.399886][ T5093] [ 93.411369][ T5096] EXT4-fs (loop0): This should not happen!! Data will be lost [ 93.411369][ T5096] [ 93.411394][ T5096] EXT4-fs (loop0): Total free blocks count 0 [ 93.411415][ T5096] EXT4-fs (loop0): Free/Dirty block details [ 93.411435][ T5096] EXT4-fs (loop0): free_blocks=2415919104 [ 93.411457][ T5096] EXT4-fs (loop0): dirty_blocks=80 [ 93.411476][ T5096] EXT4-fs (loop0): Block reservation details [pid 5046] unlink("./7/binderfs") = 0 [pid 5046] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./7/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./7") = 0 [pid 5046] mkdir("./8", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5097 attached , child_tidptr=0x555555a9c690) = 26 [pid 5097] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5097] chdir("./8") = 0 [pid 5097] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5097] setpgid(0, 0) = 0 [pid 5097] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5097] write(3, "1000", 4) = 4 [pid 5097] close(3) = 0 [pid 5097] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5097] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5097] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5097] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5097] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5097] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5097] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5097] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5097] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5098 attached [pid 5098] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5097] <... clone3 resumed> => {parent_tid=[27]}, 88) = 27 [pid 5098] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5097] rt_sigprocmask(SIG_SETMASK, [], [pid 5098] rt_sigprocmask(SIG_SETMASK, [], [pid 5097] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5098] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5097] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5098] memfd_create("syzkaller", 0 [pid 5097] <... futex resumed>) = 0 [pid 5097] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5098] <... memfd_create resumed>) = 3 [pid 5098] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5098] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5098] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5098] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5098] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5098] close(3) = 0 [pid 5098] mkdir("./file0", 0777) = 0 [pid 5098] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5098] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5098] chdir("./file0") = 0 [pid 5098] ioctl(4, LOOP_CLR_FD) = 0 [pid 5098] close(4) = 0 [pid 5098] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5097] <... futex resumed>) = 0 [pid 5097] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5097] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5098] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5098] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5097] <... futex resumed>) = 0 [pid 5097] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5097] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5098] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5098] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5097] <... futex resumed>) = 0 [pid 5097] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5097] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5098] ftruncate(5, 33587195) = 0 [pid 5098] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5097] <... futex resumed>) = 0 [pid 5097] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5097] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5098] sendfile(4, 5, NULL, 4) = 4 [pid 5098] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5097] <... futex resumed>) = 0 [pid 5097] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5097] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5097] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5097] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE [pid 5098] <... futex resumed>) = 1 [pid 5098] sendfile(4, 5, NULL, 281474978811909 [pid 5097] <... mprotect resumed>) = 0 [pid 5097] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5097] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0} => {parent_tid=[28]}, 88) = 28 ./strace-static-x86_64: Process 5102 attached [pid 5102] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5102] set_robust_list(0x7efbfa33d9a0, 24 [pid 5097] rt_sigprocmask(SIG_SETMASK, [], [pid 5102] <... set_robust_list resumed>) = 0 [pid 5097] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5102] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5097] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000 [pid 5097] <... futex resumed>) = 0 [pid 5097] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5102] <... mmap resumed>) = 0x20000000 [pid 5102] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5102] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5097] <... futex resumed>) = 0 [pid 5097] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5097] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5102] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 93.607318][ T5098] loop0: detected capacity change from 0 to 2048 [ 93.631351][ T5098] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5102] prlimit64(0, RLIMIT_CPU, NULL, [pid 5097] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5097] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5097] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [ 93.683056][ T5098] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 93.700389][ T5098] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 44 with max blocks 1 with error 28 [ 93.713709][ T5098] EXT4-fs (loop0): This should not happen!! Data will be lost [ 93.713709][ T5098] [ 93.725923][ T5098] EXT4-fs (loop0): Total free blocks count 0 [pid 5098] <... sendfile resumed>) = 90112 [pid 5098] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5098] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5102] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5102] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5102] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5097] close(3) = 0 [pid 5097] close(4) = 0 [pid 5097] close(5) = 0 [pid 5097] close(6) = -1 EBADF (Bad file descriptor) [pid 5097] close(7) = -1 EBADF (Bad file descriptor) [pid 5097] close(8) = -1 EBADF (Bad file descriptor) [pid 5097] close(9) = -1 EBADF (Bad file descriptor) [pid 5097] close(10) = -1 EBADF (Bad file descriptor) [pid 5097] close(11) = -1 EBADF (Bad file descriptor) [pid 5097] close(12) = -1 EBADF (Bad file descriptor) [pid 5097] close(13) = -1 EBADF (Bad file descriptor) [pid 5097] close(14) = -1 EBADF (Bad file descriptor) [pid 5097] close(15) = -1 EBADF (Bad file descriptor) [pid 5097] close(16) = -1 EBADF (Bad file descriptor) [pid 5097] close(17) = -1 EBADF (Bad file descriptor) [pid 5097] close(18) = -1 EBADF (Bad file descriptor) [pid 5097] close(19) = -1 EBADF (Bad file descriptor) [pid 5097] close(20) = -1 EBADF (Bad file descriptor) [pid 5097] close(21) = -1 EBADF (Bad file descriptor) [pid 5097] close(22) = -1 EBADF (Bad file descriptor) [pid 5097] close(23) = -1 EBADF (Bad file descriptor) [pid 5097] close(24) = -1 EBADF (Bad file descriptor) [pid 5097] close(25) = -1 EBADF (Bad file descriptor) [pid 5097] close(26) = -1 EBADF (Bad file descriptor) [pid 5097] close(27) = -1 EBADF (Bad file descriptor) [pid 5097] close(28) = -1 EBADF (Bad file descriptor) [pid 5097] close(29) = -1 EBADF (Bad file descriptor) [pid 5097] exit_group(0 [pid 5102] <... futex resumed>) = ? [pid 5098] <... futex resumed>) = ? [pid 5097] <... exit_group resumed>) = ? [pid 5098] +++ exited with 0 +++ [pid 5102] +++ exited with 0 +++ [pid 5097] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=26, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./8/binderfs") = 0 [ 93.732274][ T5098] EXT4-fs (loop0): Free/Dirty block details [ 93.738532][ T5098] EXT4-fs (loop0): free_blocks=2415919104 [ 93.744265][ T5098] EXT4-fs (loop0): dirty_blocks=48 [ 93.750415][ T5098] EXT4-fs (loop0): Block reservation details [ 93.756512][ T5098] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 93.764584][ T5102] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 44 with error 28 [pid 5046] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./8/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./8") = 0 [pid 5046] mkdir("./9", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9c690) = 29 ./strace-static-x86_64: Process 5103 attached [pid 5103] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5103] chdir("./9") = 0 [pid 5103] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5103] setpgid(0, 0) = 0 [pid 5103] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5103] write(3, "1000", 4) = 4 [pid 5103] close(3) = 0 [pid 5103] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5103] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5103] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5103] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5103] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5103] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5103] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5103] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5103] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5104 attached [pid 5104] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5104] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5104] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5103] <... clone3 resumed> => {parent_tid=[30]}, 88) = 30 [pid 5104] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5103] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5103] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5104] <... futex resumed>) = 0 [pid 5103] <... futex resumed>) = 1 [pid 5104] memfd_create("syzkaller", 0 [pid 5103] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5104] <... memfd_create resumed>) = 3 [pid 5104] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5104] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5104] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5104] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5104] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5104] close(3) = 0 [pid 5104] mkdir("./file0", 0777) = 0 [pid 5104] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5104] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5104] chdir("./file0") = 0 [pid 5104] ioctl(4, LOOP_CLR_FD) = 0 [pid 5104] close(4) = 0 [pid 5104] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5103] <... futex resumed>) = 0 [pid 5104] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5103] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5104] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5103] <... futex resumed>) = 0 [pid 5104] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5103] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5104] <... open resumed>) = 4 [pid 5104] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5104] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5103] <... futex resumed>) = 0 [pid 5103] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5103] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5104] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5104] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5104] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5103] <... futex resumed>) = 0 [pid 5103] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5104] ftruncate(5, 33587195 [pid 5103] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5104] <... ftruncate resumed>) = 0 [pid 5104] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5103] <... futex resumed>) = 0 [pid 5103] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5103] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5104] sendfile(4, 5, NULL, 4) = 4 [pid 5104] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5103] <... futex resumed>) = 0 [pid 5104] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5103] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5104] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5103] <... futex resumed>) = 0 [pid 5104] sendfile(4, 5, NULL, 281474978811909 [pid 5103] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5103] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5103] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5103] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5103] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5107 attached [pid 5107] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5103] <... clone3 resumed> => {parent_tid=[31]}, 88) = 31 [pid 5107] <... rseq resumed>) = 0 [pid 5103] rt_sigprocmask(SIG_SETMASK, [], [pid 5107] set_robust_list(0x7efbfa33d9a0, 24 [pid 5103] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5107] <... set_robust_list resumed>) = 0 [pid 5103] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5107] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5103] <... futex resumed>) = 0 [pid 5107] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000 [pid 5103] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5107] <... mmap resumed>) = 0x20000000 [pid 5107] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5103] <... futex resumed>) = 0 [pid 5103] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5103] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5107] <... futex resumed>) = 1 [ 93.909285][ T5104] loop0: detected capacity change from 0 to 2048 [ 93.932261][ T5104] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.982342][ T5107] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 93.999561][ T5107] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 11 with error 28 [ 94.012431][ T5107] EXT4-fs (loop0): This should not happen!! Data will be lost [ 94.012431][ T5107] [ 94.022668][ T5107] EXT4-fs (loop0): Total free blocks count 0 [pid 5107] prlimit64(0, RLIMIT_CPU, NULL, [pid 5103] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5107] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5107] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5104] <... sendfile resumed>) = 24576 [pid 5107] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5104] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5104] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5103] close(3) = 0 [pid 5103] close(4) = 0 [pid 5103] close(5) = 0 [pid 5103] close(6) = -1 EBADF (Bad file descriptor) [pid 5103] close(7) = -1 EBADF (Bad file descriptor) [pid 5103] close(8) = -1 EBADF (Bad file descriptor) [pid 5103] close(9) = -1 EBADF (Bad file descriptor) [pid 5103] close(10) = -1 EBADF (Bad file descriptor) [pid 5103] close(11) = -1 EBADF (Bad file descriptor) [pid 5103] close(12) = -1 EBADF (Bad file descriptor) [pid 5103] close(13) = -1 EBADF (Bad file descriptor) [pid 5103] close(14) = -1 EBADF (Bad file descriptor) [pid 5103] close(15) = -1 EBADF (Bad file descriptor) [pid 5103] close(16) = -1 EBADF (Bad file descriptor) [pid 5103] close(17) = -1 EBADF (Bad file descriptor) [pid 5103] close(18) = -1 EBADF (Bad file descriptor) [pid 5103] close(19) = -1 EBADF (Bad file descriptor) [pid 5103] close(20) = -1 EBADF (Bad file descriptor) [pid 5103] close(21) = -1 EBADF (Bad file descriptor) [pid 5103] close(22) = -1 EBADF (Bad file descriptor) [pid 5103] close(23) = -1 EBADF (Bad file descriptor) [pid 5103] close(24) = -1 EBADF (Bad file descriptor) [pid 5103] close(25) = -1 EBADF (Bad file descriptor) [pid 5103] close(26) = -1 EBADF (Bad file descriptor) [pid 5103] close(27) = -1 EBADF (Bad file descriptor) [pid 5103] close(28) = -1 EBADF (Bad file descriptor) [pid 5103] close(29) = -1 EBADF (Bad file descriptor) [pid 5103] exit_group(0) = ? [pid 5107] <... futex resumed>) = ? [pid 5104] <... futex resumed>) = ? [pid 5107] +++ exited with 0 +++ [pid 5104] +++ exited with 0 +++ [pid 5103] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=29, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./9/binderfs") = 0 [ 94.029701][ T5107] EXT4-fs (loop0): Free/Dirty block details [ 94.035657][ T5107] EXT4-fs (loop0): free_blocks=2415919104 [ 94.042913][ T5107] EXT4-fs (loop0): dirty_blocks=16 [ 94.048233][ T5107] EXT4-fs (loop0): Block reservation details [ 94.054279][ T5107] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 94.062307][ T5104] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 12 with max blocks 1 with error 28 [pid 5046] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./9/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./9") = 0 [pid 5046] mkdir("./10", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9c690) = 32 ./strace-static-x86_64: Process 5108 attached [pid 5108] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5108] chdir("./10") = 0 [pid 5108] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5108] setpgid(0, 0) = 0 [pid 5108] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5108] write(3, "1000", 4) = 4 [pid 5108] close(3) = 0 [pid 5108] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5108] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5108] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5108] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5108] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5108] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5108] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5108] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5108] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5109 attached [pid 5109] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053 [pid 5108] <... clone3 resumed> => {parent_tid=[33]}, 88) = 33 [pid 5109] <... rseq resumed>) = 0 [pid 5108] rt_sigprocmask(SIG_SETMASK, [], [pid 5109] set_robust_list(0x7efc0265e9a0, 24 [pid 5108] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5109] <... set_robust_list resumed>) = 0 [pid 5108] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5109] rt_sigprocmask(SIG_SETMASK, [], [pid 5108] <... futex resumed>) = 0 [pid 5109] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5108] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5109] memfd_create("syzkaller", 0) = 3 [pid 5109] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5109] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5109] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5109] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5109] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5109] close(3) = 0 [pid 5109] mkdir("./file0", 0777) = 0 [pid 5109] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5109] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5109] chdir("./file0") = 0 [pid 5109] ioctl(4, LOOP_CLR_FD) = 0 [pid 5109] close(4) = 0 [pid 5109] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5109] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5108] <... futex resumed>) = 0 [pid 5108] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5109] <... futex resumed>) = 0 [pid 5108] <... futex resumed>) = 1 [pid 5109] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5108] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5109] <... open resumed>) = 4 [pid 5109] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5108] <... futex resumed>) = 0 [pid 5108] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5108] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5109] <... futex resumed>) = 1 [pid 5109] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5109] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5108] <... futex resumed>) = 0 [pid 5108] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5108] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5109] <... futex resumed>) = 1 [pid 5109] ftruncate(5, 33587195) = 0 [pid 5109] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5108] <... futex resumed>) = 0 [pid 5108] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5108] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5109] <... futex resumed>) = 1 [pid 5109] sendfile(4, 5, NULL, 4) = 4 [pid 5109] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5108] <... futex resumed>) = 0 [pid 5108] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5108] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5108] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5109] <... futex resumed>) = 1 [pid 5108] <... mmap resumed>) = 0x7efbfa31d000 [pid 5109] sendfile(4, 5, NULL, 281474978811909 [pid 5108] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5108] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5108] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5112 attached [pid 5112] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5112] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5108] <... clone3 resumed> => {parent_tid=[34]}, 88) = 34 [pid 5112] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5108] rt_sigprocmask(SIG_SETMASK, [], [pid 5112] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5108] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5108] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5112] <... futex resumed>) = 0 [pid 5108] <... futex resumed>) = 1 [pid 5112] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000 [ 94.197997][ T5109] loop0: detected capacity change from 0 to 2048 [ 94.221512][ T5109] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5108] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5112] <... mmap resumed>) = 0x20000000 [pid 5112] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5108] <... futex resumed>) = 0 [pid 5112] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5108] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5112] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5108] <... futex resumed>) = 0 [pid 5112] prlimit64(0, RLIMIT_CPU, NULL, [ 94.280493][ T5112] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 94.296911][ T5112] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 23 with error 28 [ 94.310388][ T5112] EXT4-fs (loop0): This should not happen!! Data will be lost [ 94.310388][ T5112] [ 94.320393][ T5112] EXT4-fs (loop0): Total free blocks count 0 [pid 5108] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5112] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5112] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5112] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5109] <... sendfile resumed>) = 49152 [pid 5109] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5109] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5108] close(3) = 0 [pid 5108] close(4) = 0 [pid 5108] close(5) = 0 [pid 5108] close(6) = -1 EBADF (Bad file descriptor) [pid 5108] close(7) = -1 EBADF (Bad file descriptor) [pid 5108] close(8) = -1 EBADF (Bad file descriptor) [pid 5108] close(9) = -1 EBADF (Bad file descriptor) [pid 5108] close(10) = -1 EBADF (Bad file descriptor) [pid 5108] close(11) = -1 EBADF (Bad file descriptor) [pid 5108] close(12) = -1 EBADF (Bad file descriptor) [pid 5108] close(13) = -1 EBADF (Bad file descriptor) [pid 5108] close(14) = -1 EBADF (Bad file descriptor) [pid 5108] close(15) = -1 EBADF (Bad file descriptor) [pid 5108] close(16) = -1 EBADF (Bad file descriptor) [pid 5108] close(17) = -1 EBADF (Bad file descriptor) [pid 5108] close(18) = -1 EBADF (Bad file descriptor) [pid 5108] close(19) = -1 EBADF (Bad file descriptor) [pid 5108] close(20) = -1 EBADF (Bad file descriptor) [pid 5108] close(21) = -1 EBADF (Bad file descriptor) [pid 5108] close(22) = -1 EBADF (Bad file descriptor) [pid 5108] close(23) = -1 EBADF (Bad file descriptor) [pid 5108] close(24) = -1 EBADF (Bad file descriptor) [pid 5108] close(25) = -1 EBADF (Bad file descriptor) [pid 5108] close(26) = -1 EBADF (Bad file descriptor) [pid 5108] close(27) = -1 EBADF (Bad file descriptor) [pid 5108] close(28) = -1 EBADF (Bad file descriptor) [pid 5108] close(29) = -1 EBADF (Bad file descriptor) [pid 5108] exit_group(0 [pid 5112] <... futex resumed>) = ? [pid 5112] +++ exited with 0 +++ [pid 5109] <... futex resumed>) = ? [pid 5108] <... exit_group resumed>) = ? [pid 5109] +++ exited with 0 +++ [pid 5108] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=32, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./10/binderfs") = 0 [ 94.326411][ T5112] EXT4-fs (loop0): Free/Dirty block details [ 94.332462][ T5112] EXT4-fs (loop0): free_blocks=2415919104 [ 94.338447][ T5112] EXT4-fs (loop0): dirty_blocks=32 [ 94.343597][ T5112] EXT4-fs (loop0): Block reservation details [ 94.349663][ T5112] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 94.357572][ T5109] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 1 with error 28 [pid 5046] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./10/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./10") = 0 [pid 5046] mkdir("./11", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9c690) = 35 ./strace-static-x86_64: Process 5113 attached [pid 5113] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5113] chdir("./11") = 0 [pid 5113] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5113] setpgid(0, 0) = 0 [pid 5113] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5113] write(3, "1000", 4) = 4 [pid 5113] close(3) = 0 [pid 5113] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5113] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5113] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5113] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5113] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5113] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5113] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5113] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5113] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5114 attached [pid 5114] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053 [pid 5113] <... clone3 resumed> => {parent_tid=[36]}, 88) = 36 [pid 5114] <... rseq resumed>) = 0 [pid 5113] rt_sigprocmask(SIG_SETMASK, [], [pid 5114] set_robust_list(0x7efc0265e9a0, 24 [pid 5113] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5114] <... set_robust_list resumed>) = 0 [pid 5113] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5114] rt_sigprocmask(SIG_SETMASK, [], [pid 5113] <... futex resumed>) = 0 [pid 5114] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5113] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5114] memfd_create("syzkaller", 0) = 3 [pid 5114] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5114] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5114] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5114] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5114] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5114] close(3) = 0 [pid 5114] mkdir("./file0", 0777) = 0 [pid 5114] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5114] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5114] chdir("./file0") = 0 [pid 5114] ioctl(4, LOOP_CLR_FD) = 0 [pid 5114] close(4) = 0 [pid 5114] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5114] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5113] <... futex resumed>) = 0 [pid 5113] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5114] <... futex resumed>) = 0 [pid 5114] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5113] <... futex resumed>) = 1 [pid 5113] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5114] <... open resumed>) = 4 [pid 5114] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5114] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5113] <... futex resumed>) = 0 [pid 5113] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5114] <... futex resumed>) = 0 [pid 5114] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5114] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5114] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5113] <... futex resumed>) = 1 [pid 5113] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5113] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5114] <... futex resumed>) = 0 [pid 5114] ftruncate(5, 33587195) = 0 [pid 5114] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5114] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5113] <... futex resumed>) = 1 [pid 5113] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5113] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5114] <... futex resumed>) = 0 [pid 5114] sendfile(4, 5, NULL, 4) = 4 [pid 5114] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5114] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5113] <... futex resumed>) = 1 [pid 5113] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5113] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5114] <... futex resumed>) = 0 [pid 5114] sendfile(4, 5, NULL, 281474978811909 [pid 5113] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5113] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5113] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5113] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5113] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5117 attached [pid 5117] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5117] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5113] <... clone3 resumed> => {parent_tid=[37]}, 88) = 37 [pid 5117] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5117] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5113] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5117] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5113] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5117] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000 [pid 5113] <... futex resumed>) = 0 [pid 5117] <... mmap resumed>) = 0x20000000 [pid 5113] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5117] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5113] <... futex resumed>) = 0 [pid 5113] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5113] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 94.496853][ T5114] loop0: detected capacity change from 0 to 2048 [ 94.521020][ T5114] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5117] prlimit64(0, RLIMIT_CPU, NULL, [pid 5113] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 94.579406][ T5117] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 94.596167][ T5117] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 41 with error 28 [ 94.609011][ T5117] EXT4-fs (loop0): This should not happen!! Data will be lost [ 94.609011][ T5117] [ 94.620050][ T5117] EXT4-fs (loop0): Total free blocks count 0 [pid 5117] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5117] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5114] <... sendfile resumed>) = 86016 [pid 5117] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5114] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5114] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5113] close(3) = 0 [pid 5113] close(4) = 0 [pid 5113] close(5) = 0 [pid 5113] close(6) = -1 EBADF (Bad file descriptor) [pid 5113] close(7) = -1 EBADF (Bad file descriptor) [pid 5113] close(8) = -1 EBADF (Bad file descriptor) [pid 5113] close(9) = -1 EBADF (Bad file descriptor) [pid 5113] close(10) = -1 EBADF (Bad file descriptor) [pid 5113] close(11) = -1 EBADF (Bad file descriptor) [pid 5113] close(12) = -1 EBADF (Bad file descriptor) [pid 5113] close(13) = -1 EBADF (Bad file descriptor) [pid 5113] close(14) = -1 EBADF (Bad file descriptor) [pid 5113] close(15) = -1 EBADF (Bad file descriptor) [pid 5113] close(16) = -1 EBADF (Bad file descriptor) [pid 5113] close(17) = -1 EBADF (Bad file descriptor) [pid 5113] close(18) = -1 EBADF (Bad file descriptor) [pid 5113] close(19) = -1 EBADF (Bad file descriptor) [pid 5113] close(20) = -1 EBADF (Bad file descriptor) [pid 5113] close(21) = -1 EBADF (Bad file descriptor) [pid 5113] close(22) = -1 EBADF (Bad file descriptor) [pid 5113] close(23) = -1 EBADF (Bad file descriptor) [pid 5113] close(24) = -1 EBADF (Bad file descriptor) [pid 5113] close(25) = -1 EBADF (Bad file descriptor) [pid 5113] close(26) = -1 EBADF (Bad file descriptor) [pid 5113] close(27) = -1 EBADF (Bad file descriptor) [pid 5113] close(28) = -1 EBADF (Bad file descriptor) [pid 5113] close(29) = -1 EBADF (Bad file descriptor) [pid 5113] exit_group(0) = ? [pid 5114] <... futex resumed>) = ? [pid 5117] <... futex resumed>) = ? [pid 5117] +++ exited with 0 +++ [pid 5114] +++ exited with 0 +++ [pid 5113] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=35, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5046] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./11/binderfs") = 0 [ 94.626113][ T5117] EXT4-fs (loop0): Free/Dirty block details [ 94.632290][ T5117] EXT4-fs (loop0): free_blocks=2415919104 [ 94.638258][ T5117] EXT4-fs (loop0): dirty_blocks=48 [ 94.643438][ T5117] EXT4-fs (loop0): Block reservation details [ 94.649505][ T5117] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 94.658814][ T5114] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 42 with max blocks 1 with error 28 [pid 5046] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./11/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./11") = 0 [pid 5046] mkdir("./12", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9c690) = 38 ./strace-static-x86_64: Process 5118 attached [pid 5118] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5118] chdir("./12") = 0 [pid 5118] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5118] setpgid(0, 0) = 0 [pid 5118] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5118] write(3, "1000", 4) = 4 [pid 5118] close(3) = 0 [pid 5118] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5118] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5118] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5118] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5118] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5118] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5118] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5118] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5118] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0} => {parent_tid=[39]}, 88) = 39 [pid 5118] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5118] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5118] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5119 attached [pid 5119] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5119] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5119] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5119] memfd_create("syzkaller", 0) = 3 [pid 5119] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5119] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5119] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5119] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5119] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5119] close(3) = 0 [pid 5119] mkdir("./file0", 0777) = 0 [pid 5119] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5119] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5119] chdir("./file0") = 0 [pid 5119] ioctl(4, LOOP_CLR_FD) = 0 [pid 5119] close(4) = 0 [pid 5119] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5119] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5118] <... futex resumed>) = 0 [pid 5118] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5119] <... futex resumed>) = 0 [pid 5119] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5118] <... futex resumed>) = 1 [pid 5118] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5119] <... open resumed>) = 4 [pid 5119] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5118] <... futex resumed>) = 0 [pid 5118] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5119] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5118] <... futex resumed>) = 0 [pid 5118] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5119] <... open resumed>) = 5 [pid 5119] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5119] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5118] <... futex resumed>) = 0 [pid 5118] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5118] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5119] <... futex resumed>) = 0 [pid 5119] ftruncate(5, 33587195) = 0 [pid 5119] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] <... futex resumed>) = 0 [pid 5118] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5118] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5119] <... futex resumed>) = 1 [pid 5119] sendfile(4, 5, NULL, 4) = 4 [pid 5119] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5119] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5118] <... futex resumed>) = 0 [pid 5118] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5119] <... futex resumed>) = 0 [pid 5119] sendfile(4, 5, NULL, 281474978811909 [pid 5118] <... futex resumed>) = 1 [pid 5118] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5118] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5118] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5118] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5118] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5122 attached [pid 5122] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5122] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5118] <... clone3 resumed> => {parent_tid=[40]}, 88) = 40 [pid 5118] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5122] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5122] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5118] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5122] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5118] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5122] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5122] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5122] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5118] <... futex resumed>) = 0 [pid 5118] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5122] <... futex resumed>) = 0 [ 94.795081][ T5119] loop0: detected capacity change from 0 to 2048 [ 94.812426][ T5119] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5122] prlimit64(0, RLIMIT_CPU, NULL, [ 94.865942][ T5122] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 94.883622][ T5122] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 21 with error 28 [ 94.896454][ T5122] EXT4-fs (loop0): This should not happen!! Data will be lost [ 94.896454][ T5122] [ 94.906847][ T5122] EXT4-fs (loop0): Total free blocks count 0 [pid 5118] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5122] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5122] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5122] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5119] <... sendfile resumed>) = 45056 [pid 5119] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5119] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5118] close(3) = 0 [pid 5118] close(4) = 0 [pid 5118] close(5) = 0 [pid 5118] close(6) = -1 EBADF (Bad file descriptor) [pid 5118] close(7) = -1 EBADF (Bad file descriptor) [pid 5118] close(8) = -1 EBADF (Bad file descriptor) [pid 5118] close(9) = -1 EBADF (Bad file descriptor) [pid 5118] close(10) = -1 EBADF (Bad file descriptor) [pid 5118] close(11) = -1 EBADF (Bad file descriptor) [pid 5118] close(12) = -1 EBADF (Bad file descriptor) [pid 5118] close(13) = -1 EBADF (Bad file descriptor) [pid 5118] close(14) = -1 EBADF (Bad file descriptor) [pid 5118] close(15) = -1 EBADF (Bad file descriptor) [pid 5118] close(16) = -1 EBADF (Bad file descriptor) [pid 5118] close(17) = -1 EBADF (Bad file descriptor) [pid 5118] close(18) = -1 EBADF (Bad file descriptor) [pid 5118] close(19) = -1 EBADF (Bad file descriptor) [pid 5118] close(20) = -1 EBADF (Bad file descriptor) [pid 5118] close(21) = -1 EBADF (Bad file descriptor) [pid 5118] close(22) = -1 EBADF (Bad file descriptor) [pid 5118] close(23) = -1 EBADF (Bad file descriptor) [pid 5118] close(24) = -1 EBADF (Bad file descriptor) [pid 5118] close(25) = -1 EBADF (Bad file descriptor) [pid 5118] close(26) = -1 EBADF (Bad file descriptor) [pid 5118] close(27) = -1 EBADF (Bad file descriptor) [pid 5118] close(28) = -1 EBADF (Bad file descriptor) [pid 5118] close(29) = -1 EBADF (Bad file descriptor) [pid 5118] exit_group(0 [pid 5122] <... futex resumed>) = ? [pid 5119] <... futex resumed>) = ? [pid 5118] <... exit_group resumed>) = ? [pid 5122] +++ exited with 0 +++ [pid 5119] +++ exited with 0 +++ [pid 5118] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=38, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./12/binderfs") = 0 [ 94.912863][ T5122] EXT4-fs (loop0): Free/Dirty block details [ 94.920630][ T5122] EXT4-fs (loop0): free_blocks=2415919104 [ 94.926367][ T5122] EXT4-fs (loop0): dirty_blocks=32 [ 94.931548][ T5122] EXT4-fs (loop0): Block reservation details [ 94.937778][ T5122] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 94.945242][ T5119] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 22 with max blocks 1 with error 28 [pid 5046] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./12/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./12") = 0 [pid 5046] mkdir("./13", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5123 attached , child_tidptr=0x555555a9c690) = 41 [pid 5123] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5123] chdir("./13") = 0 [pid 5123] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5123] setpgid(0, 0) = 0 [pid 5123] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5123] write(3, "1000", 4) = 4 [pid 5123] close(3) = 0 [pid 5123] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5123] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5123] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5123] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5123] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5123] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5123] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5123] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5123] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5124 attached => {parent_tid=[42]}, 88) = 42 [pid 5124] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053 [pid 5123] rt_sigprocmask(SIG_SETMASK, [], [pid 5124] <... rseq resumed>) = 0 [pid 5123] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5124] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5124] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5124] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5123] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] <... futex resumed>) = 0 [pid 5123] <... futex resumed>) = 1 [pid 5124] memfd_create("syzkaller", 0) = 3 [pid 5123] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5124] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5124] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5124] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5124] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5124] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5124] close(3) = 0 [pid 5124] mkdir("./file0", 0777) = 0 [pid 5124] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5124] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5124] chdir("./file0") = 0 [pid 5124] ioctl(4, LOOP_CLR_FD) = 0 [pid 5124] close(4) = 0 [pid 5124] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5124] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5123] <... futex resumed>) = 0 [pid 5123] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] <... futex resumed>) = 0 [pid 5123] <... futex resumed>) = 1 [pid 5124] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5123] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5124] <... open resumed>) = 4 [pid 5124] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5124] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5123] <... futex resumed>) = 0 [pid 5123] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] <... futex resumed>) = 0 [pid 5124] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5123] <... futex resumed>) = 1 [pid 5123] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5124] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5123] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5124] <... futex resumed>) = 0 [pid 5124] ftruncate(5, 33587195 [pid 5123] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] <... ftruncate resumed>) = 0 [pid 5124] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5124] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL) = 0 [pid 5124] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5123] <... futex resumed>) = 1 [pid 5123] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5123] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] <... futex resumed>) = 0 [pid 5124] sendfile(4, 5, NULL, 4) = 4 [pid 5123] <... futex resumed>) = 1 [pid 5123] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5124] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5123] <... futex resumed>) = 0 [pid 5124] sendfile(4, 5, NULL, 281474978811909 [pid 5123] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5123] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5123] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5123] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5123] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5123] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5127 attached [pid 5127] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5123] <... clone3 resumed> => {parent_tid=[43]}, 88) = 43 [pid 5127] <... rseq resumed>) = 0 [pid 5123] rt_sigprocmask(SIG_SETMASK, [], [pid 5127] set_robust_list(0x7efbfa33d9a0, 24 [pid 5123] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5127] <... set_robust_list resumed>) = 0 [pid 5123] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5127] rt_sigprocmask(SIG_SETMASK, [], [pid 5123] <... futex resumed>) = 0 [pid 5127] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5123] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 95.091847][ T5124] loop0: detected capacity change from 0 to 2048 [ 95.111953][ T5124] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5127] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5127] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5127] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5123] <... futex resumed>) = 0 [pid 5123] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5127] <... futex resumed>) = 0 [pid 5123] <... futex resumed>) = 1 [pid 5127] prlimit64(0, RLIMIT_CPU, NULL, [ 95.192353][ T5127] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 95.208622][ T5127] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 65 with error 28 [ 95.221257][ T5127] EXT4-fs (loop0): This should not happen!! Data will be lost [ 95.221257][ T5127] [ 95.231600][ T5127] EXT4-fs (loop0): Total free blocks count 0 [pid 5123] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5127] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5127] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5127] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5124] <... sendfile resumed>) = 135168 [pid 5124] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5124] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5123] close(3) = 0 [pid 5123] close(4) = 0 [pid 5123] close(5) = 0 [pid 5123] close(6) = -1 EBADF (Bad file descriptor) [pid 5123] close(7) = -1 EBADF (Bad file descriptor) [pid 5123] close(8) = -1 EBADF (Bad file descriptor) [pid 5123] close(9) = -1 EBADF (Bad file descriptor) [pid 5123] close(10) = -1 EBADF (Bad file descriptor) [pid 5123] close(11) = -1 EBADF (Bad file descriptor) [pid 5123] close(12) = -1 EBADF (Bad file descriptor) [pid 5123] close(13) = -1 EBADF (Bad file descriptor) [pid 5123] close(14) = -1 EBADF (Bad file descriptor) [pid 5123] close(15) = -1 EBADF (Bad file descriptor) [pid 5123] close(16) = -1 EBADF (Bad file descriptor) [pid 5123] close(17) = -1 EBADF (Bad file descriptor) [pid 5123] close(18) = -1 EBADF (Bad file descriptor) [pid 5123] close(19) = -1 EBADF (Bad file descriptor) [pid 5123] close(20) = -1 EBADF (Bad file descriptor) [pid 5123] close(21) = -1 EBADF (Bad file descriptor) [pid 5123] close(22) = -1 EBADF (Bad file descriptor) [pid 5123] close(23) = -1 EBADF (Bad file descriptor) [pid 5123] close(24) = -1 EBADF (Bad file descriptor) [pid 5123] close(25) = -1 EBADF (Bad file descriptor) [pid 5123] close(26) = -1 EBADF (Bad file descriptor) [pid 5123] close(27) = -1 EBADF (Bad file descriptor) [pid 5123] close(28) = -1 EBADF (Bad file descriptor) [pid 5123] close(29) = -1 EBADF (Bad file descriptor) [pid 5123] exit_group(0) = ? [pid 5124] <... futex resumed>) = ? [pid 5127] <... futex resumed>) = ? [pid 5127] +++ exited with 0 +++ [pid 5124] +++ exited with 0 +++ [pid 5123] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=41, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./13/binderfs") = 0 [ 95.237630][ T5127] EXT4-fs (loop0): Free/Dirty block details [ 95.243537][ T5127] EXT4-fs (loop0): free_blocks=2415919104 [ 95.250285][ T5127] EXT4-fs (loop0): dirty_blocks=80 [ 95.255425][ T5127] EXT4-fs (loop0): Block reservation details [ 95.261449][ T5127] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 95.271856][ T5124] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 66 with max blocks 1 with error 28 [pid 5046] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./13/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./13") = 0 [pid 5046] mkdir("./14", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5128 attached , child_tidptr=0x555555a9c690) = 44 [pid 5128] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5128] chdir("./14") = 0 [pid 5128] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5128] setpgid(0, 0) = 0 [pid 5128] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5128] write(3, "1000", 4) = 4 [pid 5128] close(3) = 0 [pid 5128] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5128] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5128] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5128] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5128] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5128] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5128] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5128] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5128] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5129 attached => {parent_tid=[45]}, 88) = 45 [pid 5129] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053 [pid 5128] rt_sigprocmask(SIG_SETMASK, [], [pid 5129] <... rseq resumed>) = 0 [pid 5128] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5129] set_robust_list(0x7efc0265e9a0, 24 [pid 5128] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5129] <... set_robust_list resumed>) = 0 [pid 5128] <... futex resumed>) = 0 [pid 5129] rt_sigprocmask(SIG_SETMASK, [], [pid 5128] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5129] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5129] memfd_create("syzkaller", 0) = 3 [pid 5129] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5129] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5129] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5129] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5129] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5129] close(3) = 0 [pid 5129] mkdir("./file0", 0777) = 0 [pid 5129] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5129] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5129] chdir("./file0") = 0 [pid 5129] ioctl(4, LOOP_CLR_FD) = 0 [pid 5129] close(4) = 0 [pid 5129] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5128] <... futex resumed>) = 0 [pid 5129] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5128] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5129] <... futex resumed>) = 0 [pid 5128] <... futex resumed>) = 1 [pid 5129] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5128] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5129] <... open resumed>) = 4 [pid 5129] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5128] <... futex resumed>) = 0 [pid 5129] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5128] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5129] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5128] <... futex resumed>) = 0 [pid 5129] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5128] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5129] <... open resumed>) = 5 [pid 5129] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5128] <... futex resumed>) = 0 [pid 5128] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5129] ftruncate(5, 33587195 [pid 5128] <... futex resumed>) = 0 [pid 5129] <... ftruncate resumed>) = 0 [pid 5128] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5129] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5128] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5128] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5128] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5129] <... futex resumed>) = 1 [pid 5128] <... futex resumed>) = 0 [pid 5129] sendfile(4, 5, NULL, 4 [pid 5128] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=49000000} [pid 5129] <... sendfile resumed>) = 4 [pid 5129] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5128] <... futex resumed>) = 0 [pid 5129] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5128] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5129] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5128] <... futex resumed>) = 0 [pid 5129] sendfile(4, 5, NULL, 281474978811909 [pid 5128] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5128] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5128] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5128] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5128] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5132 attached => {parent_tid=[46]}, 88) = 46 [pid 5128] rt_sigprocmask(SIG_SETMASK, [], [pid 5132] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5128] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5132] <... rseq resumed>) = 0 [pid 5128] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [ 95.407988][ T5129] loop0: detected capacity change from 0 to 2048 [ 95.431090][ T5129] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5132] set_robust_list(0x7efbfa33d9a0, 24 [pid 5128] <... futex resumed>) = 0 [pid 5132] <... set_robust_list resumed>) = 0 [pid 5128] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5132] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5132] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5132] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5128] <... futex resumed>) = 0 [pid 5128] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5128] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5132] <... futex resumed>) = 1 [ 95.498287][ T5129] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 95.513695][ T5129] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 66 with max blocks 1 with error 28 [ 95.526950][ T5129] EXT4-fs (loop0): This should not happen!! Data will be lost [ 95.526950][ T5129] [ 95.536674][ T5129] EXT4-fs (loop0): Total free blocks count 0 [ 95.542679][ T5129] EXT4-fs (loop0): Free/Dirty block details [pid 5132] prlimit64(0, RLIMIT_CPU, NULL, [pid 5128] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5129] <... sendfile resumed>) = 135168 [pid 5129] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5132] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5129] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5132] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5128] close(3 [pid 5132] <... futex resumed>) = 0 [pid 5128] <... close resumed>) = 0 [pid 5132] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5128] close(4) = 0 [pid 5128] close(5) = 0 [pid 5128] close(6) = -1 EBADF (Bad file descriptor) [pid 5128] close(7) = -1 EBADF (Bad file descriptor) [pid 5128] close(8) = -1 EBADF (Bad file descriptor) [pid 5128] close(9) = -1 EBADF (Bad file descriptor) [pid 5128] close(10) = -1 EBADF (Bad file descriptor) [pid 5128] close(11) = -1 EBADF (Bad file descriptor) [pid 5128] close(12) = -1 EBADF (Bad file descriptor) [pid 5128] close(13) = -1 EBADF (Bad file descriptor) [pid 5128] close(14) = -1 EBADF (Bad file descriptor) [pid 5128] close(15) = -1 EBADF (Bad file descriptor) [pid 5128] close(16) = -1 EBADF (Bad file descriptor) [pid 5128] close(17) = -1 EBADF (Bad file descriptor) [pid 5128] close(18) = -1 EBADF (Bad file descriptor) [pid 5128] close(19) = -1 EBADF (Bad file descriptor) [pid 5128] close(20) = -1 EBADF (Bad file descriptor) [pid 5128] close(21) = -1 EBADF (Bad file descriptor) [pid 5128] close(22) = -1 EBADF (Bad file descriptor) [pid 5128] close(23) = -1 EBADF (Bad file descriptor) [pid 5128] close(24) = -1 EBADF (Bad file descriptor) [pid 5128] close(25) = -1 EBADF (Bad file descriptor) [pid 5128] close(26) = -1 EBADF (Bad file descriptor) [pid 5128] close(27) = -1 EBADF (Bad file descriptor) [pid 5128] close(28) = -1 EBADF (Bad file descriptor) [pid 5128] close(29) = -1 EBADF (Bad file descriptor) [pid 5128] exit_group(0 [pid 5132] <... futex resumed>) = ? [pid 5129] <... futex resumed>) = ? [pid 5128] <... exit_group resumed>) = ? [pid 5132] +++ exited with 0 +++ [pid 5129] +++ exited with 0 +++ [pid 5128] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=44, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5046] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./14/binderfs") = 0 [pid 5046] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 95.548698][ T5129] EXT4-fs (loop0): free_blocks=2415919104 [ 95.554651][ T5129] EXT4-fs (loop0): dirty_blocks=80 [ 95.559874][ T5129] EXT4-fs (loop0): Block reservation details [ 95.565879][ T5129] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 95.572486][ T5132] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 66 with error 28 [pid 5046] newfstatat(AT_FDCWD, "./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./14/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./14") = 0 [pid 5046] mkdir("./15", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9c690) = 47 ./strace-static-x86_64: Process 5133 attached [pid 5133] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5133] chdir("./15") = 0 [pid 5133] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5133] setpgid(0, 0) = 0 [pid 5133] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5133] write(3, "1000", 4) = 4 [pid 5133] close(3) = 0 [pid 5133] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5133] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5133] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5133] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5133] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5133] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5133] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5133] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5133] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0} => {parent_tid=[48]}, 88) = 48 [pid 5133] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5134 attached NULL, 8) = 0 [pid 5134] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5134] set_robust_list(0x7efc0265e9a0, 24 [pid 5133] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] <... set_robust_list resumed>) = 0 [pid 5134] rt_sigprocmask(SIG_SETMASK, [], [pid 5133] <... futex resumed>) = 0 [pid 5134] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5133] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5134] memfd_create("syzkaller", 0) = 3 [pid 5134] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5134] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5134] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5134] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5134] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5134] close(3) = 0 [pid 5134] mkdir("./file0", 0777) = 0 [pid 5134] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5134] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5134] chdir("./file0") = 0 [pid 5134] ioctl(4, LOOP_CLR_FD) = 0 [pid 5134] close(4) = 0 [pid 5134] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5133] <... futex resumed>) = 0 [pid 5134] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5133] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5133] <... futex resumed>) = 0 [pid 5134] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5133] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5134] <... open resumed>) = 4 [pid 5134] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] <... futex resumed>) = 0 [pid 5133] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5133] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5134] <... futex resumed>) = 1 [pid 5134] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5134] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] <... futex resumed>) = 0 [pid 5133] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5133] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5134] <... futex resumed>) = 1 [pid 5134] ftruncate(5, 33587195) = 0 [pid 5134] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5133] <... futex resumed>) = 0 [pid 5134] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5133] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5133] <... futex resumed>) = 0 [pid 5134] sendfile(4, 5, NULL, 4 [pid 5133] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5134] <... sendfile resumed>) = 4 [pid 5134] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] <... futex resumed>) = 0 [pid 5134] <... futex resumed>) = 1 [pid 5134] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5133] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] <... futex resumed>) = 0 [pid 5133] <... futex resumed>) = 1 [pid 5134] sendfile(4, 5, NULL, 281474978811909 [pid 5133] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5133] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5133] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5133] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5133] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0} => {parent_tid=[49]}, 88) = 49 [pid 5133] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5133] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5133] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5137 attached [pid 5137] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5137] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5137] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5137] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [ 95.700611][ T5134] loop0: detected capacity change from 0 to 2048 [ 95.721695][ T5134] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5137] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] <... futex resumed>) = 0 [pid 5133] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5133] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5137] <... futex resumed>) = 1 [ 95.782738][ T5137] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 95.798875][ T5137] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 63 with error 28 [ 95.812780][ T5137] EXT4-fs (loop0): This should not happen!! Data will be lost [ 95.812780][ T5137] [ 95.822578][ T5137] EXT4-fs (loop0): Total free blocks count 0 [pid 5137] prlimit64(0, RLIMIT_CPU, NULL, [pid 5133] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5137] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5137] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5137] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5134] <... sendfile resumed>) = 131072 [pid 5134] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5134] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5133] close(3) = 0 [pid 5133] close(4) = 0 [pid 5133] close(5) = 0 [pid 5133] close(6) = -1 EBADF (Bad file descriptor) [pid 5133] close(7) = -1 EBADF (Bad file descriptor) [pid 5133] close(8) = -1 EBADF (Bad file descriptor) [pid 5133] close(9) = -1 EBADF (Bad file descriptor) [pid 5133] close(10) = -1 EBADF (Bad file descriptor) [pid 5133] close(11) = -1 EBADF (Bad file descriptor) [pid 5133] close(12) = -1 EBADF (Bad file descriptor) [pid 5133] close(13) = -1 EBADF (Bad file descriptor) [pid 5133] close(14) = -1 EBADF (Bad file descriptor) [pid 5133] close(15) = -1 EBADF (Bad file descriptor) [pid 5133] close(16) = -1 EBADF (Bad file descriptor) [pid 5133] close(17) = -1 EBADF (Bad file descriptor) [pid 5133] close(18) = -1 EBADF (Bad file descriptor) [pid 5133] close(19) = -1 EBADF (Bad file descriptor) [pid 5133] close(20) = -1 EBADF (Bad file descriptor) [pid 5133] close(21) = -1 EBADF (Bad file descriptor) [pid 5133] close(22) = -1 EBADF (Bad file descriptor) [pid 5133] close(23) = -1 EBADF (Bad file descriptor) [pid 5133] close(24) = -1 EBADF (Bad file descriptor) [pid 5133] close(25) = -1 EBADF (Bad file descriptor) [pid 5133] close(26) = -1 EBADF (Bad file descriptor) [pid 5133] close(27) = -1 EBADF (Bad file descriptor) [pid 5133] close(28) = -1 EBADF (Bad file descriptor) [pid 5133] close(29) = -1 EBADF (Bad file descriptor) [pid 5133] exit_group(0 [pid 5137] <... futex resumed>) = ? [pid 5134] <... futex resumed>) = ? [pid 5137] +++ exited with 0 +++ [pid 5133] <... exit_group resumed>) = ? [pid 5134] +++ exited with 0 +++ [pid 5133] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=47, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./15/binderfs") = 0 [ 95.829649][ T5137] EXT4-fs (loop0): Free/Dirty block details [ 95.836237][ T5137] EXT4-fs (loop0): free_blocks=2415919104 [ 95.842334][ T5137] EXT4-fs (loop0): dirty_blocks=64 [ 95.847646][ T5137] EXT4-fs (loop0): Block reservation details [ 95.853738][ T5137] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 95.862811][ T5134] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 64 with max blocks 1 with error 28 [pid 5046] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./15/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./15/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./15") = 0 [pid 5046] mkdir("./16", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5138 attached [pid 5138] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5138] chdir("./16") = 0 [pid 5138] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5138] setpgid(0, 0) = 0 [pid 5138] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5138] write(3, "1000", 4) = 4 [pid 5138] close(3) = 0 [pid 5138] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5138] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5138] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5138] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5138] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5138] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5138] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5138] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5138] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0} [pid 5046] <... clone resumed>, child_tidptr=0x555555a9c690) = 50 ./strace-static-x86_64: Process 5139 attached [pid 5139] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5139] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5139] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5139] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5138] <... clone3 resumed> => {parent_tid=[51]}, 88) = 51 [pid 5138] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5138] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5139] <... futex resumed>) = 0 [pid 5138] <... futex resumed>) = 1 [pid 5139] memfd_create("syzkaller", 0 [pid 5138] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5139] <... memfd_create resumed>) = 3 [pid 5139] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5139] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5139] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5139] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5139] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5139] close(3) = 0 [pid 5139] mkdir("./file0", 0777) = 0 [pid 5139] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5139] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5139] chdir("./file0") = 0 [pid 5139] ioctl(4, LOOP_CLR_FD) = 0 [pid 5139] close(4) = 0 [pid 5139] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5139] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5138] <... futex resumed>) = 0 [pid 5138] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5139] <... futex resumed>) = 0 [pid 5138] <... futex resumed>) = 1 [pid 5139] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5138] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5139] <... open resumed>) = 4 [pid 5139] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5138] <... futex resumed>) = 0 [pid 5139] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5138] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5138] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5139] <... open resumed>) = 5 [pid 5139] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5138] <... futex resumed>) = 0 [pid 5138] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5139] <... futex resumed>) = 1 [pid 5138] <... futex resumed>) = 0 [pid 5139] ftruncate(5, 33587195 [pid 5138] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5139] <... ftruncate resumed>) = 0 [pid 5139] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5139] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5138] <... futex resumed>) = 0 [pid 5138] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5139] <... futex resumed>) = 0 [pid 5138] <... futex resumed>) = 1 [pid 5139] sendfile(4, 5, NULL, 4) = 4 [pid 5138] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5139] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5138] <... futex resumed>) = 0 [pid 5138] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5139] sendfile(4, 5, NULL, 281474978811909 [pid 5138] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 95.975664][ T5139] loop0: detected capacity change from 0 to 2048 [ 96.000882][ T5139] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5138] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5138] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5138] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5138] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5142 attached => {parent_tid=[52]}, 88) = 52 [pid 5142] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5138] rt_sigprocmask(SIG_SETMASK, [], [pid 5142] set_robust_list(0x7efbfa33d9a0, 24 [pid 5138] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5142] <... set_robust_list resumed>) = 0 [pid 5138] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] rt_sigprocmask(SIG_SETMASK, [], [pid 5138] <... futex resumed>) = 0 [pid 5142] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5142] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000 [pid 5138] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5142] <... mmap resumed>) = 0x20000000 [pid 5142] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5138] <... futex resumed>) = 0 [pid 5142] <... futex resumed>) = 1 [pid 5138] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] prlimit64(0, RLIMIT_CPU, NULL, [pid 5138] <... futex resumed>) = 0 [ 96.065761][ T5142] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 96.081318][ T5142] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 35 with error 28 [ 96.094210][ T5142] EXT4-fs (loop0): This should not happen!! Data will be lost [ 96.094210][ T5142] [ 96.104860][ T5142] EXT4-fs (loop0): Total free blocks count 0 [pid 5138] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5142] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5142] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5142] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5139] <... sendfile resumed>) = 73728 [pid 5139] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5139] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5138] close(3) = 0 [pid 5138] close(4) = 0 [pid 5138] close(5) = 0 [pid 5138] close(6) = -1 EBADF (Bad file descriptor) [pid 5138] close(7) = -1 EBADF (Bad file descriptor) [pid 5138] close(8) = -1 EBADF (Bad file descriptor) [pid 5138] close(9) = -1 EBADF (Bad file descriptor) [pid 5138] close(10) = -1 EBADF (Bad file descriptor) [pid 5138] close(11) = -1 EBADF (Bad file descriptor) [pid 5138] close(12) = -1 EBADF (Bad file descriptor) [pid 5138] close(13) = -1 EBADF (Bad file descriptor) [pid 5138] close(14) = -1 EBADF (Bad file descriptor) [pid 5138] close(15) = -1 EBADF (Bad file descriptor) [pid 5138] close(16) = -1 EBADF (Bad file descriptor) [pid 5138] close(17) = -1 EBADF (Bad file descriptor) [pid 5138] close(18) = -1 EBADF (Bad file descriptor) [pid 5138] close(19) = -1 EBADF (Bad file descriptor) [pid 5138] close(20) = -1 EBADF (Bad file descriptor) [pid 5138] close(21) = -1 EBADF (Bad file descriptor) [pid 5138] close(22) = -1 EBADF (Bad file descriptor) [pid 5138] close(23) = -1 EBADF (Bad file descriptor) [pid 5138] close(24) = -1 EBADF (Bad file descriptor) [pid 5138] close(25) = -1 EBADF (Bad file descriptor) [pid 5138] close(26) = -1 EBADF (Bad file descriptor) [pid 5138] close(27) = -1 EBADF (Bad file descriptor) [pid 5138] close(28) = -1 EBADF (Bad file descriptor) [pid 5138] close(29) = -1 EBADF (Bad file descriptor) [pid 5138] exit_group(0 [pid 5139] <... futex resumed>) = ? [pid 5138] <... exit_group resumed>) = ? [pid 5142] <... futex resumed>) = ? [pid 5139] +++ exited with 0 +++ [pid 5142] +++ exited with 0 +++ [pid 5138] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=50, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5046] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./16/binderfs") = 0 [ 96.111444][ T5142] EXT4-fs (loop0): Free/Dirty block details [ 96.117852][ T5142] EXT4-fs (loop0): free_blocks=2415919104 [ 96.123772][ T5142] EXT4-fs (loop0): dirty_blocks=48 [ 96.128980][ T5142] EXT4-fs (loop0): Block reservation details [ 96.134991][ T5142] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 96.143247][ T5139] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 36 with max blocks 1 with error 28 [pid 5046] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./16/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./16/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./16") = 0 [pid 5046] mkdir("./17", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5143 attached , child_tidptr=0x555555a9c690) = 53 [pid 5143] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5143] chdir("./17") = 0 [pid 5143] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5143] setpgid(0, 0) = 0 [pid 5143] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5143] write(3, "1000", 4) = 4 [pid 5143] close(3) = 0 [pid 5143] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5143] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5143] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5143] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5143] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5143] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5143] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5143] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5143] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5144 attached [pid 5144] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5144] set_robust_list(0x7efc0265e9a0, 24 [pid 5143] <... clone3 resumed> => {parent_tid=[54]}, 88) = 54 [pid 5144] <... set_robust_list resumed>) = 0 [pid 5143] rt_sigprocmask(SIG_SETMASK, [], [pid 5144] rt_sigprocmask(SIG_SETMASK, [], [pid 5143] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5143] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5144] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5143] <... futex resumed>) = 0 [pid 5144] memfd_create("syzkaller", 0 [pid 5143] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5144] <... memfd_create resumed>) = 3 [pid 5144] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5144] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5144] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5144] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5144] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5144] close(3) = 0 [pid 5144] mkdir("./file0", 0777) = 0 [pid 5144] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5144] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5144] chdir("./file0") = 0 [pid 5144] ioctl(4, LOOP_CLR_FD) = 0 [pid 5144] close(4) = 0 [pid 5144] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5143] <... futex resumed>) = 0 [pid 5144] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5143] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5144] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5143] <... futex resumed>) = 0 [pid 5144] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5143] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5144] <... open resumed>) = 4 [pid 5144] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5144] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5143] <... futex resumed>) = 0 [pid 5143] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5144] <... futex resumed>) = 0 [pid 5143] <... futex resumed>) = 1 [pid 5143] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5144] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5144] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5143] <... futex resumed>) = 0 [pid 5144] ftruncate(5, 33587195 [pid 5143] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5144] <... ftruncate resumed>) = 0 [pid 5143] <... futex resumed>) = 0 [pid 5144] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5143] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5144] <... futex resumed>) = 0 [pid 5143] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5143] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5144] sendfile(4, 5, NULL, 4 [pid 5143] <... futex resumed>) = 0 [pid 5144] <... sendfile resumed>) = 4 [pid 5144] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5143] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5144] <... futex resumed>) = 0 [pid 5144] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5143] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5143] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5144] <... futex resumed>) = 0 [pid 5143] <... futex resumed>) = 1 [pid 5144] sendfile(4, 5, NULL, 281474978811909 [pid 5143] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5143] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5143] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5143] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5143] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5147 attached => {parent_tid=[55]}, 88) = 55 [pid 5147] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5143] rt_sigprocmask(SIG_SETMASK, [], [pid 5147] <... rseq resumed>) = 0 [pid 5143] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5147] set_robust_list(0x7efbfa33d9a0, 24 [pid 5143] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5147] <... set_robust_list resumed>) = 0 [ 96.256561][ T5144] loop0: detected capacity change from 0 to 2048 [ 96.280989][ T5144] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5147] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5147] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5147] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5143] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5143] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5143] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5147] <... futex resumed>) = 1 [pid 5143] <... futex resumed>) = 0 [pid 5143] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=48000000} [ 96.349699][ T5147] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 96.365256][ T5147] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 66 with error 28 [ 96.365584][ T5144] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 66 with max blocks 1 with error 28 [ 96.378269][ T5147] EXT4-fs (loop0): This should not happen!! Data will be lost [ 96.378269][ T5147] [pid 5147] prlimit64(0, RLIMIT_CPU, NULL, [pid 5143] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5147] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5147] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5147] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5144] <... sendfile resumed>) = 135168 [pid 5144] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5143] close(3) = 0 [pid 5143] close(4 [pid 5144] <... futex resumed>) = 0 [pid 5143] <... close resumed>) = 0 [pid 5143] close(5) = 0 [pid 5144] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5143] close(6) = -1 EBADF (Bad file descriptor) [pid 5143] close(7) = -1 EBADF (Bad file descriptor) [pid 5143] close(8) = -1 EBADF (Bad file descriptor) [pid 5143] close(9) = -1 EBADF (Bad file descriptor) [pid 5143] close(10) = -1 EBADF (Bad file descriptor) [pid 5143] close(11) = -1 EBADF (Bad file descriptor) [pid 5143] close(12) = -1 EBADF (Bad file descriptor) [pid 5143] close(13) = -1 EBADF (Bad file descriptor) [pid 5143] close(14) = -1 EBADF (Bad file descriptor) [pid 5143] close(15) = -1 EBADF (Bad file descriptor) [pid 5143] close(16) = -1 EBADF (Bad file descriptor) [pid 5143] close(17) = -1 EBADF (Bad file descriptor) [pid 5143] close(18) = -1 EBADF (Bad file descriptor) [pid 5143] close(19) = -1 EBADF (Bad file descriptor) [pid 5143] close(20) = -1 EBADF (Bad file descriptor) [pid 5143] close(21) = -1 EBADF (Bad file descriptor) [pid 5143] close(22) = -1 EBADF (Bad file descriptor) [pid 5143] close(23) = -1 EBADF (Bad file descriptor) [pid 5143] close(24) = -1 EBADF (Bad file descriptor) [pid 5143] close(25) = -1 EBADF (Bad file descriptor) [pid 5143] close(26) = -1 EBADF (Bad file descriptor) [pid 5143] close(27) = -1 EBADF (Bad file descriptor) [pid 5143] close(28) = -1 EBADF (Bad file descriptor) [pid 5143] close(29) = -1 EBADF (Bad file descriptor) [pid 5143] exit_group(0 [pid 5144] <... futex resumed>) = ? [pid 5147] <... futex resumed>) = ? [pid 5143] <... exit_group resumed>) = ? [pid 5147] +++ exited with 0 +++ [pid 5144] +++ exited with 0 +++ [pid 5143] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=53, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 96.378293][ T5147] EXT4-fs (loop0): Total free blocks count 0 [ 96.406235][ T5147] EXT4-fs (loop0): Free/Dirty block details [ 96.412479][ T5147] EXT4-fs (loop0): free_blocks=2415919104 [ 96.419370][ T5144] EXT4-fs (loop0): This should not happen!! Data will be lost [ 96.419370][ T5144] [ 96.419371][ T5147] EXT4-fs (loop0): dirty_blocks=80 [ 96.419397][ T5144] EXT4-fs (loop0): Total free blocks count 0 [pid 5046] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./17/binderfs") = 0 [pid 5046] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./17/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./17/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./17") = 0 [pid 5046] mkdir("./18", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5148 attached , child_tidptr=0x555555a9c690) = 56 [pid 5148] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5148] chdir("./18") = 0 [pid 5148] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5148] setpgid(0, 0) = 0 [pid 5148] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5148] write(3, "1000", 4) = 4 [pid 5148] close(3) = 0 [pid 5148] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5148] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5148] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5148] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5148] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5148] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5148] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5148] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5148] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5149 attached => {parent_tid=[57]}, 88) = 57 [pid 5149] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053 [pid 5148] rt_sigprocmask(SIG_SETMASK, [], [pid 5149] <... rseq resumed>) = 0 [pid 5148] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5149] set_robust_list(0x7efc0265e9a0, 24 [pid 5148] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5149] <... set_robust_list resumed>) = 0 [pid 5149] rt_sigprocmask(SIG_SETMASK, [], [pid 5148] <... futex resumed>) = 0 [pid 5149] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5148] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5149] memfd_create("syzkaller", 0) = 3 [pid 5149] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5149] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5149] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5149] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5149] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5149] close(3) = 0 [pid 5149] mkdir("./file0", 0777) = 0 [pid 5149] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5149] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5149] chdir("./file0") = 0 [pid 5149] ioctl(4, LOOP_CLR_FD) = 0 [pid 5149] close(4) = 0 [pid 5149] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5148] <... futex resumed>) = 0 [pid 5148] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5148] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5149] <... futex resumed>) = 1 [pid 5149] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5149] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5148] <... futex resumed>) = 0 [pid 5149] <... futex resumed>) = 1 [pid 5148] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5149] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5148] <... futex resumed>) = 0 [pid 5149] <... open resumed>) = 5 [pid 5148] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5149] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5148] <... futex resumed>) = 0 [pid 5148] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5148] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5149] <... futex resumed>) = 1 [pid 5149] ftruncate(5, 33587195) = 0 [pid 5149] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5148] <... futex resumed>) = 0 [pid 5148] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5148] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5149] <... futex resumed>) = 1 [pid 5149] sendfile(4, 5, NULL, 4) = 4 [pid 5149] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5148] <... futex resumed>) = 0 [pid 5148] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5148] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5148] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5148] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5148] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5148] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5152 attached [pid 5152] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5148] <... clone3 resumed> => {parent_tid=[58]}, 88) = 58 [pid 5152] <... rseq resumed>) = 0 [pid 5148] rt_sigprocmask(SIG_SETMASK, [], [pid 5152] set_robust_list(0x7efbfa33d9a0, 24 [pid 5148] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5152] <... set_robust_list resumed>) = 0 [pid 5148] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5152] rt_sigprocmask(SIG_SETMASK, [], [pid 5148] <... futex resumed>) = 0 [pid 5152] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5148] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5152] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000 [pid 5149] <... futex resumed>) = 1 [pid 5149] sendfile(4, 5, NULL, 281474978811909 [pid 5152] <... mmap resumed>) = 0x20000000 [pid 5152] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5148] <... futex resumed>) = 0 [pid 5152] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5148] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5152] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5148] <... futex resumed>) = 0 [pid 5152] prlimit64(0, RLIMIT_CPU, NULL, [ 96.580464][ T5149] loop0: detected capacity change from 0 to 2048 [ 96.601917][ T5149] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.661264][ T5152] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 96.676930][ T5152] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 11 with error 28 [ 96.689372][ T5152] EXT4-fs (loop0): This should not happen!! Data will be lost [ 96.689372][ T5152] [ 96.699164][ T5152] EXT4-fs (loop0): Total free blocks count 0 [ 96.705168][ T5152] EXT4-fs (loop0): Free/Dirty block details [pid 5148] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5152] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5152] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5152] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5149] <... sendfile resumed>) = 24576 [pid 5149] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5149] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5148] close(3) = 0 [pid 5148] close(4) = 0 [pid 5148] close(5) = 0 [pid 5148] close(6) = -1 EBADF (Bad file descriptor) [pid 5148] close(7) = -1 EBADF (Bad file descriptor) [pid 5148] close(8) = -1 EBADF (Bad file descriptor) [pid 5148] close(9) = -1 EBADF (Bad file descriptor) [pid 5148] close(10) = -1 EBADF (Bad file descriptor) [pid 5148] close(11) = -1 EBADF (Bad file descriptor) [pid 5148] close(12) = -1 EBADF (Bad file descriptor) [pid 5148] close(13) = -1 EBADF (Bad file descriptor) [pid 5148] close(14) = -1 EBADF (Bad file descriptor) [pid 5148] close(15) = -1 EBADF (Bad file descriptor) [pid 5148] close(16) = -1 EBADF (Bad file descriptor) [pid 5148] close(17) = -1 EBADF (Bad file descriptor) [pid 5148] close(18) = -1 EBADF (Bad file descriptor) [pid 5148] close(19) = -1 EBADF (Bad file descriptor) [pid 5148] close(20) = -1 EBADF (Bad file descriptor) [pid 5148] close(21) = -1 EBADF (Bad file descriptor) [pid 5148] close(22) = -1 EBADF (Bad file descriptor) [pid 5148] close(23) = -1 EBADF (Bad file descriptor) [pid 5148] close(24) = -1 EBADF (Bad file descriptor) [pid 5148] close(25) = -1 EBADF (Bad file descriptor) [pid 5148] close(26) = -1 EBADF (Bad file descriptor) [pid 5148] close(27) = -1 EBADF (Bad file descriptor) [pid 5148] close(28) = -1 EBADF (Bad file descriptor) [pid 5148] close(29) = -1 EBADF (Bad file descriptor) [pid 5148] exit_group(0) = ? [pid 5152] <... futex resumed>) = ? [pid 5149] <... futex resumed>) = ? [pid 5152] +++ exited with 0 +++ [pid 5149] +++ exited with 0 +++ [pid 5148] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=56, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5046] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./18/binderfs") = 0 [pid 5046] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./18/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 96.711204][ T5152] EXT4-fs (loop0): free_blocks=2415919104 [ 96.717272][ T5152] EXT4-fs (loop0): dirty_blocks=16 [ 96.722416][ T5152] EXT4-fs (loop0): Block reservation details [ 96.728754][ T5152] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 96.736011][ T5149] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 12 with max blocks 1 with error 28 [pid 5046] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./18/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./18") = 0 [pid 5046] mkdir("./19", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5153 attached , child_tidptr=0x555555a9c690) = 59 [pid 5153] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5153] chdir("./19") = 0 [pid 5153] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5153] setpgid(0, 0) = 0 [pid 5153] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5153] write(3, "1000", 4) = 4 [pid 5153] close(3) = 0 [pid 5153] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5153] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5153] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5153] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5153] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5153] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5153] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5153] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5153] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5154 attached => {parent_tid=[60]}, 88) = 60 [pid 5153] rt_sigprocmask(SIG_SETMASK, [], [pid 5154] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5153] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5154] set_robust_list(0x7efc0265e9a0, 24 [pid 5153] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5154] <... set_robust_list resumed>) = 0 [pid 5153] <... futex resumed>) = 0 [pid 5154] rt_sigprocmask(SIG_SETMASK, [], [pid 5153] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5154] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5154] memfd_create("syzkaller", 0) = 3 [pid 5154] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5154] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5154] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5154] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5154] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5154] close(3) = 0 [pid 5154] mkdir("./file0", 0777) = 0 [pid 5154] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5154] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5154] chdir("./file0") = 0 [pid 5154] ioctl(4, LOOP_CLR_FD) = 0 [pid 5154] close(4) = 0 [pid 5154] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5153] <... futex resumed>) = 0 [pid 5154] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5153] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5154] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5154] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5153] <... futex resumed>) = 0 [pid 5153] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5154] <... open resumed>) = 4 [pid 5154] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5153] <... futex resumed>) = 0 [pid 5153] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5154] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5153] <... futex resumed>) = 0 [pid 5154] <... open resumed>) = 5 [pid 5153] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5154] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5153] <... futex resumed>) = 0 [pid 5153] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5154] <... futex resumed>) = 1 [pid 5153] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5154] ftruncate(5, 33587195) = 0 [pid 5154] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5154] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5153] <... futex resumed>) = 0 [pid 5154] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5153] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5154] sendfile(4, 5, NULL, 4 [pid 5153] <... futex resumed>) = 0 [pid 5154] <... sendfile resumed>) = 4 [pid 5153] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5154] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5153] <... futex resumed>) = 0 [pid 5153] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5153] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5154] <... futex resumed>) = 1 [pid 5153] <... futex resumed>) = 0 [pid 5154] sendfile(4, 5, NULL, 281474978811909 [pid 5153] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5153] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5153] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5153] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0} => {parent_tid=[61]}, 88) = 61 [pid 5153] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5153] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5153] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5157 attached [pid 5157] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5157] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5157] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5157] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5157] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5153] <... futex resumed>) = 0 [pid 5157] <... futex resumed>) = 1 [pid 5153] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5157] prlimit64(0, RLIMIT_CPU, NULL, [pid 5153] <... futex resumed>) = 0 [ 96.864747][ T5154] loop0: detected capacity change from 0 to 2048 [ 96.891208][ T5154] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5153] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 96.945787][ T5154] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 96.962513][ T5154] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 70 with max blocks 1 with error 28 [ 96.975735][ T5154] EXT4-fs (loop0): This should not happen!! Data will be lost [ 96.975735][ T5154] [ 96.985788][ T5154] EXT4-fs (loop0): Total free blocks count 0 [pid 5154] <... sendfile resumed>) = 143360 [pid 5154] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5154] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5157] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5157] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5157] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5153] close(3) = 0 [pid 5153] close(4) = 0 [pid 5153] close(5) = 0 [pid 5153] close(6) = -1 EBADF (Bad file descriptor) [pid 5153] close(7) = -1 EBADF (Bad file descriptor) [pid 5153] close(8) = -1 EBADF (Bad file descriptor) [pid 5153] close(9) = -1 EBADF (Bad file descriptor) [pid 5153] close(10) = -1 EBADF (Bad file descriptor) [pid 5153] close(11) = -1 EBADF (Bad file descriptor) [pid 5153] close(12) = -1 EBADF (Bad file descriptor) [pid 5153] close(13) = -1 EBADF (Bad file descriptor) [pid 5153] close(14) = -1 EBADF (Bad file descriptor) [pid 5153] close(15) = -1 EBADF (Bad file descriptor) [pid 5153] close(16) = -1 EBADF (Bad file descriptor) [pid 5153] close(17) = -1 EBADF (Bad file descriptor) [pid 5153] close(18) = -1 EBADF (Bad file descriptor) [pid 5153] close(19) = -1 EBADF (Bad file descriptor) [pid 5153] close(20) = -1 EBADF (Bad file descriptor) [pid 5153] close(21) = -1 EBADF (Bad file descriptor) [pid 5153] close(22) = -1 EBADF (Bad file descriptor) [pid 5153] close(23) = -1 EBADF (Bad file descriptor) [pid 5153] close(24) = -1 EBADF (Bad file descriptor) [pid 5153] close(25) = -1 EBADF (Bad file descriptor) [pid 5153] close(26) = -1 EBADF (Bad file descriptor) [pid 5153] close(27) = -1 EBADF (Bad file descriptor) [pid 5153] close(28) = -1 EBADF (Bad file descriptor) [pid 5153] close(29) = -1 EBADF (Bad file descriptor) [pid 5153] exit_group(0 [pid 5157] <... futex resumed>) = ? [pid 5154] <... futex resumed>) = ? [pid 5153] <... exit_group resumed>) = ? [pid 5157] +++ exited with 0 +++ [pid 5154] +++ exited with 0 +++ [pid 5153] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=59, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./19/binderfs") = 0 [ 96.992791][ T5154] EXT4-fs (loop0): Free/Dirty block details [ 96.998959][ T5154] EXT4-fs (loop0): free_blocks=2415919104 [ 97.005120][ T5154] EXT4-fs (loop0): dirty_blocks=80 [ 97.010964][ T5154] EXT4-fs (loop0): Block reservation details [ 97.019130][ T5154] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 97.025739][ T5157] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 70 with error 28 [pid 5046] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./19/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./19/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./19") = 0 [pid 5046] mkdir("./20", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5158 attached , child_tidptr=0x555555a9c690) = 62 [pid 5158] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5158] chdir("./20") = 0 [pid 5158] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5158] setpgid(0, 0) = 0 [pid 5158] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5158] write(3, "1000", 4) = 4 [pid 5158] close(3) = 0 [pid 5158] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5158] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5158] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5158] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5158] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5158] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5158] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5158] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5158] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0} => {parent_tid=[63]}, 88) = 63 [pid 5158] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 5159 attached [pid 5159] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053 [pid 5158] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5159] <... rseq resumed>) = 0 [pid 5159] set_robust_list(0x7efc0265e9a0, 24 [pid 5158] <... futex resumed>) = 0 [pid 5159] <... set_robust_list resumed>) = 0 [pid 5159] rt_sigprocmask(SIG_SETMASK, [], [pid 5158] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5159] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5159] memfd_create("syzkaller", 0) = 3 [pid 5159] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5159] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5159] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5159] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5159] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5159] close(3) = 0 [pid 5159] mkdir("./file0", 0777) = 0 [pid 5159] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5159] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5159] chdir("./file0") = 0 [pid 5159] ioctl(4, LOOP_CLR_FD) = 0 [pid 5159] close(4) = 0 [pid 5159] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5159] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5158] <... futex resumed>) = 0 [pid 5158] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5159] <... futex resumed>) = 0 [pid 5159] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5158] <... futex resumed>) = 1 [pid 5159] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5159] <... futex resumed>) = 0 [pid 5159] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5158] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5158] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5159] <... futex resumed>) = 0 [pid 5158] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5159] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5159] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5158] <... futex resumed>) = 0 [pid 5158] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5158] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5159] ftruncate(5, 33587195) = 0 [pid 5159] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5158] <... futex resumed>) = 0 [pid 5158] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5159] sendfile(4, 5, NULL, 4 [pid 5158] <... futex resumed>) = 0 [pid 5158] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5159] <... sendfile resumed>) = 4 [pid 5159] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5159] <... futex resumed>) = 0 [pid 5158] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5159] sendfile(4, 5, NULL, 281474978811909 [pid 5158] <... futex resumed>) = 0 [pid 5158] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5158] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5158] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5158] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5158] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5162 attached [pid 5162] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5162] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5162] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5162] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5158] <... clone3 resumed> => {parent_tid=[64]}, 88) = 64 [pid 5158] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5158] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5162] <... futex resumed>) = 0 [pid 5158] <... futex resumed>) = 1 [pid 5162] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000 [pid 5158] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5162] <... mmap resumed>) = 0x20000000 [pid 5162] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5162] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5158] <... futex resumed>) = 0 [pid 5158] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5162] <... futex resumed>) = 0 [ 97.155124][ T5159] loop0: detected capacity change from 0 to 2048 [ 97.170937][ T5159] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5162] prlimit64(0, RLIMIT_CPU, NULL, [ 97.233396][ T5162] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 97.250309][ T5162] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 49 with error 28 [ 97.262838][ T5162] EXT4-fs (loop0): This should not happen!! Data will be lost [ 97.262838][ T5162] [ 97.272647][ T5162] EXT4-fs (loop0): Total free blocks count 0 [pid 5158] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5162] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5162] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5162] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5159] <... sendfile resumed>) = 102400 [pid 5159] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5159] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5158] close(3) = 0 [pid 5158] close(4) = 0 [pid 5158] close(5) = 0 [pid 5158] close(6) = -1 EBADF (Bad file descriptor) [pid 5158] close(7) = -1 EBADF (Bad file descriptor) [pid 5158] close(8) = -1 EBADF (Bad file descriptor) [pid 5158] close(9) = -1 EBADF (Bad file descriptor) [pid 5158] close(10) = -1 EBADF (Bad file descriptor) [pid 5158] close(11) = -1 EBADF (Bad file descriptor) [pid 5158] close(12) = -1 EBADF (Bad file descriptor) [pid 5158] close(13) = -1 EBADF (Bad file descriptor) [pid 5158] close(14) = -1 EBADF (Bad file descriptor) [pid 5158] close(15) = -1 EBADF (Bad file descriptor) [pid 5158] close(16) = -1 EBADF (Bad file descriptor) [pid 5158] close(17) = -1 EBADF (Bad file descriptor) [pid 5158] close(18) = -1 EBADF (Bad file descriptor) [pid 5158] close(19) = -1 EBADF (Bad file descriptor) [pid 5158] close(20) = -1 EBADF (Bad file descriptor) [pid 5158] close(21) = -1 EBADF (Bad file descriptor) [pid 5158] close(22) = -1 EBADF (Bad file descriptor) [pid 5158] close(23) = -1 EBADF (Bad file descriptor) [pid 5158] close(24) = -1 EBADF (Bad file descriptor) [pid 5158] close(25) = -1 EBADF (Bad file descriptor) [pid 5158] close(26) = -1 EBADF (Bad file descriptor) [pid 5158] close(27) = -1 EBADF (Bad file descriptor) [pid 5158] close(28) = -1 EBADF (Bad file descriptor) [pid 5158] close(29) = -1 EBADF (Bad file descriptor) [pid 5158] exit_group(0) = ? [pid 5162] <... futex resumed>) = ? [pid 5159] <... futex resumed>) = ? [pid 5162] +++ exited with 0 +++ [pid 5159] +++ exited with 0 +++ [pid 5158] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=62, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5046] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./20/binderfs") = 0 [ 97.278718][ T5162] EXT4-fs (loop0): Free/Dirty block details [ 97.284676][ T5162] EXT4-fs (loop0): free_blocks=2415919104 [ 97.290536][ T5162] EXT4-fs (loop0): dirty_blocks=64 [ 97.295664][ T5162] EXT4-fs (loop0): Block reservation details [ 97.301951][ T5162] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 97.310867][ T5159] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 50 with max blocks 1 with error 28 [pid 5046] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./20/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./20/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./20") = 0 [pid 5046] mkdir("./21", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5163 attached [pid 5163] set_robust_list(0x555555a9c6a0, 24 [pid 5046] <... clone resumed>, child_tidptr=0x555555a9c690) = 65 [pid 5163] <... set_robust_list resumed>) = 0 [pid 5163] chdir("./21") = 0 [pid 5163] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5163] setpgid(0, 0) = 0 [pid 5163] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5163] write(3, "1000", 4) = 4 [pid 5163] close(3) = 0 [pid 5163] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5163] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5163] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5163] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5163] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5163] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5163] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5163] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5163] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5164 attached => {parent_tid=[66]}, 88) = 66 [pid 5164] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053 [pid 5163] rt_sigprocmask(SIG_SETMASK, [], [pid 5164] <... rseq resumed>) = 0 [pid 5163] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5164] set_robust_list(0x7efc0265e9a0, 24 [pid 5163] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5164] <... set_robust_list resumed>) = 0 [pid 5163] <... futex resumed>) = 0 [pid 5164] rt_sigprocmask(SIG_SETMASK, [], [pid 5163] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5164] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5164] memfd_create("syzkaller", 0) = 3 [pid 5164] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5164] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5164] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5164] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5164] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5164] close(3) = 0 [pid 5164] mkdir("./file0", 0777) = 0 [pid 5164] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5164] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5164] chdir("./file0") = 0 [pid 5164] ioctl(4, LOOP_CLR_FD) = 0 [pid 5164] close(4) = 0 [pid 5164] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5163] <... futex resumed>) = 0 [pid 5164] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5163] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5164] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5163] <... futex resumed>) = 0 [pid 5164] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5163] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5164] <... open resumed>) = 4 [pid 5164] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5163] <... futex resumed>) = 0 [pid 5164] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5163] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5164] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5163] <... futex resumed>) = 0 [pid 5164] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5163] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5164] <... open resumed>) = 5 [pid 5164] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5163] <... futex resumed>) = 0 [pid 5164] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5163] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5164] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5163] <... futex resumed>) = 0 [pid 5164] ftruncate(5, 33587195 [pid 5163] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5164] <... ftruncate resumed>) = 0 [pid 5164] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5163] <... futex resumed>) = 0 [pid 5164] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5163] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5164] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5163] <... futex resumed>) = 0 [pid 5164] sendfile(4, 5, NULL, 4 [pid 5163] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5164] <... sendfile resumed>) = 4 [pid 5164] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5163] <... futex resumed>) = 0 [pid 5164] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5163] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5164] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5163] <... futex resumed>) = 0 [pid 5164] sendfile(4, 5, NULL, 281474978811909 [pid 5163] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5163] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5163] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5163] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5163] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5167 attached [pid 5167] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5163] <... clone3 resumed> => {parent_tid=[67]}, 88) = 67 [pid 5167] <... rseq resumed>) = 0 [pid 5167] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5163] rt_sigprocmask(SIG_SETMASK, [], [pid 5167] rt_sigprocmask(SIG_SETMASK, [], [pid 5163] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5167] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5163] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5167] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000 [pid 5163] <... futex resumed>) = 0 [pid 5167] <... mmap resumed>) = 0x20000000 [pid 5163] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5167] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5167] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5163] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5163] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5167] <... futex resumed>) = 0 [pid 5163] <... futex resumed>) = 1 [pid 5163] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 97.442787][ T5164] loop0: detected capacity change from 0 to 2048 [ 97.461185][ T5164] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.508669][ T5167] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 97.531916][ T5167] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 7 with error 28 [ 97.545455][ T5167] EXT4-fs (loop0): This should not happen!! Data will be lost [ 97.545455][ T5167] [pid 5167] prlimit64(0, RLIMIT_CPU, NULL, [pid 5163] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5167] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5167] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5164] <... sendfile resumed>) = 16384 [pid 5167] <... futex resumed>) = 0 [pid 5164] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5167] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5164] <... futex resumed>) = 0 [pid 5164] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5163] close(3) = 0 [pid 5163] close(4) = 0 [pid 5163] close(5) = 0 [pid 5163] close(6) = -1 EBADF (Bad file descriptor) [pid 5163] close(7) = -1 EBADF (Bad file descriptor) [pid 5163] close(8) = -1 EBADF (Bad file descriptor) [pid 5163] close(9) = -1 EBADF (Bad file descriptor) [pid 5163] close(10) = -1 EBADF (Bad file descriptor) [pid 5163] close(11) = -1 EBADF (Bad file descriptor) [pid 5163] close(12) = -1 EBADF (Bad file descriptor) [pid 5163] close(13) = -1 EBADF (Bad file descriptor) [pid 5163] close(14) = -1 EBADF (Bad file descriptor) [pid 5163] close(15) = -1 EBADF (Bad file descriptor) [pid 5163] close(16) = -1 EBADF (Bad file descriptor) [pid 5163] close(17) = -1 EBADF (Bad file descriptor) [pid 5163] close(18) = -1 EBADF (Bad file descriptor) [pid 5163] close(19) = -1 EBADF (Bad file descriptor) [pid 5163] close(20) = -1 EBADF (Bad file descriptor) [pid 5163] close(21) = -1 EBADF (Bad file descriptor) [pid 5163] close(22) = -1 EBADF (Bad file descriptor) [pid 5163] close(23) = -1 EBADF (Bad file descriptor) [pid 5163] close(24) = -1 EBADF (Bad file descriptor) [pid 5163] close(25) = -1 EBADF (Bad file descriptor) [pid 5163] close(26) = -1 EBADF (Bad file descriptor) [pid 5163] close(27) = -1 EBADF (Bad file descriptor) [pid 5163] close(28) = -1 EBADF (Bad file descriptor) [pid 5163] close(29) = -1 EBADF (Bad file descriptor) [pid 5163] exit_group(0 [pid 5167] <... futex resumed>) = ? [pid 5164] <... futex resumed>) = ? [pid 5163] <... exit_group resumed>) = ? [pid 5167] +++ exited with 0 +++ [pid 5164] +++ exited with 0 +++ [pid 5163] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=65, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./21/binderfs") = 0 [ 97.556098][ T5167] EXT4-fs (loop0): Total free blocks count 0 [ 97.563604][ T5167] EXT4-fs (loop0): Free/Dirty block details [ 97.569899][ T5167] EXT4-fs (loop0): free_blocks=2415919104 [ 97.575678][ T5167] EXT4-fs (loop0): dirty_blocks=16 [ 97.582943][ T5167] EXT4-fs (loop0): Block reservation details [ 97.589007][ T5167] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 97.596093][ T5164] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 1 with error 28 [pid 5046] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./21/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./21/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./21") = 0 [pid 5046] mkdir("./22", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5168 attached , child_tidptr=0x555555a9c690) = 68 [pid 5168] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5168] chdir("./22") = 0 [pid 5168] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5168] setpgid(0, 0) = 0 [pid 5168] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5168] write(3, "1000", 4) = 4 [pid 5168] close(3) = 0 [pid 5168] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5168] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5168] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5168] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5168] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5168] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5168] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5168] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5168] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5169 attached => {parent_tid=[69]}, 88) = 69 [pid 5168] rt_sigprocmask(SIG_SETMASK, [], [pid 5169] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5169] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5169] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5169] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5168] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5168] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5169] <... futex resumed>) = 0 [pid 5168] <... futex resumed>) = 1 [pid 5169] memfd_create("syzkaller", 0) = 3 [pid 5169] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5168] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5169] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5169] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5169] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5169] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5169] close(3) = 0 [pid 5169] mkdir("./file0", 0777) = 0 [pid 5169] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5169] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5169] chdir("./file0") = 0 [pid 5169] ioctl(4, LOOP_CLR_FD) = 0 [pid 5169] close(4) = 0 [pid 5169] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5168] <... futex resumed>) = 0 [pid 5168] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5168] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5169] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5169] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5168] <... futex resumed>) = 0 [pid 5168] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5169] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5168] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5169] <... open resumed>) = 5 [pid 5169] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5168] <... futex resumed>) = 0 [pid 5169] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5168] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5169] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5168] <... futex resumed>) = 0 [pid 5168] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5169] ftruncate(5, 33587195) = 0 [pid 5169] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5168] <... futex resumed>) = 0 [pid 5169] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5168] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5169] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5168] <... futex resumed>) = 0 [pid 5169] sendfile(4, 5, NULL, 4 [pid 5168] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5169] <... sendfile resumed>) = 4 [pid 5169] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5168] <... futex resumed>) = 0 [pid 5169] sendfile(4, 5, NULL, 281474978811909 [pid 5168] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5168] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5168] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5168] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5168] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5168] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5172 attached [pid 5172] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5168] <... clone3 resumed> => {parent_tid=[70]}, 88) = 70 [pid 5172] <... rseq resumed>) = 0 [pid 5168] rt_sigprocmask(SIG_SETMASK, [], [pid 5172] set_robust_list(0x7efbfa33d9a0, 24 [pid 5168] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5172] <... set_robust_list resumed>) = 0 [pid 5168] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5172] rt_sigprocmask(SIG_SETMASK, [], [pid 5168] <... futex resumed>) = 0 [pid 5172] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5168] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5172] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5172] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5168] <... futex resumed>) = 0 [pid 5168] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5168] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5172] <... futex resumed>) = 1 [ 97.745851][ T5169] loop0: detected capacity change from 0 to 2048 [ 97.771821][ T5169] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5172] prlimit64(0, RLIMIT_CPU, NULL, [pid 5168] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 97.825531][ T5172] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 97.841234][ T5172] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 7 with error 28 [ 97.853929][ T5172] EXT4-fs (loop0): This should not happen!! Data will be lost [ 97.853929][ T5172] [ 97.863744][ T5172] EXT4-fs (loop0): Total free blocks count 0 [ 97.869771][ T5172] EXT4-fs (loop0): Free/Dirty block details [pid 5172] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5172] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5172] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5169] <... sendfile resumed>) = 16384 [pid 5169] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5168] close(3 [pid 5169] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5168] <... close resumed>) = 0 [pid 5168] close(4) = 0 [pid 5168] close(5) = 0 [pid 5168] close(6) = -1 EBADF (Bad file descriptor) [pid 5168] close(7) = -1 EBADF (Bad file descriptor) [pid 5168] close(8) = -1 EBADF (Bad file descriptor) [pid 5168] close(9) = -1 EBADF (Bad file descriptor) [pid 5168] close(10) = -1 EBADF (Bad file descriptor) [pid 5168] close(11) = -1 EBADF (Bad file descriptor) [pid 5168] close(12) = -1 EBADF (Bad file descriptor) [pid 5168] close(13) = -1 EBADF (Bad file descriptor) [pid 5168] close(14) = -1 EBADF (Bad file descriptor) [pid 5168] close(15) = -1 EBADF (Bad file descriptor) [pid 5168] close(16) = -1 EBADF (Bad file descriptor) [pid 5168] close(17) = -1 EBADF (Bad file descriptor) [pid 5168] close(18) = -1 EBADF (Bad file descriptor) [pid 5168] close(19) = -1 EBADF (Bad file descriptor) [pid 5168] close(20) = -1 EBADF (Bad file descriptor) [pid 5168] close(21) = -1 EBADF (Bad file descriptor) [pid 5168] close(22) = -1 EBADF (Bad file descriptor) [pid 5168] close(23) = -1 EBADF (Bad file descriptor) [pid 5168] close(24) = -1 EBADF (Bad file descriptor) [pid 5168] close(25) = -1 EBADF (Bad file descriptor) [pid 5168] close(26) = -1 EBADF (Bad file descriptor) [pid 5168] close(27) = -1 EBADF (Bad file descriptor) [pid 5168] close(28) = -1 EBADF (Bad file descriptor) [pid 5168] close(29) = -1 EBADF (Bad file descriptor) [pid 5168] exit_group(0 [pid 5169] <... futex resumed>) = ? [pid 5168] <... exit_group resumed>) = ? [pid 5172] <... futex resumed>) = ? [pid 5172] +++ exited with 0 +++ [pid 5169] +++ exited with 0 +++ [pid 5168] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=68, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5046] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./22/binderfs") = 0 [ 97.875749][ T5172] EXT4-fs (loop0): free_blocks=2415919104 [ 97.882066][ T5172] EXT4-fs (loop0): dirty_blocks=16 [ 97.887247][ T5172] EXT4-fs (loop0): Block reservation details [ 97.893263][ T5172] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 97.900825][ T5169] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 1 with error 28 [pid 5046] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./22/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./22/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./22") = 0 [pid 5046] mkdir("./23", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5173 attached , child_tidptr=0x555555a9c690) = 71 [pid 5173] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5173] chdir("./23") = 0 [pid 5173] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5173] setpgid(0, 0) = 0 [pid 5173] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5173] write(3, "1000", 4) = 4 [pid 5173] close(3) = 0 [pid 5173] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5173] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5173] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5173] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5173] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5173] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5173] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5173] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5173] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5174 attached => {parent_tid=[72]}, 88) = 72 [pid 5174] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5174] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5174] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5174] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5173] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5173] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5174] <... futex resumed>) = 0 [pid 5173] <... futex resumed>) = 1 [pid 5173] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5174] memfd_create("syzkaller", 0) = 3 [pid 5174] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5174] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5174] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5174] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5174] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5174] close(3) = 0 [pid 5174] mkdir("./file0", 0777) = 0 [pid 5174] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5174] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5174] chdir("./file0") = 0 [pid 5174] ioctl(4, LOOP_CLR_FD) = 0 [pid 5174] close(4) = 0 [pid 5174] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5173] <... futex resumed>) = 0 [pid 5174] <... futex resumed>) = 1 [pid 5173] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5174] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5173] <... futex resumed>) = 0 [pid 5173] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5174] <... open resumed>) = 4 [pid 5174] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5173] <... futex resumed>) = 0 [pid 5174] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5173] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5174] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5173] <... futex resumed>) = 0 [pid 5174] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5173] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5174] <... open resumed>) = 5 [pid 5174] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5173] <... futex resumed>) = 0 [pid 5174] <... futex resumed>) = 1 [pid 5173] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5174] ftruncate(5, 33587195 [pid 5173] <... futex resumed>) = 0 [pid 5174] <... ftruncate resumed>) = 0 [pid 5173] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5174] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5173] <... futex resumed>) = 0 [pid 5174] <... futex resumed>) = 1 [pid 5174] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5173] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5174] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5173] <... futex resumed>) = 0 [pid 5174] sendfile(4, 5, NULL, 4 [pid 5173] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5174] <... sendfile resumed>) = 4 [pid 5174] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5173] <... futex resumed>) = 0 [pid 5173] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5174] <... futex resumed>) = 1 [pid 5173] <... futex resumed>) = 0 [pid 5174] sendfile(4, 5, NULL, 281474978811909 [pid 5173] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5173] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5173] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5173] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5173] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5177 attached [pid 5177] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5173] <... clone3 resumed> => {parent_tid=[73]}, 88) = 73 [pid 5177] <... rseq resumed>) = 0 [pid 5173] rt_sigprocmask(SIG_SETMASK, [], [pid 5177] set_robust_list(0x7efbfa33d9a0, 24 [pid 5173] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5177] <... set_robust_list resumed>) = 0 [pid 5173] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5177] rt_sigprocmask(SIG_SETMASK, [], [pid 5173] <... futex resumed>) = 0 [pid 5177] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5173] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5177] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5177] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5173] <... futex resumed>) = 0 [pid 5177] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5173] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5177] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5173] <... futex resumed>) = 0 [pid 5177] prlimit64(0, RLIMIT_CPU, NULL, [ 98.023096][ T5174] loop0: detected capacity change from 0 to 2048 [ 98.050884][ T5174] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.086121][ T5177] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 98.102439][ T5177] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 15 with error 28 [ 98.116484][ T5177] EXT4-fs (loop0): This should not happen!! Data will be lost [ 98.116484][ T5177] [pid 5173] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5177] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5177] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5177] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5174] <... sendfile resumed>) = 32768 [pid 5174] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5174] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5173] close(3) = 0 [pid 5173] close(4) = 0 [pid 5173] close(5) = 0 [pid 5173] close(6) = -1 EBADF (Bad file descriptor) [pid 5173] close(7) = -1 EBADF (Bad file descriptor) [pid 5173] close(8) = -1 EBADF (Bad file descriptor) [pid 5173] close(9) = -1 EBADF (Bad file descriptor) [pid 5173] close(10) = -1 EBADF (Bad file descriptor) [pid 5173] close(11) = -1 EBADF (Bad file descriptor) [pid 5173] close(12) = -1 EBADF (Bad file descriptor) [pid 5173] close(13) = -1 EBADF (Bad file descriptor) [pid 5173] close(14) = -1 EBADF (Bad file descriptor) [pid 5173] close(15) = -1 EBADF (Bad file descriptor) [pid 5173] close(16) = -1 EBADF (Bad file descriptor) [pid 5173] close(17) = -1 EBADF (Bad file descriptor) [pid 5173] close(18) = -1 EBADF (Bad file descriptor) [pid 5173] close(19) = -1 EBADF (Bad file descriptor) [pid 5173] close(20) = -1 EBADF (Bad file descriptor) [pid 5173] close(21) = -1 EBADF (Bad file descriptor) [pid 5173] close(22) = -1 EBADF (Bad file descriptor) [pid 5173] close(23) = -1 EBADF (Bad file descriptor) [pid 5173] close(24) = -1 EBADF (Bad file descriptor) [pid 5173] close(25) = -1 EBADF (Bad file descriptor) [pid 5173] close(26) = -1 EBADF (Bad file descriptor) [pid 5173] close(27) = -1 EBADF (Bad file descriptor) [pid 5173] close(28) = -1 EBADF (Bad file descriptor) [pid 5173] close(29) = -1 EBADF (Bad file descriptor) [pid 5173] exit_group(0) = ? [pid 5177] <... futex resumed>) = ? [pid 5174] <... futex resumed>) = ? [pid 5177] +++ exited with 0 +++ [pid 5174] +++ exited with 0 +++ [pid 5173] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=71, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5046] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./23/binderfs") = 0 [ 98.130943][ T5177] EXT4-fs (loop0): Total free blocks count 0 [ 98.138091][ T5177] EXT4-fs (loop0): Free/Dirty block details [ 98.144395][ T5177] EXT4-fs (loop0): free_blocks=2415919104 [ 98.151336][ T5177] EXT4-fs (loop0): dirty_blocks=16 [ 98.157107][ T5177] EXT4-fs (loop0): Block reservation details [ 98.163118][ T5177] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 98.172029][ T5174] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 16 with max blocks 1 with error 28 [pid 5046] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./23/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./23/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./23") = 0 [pid 5046] mkdir("./24", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9c690) = 74 ./strace-static-x86_64: Process 5178 attached [pid 5178] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5178] chdir("./24") = 0 [pid 5178] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5178] setpgid(0, 0) = 0 [pid 5178] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5178] write(3, "1000", 4) = 4 [pid 5178] close(3) = 0 [pid 5178] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5178] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5178] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5178] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5178] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5178] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5178] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5178] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5178] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5179 attached [pid 5179] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5179] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5179] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5179] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5178] <... clone3 resumed> => {parent_tid=[75]}, 88) = 75 [pid 5178] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5178] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5179] <... futex resumed>) = 0 [pid 5178] <... futex resumed>) = 1 [pid 5179] memfd_create("syzkaller", 0 [pid 5178] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5179] <... memfd_create resumed>) = 3 [pid 5179] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5179] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5179] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5179] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5179] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5179] close(3) = 0 [pid 5179] mkdir("./file0", 0777) = 0 [pid 5179] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5179] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5179] chdir("./file0") = 0 [pid 5179] ioctl(4, LOOP_CLR_FD) = 0 [pid 5179] close(4) = 0 [pid 5179] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5178] <... futex resumed>) = 0 [pid 5179] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5178] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5179] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5178] <... futex resumed>) = 0 [pid 5179] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5178] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5179] <... open resumed>) = 4 [pid 5179] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5178] <... futex resumed>) = 0 [pid 5179] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5178] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5179] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5178] <... futex resumed>) = 0 [pid 5179] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5178] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5179] <... open resumed>) = 5 [pid 5179] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5178] <... futex resumed>) = 0 [pid 5179] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5178] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5179] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5178] <... futex resumed>) = 0 [pid 5179] ftruncate(5, 33587195 [pid 5178] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5179] <... ftruncate resumed>) = 0 [pid 5179] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5178] <... futex resumed>) = 0 [pid 5179] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5178] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5179] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5178] <... futex resumed>) = 0 [pid 5179] sendfile(4, 5, NULL, 4 [pid 5178] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5179] <... sendfile resumed>) = 4 [pid 5179] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] <... futex resumed>) = 0 [pid 5178] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5178] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5178] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5179] <... futex resumed>) = 1 [pid 5178] <... mmap resumed>) = 0x7efbfa31d000 [pid 5179] sendfile(4, 5, NULL, 281474978811909 [pid 5178] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5178] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5178] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0} => {parent_tid=[76]}, 88) = 76 [pid 5178] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5178] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5178] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5182 attached [pid 5182] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5182] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5182] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5182] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5182] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5182] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5178] <... futex resumed>) = 0 [pid 5178] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5182] <... futex resumed>) = 0 [pid 5182] prlimit64(0, RLIMIT_CPU, NULL, [ 98.316054][ T5179] loop0: detected capacity change from 0 to 2048 [ 98.331254][ T5179] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.393051][ T5182] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 98.409420][ T5182] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 39 with error 28 [ 98.421804][ T5182] EXT4-fs (loop0): This should not happen!! Data will be lost [ 98.421804][ T5182] [ 98.432369][ T5182] EXT4-fs (loop0): Total free blocks count 0 [pid 5178] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5182] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5182] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5179] <... sendfile resumed>) = 81920 [pid 5182] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5179] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5178] close(3 [pid 5179] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5178] <... close resumed>) = 0 [pid 5178] close(4) = 0 [pid 5178] close(5) = 0 [pid 5178] close(6) = -1 EBADF (Bad file descriptor) [pid 5178] close(7) = -1 EBADF (Bad file descriptor) [pid 5178] close(8) = -1 EBADF (Bad file descriptor) [pid 5178] close(9) = -1 EBADF (Bad file descriptor) [pid 5178] close(10) = -1 EBADF (Bad file descriptor) [pid 5178] close(11) = -1 EBADF (Bad file descriptor) [pid 5178] close(12) = -1 EBADF (Bad file descriptor) [pid 5178] close(13) = -1 EBADF (Bad file descriptor) [pid 5178] close(14) = -1 EBADF (Bad file descriptor) [pid 5178] close(15) = -1 EBADF (Bad file descriptor) [pid 5178] close(16) = -1 EBADF (Bad file descriptor) [pid 5178] close(17) = -1 EBADF (Bad file descriptor) [pid 5178] close(18) = -1 EBADF (Bad file descriptor) [pid 5178] close(19) = -1 EBADF (Bad file descriptor) [pid 5178] close(20) = -1 EBADF (Bad file descriptor) [pid 5178] close(21) = -1 EBADF (Bad file descriptor) [pid 5178] close(22) = -1 EBADF (Bad file descriptor) [pid 5178] close(23) = -1 EBADF (Bad file descriptor) [pid 5178] close(24) = -1 EBADF (Bad file descriptor) [pid 5178] close(25) = -1 EBADF (Bad file descriptor) [pid 5178] close(26) = -1 EBADF (Bad file descriptor) [pid 5178] close(27) = -1 EBADF (Bad file descriptor) [pid 5178] close(28) = -1 EBADF (Bad file descriptor) [pid 5178] close(29) = -1 EBADF (Bad file descriptor) [pid 5178] exit_group(0 [pid 5182] <... futex resumed>) = ? [pid 5182] +++ exited with 0 +++ [pid 5179] <... futex resumed>) = ? [pid 5179] +++ exited with 0 +++ [pid 5178] <... exit_group resumed>) = ? [pid 5178] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=74, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./24/binderfs") = 0 [ 98.439189][ T5182] EXT4-fs (loop0): Free/Dirty block details [ 98.445473][ T5182] EXT4-fs (loop0): free_blocks=2415919104 [ 98.451277][ T5182] EXT4-fs (loop0): dirty_blocks=48 [ 98.456416][ T5182] EXT4-fs (loop0): Block reservation details [ 98.464469][ T5182] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 98.472918][ T5179] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 40 with max blocks 1 with error 28 [pid 5046] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./24/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./24/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./24") = 0 [pid 5046] mkdir("./25", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9c690) = 77 ./strace-static-x86_64: Process 5183 attached [pid 5183] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5183] chdir("./25") = 0 [pid 5183] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5183] setpgid(0, 0) = 0 [pid 5183] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5183] write(3, "1000", 4) = 4 [pid 5183] close(3) = 0 [pid 5183] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5183] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5183] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5183] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5183] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5183] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5183] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5183] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5183] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0} => {parent_tid=[78]}, 88) = 78 ./strace-static-x86_64: Process 5184 attached [pid 5184] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5184] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5184] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5184] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5183] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5183] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5184] <... futex resumed>) = 0 [pid 5183] <... futex resumed>) = 1 [pid 5184] memfd_create("syzkaller", 0 [pid 5183] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5184] <... memfd_create resumed>) = 3 [pid 5184] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5184] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5184] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5184] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5184] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5184] close(3) = 0 [pid 5184] mkdir("./file0", 0777) = 0 [pid 5184] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5184] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5184] chdir("./file0") = 0 [pid 5184] ioctl(4, LOOP_CLR_FD) = 0 [pid 5184] close(4) = 0 [pid 5184] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5183] <... futex resumed>) = 0 [pid 5183] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5183] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5184] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5184] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5183] <... futex resumed>) = 0 [pid 5183] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5183] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5184] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5184] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5184] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5183] <... futex resumed>) = 0 [pid 5183] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5184] <... futex resumed>) = 0 [pid 5183] <... futex resumed>) = 1 [pid 5184] ftruncate(5, 33587195 [pid 5183] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5184] <... ftruncate resumed>) = 0 [pid 5184] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5184] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5183] <... futex resumed>) = 0 [pid 5183] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5184] <... futex resumed>) = 0 [pid 5183] <... futex resumed>) = 1 [pid 5184] sendfile(4, 5, NULL, 4) = 4 [pid 5184] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5184] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5183] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5183] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5184] <... futex resumed>) = 0 [pid 5183] <... futex resumed>) = 1 [pid 5184] sendfile(4, 5, NULL, 281474978811909 [pid 5183] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5183] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5183] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5183] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5183] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0} => {parent_tid=[79]}, 88) = 79 [pid 5183] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 5187 attached [pid 5183] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5183] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 98.602898][ T5184] loop0: detected capacity change from 0 to 2048 [ 98.621411][ T5184] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5187] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5187] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5187] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5187] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5187] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5183] <... futex resumed>) = 0 [pid 5187] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5183] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5187] <... futex resumed>) = 0 [pid 5183] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 98.689878][ T5184] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 98.705652][ T5184] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 80 with max blocks 1 with error 28 [ 98.718429][ T5184] EXT4-fs (loop0): This should not happen!! Data will be lost [ 98.718429][ T5184] [ 98.728420][ T5184] EXT4-fs (loop0): Total free blocks count 0 [ 98.734451][ T5184] EXT4-fs (loop0): Free/Dirty block details [pid 5187] prlimit64(0, RLIMIT_CPU, NULL, [pid 5183] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5183] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5184] <... sendfile resumed>) = 163840 [pid 5184] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5184] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5187] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5187] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5187] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5183] close(3) = 0 [pid 5183] close(4) = 0 [pid 5183] close(5) = 0 [pid 5183] close(6) = -1 EBADF (Bad file descriptor) [pid 5183] close(7) = -1 EBADF (Bad file descriptor) [pid 5183] close(8) = -1 EBADF (Bad file descriptor) [pid 5183] close(9) = -1 EBADF (Bad file descriptor) [pid 5183] close(10) = -1 EBADF (Bad file descriptor) [pid 5183] close(11) = -1 EBADF (Bad file descriptor) [pid 5183] close(12) = -1 EBADF (Bad file descriptor) [pid 5183] close(13) = -1 EBADF (Bad file descriptor) [pid 5183] close(14) = -1 EBADF (Bad file descriptor) [pid 5183] close(15) = -1 EBADF (Bad file descriptor) [pid 5183] close(16) = -1 EBADF (Bad file descriptor) [pid 5183] close(17) = -1 EBADF (Bad file descriptor) [pid 5183] close(18) = -1 EBADF (Bad file descriptor) [pid 5183] close(19) = -1 EBADF (Bad file descriptor) [pid 5183] close(20) = -1 EBADF (Bad file descriptor) [pid 5183] close(21) = -1 EBADF (Bad file descriptor) [pid 5183] close(22) = -1 EBADF (Bad file descriptor) [pid 5183] close(23) = -1 EBADF (Bad file descriptor) [pid 5183] close(24) = -1 EBADF (Bad file descriptor) [pid 5183] close(25) = -1 EBADF (Bad file descriptor) [pid 5183] close(26) = -1 EBADF (Bad file descriptor) [pid 5183] close(27) = -1 EBADF (Bad file descriptor) [pid 5183] close(28) = -1 EBADF (Bad file descriptor) [pid 5183] close(29) = -1 EBADF (Bad file descriptor) [pid 5183] exit_group(0 [pid 5187] <... futex resumed>) = ? [pid 5184] <... futex resumed>) = ? [pid 5183] <... exit_group resumed>) = ? [pid 5187] +++ exited with 0 +++ [pid 5184] +++ exited with 0 +++ [pid 5183] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=77, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5046] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./25/binderfs") = 0 [ 98.743075][ T5184] EXT4-fs (loop0): free_blocks=2415919104 [ 98.749164][ T5184] EXT4-fs (loop0): dirty_blocks=96 [ 98.754319][ T5184] EXT4-fs (loop0): Block reservation details [ 98.760647][ T5184] EXT4-fs (loop0): i_reserved_data_blocks=6 [ 98.767088][ T5187] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 80 with error 28 [pid 5046] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./25/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./25/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./25") = 0 [pid 5046] mkdir("./26", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5188 attached [pid 5188] set_robust_list(0x555555a9c6a0, 24 [pid 5046] <... clone resumed>, child_tidptr=0x555555a9c690) = 80 [pid 5188] <... set_robust_list resumed>) = 0 [pid 5188] chdir("./26") = 0 [pid 5188] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5188] setpgid(0, 0) = 0 [pid 5188] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5188] write(3, "1000", 4) = 4 [pid 5188] close(3) = 0 [pid 5188] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5188] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5188] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5188] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5188] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5188] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5188] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5188] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5188] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5189 attached => {parent_tid=[81]}, 88) = 81 [pid 5188] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5188] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5188] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5189] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5189] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5189] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5189] memfd_create("syzkaller", 0) = 3 [pid 5189] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5189] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5189] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5189] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5189] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5189] close(3) = 0 [pid 5189] mkdir("./file0", 0777) = 0 [pid 5189] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5189] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5189] chdir("./file0") = 0 [pid 5189] ioctl(4, LOOP_CLR_FD) = 0 [pid 5189] close(4) = 0 [pid 5189] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5188] <... futex resumed>) = 0 [pid 5189] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5188] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5189] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5188] <... futex resumed>) = 0 [pid 5189] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5188] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5189] <... open resumed>) = 4 [pid 5189] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5188] <... futex resumed>) = 0 [pid 5189] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5188] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5189] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5188] <... futex resumed>) = 0 [pid 5189] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5188] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5189] <... open resumed>) = 5 [pid 5189] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5188] <... futex resumed>) = 0 [pid 5188] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5189] <... futex resumed>) = 1 [pid 5189] ftruncate(5, 33587195 [pid 5188] <... futex resumed>) = 0 [pid 5189] <... ftruncate resumed>) = 0 [pid 5188] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5189] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5188] <... futex resumed>) = 0 [pid 5189] <... futex resumed>) = 1 [pid 5189] sendfile(4, 5, NULL, 4 [pid 5188] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5189] <... sendfile resumed>) = 4 [pid 5188] <... futex resumed>) = 0 [pid 5188] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5189] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5188] <... futex resumed>) = 0 [pid 5188] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5189] <... futex resumed>) = 1 [pid 5188] <... futex resumed>) = 0 [pid 5189] sendfile(4, 5, NULL, 281474978811909 [pid 5188] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5188] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5188] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5188] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5188] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5192 attached => {parent_tid=[82]}, 88) = 82 [pid 5188] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5188] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5192] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5188] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5192] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5192] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5192] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5192] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5188] <... futex resumed>) = 0 [pid 5192] <... futex resumed>) = 1 [pid 5188] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5192] prlimit64(0, RLIMIT_CPU, NULL, [pid 5188] <... futex resumed>) = 0 [ 98.878394][ T5189] loop0: detected capacity change from 0 to 2048 [ 98.902584][ T5189] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.958273][ T5192] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 98.975715][ T5192] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 59 with error 28 [ 98.988424][ T5192] EXT4-fs (loop0): This should not happen!! Data will be lost [ 98.988424][ T5192] [ 98.998663][ T5192] EXT4-fs (loop0): Total free blocks count 0 [pid 5188] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5192] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5192] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5189] <... sendfile resumed>) = 122880 [pid 5192] <... futex resumed>) = 0 [pid 5192] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5189] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5188] close(3 [pid 5189] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5188] <... close resumed>) = 0 [pid 5188] close(4) = 0 [pid 5188] close(5) = 0 [pid 5188] close(6) = -1 EBADF (Bad file descriptor) [pid 5188] close(7) = -1 EBADF (Bad file descriptor) [pid 5188] close(8) = -1 EBADF (Bad file descriptor) [pid 5188] close(9) = -1 EBADF (Bad file descriptor) [pid 5188] close(10) = -1 EBADF (Bad file descriptor) [pid 5188] close(11) = -1 EBADF (Bad file descriptor) [pid 5188] close(12) = -1 EBADF (Bad file descriptor) [pid 5188] close(13) = -1 EBADF (Bad file descriptor) [pid 5188] close(14) = -1 EBADF (Bad file descriptor) [pid 5188] close(15) = -1 EBADF (Bad file descriptor) [pid 5188] close(16) = -1 EBADF (Bad file descriptor) [pid 5188] close(17) = -1 EBADF (Bad file descriptor) [pid 5188] close(18) = -1 EBADF (Bad file descriptor) [pid 5188] close(19) = -1 EBADF (Bad file descriptor) [pid 5188] close(20) = -1 EBADF (Bad file descriptor) [pid 5188] close(21) = -1 EBADF (Bad file descriptor) [pid 5188] close(22) = -1 EBADF (Bad file descriptor) [pid 5188] close(23) = -1 EBADF (Bad file descriptor) [pid 5188] close(24) = -1 EBADF (Bad file descriptor) [pid 5188] close(25) = -1 EBADF (Bad file descriptor) [pid 5188] close(26) = -1 EBADF (Bad file descriptor) [pid 5188] close(27) = -1 EBADF (Bad file descriptor) [pid 5188] close(28) = -1 EBADF (Bad file descriptor) [pid 5188] close(29) = -1 EBADF (Bad file descriptor) [pid 5188] exit_group(0 [pid 5192] <... futex resumed>) = ? [pid 5189] <... futex resumed>) = ? [pid 5188] <... exit_group resumed>) = ? [pid 5192] +++ exited with 0 +++ [pid 5189] +++ exited with 0 +++ [pid 5188] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=80, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5046] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./26/binderfs") = 0 [ 99.004734][ T5192] EXT4-fs (loop0): Free/Dirty block details [ 99.011966][ T5192] EXT4-fs (loop0): free_blocks=2415919104 [ 99.017988][ T5192] EXT4-fs (loop0): dirty_blocks=64 [ 99.023121][ T5192] EXT4-fs (loop0): Block reservation details [ 99.029451][ T5192] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 99.039335][ T5189] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 60 with max blocks 1 with error 28 [pid 5046] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./26/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./26/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./26") = 0 [pid 5046] mkdir("./27", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9c690) = 83 ./strace-static-x86_64: Process 5193 attached [pid 5193] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5193] chdir("./27") = 0 [pid 5193] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5193] setpgid(0, 0) = 0 [pid 5193] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5193] write(3, "1000", 4) = 4 [pid 5193] close(3) = 0 [pid 5193] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5193] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5193] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5193] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5193] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5193] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5193] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5193] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5193] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5194 attached => {parent_tid=[84]}, 88) = 84 [pid 5193] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5193] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5193] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5194] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5194] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5194] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5194] memfd_create("syzkaller", 0) = 3 [pid 5194] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5194] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5194] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5194] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5194] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5194] close(3) = 0 [pid 5194] mkdir("./file0", 0777) = 0 [pid 5194] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5194] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5194] chdir("./file0") = 0 [pid 5194] ioctl(4, LOOP_CLR_FD) = 0 [pid 5194] close(4) = 0 [pid 5194] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5193] <... futex resumed>) = 0 [pid 5193] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5194] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5193] <... futex resumed>) = 0 [pid 5193] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5194] <... open resumed>) = 4 [pid 5194] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5193] <... futex resumed>) = 0 [pid 5193] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5193] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5194] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5194] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5193] <... futex resumed>) = 0 [pid 5193] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5193] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5194] ftruncate(5, 33587195) = 0 [pid 5194] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5193] <... futex resumed>) = 0 [pid 5193] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5193] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5194] sendfile(4, 5, NULL, 4) = 4 [pid 5194] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5193] <... futex resumed>) = 0 [pid 5193] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5193] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5193] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5193] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5194] <... futex resumed>) = 1 [pid 5193] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5194] sendfile(4, 5, NULL, 281474978811909 [pid 5193] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5193] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0} => {parent_tid=[85]}, 88) = 85 [pid 5193] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5193] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5193] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5197 attached [pid 5197] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5197] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5197] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 99.179481][ T5194] loop0: detected capacity change from 0 to 2048 [ 99.201867][ T5194] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5197] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5197] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5197] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5193] <... futex resumed>) = 0 [pid 5193] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5197] <... futex resumed>) = 0 [pid 5193] <... futex resumed>) = 1 [pid 5197] prlimit64(0, RLIMIT_CPU, NULL, [ 99.283139][ T5197] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 99.298797][ T5197] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 175 with error 28 [ 99.311271][ T5197] EXT4-fs (loop0): This should not happen!! Data will be lost [ 99.311271][ T5197] [ 99.321030][ T5197] EXT4-fs (loop0): Total free blocks count 0 [ 99.327093][ T5197] EXT4-fs (loop0): Free/Dirty block details [pid 5193] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5197] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5197] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5197] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5194] <... sendfile resumed>) = 360448 [pid 5194] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5194] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5193] close(3) = 0 [pid 5193] close(4) = 0 [pid 5193] close(5) = 0 [pid 5193] close(6) = -1 EBADF (Bad file descriptor) [pid 5193] close(7) = -1 EBADF (Bad file descriptor) [pid 5193] close(8) = -1 EBADF (Bad file descriptor) [pid 5193] close(9) = -1 EBADF (Bad file descriptor) [pid 5193] close(10) = -1 EBADF (Bad file descriptor) [pid 5193] close(11) = -1 EBADF (Bad file descriptor) [pid 5193] close(12) = -1 EBADF (Bad file descriptor) [pid 5193] close(13) = -1 EBADF (Bad file descriptor) [pid 5193] close(14) = -1 EBADF (Bad file descriptor) [pid 5193] close(15) = -1 EBADF (Bad file descriptor) [pid 5193] close(16) = -1 EBADF (Bad file descriptor) [pid 5193] close(17) = -1 EBADF (Bad file descriptor) [pid 5193] close(18) = -1 EBADF (Bad file descriptor) [pid 5193] close(19) = -1 EBADF (Bad file descriptor) [pid 5193] close(20) = -1 EBADF (Bad file descriptor) [pid 5193] close(21) = -1 EBADF (Bad file descriptor) [pid 5193] close(22) = -1 EBADF (Bad file descriptor) [pid 5193] close(23) = -1 EBADF (Bad file descriptor) [pid 5193] close(24) = -1 EBADF (Bad file descriptor) [pid 5193] close(25) = -1 EBADF (Bad file descriptor) [pid 5193] close(26) = -1 EBADF (Bad file descriptor) [pid 5193] close(27) = -1 EBADF (Bad file descriptor) [pid 5193] close(28) = -1 EBADF (Bad file descriptor) [pid 5193] close(29) = -1 EBADF (Bad file descriptor) [pid 5193] exit_group(0 [pid 5197] <... futex resumed>) = ? [pid 5194] <... futex resumed>) = ? [pid 5197] +++ exited with 0 +++ [pid 5194] +++ exited with 0 +++ [pid 5193] <... exit_group resumed>) = ? [pid 5193] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=83, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5046] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./27/binderfs") = 0 [ 99.333002][ T5197] EXT4-fs (loop0): free_blocks=2415919104 [ 99.340092][ T5197] EXT4-fs (loop0): dirty_blocks=176 [ 99.345788][ T5197] EXT4-fs (loop0): Block reservation details [ 99.351879][ T5197] EXT4-fs (loop0): i_reserved_data_blocks=11 [ 99.365655][ T5194] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 176 with max blocks 1 with error 28 [pid 5046] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./27/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./27/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./27") = 0 [pid 5046] mkdir("./28", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5198 attached , child_tidptr=0x555555a9c690) = 86 [pid 5198] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5198] chdir("./28") = 0 [pid 5198] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5198] setpgid(0, 0) = 0 [pid 5198] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5198] write(3, "1000", 4) = 4 [pid 5198] close(3) = 0 [pid 5198] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5198] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5198] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5198] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5198] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5198] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5198] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5198] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5198] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5199 attached => {parent_tid=[87]}, 88) = 87 [pid 5198] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5198] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5198] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5199] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5199] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5199] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5199] memfd_create("syzkaller", 0) = 3 [pid 5199] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5199] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5199] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5199] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5199] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5199] close(3) = 0 [pid 5199] mkdir("./file0", 0777) = 0 [pid 5199] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5199] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5199] chdir("./file0") = 0 [pid 5199] ioctl(4, LOOP_CLR_FD) = 0 [pid 5199] close(4) = 0 [pid 5199] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5199] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5198] <... futex resumed>) = 0 [pid 5198] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5199] <... futex resumed>) = 0 [pid 5198] <... futex resumed>) = 1 [pid 5198] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5199] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5199] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5198] <... futex resumed>) = 0 [pid 5199] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5198] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5199] <... futex resumed>) = 0 [pid 5198] <... futex resumed>) = 1 [pid 5199] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5198] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5199] <... open resumed>) = 5 [pid 5199] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5198] <... futex resumed>) = 0 [pid 5198] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5199] ftruncate(5, 33587195 [pid 5198] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5199] <... ftruncate resumed>) = 0 [pid 5199] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5198] <... futex resumed>) = 0 [pid 5199] sendfile(4, 5, NULL, 4 [pid 5198] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5199] <... sendfile resumed>) = 4 [pid 5198] <... futex resumed>) = 0 [pid 5198] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5199] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5198] <... futex resumed>) = 0 [pid 5199] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5198] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5199] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5198] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5199] sendfile(4, 5, NULL, 281474978811909 [pid 5198] <... futex resumed>) = 0 [pid 5198] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5198] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [ 99.512851][ T5199] loop0: detected capacity change from 0 to 2048 [ 99.531109][ T5199] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5198] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5198] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5202 attached => {parent_tid=[88]}, 88) = 88 [pid 5202] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5198] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5202] set_robust_list(0x7efbfa33d9a0, 24 [pid 5198] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5202] <... set_robust_list resumed>) = 0 [pid 5202] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5202] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000 [pid 5198] <... futex resumed>) = 0 [pid 5198] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5202] <... mmap resumed>) = 0x20000000 [pid 5202] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5198] <... futex resumed>) = 0 [pid 5198] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5202] prlimit64(0, RLIMIT_CPU, NULL, [pid 5198] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5198] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [ 99.598976][ T5202] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 99.613923][ T5202] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 55 with error 28 [ 99.626797][ T5202] EXT4-fs (loop0): This should not happen!! Data will be lost [ 99.626797][ T5202] [ 99.636525][ T5202] EXT4-fs (loop0): Total free blocks count 0 [ 99.642599][ T5202] EXT4-fs (loop0): Free/Dirty block details [pid 5202] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5202] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5202] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5199] <... sendfile resumed>) = 114688 [pid 5199] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5199] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5198] close(3) = 0 [pid 5198] close(4) = 0 [pid 5198] close(5) = 0 [pid 5198] close(6) = -1 EBADF (Bad file descriptor) [pid 5198] close(7) = -1 EBADF (Bad file descriptor) [pid 5198] close(8) = -1 EBADF (Bad file descriptor) [pid 5198] close(9) = -1 EBADF (Bad file descriptor) [pid 5198] close(10) = -1 EBADF (Bad file descriptor) [pid 5198] close(11) = -1 EBADF (Bad file descriptor) [pid 5198] close(12) = -1 EBADF (Bad file descriptor) [pid 5198] close(13) = -1 EBADF (Bad file descriptor) [pid 5198] close(14) = -1 EBADF (Bad file descriptor) [pid 5198] close(15) = -1 EBADF (Bad file descriptor) [pid 5198] close(16) = -1 EBADF (Bad file descriptor) [pid 5198] close(17) = -1 EBADF (Bad file descriptor) [pid 5198] close(18) = -1 EBADF (Bad file descriptor) [pid 5198] close(19) = -1 EBADF (Bad file descriptor) [pid 5198] close(20) = -1 EBADF (Bad file descriptor) [pid 5198] close(21) = -1 EBADF (Bad file descriptor) [pid 5198] close(22) = -1 EBADF (Bad file descriptor) [pid 5198] close(23) = -1 EBADF (Bad file descriptor) [pid 5198] close(24) = -1 EBADF (Bad file descriptor) [pid 5198] close(25) = -1 EBADF (Bad file descriptor) [pid 5198] close(26) = -1 EBADF (Bad file descriptor) [pid 5198] close(27) = -1 EBADF (Bad file descriptor) [pid 5198] close(28) = -1 EBADF (Bad file descriptor) [pid 5198] close(29) = -1 EBADF (Bad file descriptor) [pid 5198] exit_group(0 [pid 5202] <... futex resumed>) = ? [pid 5199] <... futex resumed>) = ? [pid 5198] <... exit_group resumed>) = ? [pid 5202] +++ exited with 0 +++ [pid 5199] +++ exited with 0 +++ [pid 5198] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=86, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5046] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./28/binderfs") = 0 [ 99.648563][ T5202] EXT4-fs (loop0): free_blocks=2415919104 [ 99.654285][ T5202] EXT4-fs (loop0): dirty_blocks=64 [ 99.659455][ T5202] EXT4-fs (loop0): Block reservation details [ 99.665449][ T5202] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 99.675876][ T5199] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 56 with max blocks 1 with error 28 [pid 5046] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./28/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./28/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./28") = 0 [pid 5046] mkdir("./29", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5203 attached [pid 5203] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5203] chdir("./29") = 0 [pid 5203] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5203] setpgid(0, 0) = 0 [pid 5203] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5203] write(3, "1000", 4) = 4 [pid 5203] close(3) = 0 [pid 5046] <... clone resumed>, child_tidptr=0x555555a9c690) = 89 [pid 5203] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5203] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5203] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5203] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5203] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5203] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5203] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5203] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5203] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5204 attached [pid 5204] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053 [pid 5203] <... clone3 resumed> => {parent_tid=[90]}, 88) = 90 [pid 5204] <... rseq resumed>) = 0 [pid 5204] set_robust_list(0x7efc0265e9a0, 24 [pid 5203] rt_sigprocmask(SIG_SETMASK, [], [pid 5204] <... set_robust_list resumed>) = 0 [pid 5203] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5204] rt_sigprocmask(SIG_SETMASK, [], [pid 5203] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5204] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5204] memfd_create("syzkaller", 0 [pid 5203] <... futex resumed>) = 0 [pid 5203] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5204] <... memfd_create resumed>) = 3 [pid 5204] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5204] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5204] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5204] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5204] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5204] close(3) = 0 [pid 5204] mkdir("./file0", 0777) = 0 [pid 5204] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5204] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5204] chdir("./file0") = 0 [pid 5204] ioctl(4, LOOP_CLR_FD) = 0 [pid 5204] close(4) = 0 [pid 5204] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5204] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5203] <... futex resumed>) = 0 [pid 5204] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5203] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5204] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5203] <... futex resumed>) = 0 [pid 5203] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5204] <... open resumed>) = 4 [pid 5204] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5203] <... futex resumed>) = 0 [pid 5203] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5203] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5204] <... futex resumed>) = 1 [pid 5204] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5204] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5203] <... futex resumed>) = 0 [pid 5203] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5203] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5204] <... futex resumed>) = 1 [pid 5204] ftruncate(5, 33587195) = 0 [pid 5204] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5203] <... futex resumed>) = 0 [pid 5203] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5204] <... futex resumed>) = 1 [pid 5203] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5204] sendfile(4, 5, NULL, 4) = 4 [pid 5204] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5203] <... futex resumed>) = 0 [pid 5203] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5204] <... futex resumed>) = 1 [pid 5203] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5204] sendfile(4, 5, NULL, 281474978811909 [pid 5203] <... futex resumed>) = 0 [pid 5203] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5203] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5203] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 99.794510][ T5204] loop0: detected capacity change from 0 to 2048 [ 99.812272][ T5204] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5203] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0} => {parent_tid=[91]}, 88) = 91 [pid 5203] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5203] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5203] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5207 attached [pid 5207] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5207] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5207] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5207] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5207] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5207] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5203] <... futex resumed>) = 0 [pid 5203] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5207] <... futex resumed>) = 0 [pid 5203] <... futex resumed>) = 1 [pid 5207] prlimit64(0, RLIMIT_CPU, NULL, [pid 5203] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 99.895303][ T5204] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 99.910442][ T5204] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 172 with max blocks 1 with error 28 [ 99.923119][ T5204] EXT4-fs (loop0): This should not happen!! Data will be lost [ 99.923119][ T5204] [ 99.933065][ T5204] EXT4-fs (loop0): Total free blocks count 0 [ 99.939762][ T5204] EXT4-fs (loop0): Free/Dirty block details [pid 5204] <... sendfile resumed>) = 352256 [pid 5204] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5204] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5207] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5207] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5207] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5203] close(3) = 0 [pid 5203] close(4) = 0 [pid 5203] close(5) = 0 [pid 5203] close(6) = -1 EBADF (Bad file descriptor) [pid 5203] close(7) = -1 EBADF (Bad file descriptor) [pid 5203] close(8) = -1 EBADF (Bad file descriptor) [pid 5203] close(9) = -1 EBADF (Bad file descriptor) [pid 5203] close(10) = -1 EBADF (Bad file descriptor) [pid 5203] close(11) = -1 EBADF (Bad file descriptor) [pid 5203] close(12) = -1 EBADF (Bad file descriptor) [pid 5203] close(13) = -1 EBADF (Bad file descriptor) [pid 5203] close(14) = -1 EBADF (Bad file descriptor) [pid 5203] close(15) = -1 EBADF (Bad file descriptor) [pid 5203] close(16) = -1 EBADF (Bad file descriptor) [pid 5203] close(17) = -1 EBADF (Bad file descriptor) [pid 5203] close(18) = -1 EBADF (Bad file descriptor) [pid 5203] close(19) = -1 EBADF (Bad file descriptor) [pid 5203] close(20) = -1 EBADF (Bad file descriptor) [pid 5203] close(21) = -1 EBADF (Bad file descriptor) [pid 5203] close(22) = -1 EBADF (Bad file descriptor) [pid 5203] close(23) = -1 EBADF (Bad file descriptor) [pid 5203] close(24) = -1 EBADF (Bad file descriptor) [pid 5203] close(25) = -1 EBADF (Bad file descriptor) [pid 5203] close(26) = -1 EBADF (Bad file descriptor) [pid 5203] close(27) = -1 EBADF (Bad file descriptor) [pid 5203] close(28) = -1 EBADF (Bad file descriptor) [pid 5203] close(29) = -1 EBADF (Bad file descriptor) [pid 5203] exit_group(0) = ? [pid 5204] <... futex resumed>) = ? [pid 5204] +++ exited with 0 +++ [pid 5207] <... futex resumed>) = ? [pid 5207] +++ exited with 0 +++ [pid 5203] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=89, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./29/binderfs") = 0 [ 99.945692][ T5204] EXT4-fs (loop0): free_blocks=2415919104 [ 99.951701][ T5204] EXT4-fs (loop0): dirty_blocks=176 [ 99.957244][ T5204] EXT4-fs (loop0): Block reservation details [ 99.963274][ T5204] EXT4-fs (loop0): i_reserved_data_blocks=11 [ 99.970080][ T5207] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 172 with error 28 [pid 5046] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./29/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./29/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./29") = 0 [pid 5046] mkdir("./30", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5208 attached , child_tidptr=0x555555a9c690) = 92 [pid 5208] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5208] chdir("./30") = 0 [pid 5208] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5208] setpgid(0, 0) = 0 [pid 5208] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5208] write(3, "1000", 4) = 4 [pid 5208] close(3) = 0 [pid 5208] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5208] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5208] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5208] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5208] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5208] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5208] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5208] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5208] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5209 attached [pid 5209] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053 [pid 5208] <... clone3 resumed> => {parent_tid=[93]}, 88) = 93 [pid 5209] <... rseq resumed>) = 0 [pid 5208] rt_sigprocmask(SIG_SETMASK, [], [pid 5209] set_robust_list(0x7efc0265e9a0, 24 [pid 5208] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5209] <... set_robust_list resumed>) = 0 [pid 5208] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5209] rt_sigprocmask(SIG_SETMASK, [], [pid 5208] <... futex resumed>) = 0 [pid 5209] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5208] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5209] memfd_create("syzkaller", 0) = 3 [pid 5209] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5209] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5209] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5209] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5209] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5209] close(3) = 0 [pid 5209] mkdir("./file0", 0777) = 0 [pid 5209] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5209] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5209] chdir("./file0") = 0 [pid 5209] ioctl(4, LOOP_CLR_FD) = 0 [pid 5209] close(4) = 0 [pid 5209] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5209] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5208] <... futex resumed>) = 0 [pid 5208] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5209] <... futex resumed>) = 0 [pid 5209] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5208] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5209] <... open resumed>) = 4 [pid 5209] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5208] <... futex resumed>) = 0 [pid 5208] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5209] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5208] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5209] <... open resumed>) = 5 [pid 5209] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5208] <... futex resumed>) = 0 [pid 5208] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5209] ftruncate(5, 33587195 [pid 5208] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5209] <... ftruncate resumed>) = 0 [pid 5209] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5208] <... futex resumed>) = 0 [pid 5209] sendfile(4, 5, NULL, 4 [pid 5208] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5208] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5209] <... sendfile resumed>) = 4 [pid 5209] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5208] <... futex resumed>) = 0 [pid 5208] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5209] sendfile(4, 5, NULL, 281474978811909 [pid 5208] <... futex resumed>) = 0 [pid 5208] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5208] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5208] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5208] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5208] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5212 attached => {parent_tid=[94]}, 88) = 94 [pid 5208] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5212] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5212] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5212] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5212] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5208] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5212] <... futex resumed>) = 0 [pid 5212] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5208] <... futex resumed>) = 1 [pid 5208] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 100.098931][ T5209] loop0: detected capacity change from 0 to 2048 [ 100.121026][ T5209] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5212] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5208] <... futex resumed>) = 0 [pid 5208] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5212] prlimit64(0, RLIMIT_CPU, NULL, [pid 5208] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5208] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [ 100.189554][ T5212] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 100.204813][ T5212] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 59 with error 28 [ 100.217188][ T5212] EXT4-fs (loop0): This should not happen!! Data will be lost [ 100.217188][ T5212] [ 100.227128][ T5212] EXT4-fs (loop0): Total free blocks count 0 [ 100.233161][ T5212] EXT4-fs (loop0): Free/Dirty block details [pid 5212] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5212] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5212] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5209] <... sendfile resumed>) = 122880 [pid 5209] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5209] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5208] close(3) = 0 [pid 5208] close(4) = 0 [pid 5208] close(5) = 0 [pid 5208] close(6) = -1 EBADF (Bad file descriptor) [pid 5208] close(7) = -1 EBADF (Bad file descriptor) [pid 5208] close(8) = -1 EBADF (Bad file descriptor) [pid 5208] close(9) = -1 EBADF (Bad file descriptor) [pid 5208] close(10) = -1 EBADF (Bad file descriptor) [pid 5208] close(11) = -1 EBADF (Bad file descriptor) [pid 5208] close(12) = -1 EBADF (Bad file descriptor) [pid 5208] close(13) = -1 EBADF (Bad file descriptor) [pid 5208] close(14) = -1 EBADF (Bad file descriptor) [pid 5208] close(15) = -1 EBADF (Bad file descriptor) [pid 5208] close(16) = -1 EBADF (Bad file descriptor) [pid 5208] close(17) = -1 EBADF (Bad file descriptor) [pid 5208] close(18) = -1 EBADF (Bad file descriptor) [pid 5208] close(19) = -1 EBADF (Bad file descriptor) [pid 5208] close(20) = -1 EBADF (Bad file descriptor) [pid 5208] close(21) = -1 EBADF (Bad file descriptor) [pid 5208] close(22) = -1 EBADF (Bad file descriptor) [pid 5208] close(23) = -1 EBADF (Bad file descriptor) [pid 5208] close(24) = -1 EBADF (Bad file descriptor) [pid 5208] close(25) = -1 EBADF (Bad file descriptor) [pid 5208] close(26) = -1 EBADF (Bad file descriptor) [pid 5208] close(27) = -1 EBADF (Bad file descriptor) [pid 5208] close(28) = -1 EBADF (Bad file descriptor) [pid 5208] close(29) = -1 EBADF (Bad file descriptor) [pid 5208] exit_group(0 [pid 5212] <... futex resumed>) = ? [pid 5209] <... futex resumed>) = ? [pid 5208] <... exit_group resumed>) = ? [pid 5212] +++ exited with 0 +++ [pid 5209] +++ exited with 0 +++ [pid 5208] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=92, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5046] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./30/binderfs") = 0 [ 100.239699][ T5212] EXT4-fs (loop0): free_blocks=2415919104 [ 100.245446][ T5212] EXT4-fs (loop0): dirty_blocks=64 [ 100.250638][ T5212] EXT4-fs (loop0): Block reservation details [ 100.256683][ T5212] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 100.265003][ T5209] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 60 with max blocks 1 with error 28 [pid 5046] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./30/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./30/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./30") = 0 [pid 5046] mkdir("./31", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9c690) = 95 ./strace-static-x86_64: Process 5213 attached [pid 5213] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5213] chdir("./31") = 0 [pid 5213] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5213] setpgid(0, 0) = 0 [pid 5213] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5213] write(3, "1000", 4) = 4 [pid 5213] close(3) = 0 [pid 5213] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5213] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5213] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5213] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5213] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5213] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5213] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5213] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5213] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5214 attached [pid 5214] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053 [pid 5213] <... clone3 resumed> => {parent_tid=[96]}, 88) = 96 [pid 5214] <... rseq resumed>) = 0 [pid 5213] rt_sigprocmask(SIG_SETMASK, [], [pid 5214] set_robust_list(0x7efc0265e9a0, 24 [pid 5213] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5214] <... set_robust_list resumed>) = 0 [pid 5213] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] rt_sigprocmask(SIG_SETMASK, [], [pid 5213] <... futex resumed>) = 0 [pid 5214] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5213] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5214] memfd_create("syzkaller", 0) = 3 [pid 5214] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5214] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5214] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5214] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5214] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5214] close(3) = 0 [pid 5214] mkdir("./file0", 0777) = 0 [pid 5214] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5214] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5214] chdir("./file0") = 0 [pid 5214] ioctl(4, LOOP_CLR_FD) = 0 [pid 5214] close(4) = 0 [pid 5214] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5214] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5213] <... futex resumed>) = 0 [pid 5213] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5214] <... futex resumed>) = 0 [pid 5213] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5214] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5214] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5214] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5213] <... futex resumed>) = 0 [pid 5213] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] <... futex resumed>) = 0 [pid 5214] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5214] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5214] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5213] <... futex resumed>) = 1 [pid 5213] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5213] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] <... futex resumed>) = 0 [pid 5214] ftruncate(5, 33587195) = 0 [pid 5214] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5214] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5213] <... futex resumed>) = 1 [pid 5213] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5213] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] <... futex resumed>) = 0 [pid 5214] sendfile(4, 5, NULL, 4) = 4 [pid 5213] <... futex resumed>) = 1 [pid 5213] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5214] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5213] <... futex resumed>) = 0 [pid 5213] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] sendfile(4, 5, NULL, 281474978811909 [pid 5213] <... futex resumed>) = 0 [pid 5213] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5213] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5213] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5213] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5213] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5217 attached [pid 5217] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5217] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5217] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5217] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5213] <... clone3 resumed> => {parent_tid=[97]}, 88) = 97 [pid 5213] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5213] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5217] <... futex resumed>) = 0 [pid 5213] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 100.388740][ T5214] loop0: detected capacity change from 0 to 2048 [ 100.411057][ T5214] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5217] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5217] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5213] <... futex resumed>) = 0 [pid 5217] <... futex resumed>) = 1 [pid 5213] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5217] prlimit64(0, RLIMIT_CPU, NULL, [pid 5213] <... futex resumed>) = 0 [ 100.473185][ T5217] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 100.490531][ T5214] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 74 with max blocks 1 with error 28 [ 100.496453][ T5217] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 74 with error 28 [ 100.507584][ T5214] EXT4-fs (loop0): This should not happen!! Data will be lost [pid 5213] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5217] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5217] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5214] <... sendfile resumed>) = 151552 [pid 5217] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5214] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5213] close(3 [pid 5214] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5213] <... close resumed>) = 0 [pid 5213] close(4) = 0 [pid 5213] close(5) = 0 [pid 5213] close(6) = -1 EBADF (Bad file descriptor) [pid 5213] close(7) = -1 EBADF (Bad file descriptor) [pid 5213] close(8) = -1 EBADF (Bad file descriptor) [pid 5213] close(9) = -1 EBADF (Bad file descriptor) [pid 5213] close(10) = -1 EBADF (Bad file descriptor) [pid 5213] close(11) = -1 EBADF (Bad file descriptor) [pid 5213] close(12) = -1 EBADF (Bad file descriptor) [pid 5213] close(13) = -1 EBADF (Bad file descriptor) [pid 5213] close(14) = -1 EBADF (Bad file descriptor) [pid 5213] close(15) = -1 EBADF (Bad file descriptor) [pid 5213] close(16) = -1 EBADF (Bad file descriptor) [pid 5213] close(17) = -1 EBADF (Bad file descriptor) [pid 5213] close(18) = -1 EBADF (Bad file descriptor) [pid 5213] close(19) = -1 EBADF (Bad file descriptor) [pid 5213] close(20) = -1 EBADF (Bad file descriptor) [pid 5213] close(21) = -1 EBADF (Bad file descriptor) [pid 5213] close(22) = -1 EBADF (Bad file descriptor) [pid 5213] close(23) = -1 EBADF (Bad file descriptor) [pid 5213] close(24) = -1 EBADF (Bad file descriptor) [pid 5213] close(25) = -1 EBADF (Bad file descriptor) [pid 5213] close(26) = -1 EBADF (Bad file descriptor) [pid 5213] close(27) = -1 EBADF (Bad file descriptor) [pid 5213] close(28) = -1 EBADF (Bad file descriptor) [pid 5213] close(29) = -1 EBADF (Bad file descriptor) [pid 5213] exit_group(0 [pid 5217] <... futex resumed>) = ? [pid 5214] <... futex resumed>) = ? [pid 5213] <... exit_group resumed>) = ? [pid 5217] +++ exited with 0 +++ [pid 5214] +++ exited with 0 +++ [pid 5213] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=95, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./31/binderfs") = 0 [ 100.507584][ T5214] [ 100.515436][ T5217] EXT4-fs (loop0): This should not happen!! Data will be lost [ 100.515436][ T5217] [ 100.535165][ T5217] EXT4-fs (loop0): Total free blocks count 0 [ 100.541506][ T5217] EXT4-fs (loop0): Free/Dirty block details [ 100.543538][ T5214] EXT4-fs (loop0): Total free blocks count 0 [ 100.547884][ T5217] EXT4-fs (loop0): free_blocks=2415919104 [ 100.556271][ T5214] EXT4-fs (loop0): Free/Dirty block details [pid 5046] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./31/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./31/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./31") = 0 [pid 5046] mkdir("./32", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9c690) = 98 ./strace-static-x86_64: Process 5218 attached [pid 5218] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5218] chdir("./32") = 0 [pid 5218] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5218] setpgid(0, 0) = 0 [pid 5218] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5218] write(3, "1000", 4) = 4 [pid 5218] close(3) = 0 [pid 5218] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5218] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5218] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5218] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5218] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5218] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5218] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5218] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5218] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0} => {parent_tid=[99]}, 88) = 99 [pid 5218] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5218] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5218] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5219 attached [pid 5219] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5219] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5219] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5219] memfd_create("syzkaller", 0) = 3 [pid 5219] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5219] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5219] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5219] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5219] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5219] close(3) = 0 [pid 5219] mkdir("./file0", 0777) = 0 [pid 5219] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5219] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5219] chdir("./file0") = 0 [pid 5219] ioctl(4, LOOP_CLR_FD) = 0 [pid 5219] close(4) = 0 [pid 5219] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5218] <... futex resumed>) = 0 [pid 5219] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5218] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5219] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5218] <... futex resumed>) = 0 [pid 5219] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5218] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5219] <... open resumed>) = 4 [pid 5219] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5218] <... futex resumed>) = 0 [pid 5218] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5218] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5219] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5219] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5219] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5218] <... futex resumed>) = 0 [pid 5218] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5219] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5219] ftruncate(5, 33587195 [pid 5218] <... futex resumed>) = 0 [pid 5219] <... ftruncate resumed>) = 0 [pid 5218] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5219] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5218] <... futex resumed>) = 0 [pid 5219] sendfile(4, 5, NULL, 4 [pid 5218] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5219] <... sendfile resumed>) = 4 [pid 5218] <... futex resumed>) = 0 [pid 5219] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5219] <... futex resumed>) = 0 [pid 5218] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5219] sendfile(4, 5, NULL, 281474978811909 [pid 5218] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5218] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5218] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [ 100.664892][ T5219] loop0: detected capacity change from 0 to 2048 [pid 5218] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5218] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5218] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5222 attached [pid 5222] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5218] <... clone3 resumed> => {parent_tid=[100]}, 88) = 100 [pid 5222] <... rseq resumed>) = 0 [pid 5218] rt_sigprocmask(SIG_SETMASK, [], [pid 5222] set_robust_list(0x7efbfa33d9a0, 24 [pid 5218] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5222] <... set_robust_list resumed>) = 0 [pid 5218] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5222] rt_sigprocmask(SIG_SETMASK, [], [pid 5218] <... futex resumed>) = 0 [pid 5222] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5218] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5222] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5222] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] <... futex resumed>) = 0 [pid 5218] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5218] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5222] <... futex resumed>) = 1 [ 100.732561][ T5219] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 100.747854][ T5219] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 100.761214][ T5219] EXT4-fs (loop0): This should not happen!! Data will be lost [ 100.761214][ T5219] [ 100.772276][ T5219] EXT4-fs (loop0): Total free blocks count 0 [pid 5222] prlimit64(0, RLIMIT_CPU, NULL, [pid 5218] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5218] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5219] <... sendfile resumed>) = 65536 [pid 5219] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5219] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5222] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5222] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5222] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5218] close(3) = 0 [pid 5218] close(4) = 0 [pid 5218] close(5) = 0 [pid 5218] close(6) = -1 EBADF (Bad file descriptor) [pid 5218] close(7) = -1 EBADF (Bad file descriptor) [pid 5218] close(8) = -1 EBADF (Bad file descriptor) [pid 5218] close(9) = -1 EBADF (Bad file descriptor) [pid 5218] close(10) = -1 EBADF (Bad file descriptor) [pid 5218] close(11) = -1 EBADF (Bad file descriptor) [pid 5218] close(12) = -1 EBADF (Bad file descriptor) [pid 5218] close(13) = -1 EBADF (Bad file descriptor) [pid 5218] close(14) = -1 EBADF (Bad file descriptor) [pid 5218] close(15) = -1 EBADF (Bad file descriptor) [pid 5218] close(16) = -1 EBADF (Bad file descriptor) [pid 5218] close(17) = -1 EBADF (Bad file descriptor) [pid 5218] close(18) = -1 EBADF (Bad file descriptor) [pid 5218] close(19) = -1 EBADF (Bad file descriptor) [pid 5218] close(20) = -1 EBADF (Bad file descriptor) [pid 5218] close(21) = -1 EBADF (Bad file descriptor) [pid 5218] close(22) = -1 EBADF (Bad file descriptor) [pid 5218] close(23) = -1 EBADF (Bad file descriptor) [pid 5218] close(24) = -1 EBADF (Bad file descriptor) [pid 5218] close(25) = -1 EBADF (Bad file descriptor) [pid 5218] close(26) = -1 EBADF (Bad file descriptor) [pid 5218] close(27) = -1 EBADF (Bad file descriptor) [pid 5218] close(28) = -1 EBADF (Bad file descriptor) [pid 5218] close(29) = -1 EBADF (Bad file descriptor) [pid 5218] exit_group(0 [pid 5222] <... futex resumed>) = ? [pid 5219] <... futex resumed>) = ? [pid 5218] <... exit_group resumed>) = ? [pid 5222] +++ exited with 0 +++ [pid 5219] +++ exited with 0 +++ [pid 5218] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=98, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5046] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./32/binderfs") = 0 [ 100.778356][ T5219] EXT4-fs (loop0): Free/Dirty block details [ 100.784697][ T5219] EXT4-fs (loop0): free_blocks=2415919104 [ 100.790486][ T5219] EXT4-fs (loop0): dirty_blocks=48 [ 100.795743][ T5219] EXT4-fs (loop0): Block reservation details [ 100.801846][ T5219] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 100.808434][ T5222] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 100.821709][ T5222] EXT4-fs (loop0): This should not happen!! Data will be lost [ 100.821709][ T5222] [pid 5046] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./32/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./32/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./32") = 0 [pid 5046] mkdir("./33", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9c690) = 101 ./strace-static-x86_64: Process 5223 attached [pid 5223] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5223] chdir("./33") = 0 [pid 5223] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5223] setpgid(0, 0) = 0 [pid 5223] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5223] write(3, "1000", 4) = 4 [pid 5223] close(3) = 0 [pid 5223] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5223] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5223] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5223] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5223] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5223] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5223] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5223] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5223] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5224 attached [pid 5224] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053 [pid 5223] <... clone3 resumed> => {parent_tid=[102]}, 88) = 102 [pid 5224] <... rseq resumed>) = 0 [pid 5223] rt_sigprocmask(SIG_SETMASK, [], [pid 5224] set_robust_list(0x7efc0265e9a0, 24 [pid 5223] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5224] <... set_robust_list resumed>) = 0 [pid 5223] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5224] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5223] <... futex resumed>) = 0 [pid 5224] memfd_create("syzkaller", 0 [pid 5223] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5224] <... memfd_create resumed>) = 3 [pid 5224] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5224] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5224] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5224] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5224] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5224] close(3) = 0 [pid 5224] mkdir("./file0", 0777) = 0 [pid 5224] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5224] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5224] chdir("./file0") = 0 [pid 5224] ioctl(4, LOOP_CLR_FD) = 0 [pid 5224] close(4) = 0 [pid 5224] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5223] <... futex resumed>) = 0 [pid 5223] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5223] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5224] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5224] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5223] <... futex resumed>) = 0 [pid 5224] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5223] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5224] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5223] <... futex resumed>) = 0 [pid 5223] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5224] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5224] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5224] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5223] <... futex resumed>) = 0 [pid 5223] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5224] <... futex resumed>) = 0 [pid 5223] <... futex resumed>) = 1 [pid 5224] ftruncate(5, 33587195) = 0 [pid 5224] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5224] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5223] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5223] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5224] <... futex resumed>) = 0 [pid 5223] <... futex resumed>) = 1 [pid 5224] sendfile(4, 5, NULL, 4) = 4 [pid 5224] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5224] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5223] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5223] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5224] <... futex resumed>) = 0 [pid 5223] <... futex resumed>) = 1 [pid 5224] sendfile(4, 5, NULL, 281474978811909 [pid 5223] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5223] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5223] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5223] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5223] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5227 attached => {parent_tid=[103]}, 88) = 103 [pid 5227] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5223] rt_sigprocmask(SIG_SETMASK, [], [pid 5227] <... rseq resumed>) = 0 [pid 5223] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5227] set_robust_list(0x7efbfa33d9a0, 24 [pid 5223] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5227] <... set_robust_list resumed>) = 0 [pid 5223] <... futex resumed>) = 0 [pid 5227] rt_sigprocmask(SIG_SETMASK, [], [pid 5223] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5227] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5227] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [ 100.945054][ T5224] loop0: detected capacity change from 0 to 2048 [pid 5227] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5223] <... futex resumed>) = 0 [pid 5227] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5223] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5223] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5227] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5227] prlimit64(0, RLIMIT_CPU, NULL, [pid 5223] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 101.008957][ T5227] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 101.024539][ T5227] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 67 with error 28 [ 101.037007][ T5227] EXT4-fs (loop0): This should not happen!! Data will be lost [ 101.037007][ T5227] [ 101.046714][ T5227] EXT4-fs (loop0): Total free blocks count 0 [ 101.052713][ T5227] EXT4-fs (loop0): Free/Dirty block details [pid 5227] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5227] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 101.058775][ T5227] EXT4-fs (loop0): free_blocks=2415919104 [ 101.064703][ T5227] EXT4-fs (loop0): dirty_blocks=80 [ 101.069866][ T5227] EXT4-fs (loop0): Block reservation details [ 101.075871][ T5227] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 101.084732][ T5224] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 68 with max blocks 1 with error 28 [pid 5227] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5224] <... sendfile resumed>) = 139264 [pid 5224] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5224] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5223] close(3) = 0 [pid 5223] close(4) = 0 [pid 5223] close(5) = 0 [pid 5223] close(6) = -1 EBADF (Bad file descriptor) [pid 5223] close(7) = -1 EBADF (Bad file descriptor) [pid 5223] close(8) = -1 EBADF (Bad file descriptor) [pid 5223] close(9) = -1 EBADF (Bad file descriptor) [pid 5223] close(10) = -1 EBADF (Bad file descriptor) [pid 5223] close(11) = -1 EBADF (Bad file descriptor) [pid 5223] close(12) = -1 EBADF (Bad file descriptor) [pid 5223] close(13) = -1 EBADF (Bad file descriptor) [pid 5223] close(14) = -1 EBADF (Bad file descriptor) [pid 5223] close(15) = -1 EBADF (Bad file descriptor) [pid 5223] close(16) = -1 EBADF (Bad file descriptor) [pid 5223] close(17) = -1 EBADF (Bad file descriptor) [pid 5223] close(18) = -1 EBADF (Bad file descriptor) [pid 5223] close(19) = -1 EBADF (Bad file descriptor) [pid 5223] close(20) = -1 EBADF (Bad file descriptor) [pid 5223] close(21) = -1 EBADF (Bad file descriptor) [pid 5223] close(22) = -1 EBADF (Bad file descriptor) [pid 5223] close(23) = -1 EBADF (Bad file descriptor) [pid 5223] close(24) = -1 EBADF (Bad file descriptor) [pid 5223] close(25) = -1 EBADF (Bad file descriptor) [pid 5223] close(26) = -1 EBADF (Bad file descriptor) [pid 5223] close(27) = -1 EBADF (Bad file descriptor) [pid 5223] close(28) = -1 EBADF (Bad file descriptor) [pid 5223] close(29) = -1 EBADF (Bad file descriptor) [pid 5223] exit_group(0) = ? [pid 5227] <... futex resumed>) = ? [pid 5224] <... futex resumed>) = ? [pid 5227] +++ exited with 0 +++ [pid 5224] +++ exited with 0 +++ [pid 5223] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=101, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5046] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./33/binderfs") = 0 [ 101.102332][ T5224] EXT4-fs (loop0): This should not happen!! Data will be lost [ 101.102332][ T5224] [pid 5046] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./33/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./33/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./33") = 0 [pid 5046] mkdir("./34", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5228 attached , child_tidptr=0x555555a9c690) = 104 [pid 5228] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5228] chdir("./34") = 0 [pid 5228] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5228] setpgid(0, 0) = 0 [pid 5228] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5228] write(3, "1000", 4) = 4 [pid 5228] close(3) = 0 [pid 5228] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5228] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5228] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5228] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5228] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5228] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5228] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5228] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5228] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5229 attached => {parent_tid=[105]}, 88) = 105 [pid 5229] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053 [pid 5228] rt_sigprocmask(SIG_SETMASK, [], [pid 5229] <... rseq resumed>) = 0 [pid 5228] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5229] set_robust_list(0x7efc0265e9a0, 24 [pid 5228] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5229] <... set_robust_list resumed>) = 0 [pid 5229] rt_sigprocmask(SIG_SETMASK, [], [pid 5228] <... futex resumed>) = 0 [pid 5229] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5228] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5229] memfd_create("syzkaller", 0) = 3 [pid 5229] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5229] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5229] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5229] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5229] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5229] close(3) = 0 [pid 5229] mkdir("./file0", 0777) = 0 [pid 5229] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5229] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5229] chdir("./file0") = 0 [pid 5229] ioctl(4, LOOP_CLR_FD) = 0 [pid 5229] close(4) = 0 [pid 5229] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5228] <... futex resumed>) = 0 [pid 5228] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5229] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5228] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5229] <... open resumed>) = 4 [pid 5229] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5228] <... futex resumed>) = 0 [pid 5229] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5228] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5229] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5229] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5228] <... futex resumed>) = 0 [pid 5229] <... open resumed>) = 5 [pid 5228] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5229] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5228] <... futex resumed>) = 0 [pid 5228] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5229] ftruncate(5, 33587195 [pid 5228] <... futex resumed>) = 0 [pid 5229] <... ftruncate resumed>) = 0 [pid 5228] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5229] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5228] <... futex resumed>) = 0 [pid 5228] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5229] sendfile(4, 5, NULL, 4 [pid 5228] <... futex resumed>) = 0 [pid 5229] <... sendfile resumed>) = 4 [ 101.216336][ T5229] loop0: detected capacity change from 0 to 2048 [pid 5228] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5229] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5229] <... futex resumed>) = 0 [pid 5228] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5229] sendfile(4, 5, NULL, 281474978811909 [pid 5228] <... futex resumed>) = 0 [pid 5228] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5228] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5228] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5228] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5228] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5232 attached [pid 5232] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5228] <... clone3 resumed> => {parent_tid=[106]}, 88) = 106 [pid 5232] <... rseq resumed>) = 0 [pid 5228] rt_sigprocmask(SIG_SETMASK, [], [pid 5232] set_robust_list(0x7efbfa33d9a0, 24 [pid 5228] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5232] <... set_robust_list resumed>) = 0 [pid 5228] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5232] rt_sigprocmask(SIG_SETMASK, [], [pid 5228] <... futex resumed>) = 0 [pid 5232] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5228] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5232] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5232] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] <... futex resumed>) = 0 [pid 5232] <... futex resumed>) = 1 [pid 5232] prlimit64(0, RLIMIT_CPU, NULL, [pid 5228] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 101.290688][ T5232] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 101.306583][ T5232] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 79 with error 28 [ 101.319231][ T5232] EXT4-fs (loop0): This should not happen!! Data will be lost [ 101.319231][ T5232] [ 101.330240][ T5232] EXT4-fs (loop0): Total free blocks count 0 [pid 5228] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5232] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5232] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 101.336464][ T5232] EXT4-fs (loop0): Free/Dirty block details [ 101.343408][ T5232] EXT4-fs (loop0): free_blocks=2415919104 [ 101.349280][ T5232] EXT4-fs (loop0): dirty_blocks=80 [ 101.354425][ T5232] EXT4-fs (loop0): Block reservation details [ 101.360605][ T5232] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 101.369630][ T5229] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 80 with max blocks 1 with error 28 [ 101.382630][ T5229] EXT4-fs (loop0): This should not happen!! Data will be lost [pid 5232] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5229] <... sendfile resumed>) = 163840 [pid 5229] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5229] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5228] close(3) = 0 [pid 5228] close(4) = 0 [pid 5228] close(5) = 0 [pid 5228] close(6) = -1 EBADF (Bad file descriptor) [pid 5228] close(7) = -1 EBADF (Bad file descriptor) [pid 5228] close(8) = -1 EBADF (Bad file descriptor) [pid 5228] close(9) = -1 EBADF (Bad file descriptor) [pid 5228] close(10) = -1 EBADF (Bad file descriptor) [pid 5228] close(11) = -1 EBADF (Bad file descriptor) [pid 5228] close(12) = -1 EBADF (Bad file descriptor) [pid 5228] close(13) = -1 EBADF (Bad file descriptor) [pid 5228] close(14) = -1 EBADF (Bad file descriptor) [pid 5228] close(15) = -1 EBADF (Bad file descriptor) [pid 5228] close(16) = -1 EBADF (Bad file descriptor) [pid 5228] close(17) = -1 EBADF (Bad file descriptor) [pid 5228] close(18) = -1 EBADF (Bad file descriptor) [pid 5228] close(19) = -1 EBADF (Bad file descriptor) [pid 5228] close(20) = -1 EBADF (Bad file descriptor) [pid 5228] close(21) = -1 EBADF (Bad file descriptor) [pid 5228] close(22) = -1 EBADF (Bad file descriptor) [pid 5228] close(23) = -1 EBADF (Bad file descriptor) [pid 5228] close(24) = -1 EBADF (Bad file descriptor) [pid 5228] close(25) = -1 EBADF (Bad file descriptor) [pid 5228] close(26) = -1 EBADF (Bad file descriptor) [pid 5228] close(27) = -1 EBADF (Bad file descriptor) [pid 5228] close(28) = -1 EBADF (Bad file descriptor) [pid 5228] close(29) = -1 EBADF (Bad file descriptor) [pid 5228] exit_group(0 [pid 5232] <... futex resumed>) = ? [pid 5232] +++ exited with 0 +++ [pid 5229] <... futex resumed>) = ? [pid 5229] +++ exited with 0 +++ [pid 5228] <... exit_group resumed>) = ? [pid 5228] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=104, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./34/binderfs") = 0 [ 101.382630][ T5229] [pid 5046] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./34/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./34/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./34") = 0 [pid 5046] mkdir("./35", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9c690) = 107 ./strace-static-x86_64: Process 5233 attached [pid 5233] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5233] chdir("./35") = 0 [pid 5233] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5233] setpgid(0, 0) = 0 [pid 5233] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5233] write(3, "1000", 4) = 4 [pid 5233] close(3) = 0 [pid 5233] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5233] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5233] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5233] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5233] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5233] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5233] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5233] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5233] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5234 attached => {parent_tid=[108]}, 88) = 108 [pid 5234] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5233] rt_sigprocmask(SIG_SETMASK, [], [pid 5234] set_robust_list(0x7efc0265e9a0, 24 [pid 5233] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5234] <... set_robust_list resumed>) = 0 [pid 5233] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5234] rt_sigprocmask(SIG_SETMASK, [], [pid 5233] <... futex resumed>) = 0 [pid 5234] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5233] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5234] memfd_create("syzkaller", 0) = 3 [pid 5234] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5234] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5234] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5234] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5234] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5234] close(3) = 0 [pid 5234] mkdir("./file0", 0777) = 0 [pid 5234] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5234] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5234] chdir("./file0") = 0 [pid 5234] ioctl(4, LOOP_CLR_FD) = 0 [pid 5234] close(4) = 0 [pid 5234] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5233] <... futex resumed>) = 0 [pid 5234] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5233] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5233] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5234] <... open resumed>) = 4 [pid 5234] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5233] <... futex resumed>) = 0 [pid 5233] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5234] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5233] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5234] <... open resumed>) = 5 [pid 5234] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5234] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5233] <... futex resumed>) = 0 [pid 5233] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5234] <... futex resumed>) = 0 [pid 5233] <... futex resumed>) = 1 [pid 5234] ftruncate(5, 33587195) = 0 [pid 5233] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5234] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5233] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5234] <... futex resumed>) = 0 [pid 5233] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5234] sendfile(4, 5, NULL, 4 [pid 5233] <... futex resumed>) = 0 [pid 5233] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5234] <... sendfile resumed>) = 4 [pid 5234] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5233] <... futex resumed>) = 0 [pid 5233] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5233] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5233] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5234] sendfile(4, 5, NULL, 281474978811909 [pid 5233] <... mmap resumed>) = 0x7efbfa31d000 [pid 5233] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [ 101.513082][ T5234] loop0: detected capacity change from 0 to 2048 [pid 5233] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5233] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5237 attached => {parent_tid=[109]}, 88) = 109 [pid 5237] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5237] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5237] rt_sigprocmask(SIG_SETMASK, [], [pid 5233] rt_sigprocmask(SIG_SETMASK, [], [pid 5237] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5237] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5233] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5233] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5237] <... futex resumed>) = 0 [pid 5233] <... futex resumed>) = 1 [pid 5237] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000 [pid 5233] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5237] <... mmap resumed>) = 0x20000000 [pid 5237] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5233] <... futex resumed>) = 0 [pid 5233] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5237] prlimit64(0, RLIMIT_CPU, NULL, [ 101.590461][ T5234] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 101.607371][ T5234] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 80 with max blocks 1 with error 28 [ 101.619922][ T5234] EXT4-fs (loop0): This should not happen!! Data will be lost [ 101.619922][ T5234] [ 101.630777][ T5234] EXT4-fs (loop0): Total free blocks count 0 [pid 5233] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5234] <... sendfile resumed>) = 163840 [pid 5234] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 101.636827][ T5234] EXT4-fs (loop0): Free/Dirty block details [ 101.643033][ T5234] EXT4-fs (loop0): free_blocks=2415919104 [ 101.650800][ T5234] EXT4-fs (loop0): dirty_blocks=96 [ 101.655985][ T5234] EXT4-fs (loop0): Block reservation details [ 101.662108][ T5234] EXT4-fs (loop0): i_reserved_data_blocks=6 [ 101.669286][ T5237] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 80 with error 28 [ 101.681636][ T5237] EXT4-fs (loop0): This should not happen!! Data will be lost [pid 5234] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5237] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5237] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5237] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5233] close(3) = 0 [pid 5233] close(4) = 0 [pid 5233] close(5) = 0 [pid 5233] close(6) = -1 EBADF (Bad file descriptor) [pid 5233] close(7) = -1 EBADF (Bad file descriptor) [pid 5233] close(8) = -1 EBADF (Bad file descriptor) [pid 5233] close(9) = -1 EBADF (Bad file descriptor) [pid 5233] close(10) = -1 EBADF (Bad file descriptor) [pid 5233] close(11) = -1 EBADF (Bad file descriptor) [pid 5233] close(12) = -1 EBADF (Bad file descriptor) [pid 5233] close(13) = -1 EBADF (Bad file descriptor) [pid 5233] close(14) = -1 EBADF (Bad file descriptor) [pid 5233] close(15) = -1 EBADF (Bad file descriptor) [pid 5233] close(16) = -1 EBADF (Bad file descriptor) [pid 5233] close(17) = -1 EBADF (Bad file descriptor) [pid 5233] close(18) = -1 EBADF (Bad file descriptor) [pid 5233] close(19) = -1 EBADF (Bad file descriptor) [pid 5233] close(20) = -1 EBADF (Bad file descriptor) [pid 5233] close(21) = -1 EBADF (Bad file descriptor) [pid 5233] close(22) = -1 EBADF (Bad file descriptor) [pid 5233] close(23) = -1 EBADF (Bad file descriptor) [pid 5233] close(24) = -1 EBADF (Bad file descriptor) [pid 5233] close(25) = -1 EBADF (Bad file descriptor) [pid 5233] close(26) = -1 EBADF (Bad file descriptor) [pid 5233] close(27) = -1 EBADF (Bad file descriptor) [pid 5233] close(28) = -1 EBADF (Bad file descriptor) [pid 5233] close(29) = -1 EBADF (Bad file descriptor) [pid 5233] exit_group(0) = ? [pid 5237] <... futex resumed>) = ? [pid 5234] <... futex resumed>) = ? [pid 5237] +++ exited with 0 +++ [pid 5234] +++ exited with 0 +++ [pid 5233] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=107, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5046] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./35/binderfs") = 0 [ 101.681636][ T5237] [pid 5046] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./35/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./35/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./35") = 0 [pid 5046] mkdir("./36", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5238 attached , child_tidptr=0x555555a9c690) = 110 [pid 5238] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5238] chdir("./36") = 0 [pid 5238] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5238] setpgid(0, 0) = 0 [pid 5238] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5238] write(3, "1000", 4) = 4 [pid 5238] close(3) = 0 [pid 5238] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5238] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5238] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5238] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5238] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5238] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5238] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5238] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5238] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5239 attached [pid 5239] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5239] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5239] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5239] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5238] <... clone3 resumed> => {parent_tid=[111]}, 88) = 111 [pid 5238] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5238] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5239] <... futex resumed>) = 0 [pid 5239] memfd_create("syzkaller", 0 [pid 5238] <... futex resumed>) = 1 [pid 5238] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5239] <... memfd_create resumed>) = 3 [pid 5239] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5239] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5239] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5239] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5239] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5239] close(3) = 0 [pid 5239] mkdir("./file0", 0777) = 0 [pid 5239] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5239] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5239] chdir("./file0") = 0 [pid 5239] ioctl(4, LOOP_CLR_FD) = 0 [pid 5239] close(4) = 0 [pid 5239] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5239] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5238] <... futex resumed>) = 0 [pid 5238] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5238] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5239] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5239] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5239] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5238] <... futex resumed>) = 0 [pid 5238] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5238] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5239] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5239] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5238] <... futex resumed>) = 0 [ 101.818315][ T5239] loop0: detected capacity change from 0 to 2048 [pid 5239] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5238] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5239] <... futex resumed>) = 0 [pid 5238] <... futex resumed>) = 1 [pid 5239] ftruncate(5, 33587195 [pid 5238] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5239] <... ftruncate resumed>) = 0 [pid 5239] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5238] <... futex resumed>) = 0 [pid 5239] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5238] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5239] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5238] <... futex resumed>) = 0 [pid 5239] sendfile(4, 5, NULL, 4 [pid 5238] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5239] <... sendfile resumed>) = 4 [pid 5239] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5238] <... futex resumed>) = 0 [pid 5238] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5238] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5238] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5238] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5238] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5238] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0} => {parent_tid=[112]}, 88) = 112 [pid 5238] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5238] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5238] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5239] <... futex resumed>) = 1 [pid 5239] sendfile(4, 5, NULL, 281474978811909./strace-static-x86_64: Process 5242 attached [pid 5242] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5242] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5242] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5242] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5242] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5238] <... futex resumed>) = 0 [pid 5238] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5238] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5242] prlimit64(0, RLIMIT_CPU, NULL, [pid 5238] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5238] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [ 101.906287][ T5242] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 101.921628][ T5242] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 57 with error 28 [ 101.934167][ T5242] EXT4-fs (loop0): This should not happen!! Data will be lost [ 101.934167][ T5242] [ 101.945127][ T5242] EXT4-fs (loop0): Total free blocks count 0 [pid 5242] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5242] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 101.951507][ T5242] EXT4-fs (loop0): Free/Dirty block details [ 101.957915][ T5242] EXT4-fs (loop0): free_blocks=2415919104 [ 101.963680][ T5242] EXT4-fs (loop0): dirty_blocks=64 [ 101.969276][ T5242] EXT4-fs (loop0): Block reservation details [ 101.975278][ T5242] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 101.985937][ T5239] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 58 with max blocks 1 with error 28 [ 101.999101][ T5239] EXT4-fs (loop0): This should not happen!! Data will be lost [pid 5242] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5239] <... sendfile resumed>) = 118784 [pid 5239] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5239] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5238] close(3) = 0 [pid 5238] close(4) = 0 [pid 5238] close(5) = 0 [pid 5238] close(6) = -1 EBADF (Bad file descriptor) [pid 5238] close(7) = -1 EBADF (Bad file descriptor) [pid 5238] close(8) = -1 EBADF (Bad file descriptor) [pid 5238] close(9) = -1 EBADF (Bad file descriptor) [pid 5238] close(10) = -1 EBADF (Bad file descriptor) [pid 5238] close(11) = -1 EBADF (Bad file descriptor) [pid 5238] close(12) = -1 EBADF (Bad file descriptor) [pid 5238] close(13) = -1 EBADF (Bad file descriptor) [pid 5238] close(14) = -1 EBADF (Bad file descriptor) [pid 5238] close(15) = -1 EBADF (Bad file descriptor) [pid 5238] close(16) = -1 EBADF (Bad file descriptor) [pid 5238] close(17) = -1 EBADF (Bad file descriptor) [pid 5238] close(18) = -1 EBADF (Bad file descriptor) [pid 5238] close(19) = -1 EBADF (Bad file descriptor) [pid 5238] close(20) = -1 EBADF (Bad file descriptor) [pid 5238] close(21) = -1 EBADF (Bad file descriptor) [pid 5238] close(22) = -1 EBADF (Bad file descriptor) [pid 5238] close(23) = -1 EBADF (Bad file descriptor) [pid 5238] close(24) = -1 EBADF (Bad file descriptor) [pid 5238] close(25) = -1 EBADF (Bad file descriptor) [pid 5238] close(26) = -1 EBADF (Bad file descriptor) [pid 5238] close(27) = -1 EBADF (Bad file descriptor) [pid 5238] close(28) = -1 EBADF (Bad file descriptor) [pid 5238] close(29) = -1 EBADF (Bad file descriptor) [pid 5238] exit_group(0 [pid 5242] <... futex resumed>) = ? [pid 5239] <... futex resumed>) = ? [pid 5238] <... exit_group resumed>) = ? [pid 5242] +++ exited with 0 +++ [pid 5239] +++ exited with 0 +++ [pid 5238] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=110, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5046] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./36/binderfs") = 0 [ 101.999101][ T5239] [pid 5046] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./36/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./36/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./36") = 0 [pid 5046] mkdir("./37", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5243 attached [pid 5243] set_robust_list(0x555555a9c6a0, 24 [pid 5046] <... clone resumed>, child_tidptr=0x555555a9c690) = 113 [pid 5243] <... set_robust_list resumed>) = 0 [pid 5243] chdir("./37") = 0 [pid 5243] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5243] setpgid(0, 0) = 0 [pid 5243] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5243] write(3, "1000", 4) = 4 [pid 5243] close(3) = 0 [pid 5243] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5243] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5243] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5243] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5243] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5243] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5243] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5243] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5243] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5244 attached => {parent_tid=[114]}, 88) = 114 [pid 5244] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5243] rt_sigprocmask(SIG_SETMASK, [], [pid 5244] set_robust_list(0x7efc0265e9a0, 24 [pid 5243] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5244] <... set_robust_list resumed>) = 0 [pid 5243] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] rt_sigprocmask(SIG_SETMASK, [], [pid 5243] <... futex resumed>) = 0 [pid 5244] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5243] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5244] memfd_create("syzkaller", 0) = 3 [pid 5244] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5244] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5244] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5244] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5244] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5244] close(3) = 0 [pid 5244] mkdir("./file0", 0777) = 0 [pid 5244] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5244] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5244] chdir("./file0") = 0 [pid 5244] ioctl(4, LOOP_CLR_FD) = 0 [pid 5244] close(4) = 0 [pid 5244] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5244] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5243] <... futex resumed>) = 0 [pid 5243] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] <... futex resumed>) = 0 [pid 5243] <... futex resumed>) = 1 [pid 5244] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5243] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5244] <... open resumed>) = 4 [pid 5244] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5243] <... futex resumed>) = 0 [pid 5243] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5243] <... futex resumed>) = 0 [pid 5243] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5244] <... open resumed>) = 5 [pid 5244] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5244] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5243] <... futex resumed>) = 0 [pid 5243] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] <... futex resumed>) = 0 [pid 5243] <... futex resumed>) = 1 [pid 5244] ftruncate(5, 33587195) = 0 [pid 5244] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5244] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5243] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5243] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] <... futex resumed>) = 0 [pid 5243] <... futex resumed>) = 1 [pid 5244] sendfile(4, 5, NULL, 4) = 4 [pid 5244] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5244] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5243] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5243] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] <... futex resumed>) = 0 [pid 5243] <... futex resumed>) = 1 [pid 5244] sendfile(4, 5, NULL, 281474978811909 [pid 5243] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5243] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5243] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5243] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 102.137110][ T5244] loop0: detected capacity change from 0 to 2048 [pid 5243] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5247 attached [pid 5247] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5247] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5247] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5247] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5243] <... clone3 resumed> => {parent_tid=[115]}, 88) = 115 [pid 5243] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5243] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5247] <... futex resumed>) = 0 [pid 5247] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5247] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5247] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5243] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5243] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5247] <... futex resumed>) = 0 [pid 5247] prlimit64(0, RLIMIT_CPU, NULL, [ 102.208196][ T5247] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 102.223432][ T5247] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 105 with error 28 [ 102.236402][ T5247] EXT4-fs (loop0): This should not happen!! Data will be lost [ 102.236402][ T5247] [ 102.246215][ T5247] EXT4-fs (loop0): Total free blocks count 0 [ 102.252666][ T5247] EXT4-fs (loop0): Free/Dirty block details [pid 5243] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5247] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5247] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 102.258637][ T5247] EXT4-fs (loop0): free_blocks=2415919104 [ 102.264386][ T5247] EXT4-fs (loop0): dirty_blocks=112 [ 102.269671][ T5247] EXT4-fs (loop0): Block reservation details [ 102.275735][ T5247] EXT4-fs (loop0): i_reserved_data_blocks=7 [ 102.287330][ T5244] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 106 with max blocks 1 with error 28 [ 102.300600][ T5244] EXT4-fs (loop0): This should not happen!! Data will be lost [pid 5247] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5244] <... sendfile resumed>) = 217088 [pid 5244] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5244] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5243] close(3) = 0 [pid 5243] close(4) = 0 [pid 5243] close(5) = 0 [pid 5243] close(6) = -1 EBADF (Bad file descriptor) [pid 5243] close(7) = -1 EBADF (Bad file descriptor) [pid 5243] close(8) = -1 EBADF (Bad file descriptor) [pid 5243] close(9) = -1 EBADF (Bad file descriptor) [pid 5243] close(10) = -1 EBADF (Bad file descriptor) [pid 5243] close(11) = -1 EBADF (Bad file descriptor) [pid 5243] close(12) = -1 EBADF (Bad file descriptor) [pid 5243] close(13) = -1 EBADF (Bad file descriptor) [pid 5243] close(14) = -1 EBADF (Bad file descriptor) [pid 5243] close(15) = -1 EBADF (Bad file descriptor) [pid 5243] close(16) = -1 EBADF (Bad file descriptor) [pid 5243] close(17) = -1 EBADF (Bad file descriptor) [pid 5243] close(18) = -1 EBADF (Bad file descriptor) [pid 5243] close(19) = -1 EBADF (Bad file descriptor) [pid 5243] close(20) = -1 EBADF (Bad file descriptor) [pid 5243] close(21) = -1 EBADF (Bad file descriptor) [pid 5243] close(22) = -1 EBADF (Bad file descriptor) [pid 5243] close(23) = -1 EBADF (Bad file descriptor) [pid 5243] close(24) = -1 EBADF (Bad file descriptor) [pid 5243] close(25) = -1 EBADF (Bad file descriptor) [pid 5243] close(26) = -1 EBADF (Bad file descriptor) [pid 5243] close(27) = -1 EBADF (Bad file descriptor) [pid 5243] close(28) = -1 EBADF (Bad file descriptor) [pid 5243] close(29) = -1 EBADF (Bad file descriptor) [pid 5243] exit_group(0 [pid 5247] <... futex resumed>) = ? [pid 5244] <... futex resumed>) = ? [pid 5243] <... exit_group resumed>) = ? [pid 5247] +++ exited with 0 +++ [pid 5244] +++ exited with 0 +++ [pid 5243] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=113, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5046] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./37/binderfs") = 0 [ 102.300600][ T5244] [pid 5046] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./37/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./37/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./37") = 0 [pid 5046] mkdir("./38", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5248 attached [pid 5248] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5248] chdir("./38" [pid 5046] <... clone resumed>, child_tidptr=0x555555a9c690) = 116 [pid 5248] <... chdir resumed>) = 0 [pid 5248] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5248] setpgid(0, 0) = 0 [pid 5248] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5248] write(3, "1000", 4) = 4 [pid 5248] close(3) = 0 [pid 5248] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5248] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5248] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5248] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5248] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5248] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5248] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5248] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5248] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5249 attached [pid 5249] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053 [pid 5248] <... clone3 resumed> => {parent_tid=[117]}, 88) = 117 [pid 5249] <... rseq resumed>) = 0 [pid 5248] rt_sigprocmask(SIG_SETMASK, [], [pid 5249] set_robust_list(0x7efc0265e9a0, 24 [pid 5248] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5248] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5248] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5249] <... set_robust_list resumed>) = 0 [pid 5249] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5249] memfd_create("syzkaller", 0) = 3 [pid 5249] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5249] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5249] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5249] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5249] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5249] close(3) = 0 [pid 5249] mkdir("./file0", 0777) = 0 [pid 5249] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5249] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5249] chdir("./file0") = 0 [pid 5249] ioctl(4, LOOP_CLR_FD) = 0 [pid 5249] close(4) = 0 [pid 5249] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5248] <... futex resumed>) = 0 [pid 5248] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5248] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5249] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5249] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5248] <... futex resumed>) = 0 [pid 5249] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5248] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5249] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5248] <... futex resumed>) = 0 [pid 5249] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5248] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5249] <... open resumed>) = 5 [pid 5249] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5248] <... futex resumed>) = 0 [pid 5249] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5248] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5249] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5248] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5249] ftruncate(5, 33587195) = 0 [pid 5249] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5248] <... futex resumed>) = 0 [pid 5249] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5248] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5249] <... futex resumed>) = 0 [pid 5249] sendfile(4, 5, NULL, 4) = 4 [pid 5249] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5249] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5248] <... futex resumed>) = 1 [pid 5248] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5248] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5249] <... futex resumed>) = 0 [ 102.435692][ T5249] loop0: detected capacity change from 0 to 2048 [pid 5249] sendfile(4, 5, NULL, 281474978811909 [pid 5248] <... futex resumed>) = 1 [pid 5248] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5248] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5248] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5248] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5248] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5252 attached => {parent_tid=[118]}, 88) = 118 [pid 5252] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5248] rt_sigprocmask(SIG_SETMASK, [], [pid 5252] set_robust_list(0x7efbfa33d9a0, 24 [pid 5248] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5252] <... set_robust_list resumed>) = 0 [pid 5248] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5252] rt_sigprocmask(SIG_SETMASK, [], [pid 5248] <... futex resumed>) = 0 [pid 5252] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5248] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5252] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5252] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5248] <... futex resumed>) = 0 [pid 5252] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5248] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5252] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5248] <... futex resumed>) = 0 [pid 5248] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5252] prlimit64(0, RLIMIT_CPU, NULL, [pid 5248] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 102.528516][ T5249] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 102.544062][ T5249] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 144 with max blocks 1 with error 28 [ 102.556551][ T5249] EXT4-fs (loop0): This should not happen!! Data will be lost [ 102.556551][ T5249] [ 102.566278][ T5249] EXT4-fs (loop0): Total free blocks count 0 [ 102.572298][ T5249] EXT4-fs (loop0): Free/Dirty block details [pid 5249] <... sendfile resumed>) = 294912 [pid 5249] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5249] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5252] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5252] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5252] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5248] close(3) = 0 [pid 5248] close(4) = 0 [pid 5248] close(5) = 0 [pid 5248] close(6) = -1 EBADF (Bad file descriptor) [pid 5248] close(7) = -1 EBADF (Bad file descriptor) [pid 5248] close(8) = -1 EBADF (Bad file descriptor) [pid 5248] close(9) = -1 EBADF (Bad file descriptor) [pid 5248] close(10) = -1 EBADF (Bad file descriptor) [pid 5248] close(11) = -1 EBADF (Bad file descriptor) [pid 5248] close(12) = -1 EBADF (Bad file descriptor) [pid 5248] close(13) = -1 EBADF (Bad file descriptor) [pid 5248] close(14) = -1 EBADF (Bad file descriptor) [pid 5248] close(15) = -1 EBADF (Bad file descriptor) [pid 5248] close(16) = -1 EBADF (Bad file descriptor) [pid 5248] close(17) = -1 EBADF (Bad file descriptor) [pid 5248] close(18) = -1 EBADF (Bad file descriptor) [pid 5248] close(19) = -1 EBADF (Bad file descriptor) [pid 5248] close(20) = -1 EBADF (Bad file descriptor) [pid 5248] close(21) = -1 EBADF (Bad file descriptor) [pid 5248] close(22) = -1 EBADF (Bad file descriptor) [pid 5248] close(23) = -1 EBADF (Bad file descriptor) [pid 5248] close(24) = -1 EBADF (Bad file descriptor) [pid 5248] close(25) = -1 EBADF (Bad file descriptor) [pid 5248] close(26) = -1 EBADF (Bad file descriptor) [pid 5248] close(27) = -1 EBADF (Bad file descriptor) [pid 5248] close(28) = -1 EBADF (Bad file descriptor) [pid 5248] close(29) = -1 EBADF (Bad file descriptor) [pid 5248] exit_group(0 [pid 5249] <... futex resumed>) = ? [pid 5249] +++ exited with 0 +++ [pid 5252] <... futex resumed>) = ? [pid 5252] +++ exited with 0 +++ [pid 5248] <... exit_group resumed>) = ? [pid 5248] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=116, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./38/binderfs") = 0 [ 102.578733][ T5249] EXT4-fs (loop0): free_blocks=2415919104 [ 102.584479][ T5249] EXT4-fs (loop0): dirty_blocks=160 [ 102.589726][ T5249] EXT4-fs (loop0): Block reservation details [ 102.595715][ T5249] EXT4-fs (loop0): i_reserved_data_blocks=10 [ 102.602378][ T5252] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 144 with error 28 [ 102.616275][ T5252] EXT4-fs (loop0): This should not happen!! Data will be lost [ 102.616275][ T5252] [pid 5046] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./38/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./38/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./38") = 0 [pid 5046] mkdir("./39", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5253 attached , child_tidptr=0x555555a9c690) = 119 [pid 5253] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5253] chdir("./39") = 0 [pid 5253] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5253] setpgid(0, 0) = 0 [pid 5253] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5253] write(3, "1000", 4) = 4 [pid 5253] close(3) = 0 [pid 5253] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5253] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5253] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5253] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5253] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5253] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5253] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5253] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5253] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0} => {parent_tid=[120]}, 88) = 120 [pid 5253] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5253] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5253] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5254 attached [pid 5254] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5254] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5254] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5254] memfd_create("syzkaller", 0) = 3 [pid 5254] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5254] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5254] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5254] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5254] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5254] close(3) = 0 [pid 5254] mkdir("./file0", 0777) = 0 [pid 5254] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5254] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5254] chdir("./file0") = 0 [pid 5254] ioctl(4, LOOP_CLR_FD) = 0 [pid 5254] close(4) = 0 [pid 5254] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5254] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5253] <... futex resumed>) = 0 [pid 5253] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5254] <... futex resumed>) = 0 [pid 5254] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5254] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 102.725950][ T5254] loop0: detected capacity change from 0 to 2048 [pid 5254] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5253] <... futex resumed>) = 1 [pid 5253] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5253] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5254] <... futex resumed>) = 0 [pid 5253] <... futex resumed>) = 1 [pid 5254] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5254] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5254] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5253] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5253] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5254] <... futex resumed>) = 0 [pid 5253] <... futex resumed>) = 1 [pid 5254] ftruncate(5, 33587195 [pid 5253] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5254] <... ftruncate resumed>) = 0 [pid 5254] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5254] <... futex resumed>) = 0 [pid 5253] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5254] sendfile(4, 5, NULL, 4 [pid 5253] <... futex resumed>) = 0 [pid 5254] <... sendfile resumed>) = 4 [pid 5253] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5254] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5253] <... futex resumed>) = 0 [pid 5253] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5253] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5253] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5254] sendfile(4, 5, NULL, 281474978811909 [pid 5253] <... mmap resumed>) = 0x7efbfa31d000 [pid 5253] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5253] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5253] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5257 attached => {parent_tid=[121]}, 88) = 121 [pid 5257] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5253] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5253] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5257] <... rseq resumed>) = 0 [pid 5253] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5257] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5257] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5257] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5257] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5253] <... futex resumed>) = 0 [pid 5253] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5253] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 102.810888][ T5257] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 102.826253][ T5257] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 27 with error 28 [ 102.838670][ T5257] EXT4-fs (loop0): This should not happen!! Data will be lost [ 102.838670][ T5257] [ 102.848955][ T5257] EXT4-fs (loop0): Total free blocks count 0 [ 102.854969][ T5257] EXT4-fs (loop0): Free/Dirty block details [pid 5257] prlimit64(0, RLIMIT_CPU, NULL, [pid 5253] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5257] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5257] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5257] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5254] <... sendfile resumed>) = 57344 [pid 5254] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5254] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5253] close(3) = 0 [pid 5253] close(4) = 0 [pid 5253] close(5) = 0 [pid 5253] close(6) = -1 EBADF (Bad file descriptor) [pid 5253] close(7) = -1 EBADF (Bad file descriptor) [pid 5253] close(8) = -1 EBADF (Bad file descriptor) [pid 5253] close(9) = -1 EBADF (Bad file descriptor) [pid 5253] close(10) = -1 EBADF (Bad file descriptor) [pid 5253] close(11) = -1 EBADF (Bad file descriptor) [pid 5253] close(12) = -1 EBADF (Bad file descriptor) [pid 5253] close(13) = -1 EBADF (Bad file descriptor) [pid 5253] close(14) = -1 EBADF (Bad file descriptor) [pid 5253] close(15) = -1 EBADF (Bad file descriptor) [pid 5253] close(16) = -1 EBADF (Bad file descriptor) [pid 5253] close(17) = -1 EBADF (Bad file descriptor) [pid 5253] close(18) = -1 EBADF (Bad file descriptor) [pid 5253] close(19) = -1 EBADF (Bad file descriptor) [pid 5253] close(20) = -1 EBADF (Bad file descriptor) [pid 5253] close(21) = -1 EBADF (Bad file descriptor) [pid 5253] close(22) = -1 EBADF (Bad file descriptor) [pid 5253] close(23) = -1 EBADF (Bad file descriptor) [pid 5253] close(24) = -1 EBADF (Bad file descriptor) [pid 5253] close(25) = -1 EBADF (Bad file descriptor) [pid 5253] close(26) = -1 EBADF (Bad file descriptor) [pid 5253] close(27) = -1 EBADF (Bad file descriptor) [pid 5253] close(28) = -1 EBADF (Bad file descriptor) [pid 5253] close(29) = -1 EBADF (Bad file descriptor) [pid 5253] exit_group(0) = ? [pid 5257] <... futex resumed>) = ? [pid 5254] <... futex resumed>) = ? [pid 5257] +++ exited with 0 +++ [pid 5254] +++ exited with 0 +++ [pid 5253] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=119, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5046] umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./39/binderfs") = 0 [ 102.862089][ T5257] EXT4-fs (loop0): free_blocks=2415919104 [ 102.867888][ T5257] EXT4-fs (loop0): dirty_blocks=32 [ 102.873027][ T5257] EXT4-fs (loop0): Block reservation details [ 102.879111][ T5257] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 102.888448][ T5254] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 28 with max blocks 1 with error 28 [ 102.900845][ T5254] EXT4-fs (loop0): This should not happen!! Data will be lost [ 102.900845][ T5254] [pid 5046] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./39/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./39/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./39") = 0 [pid 5046] mkdir("./40", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9c690) = 122 ./strace-static-x86_64: Process 5258 attached [pid 5258] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5258] chdir("./40") = 0 [pid 5258] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5258] setpgid(0, 0) = 0 [pid 5258] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5258] write(3, "1000", 4) = 4 [pid 5258] close(3) = 0 [pid 5258] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5258] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5258] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5258] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5258] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5258] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5258] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5258] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5258] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5259 attached [pid 5259] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053 [pid 5258] <... clone3 resumed> => {parent_tid=[123]}, 88) = 123 [pid 5259] <... rseq resumed>) = 0 [pid 5258] rt_sigprocmask(SIG_SETMASK, [], [pid 5259] set_robust_list(0x7efc0265e9a0, 24 [pid 5258] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5259] <... set_robust_list resumed>) = 0 [pid 5258] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5259] rt_sigprocmask(SIG_SETMASK, [], [pid 5258] <... futex resumed>) = 0 [pid 5259] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5258] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5259] memfd_create("syzkaller", 0) = 3 [pid 5259] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5259] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5259] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5259] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5259] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5259] close(3) = 0 [pid 5259] mkdir("./file0", 0777) = 0 [pid 5259] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5259] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5259] chdir("./file0") = 0 [pid 5259] ioctl(4, LOOP_CLR_FD) = 0 [pid 5259] close(4) = 0 [pid 5259] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5258] <... futex resumed>) = 0 [pid 5259] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5258] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5259] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5258] <... futex resumed>) = 0 [pid 5259] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5258] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5259] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5259] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5258] <... futex resumed>) = 0 [pid 5258] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5259] <... futex resumed>) = 0 [pid 5258] <... futex resumed>) = 1 [pid 5259] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5258] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5259] <... open resumed>) = 5 [pid 5259] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5259] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5258] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5258] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5259] <... futex resumed>) = 0 [pid 5259] ftruncate(5, 33587195) = 0 [pid 5259] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5259] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5258] <... futex resumed>) = 1 [pid 5258] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5258] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5259] <... futex resumed>) = 0 [pid 5259] sendfile(4, 5, NULL, 4) = 4 [pid 5258] <... futex resumed>) = 1 [pid 5259] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5258] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5259] <... futex resumed>) = 0 [pid 5258] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5259] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5258] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5259] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5258] <... futex resumed>) = 0 [pid 5259] sendfile(4, 5, NULL, 281474978811909 [pid 5258] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5258] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5258] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5258] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5258] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5262 attached => {parent_tid=[124]}, 88) = 124 [pid 5258] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 103.013522][ T5259] loop0: detected capacity change from 0 to 2048 [pid 5258] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5258] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5262] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5262] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5262] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5262] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5262] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5258] <... futex resumed>) = 0 [pid 5258] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5258] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5262] <... futex resumed>) = 1 [ 103.089641][ T5262] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 103.105672][ T5262] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 75 with error 28 [ 103.118962][ T5262] EXT4-fs (loop0): This should not happen!! Data will be lost [ 103.118962][ T5262] [ 103.129048][ T5262] EXT4-fs (loop0): Total free blocks count 0 [pid 5262] prlimit64(0, RLIMIT_CPU, NULL, [pid 5258] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5262] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5262] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 103.135291][ T5262] EXT4-fs (loop0): Free/Dirty block details [ 103.141574][ T5262] EXT4-fs (loop0): free_blocks=2415919104 [ 103.147490][ T5262] EXT4-fs (loop0): dirty_blocks=80 [ 103.152796][ T5262] EXT4-fs (loop0): Block reservation details [ 103.158856][ T5262] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 103.168348][ T5259] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 76 with max blocks 1 with error 28 [ 103.181235][ T5259] EXT4-fs (loop0): This should not happen!! Data will be lost [pid 5262] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5259] <... sendfile resumed>) = 155648 [pid 5259] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5259] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5258] close(3) = 0 [pid 5258] close(4) = 0 [pid 5258] close(5) = 0 [pid 5258] close(6) = -1 EBADF (Bad file descriptor) [pid 5258] close(7) = -1 EBADF (Bad file descriptor) [pid 5258] close(8) = -1 EBADF (Bad file descriptor) [pid 5258] close(9) = -1 EBADF (Bad file descriptor) [pid 5258] close(10) = -1 EBADF (Bad file descriptor) [pid 5258] close(11) = -1 EBADF (Bad file descriptor) [pid 5258] close(12) = -1 EBADF (Bad file descriptor) [pid 5258] close(13) = -1 EBADF (Bad file descriptor) [pid 5258] close(14) = -1 EBADF (Bad file descriptor) [pid 5258] close(15) = -1 EBADF (Bad file descriptor) [pid 5258] close(16) = -1 EBADF (Bad file descriptor) [pid 5258] close(17) = -1 EBADF (Bad file descriptor) [pid 5258] close(18) = -1 EBADF (Bad file descriptor) [pid 5258] close(19) = -1 EBADF (Bad file descriptor) [pid 5258] close(20) = -1 EBADF (Bad file descriptor) [pid 5258] close(21) = -1 EBADF (Bad file descriptor) [pid 5258] close(22) = -1 EBADF (Bad file descriptor) [pid 5258] close(23) = -1 EBADF (Bad file descriptor) [pid 5258] close(24) = -1 EBADF (Bad file descriptor) [pid 5258] close(25) = -1 EBADF (Bad file descriptor) [pid 5258] close(26) = -1 EBADF (Bad file descriptor) [pid 5258] close(27) = -1 EBADF (Bad file descriptor) [pid 5258] close(28) = -1 EBADF (Bad file descriptor) [pid 5258] close(29) = -1 EBADF (Bad file descriptor) [pid 5258] exit_group(0) = ? [pid 5262] <... futex resumed>) = ? [pid 5262] +++ exited with 0 +++ [pid 5259] <... futex resumed>) = ? [pid 5259] +++ exited with 0 +++ [pid 5258] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=122, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./40/binderfs") = 0 [ 103.181235][ T5259] [pid 5046] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./40/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./40/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./40/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./40") = 0 [pid 5046] mkdir("./41", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9c690) = 125 ./strace-static-x86_64: Process 5263 attached [pid 5263] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5263] chdir("./41") = 0 [pid 5263] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5263] setpgid(0, 0) = 0 [pid 5263] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5263] write(3, "1000", 4) = 4 [pid 5263] close(3) = 0 [pid 5263] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5263] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5263] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5263] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5263] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5263] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5263] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5263] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5263] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5264 attached => {parent_tid=[126]}, 88) = 126 [pid 5263] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5263] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5263] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5264] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5264] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5264] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5264] memfd_create("syzkaller", 0) = 3 [pid 5264] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5264] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5264] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5264] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5264] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5264] close(3) = 0 [pid 5264] mkdir("./file0", 0777) = 0 [pid 5264] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5264] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5264] chdir("./file0") = 0 [pid 5264] ioctl(4, LOOP_CLR_FD) = 0 [pid 5264] close(4) = 0 [pid 5264] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5264] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5263] <... futex resumed>) = 0 [pid 5263] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5264] <... futex resumed>) = 0 [pid 5264] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5263] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5264] <... open resumed>) = 4 [pid 5264] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5263] <... futex resumed>) = 0 [pid 5263] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5263] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5264] <... futex resumed>) = 1 [pid 5264] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5264] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5263] <... futex resumed>) = 0 [pid 5263] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5263] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5264] <... futex resumed>) = 1 [pid 5264] ftruncate(5, 33587195) = 0 [pid 5264] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5263] <... futex resumed>) = 0 [pid 5263] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5264] <... futex resumed>) = 1 [pid 5263] <... futex resumed>) = 0 [pid 5264] sendfile(4, 5, NULL, 4) = 4 [pid 5263] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5264] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5263] <... futex resumed>) = 0 [pid 5263] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5263] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5264] <... futex resumed>) = 1 [pid 5263] <... futex resumed>) = 0 [pid 5263] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5264] sendfile(4, 5, NULL, 281474978811909 [pid 5263] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5263] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5263] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0} => {parent_tid=[127]}, 88) = 127 [pid 5263] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5263] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5263] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5267 attached [pid 5267] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5267] set_robust_list(0x7efbfa33d9a0, 24) = 0 [ 103.313939][ T5264] loop0: detected capacity change from 0 to 2048 [pid 5267] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5267] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5267] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5263] <... futex resumed>) = 0 [pid 5263] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5263] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5267] <... futex resumed>) = 1 [pid 5267] prlimit64(0, RLIMIT_CPU, NULL, [pid 5263] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5263] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [ 103.380865][ T5264] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 103.396417][ T5264] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 66 with max blocks 1 with error 28 [ 103.410876][ T5264] EXT4-fs (loop0): This should not happen!! Data will be lost [ 103.410876][ T5264] [ 103.421660][ T5264] EXT4-fs (loop0): Total free blocks count 0 [pid 5264] <... sendfile resumed>) = 135168 [pid 5264] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5264] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5267] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5267] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5263] close(3) = 0 [pid 5263] close(4) = 0 [pid 5267] <... futex resumed>) = 0 [pid 5263] close(5 [pid 5267] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5263] <... close resumed>) = 0 [pid 5263] close(6) = -1 EBADF (Bad file descriptor) [pid 5263] close(7) = -1 EBADF (Bad file descriptor) [pid 5263] close(8) = -1 EBADF (Bad file descriptor) [pid 5263] close(9) = -1 EBADF (Bad file descriptor) [pid 5263] close(10) = -1 EBADF (Bad file descriptor) [pid 5263] close(11) = -1 EBADF (Bad file descriptor) [pid 5263] close(12) = -1 EBADF (Bad file descriptor) [pid 5263] close(13) = -1 EBADF (Bad file descriptor) [pid 5263] close(14) = -1 EBADF (Bad file descriptor) [pid 5263] close(15) = -1 EBADF (Bad file descriptor) [pid 5263] close(16) = -1 EBADF (Bad file descriptor) [pid 5263] close(17) = -1 EBADF (Bad file descriptor) [pid 5263] close(18) = -1 EBADF (Bad file descriptor) [pid 5263] close(19) = -1 EBADF (Bad file descriptor) [pid 5263] close(20) = -1 EBADF (Bad file descriptor) [pid 5263] close(21) = -1 EBADF (Bad file descriptor) [pid 5263] close(22) = -1 EBADF (Bad file descriptor) [pid 5263] close(23) = -1 EBADF (Bad file descriptor) [pid 5263] close(24) = -1 EBADF (Bad file descriptor) [pid 5263] close(25) = -1 EBADF (Bad file descriptor) [pid 5263] close(26) = -1 EBADF (Bad file descriptor) [pid 5263] close(27) = -1 EBADF (Bad file descriptor) [pid 5263] close(28) = -1 EBADF (Bad file descriptor) [pid 5263] close(29) = -1 EBADF (Bad file descriptor) [pid 5263] exit_group(0 [pid 5267] <... futex resumed>) = ? [pid 5264] <... futex resumed>) = ? [pid 5267] +++ exited with 0 +++ [pid 5264] +++ exited with 0 +++ [pid 5263] <... exit_group resumed>) = ? [pid 5263] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=125, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5046] umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./41/binderfs") = 0 [ 103.428094][ T5264] EXT4-fs (loop0): Free/Dirty block details [ 103.434021][ T5264] EXT4-fs (loop0): free_blocks=2415919104 [ 103.440064][ T5264] EXT4-fs (loop0): dirty_blocks=80 [ 103.445189][ T5264] EXT4-fs (loop0): Block reservation details [ 103.451516][ T5264] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 103.458599][ T5267] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 66 with error 28 [ 103.471133][ T5267] EXT4-fs (loop0): This should not happen!! Data will be lost [ 103.471133][ T5267] [pid 5046] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./41/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./41/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./41/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./41") = 0 [pid 5046] mkdir("./42", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5268 attached , child_tidptr=0x555555a9c690) = 128 [pid 5268] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5268] chdir("./42") = 0 [pid 5268] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5268] setpgid(0, 0) = 0 [pid 5268] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5268] write(3, "1000", 4) = 4 [pid 5268] close(3) = 0 [pid 5268] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5268] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5268] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5268] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5268] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5268] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5268] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5268] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5268] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0} => {parent_tid=[129]}, 88) = 129 [pid 5268] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5268] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5268] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5269 attached [pid 5269] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5269] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5269] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5269] memfd_create("syzkaller", 0) = 3 [pid 5269] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5269] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5269] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5269] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5269] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5269] close(3) = 0 [pid 5269] mkdir("./file0", 0777) = 0 [pid 5269] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5269] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5269] chdir("./file0") = 0 [pid 5269] ioctl(4, LOOP_CLR_FD) = 0 [pid 5269] close(4) = 0 [pid 5269] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5268] <... futex resumed>) = 0 [pid 5269] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5268] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5269] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5268] <... futex resumed>) = 0 [pid 5269] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5268] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5269] <... open resumed>) = 4 [pid 5269] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5268] <... futex resumed>) = 0 [pid 5269] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5268] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5269] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5268] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5269] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5269] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5268] <... futex resumed>) = 0 [pid 5269] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5268] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5269] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5269] ftruncate(5, 33587195) = 0 [pid 5269] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5269] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL) = 0 [pid 5268] <... futex resumed>) = 1 [pid 5269] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5268] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5268] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5269] <... futex resumed>) = 0 [pid 5268] <... futex resumed>) = 1 [pid 5268] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5269] sendfile(4, 5, NULL, 4) = 4 [pid 5269] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5268] <... futex resumed>) = 0 [pid 5269] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5268] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5269] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5268] <... futex resumed>) = 0 [pid 5269] sendfile(4, 5, NULL, 281474978811909 [pid 5268] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5268] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5268] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5268] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 103.592847][ T5269] loop0: detected capacity change from 0 to 2048 [pid 5268] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5272 attached [pid 5272] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5268] <... clone3 resumed> => {parent_tid=[130]}, 88) = 130 [pid 5272] <... rseq resumed>) = 0 [pid 5268] rt_sigprocmask(SIG_SETMASK, [], [pid 5272] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5272] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5272] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5268] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5268] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5272] <... futex resumed>) = 0 [pid 5272] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000 [pid 5268] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5272] <... mmap resumed>) = 0x20000000 [pid 5272] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5272] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5268] <... futex resumed>) = 0 [pid 5268] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5272] <... futex resumed>) = 0 [pid 5272] prlimit64(0, RLIMIT_CPU, NULL, [ 103.669112][ T5269] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 103.685324][ T5269] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 88 with max blocks 1 with error 28 [ 103.697707][ T5269] EXT4-fs (loop0): This should not happen!! Data will be lost [ 103.697707][ T5269] [ 103.708886][ T5269] EXT4-fs (loop0): Total free blocks count 0 [pid 5268] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5268] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5269] <... sendfile resumed>) = 180224 [pid 5269] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 103.714895][ T5269] EXT4-fs (loop0): Free/Dirty block details [ 103.721655][ T5269] EXT4-fs (loop0): free_blocks=2415919104 [ 103.727637][ T5269] EXT4-fs (loop0): dirty_blocks=96 [ 103.732776][ T5269] EXT4-fs (loop0): Block reservation details [ 103.740253][ T5269] EXT4-fs (loop0): i_reserved_data_blocks=6 [ 103.746544][ T5272] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 88 with error 28 [ 103.760946][ T5272] EXT4-fs (loop0): This should not happen!! Data will be lost [pid 5269] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5272] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5272] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5272] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5268] close(3) = 0 [pid 5268] close(4) = 0 [pid 5268] close(5) = 0 [pid 5268] close(6) = -1 EBADF (Bad file descriptor) [pid 5268] close(7) = -1 EBADF (Bad file descriptor) [pid 5268] close(8) = -1 EBADF (Bad file descriptor) [pid 5268] close(9) = -1 EBADF (Bad file descriptor) [pid 5268] close(10) = -1 EBADF (Bad file descriptor) [pid 5268] close(11) = -1 EBADF (Bad file descriptor) [pid 5268] close(12) = -1 EBADF (Bad file descriptor) [pid 5268] close(13) = -1 EBADF (Bad file descriptor) [pid 5268] close(14) = -1 EBADF (Bad file descriptor) [pid 5268] close(15) = -1 EBADF (Bad file descriptor) [pid 5268] close(16) = -1 EBADF (Bad file descriptor) [pid 5268] close(17) = -1 EBADF (Bad file descriptor) [pid 5268] close(18) = -1 EBADF (Bad file descriptor) [pid 5268] close(19) = -1 EBADF (Bad file descriptor) [pid 5268] close(20) = -1 EBADF (Bad file descriptor) [pid 5268] close(21) = -1 EBADF (Bad file descriptor) [pid 5268] close(22) = -1 EBADF (Bad file descriptor) [pid 5268] close(23) = -1 EBADF (Bad file descriptor) [pid 5268] close(24) = -1 EBADF (Bad file descriptor) [pid 5268] close(25) = -1 EBADF (Bad file descriptor) [pid 5268] close(26) = -1 EBADF (Bad file descriptor) [pid 5268] close(27) = -1 EBADF (Bad file descriptor) [pid 5268] close(28) = -1 EBADF (Bad file descriptor) [pid 5268] close(29) = -1 EBADF (Bad file descriptor) [pid 5268] exit_group(0 [pid 5269] <... futex resumed>) = ? [pid 5268] <... exit_group resumed>) = ? [pid 5272] <... futex resumed>) = ? [pid 5269] +++ exited with 0 +++ [pid 5272] +++ exited with 0 +++ [pid 5268] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=128, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5046] umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./42/binderfs") = 0 [ 103.760946][ T5272] [pid 5046] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./42/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./42/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./42/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./42") = 0 [pid 5046] mkdir("./43", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5273 attached , child_tidptr=0x555555a9c690) = 131 [pid 5273] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5273] chdir("./43") = 0 [pid 5273] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5273] setpgid(0, 0) = 0 [pid 5273] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5273] write(3, "1000", 4) = 4 [pid 5273] close(3) = 0 [pid 5273] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5273] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5273] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5273] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5273] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5273] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5273] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5273] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5273] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5274 attached [pid 5274] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5274] set_robust_list(0x7efc0265e9a0, 24 [pid 5273] <... clone3 resumed> => {parent_tid=[132]}, 88) = 132 [pid 5274] <... set_robust_list resumed>) = 0 [pid 5274] rt_sigprocmask(SIG_SETMASK, [], [pid 5273] rt_sigprocmask(SIG_SETMASK, [], [pid 5274] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5273] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5274] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5273] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5274] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5273] <... futex resumed>) = 0 [pid 5274] memfd_create("syzkaller", 0 [pid 5273] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5274] <... memfd_create resumed>) = 3 [pid 5274] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5274] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5274] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5274] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5274] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5274] close(3) = 0 [pid 5274] mkdir("./file0", 0777) = 0 [pid 5274] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5274] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5274] chdir("./file0") = 0 [pid 5274] ioctl(4, LOOP_CLR_FD) = 0 [pid 5274] close(4) = 0 [pid 5274] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5274] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5273] <... futex resumed>) = 0 [pid 5273] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5274] <... futex resumed>) = 0 [pid 5274] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5273] <... futex resumed>) = 1 [pid 5273] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5274] <... open resumed>) = 4 [pid 5274] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5273] <... futex resumed>) = 0 [pid 5273] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5273] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5274] <... futex resumed>) = 1 [pid 5274] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5274] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5273] <... futex resumed>) = 0 [pid 5273] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5274] <... futex resumed>) = 1 [pid 5273] <... futex resumed>) = 0 [pid 5274] ftruncate(5, 33587195 [pid 5273] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5274] <... ftruncate resumed>) = 0 [pid 5274] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5273] <... futex resumed>) = 0 [pid 5273] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5274] sendfile(4, 5, NULL, 4 [pid 5273] <... futex resumed>) = 0 [pid 5274] <... sendfile resumed>) = 4 [pid 5273] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5274] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5273] <... futex resumed>) = 0 [pid 5274] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5273] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5274] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5273] <... futex resumed>) = 0 [pid 5274] sendfile(4, 5, NULL, 281474978811909 [pid 5273] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5273] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5273] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5273] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5273] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0} => {parent_tid=[133]}, 88) = 133 [ 103.895139][ T5274] loop0: detected capacity change from 0 to 2048 ./strace-static-x86_64: Process 5277 attached [pid 5273] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5277] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5273] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5273] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5277] <... rseq resumed>) = 0 [pid 5277] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5277] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5277] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5277] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5273] <... futex resumed>) = 0 [pid 5273] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5273] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 103.984526][ T5277] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 103.999810][ T5277] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 139 with error 28 [ 104.012665][ T5277] EXT4-fs (loop0): This should not happen!! Data will be lost [ 104.012665][ T5277] [ 104.022504][ T5277] EXT4-fs (loop0): Total free blocks count 0 [ 104.029082][ T5277] EXT4-fs (loop0): Free/Dirty block details [pid 5277] prlimit64(0, RLIMIT_CPU, NULL, [pid 5273] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5277] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5277] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 104.035360][ T5277] EXT4-fs (loop0): free_blocks=2415919104 [ 104.041264][ T5277] EXT4-fs (loop0): dirty_blocks=144 [ 104.046489][ T5277] EXT4-fs (loop0): Block reservation details [ 104.052515][ T5277] EXT4-fs (loop0): i_reserved_data_blocks=9 [ 104.063541][ T5274] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 140 with max blocks 1 with error 28 [ 104.076165][ T5274] EXT4-fs (loop0): This should not happen!! Data will be lost [pid 5277] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5274] <... sendfile resumed>) = 286720 [pid 5274] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5273] close(3 [pid 5274] <... futex resumed>) = 0 [pid 5273] <... close resumed>) = 0 [pid 5274] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5273] close(4) = 0 [pid 5273] close(5) = 0 [pid 5273] close(6) = -1 EBADF (Bad file descriptor) [pid 5273] close(7) = -1 EBADF (Bad file descriptor) [pid 5273] close(8) = -1 EBADF (Bad file descriptor) [pid 5273] close(9) = -1 EBADF (Bad file descriptor) [pid 5273] close(10) = -1 EBADF (Bad file descriptor) [pid 5273] close(11) = -1 EBADF (Bad file descriptor) [pid 5273] close(12) = -1 EBADF (Bad file descriptor) [pid 5273] close(13) = -1 EBADF (Bad file descriptor) [pid 5273] close(14) = -1 EBADF (Bad file descriptor) [pid 5273] close(15) = -1 EBADF (Bad file descriptor) [pid 5273] close(16) = -1 EBADF (Bad file descriptor) [pid 5273] close(17) = -1 EBADF (Bad file descriptor) [pid 5273] close(18) = -1 EBADF (Bad file descriptor) [pid 5273] close(19) = -1 EBADF (Bad file descriptor) [pid 5273] close(20) = -1 EBADF (Bad file descriptor) [pid 5273] close(21) = -1 EBADF (Bad file descriptor) [pid 5273] close(22) = -1 EBADF (Bad file descriptor) [pid 5273] close(23) = -1 EBADF (Bad file descriptor) [pid 5273] close(24) = -1 EBADF (Bad file descriptor) [pid 5273] close(25) = -1 EBADF (Bad file descriptor) [pid 5273] close(26) = -1 EBADF (Bad file descriptor) [pid 5273] close(27) = -1 EBADF (Bad file descriptor) [pid 5273] close(28) = -1 EBADF (Bad file descriptor) [pid 5273] close(29) = -1 EBADF (Bad file descriptor) [pid 5273] exit_group(0) = ? [pid 5274] <... futex resumed>) = ? [pid 5277] <... futex resumed>) = ? [pid 5277] +++ exited with 0 +++ [pid 5274] +++ exited with 0 +++ [pid 5273] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=131, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./43/binderfs") = 0 [ 104.076165][ T5274] [pid 5046] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./43/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./43/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./43/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./43") = 0 [pid 5046] mkdir("./44", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5278 attached [pid 5278] set_robust_list(0x555555a9c6a0, 24 [pid 5046] <... clone resumed>, child_tidptr=0x555555a9c690) = 134 [pid 5278] <... set_robust_list resumed>) = 0 [pid 5278] chdir("./44") = 0 [pid 5278] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5278] setpgid(0, 0) = 0 [pid 5278] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5278] write(3, "1000", 4) = 4 [pid 5278] close(3) = 0 [pid 5278] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5278] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5278] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5278] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5278] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5278] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5278] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5278] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5278] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5279 attached => {parent_tid=[135]}, 88) = 135 [pid 5279] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5279] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5279] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5279] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5278] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5278] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5279] <... futex resumed>) = 0 [pid 5278] <... futex resumed>) = 1 [pid 5279] memfd_create("syzkaller", 0 [pid 5278] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5279] <... memfd_create resumed>) = 3 [pid 5279] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5279] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5279] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5279] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5279] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5279] close(3) = 0 [pid 5279] mkdir("./file0", 0777) = 0 [pid 5279] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5279] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5279] chdir("./file0") = 0 [pid 5279] ioctl(4, LOOP_CLR_FD) = 0 [pid 5279] close(4) = 0 [pid 5279] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5278] <... futex resumed>) = 0 [pid 5279] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5278] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5279] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5278] <... futex resumed>) = 0 [pid 5279] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5278] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5279] <... open resumed>) = 4 [pid 5279] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5278] <... futex resumed>) = 0 [pid 5278] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5279] <... futex resumed>) = 1 [pid 5278] <... futex resumed>) = 0 [pid 5279] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5278] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5279] <... open resumed>) = 5 [pid 5279] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5278] <... futex resumed>) = 0 [pid 5278] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5278] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5279] ftruncate(5, 33587195) = 0 [pid 5279] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5278] <... futex resumed>) = 0 [pid 5279] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5278] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5279] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5279] sendfile(4, 5, NULL, 4 [pid 5278] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5279] <... sendfile resumed>) = 4 [pid 5279] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5278] <... futex resumed>) = 0 [pid 5278] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5278] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5279] <... futex resumed>) = 1 [pid 5278] <... futex resumed>) = 0 [pid 5279] sendfile(4, 5, NULL, 281474978811909 [pid 5278] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5278] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5278] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5278] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0} => {parent_tid=[136]}, 88) = 136 [pid 5278] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5278] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5278] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5282 attached [pid 5282] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5282] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5282] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5282] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5282] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5278] <... futex resumed>) = 0 [pid 5278] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5278] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5282] <... futex resumed>) = 1 [ 104.212886][ T5279] loop0: detected capacity change from 0 to 2048 [ 104.270797][ T5282] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 104.288974][ T5282] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 38 with error 28 [ 104.289994][ T5279] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 38 with max blocks 1 with error 28 [pid 5282] prlimit64(0, RLIMIT_CPU, NULL, [pid 5278] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5282] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5282] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5282] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5279] <... sendfile resumed>) = 77824 [pid 5279] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5279] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5278] close(3) = 0 [pid 5278] close(4) = 0 [pid 5278] close(5) = 0 [pid 5278] close(6) = -1 EBADF (Bad file descriptor) [pid 5278] close(7) = -1 EBADF (Bad file descriptor) [pid 5278] close(8) = -1 EBADF (Bad file descriptor) [pid 5278] close(9) = -1 EBADF (Bad file descriptor) [pid 5278] close(10) = -1 EBADF (Bad file descriptor) [pid 5278] close(11) = -1 EBADF (Bad file descriptor) [pid 5278] close(12) = -1 EBADF (Bad file descriptor) [pid 5278] close(13) = -1 EBADF (Bad file descriptor) [pid 5278] close(14) = -1 EBADF (Bad file descriptor) [pid 5278] close(15) = -1 EBADF (Bad file descriptor) [pid 5278] close(16) = -1 EBADF (Bad file descriptor) [pid 5278] close(17) = -1 EBADF (Bad file descriptor) [pid 5278] close(18) = -1 EBADF (Bad file descriptor) [pid 5278] close(19) = -1 EBADF (Bad file descriptor) [pid 5278] close(20) = -1 EBADF (Bad file descriptor) [pid 5278] close(21) = -1 EBADF (Bad file descriptor) [pid 5278] close(22) = -1 EBADF (Bad file descriptor) [pid 5278] close(23) = -1 EBADF (Bad file descriptor) [pid 5278] close(24) = -1 EBADF (Bad file descriptor) [pid 5278] close(25) = -1 EBADF (Bad file descriptor) [pid 5278] close(26) = -1 EBADF (Bad file descriptor) [pid 5278] close(27) = -1 EBADF (Bad file descriptor) [pid 5278] close(28) = -1 EBADF (Bad file descriptor) [pid 5278] close(29) = -1 EBADF (Bad file descriptor) [pid 5278] exit_group(0 [pid 5279] <... futex resumed>) = ? [pid 5278] <... exit_group resumed>) = ? [pid 5282] <... futex resumed>) = ? [pid 5282] +++ exited with 0 +++ [pid 5279] +++ exited with 0 +++ [pid 5278] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=134, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./44/binderfs") = 0 [ 104.301322][ T5282] EXT4-fs (loop0): This should not happen!! Data will be lost [ 104.301322][ T5282] [ 104.301388][ T5282] EXT4-fs (loop0): Total free blocks count 0 [ 104.316449][ T5279] EXT4-fs (loop0): This should not happen!! Data will be lost [ 104.316449][ T5279] [ 104.324861][ T5282] EXT4-fs (loop0): Free/Dirty block details [ 104.324883][ T5282] EXT4-fs (loop0): free_blocks=2415919104 [ 104.324904][ T5282] EXT4-fs (loop0): dirty_blocks=48 [ 104.324922][ T5282] EXT4-fs (loop0): Block reservation details [ 104.334002][ T5279] EXT4-fs (loop0): Total free blocks count 0 [pid 5046] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./44/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./44/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./44/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./44") = 0 [pid 5046] mkdir("./45", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9c690) = 137 ./strace-static-x86_64: Process 5283 attached [pid 5283] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5283] chdir("./45") = 0 [pid 5283] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5283] setpgid(0, 0) = 0 [pid 5283] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5283] write(3, "1000", 4) = 4 [pid 5283] close(3) = 0 [pid 5283] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5283] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5283] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5283] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5283] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5283] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5283] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5283] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5283] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0} => {parent_tid=[138]}, 88) = 138 ./strace-static-x86_64: Process 5284 attached [pid 5284] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5284] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5283] rt_sigprocmask(SIG_SETMASK, [], [pid 5284] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5283] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5284] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5283] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5284] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5283] <... futex resumed>) = 0 [pid 5283] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5284] memfd_create("syzkaller", 0) = 3 [pid 5284] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5284] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5284] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5284] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5284] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5284] close(3) = 0 [pid 5284] mkdir("./file0", 0777) = 0 [pid 5284] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5284] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5284] chdir("./file0") = 0 [pid 5284] ioctl(4, LOOP_CLR_FD) = 0 [pid 5284] close(4) = 0 [pid 5284] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5283] <... futex resumed>) = 0 [pid 5283] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5283] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5284] <... futex resumed>) = 1 [pid 5284] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5284] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5283] <... futex resumed>) = 0 [pid 5284] <... futex resumed>) = 1 [pid 5283] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5284] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5283] <... futex resumed>) = 0 [pid 5284] <... open resumed>) = 5 [pid 5283] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5284] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5283] <... futex resumed>) = 0 [pid 5283] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5283] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5284] <... futex resumed>) = 1 [pid 5284] ftruncate(5, 33587195) = 0 [pid 5284] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5283] <... futex resumed>) = 0 [pid 5283] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5284] <... futex resumed>) = 1 [pid 5283] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5284] sendfile(4, 5, NULL, 4) = 4 [pid 5284] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5283] <... futex resumed>) = 0 [pid 5284] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5283] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5284] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5283] <... futex resumed>) = 0 [pid 5284] sendfile(4, 5, NULL, 281474978811909 [pid 5283] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5283] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5283] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5283] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5283] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5287 attached [pid 5287] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5287] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5287] rt_sigprocmask(SIG_SETMASK, [], [pid 5283] <... clone3 resumed> => {parent_tid=[139]}, 88) = 139 [pid 5287] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5283] rt_sigprocmask(SIG_SETMASK, [], [pid 5287] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5283] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5283] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5283] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5287] <... futex resumed>) = 0 [pid 5287] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [ 104.500531][ T5284] loop0: detected capacity change from 0 to 2048 [pid 5287] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5283] <... futex resumed>) = 0 [pid 5283] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5283] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5287] <... futex resumed>) = 1 [ 104.563203][ T5287] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 104.578476][ T5287] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 71 with error 28 [ 104.591766][ T5287] EXT4-fs (loop0): This should not happen!! Data will be lost [ 104.591766][ T5287] [ 104.601490][ T5287] EXT4-fs (loop0): Total free blocks count 0 [ 104.607599][ T5287] EXT4-fs (loop0): Free/Dirty block details [pid 5287] prlimit64(0, RLIMIT_CPU, NULL, [pid 5283] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5287] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5287] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5287] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5284] <... sendfile resumed>) = 147456 [pid 5284] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5284] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5283] close(3) = 0 [pid 5283] close(4) = 0 [pid 5283] close(5) = 0 [pid 5283] close(6) = -1 EBADF (Bad file descriptor) [pid 5283] close(7) = -1 EBADF (Bad file descriptor) [pid 5283] close(8) = -1 EBADF (Bad file descriptor) [pid 5283] close(9) = -1 EBADF (Bad file descriptor) [pid 5283] close(10) = -1 EBADF (Bad file descriptor) [pid 5283] close(11) = -1 EBADF (Bad file descriptor) [pid 5283] close(12) = -1 EBADF (Bad file descriptor) [pid 5283] close(13) = -1 EBADF (Bad file descriptor) [pid 5283] close(14) = -1 EBADF (Bad file descriptor) [pid 5283] close(15) = -1 EBADF (Bad file descriptor) [pid 5283] close(16) = -1 EBADF (Bad file descriptor) [pid 5283] close(17) = -1 EBADF (Bad file descriptor) [pid 5283] close(18) = -1 EBADF (Bad file descriptor) [pid 5283] close(19) = -1 EBADF (Bad file descriptor) [pid 5283] close(20) = -1 EBADF (Bad file descriptor) [pid 5283] close(21) = -1 EBADF (Bad file descriptor) [pid 5283] close(22) = -1 EBADF (Bad file descriptor) [pid 5283] close(23) = -1 EBADF (Bad file descriptor) [pid 5283] close(24) = -1 EBADF (Bad file descriptor) [pid 5283] close(25) = -1 EBADF (Bad file descriptor) [pid 5283] close(26) = -1 EBADF (Bad file descriptor) [pid 5283] close(27) = -1 EBADF (Bad file descriptor) [pid 5283] close(28) = -1 EBADF (Bad file descriptor) [pid 5283] close(29) = -1 EBADF (Bad file descriptor) [pid 5283] exit_group(0) = ? [pid 5284] <... futex resumed>) = ? [pid 5284] +++ exited with 0 +++ [pid 5287] <... futex resumed>) = ? [pid 5287] +++ exited with 0 +++ [pid 5283] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=137, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./45/binderfs") = 0 [ 104.613532][ T5287] EXT4-fs (loop0): free_blocks=2415919104 [ 104.619664][ T5287] EXT4-fs (loop0): dirty_blocks=80 [ 104.624805][ T5287] EXT4-fs (loop0): Block reservation details [ 104.630880][ T5287] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 104.640562][ T5284] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 72 with max blocks 1 with error 28 [ 104.653282][ T5284] EXT4-fs (loop0): This should not happen!! Data will be lost [ 104.653282][ T5284] [pid 5046] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./45/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./45/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./45/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./45") = 0 [pid 5046] mkdir("./46", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9c690) = 140 ./strace-static-x86_64: Process 5288 attached [pid 5288] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5288] chdir("./46") = 0 [pid 5288] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5288] setpgid(0, 0) = 0 [pid 5288] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5288] write(3, "1000", 4) = 4 [pid 5288] close(3) = 0 [pid 5288] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5288] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5288] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5288] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5288] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5288] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5288] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5288] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5288] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5289 attached [pid 5289] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053 [pid 5288] <... clone3 resumed> => {parent_tid=[141]}, 88) = 141 [pid 5289] <... rseq resumed>) = 0 [pid 5289] set_robust_list(0x7efc0265e9a0, 24 [pid 5288] rt_sigprocmask(SIG_SETMASK, [], [pid 5289] <... set_robust_list resumed>) = 0 [pid 5289] rt_sigprocmask(SIG_SETMASK, [], [pid 5288] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5289] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5288] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5289] memfd_create("syzkaller", 0 [pid 5288] <... futex resumed>) = 0 [pid 5288] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5289] <... memfd_create resumed>) = 3 [pid 5289] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5289] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5289] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5289] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5289] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5289] close(3) = 0 [pid 5289] mkdir("./file0", 0777) = 0 [pid 5289] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5289] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5289] chdir("./file0") = 0 [pid 5289] ioctl(4, LOOP_CLR_FD) = 0 [pid 5289] close(4) = 0 [pid 5289] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5289] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5288] <... futex resumed>) = 0 [pid 5288] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5289] <... futex resumed>) = 0 [pid 5288] <... futex resumed>) = 1 [pid 5289] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5288] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5289] <... open resumed>) = 4 [pid 5289] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5288] <... futex resumed>) = 0 [pid 5288] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5289] <... futex resumed>) = 1 [pid 5288] <... futex resumed>) = 0 [pid 5289] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5288] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5289] <... open resumed>) = 5 [pid 5289] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5288] <... futex resumed>) = 0 [pid 5289] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5288] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5289] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5288] <... futex resumed>) = 0 [pid 5289] ftruncate(5, 33587195 [pid 5288] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5289] <... ftruncate resumed>) = 0 [pid 5289] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5288] <... futex resumed>) = 0 [pid 5289] <... futex resumed>) = 1 [pid 5288] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5289] sendfile(4, 5, NULL, 4 [pid 5288] <... futex resumed>) = 0 [pid 5289] <... sendfile resumed>) = 4 [pid 5288] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5289] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5288] <... futex resumed>) = 0 [pid 5288] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5289] <... futex resumed>) = 1 [pid 5289] sendfile(4, 5, NULL, 281474978811909 [pid 5288] <... futex resumed>) = 0 [pid 5288] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5288] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5288] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5288] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5288] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0} => {parent_tid=[142]}, 88) = 142 [pid 5288] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5292 attached [pid 5292] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5288] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5288] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5288] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5292] <... rseq resumed>) = 0 [pid 5292] set_robust_list(0x7efbfa33d9a0, 24) = 0 [ 104.764259][ T5289] loop0: detected capacity change from 0 to 2048 [pid 5292] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5292] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5292] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5292] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5288] <... futex resumed>) = 0 [pid 5288] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5292] <... futex resumed>) = 0 [pid 5288] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5292] prlimit64(0, RLIMIT_CPU, NULL, [pid 5288] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 104.832267][ T5292] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 104.847483][ T5292] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 21 with error 28 [ 104.860723][ T5292] EXT4-fs (loop0): This should not happen!! Data will be lost [ 104.860723][ T5292] [ 104.870921][ T5292] EXT4-fs (loop0): Total free blocks count 0 [pid 5292] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5292] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 104.877271][ T5292] EXT4-fs (loop0): Free/Dirty block details [ 104.883202][ T5292] EXT4-fs (loop0): free_blocks=2415919104 [ 104.889276][ T5292] EXT4-fs (loop0): dirty_blocks=32 [ 104.894396][ T5292] EXT4-fs (loop0): Block reservation details [ 104.907759][ T5292] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 104.915056][ T5289] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 22 with max blocks 1 with error 28 [pid 5292] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5289] <... sendfile resumed>) = 45056 [pid 5289] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5288] close(3) = 0 [pid 5288] close(4) = 0 [pid 5288] close(5) = 0 [pid 5288] close(6) = -1 EBADF (Bad file descriptor) [pid 5288] close(7) = -1 EBADF (Bad file descriptor) [pid 5289] <... futex resumed>) = 0 [pid 5288] close(8) = -1 EBADF (Bad file descriptor) [pid 5288] close(9) = -1 EBADF (Bad file descriptor) [pid 5289] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5288] close(10) = -1 EBADF (Bad file descriptor) [pid 5288] close(11) = -1 EBADF (Bad file descriptor) [pid 5288] close(12) = -1 EBADF (Bad file descriptor) [pid 5288] close(13) = -1 EBADF (Bad file descriptor) [pid 5288] close(14) = -1 EBADF (Bad file descriptor) [pid 5288] close(15) = -1 EBADF (Bad file descriptor) [pid 5288] close(16) = -1 EBADF (Bad file descriptor) [pid 5288] close(17) = -1 EBADF (Bad file descriptor) [pid 5288] close(18) = -1 EBADF (Bad file descriptor) [pid 5288] close(19) = -1 EBADF (Bad file descriptor) [pid 5288] close(20) = -1 EBADF (Bad file descriptor) [pid 5288] close(21) = -1 EBADF (Bad file descriptor) [pid 5288] close(22) = -1 EBADF (Bad file descriptor) [pid 5288] close(23) = -1 EBADF (Bad file descriptor) [pid 5288] close(24) = -1 EBADF (Bad file descriptor) [pid 5288] close(25) = -1 EBADF (Bad file descriptor) [pid 5288] close(26) = -1 EBADF (Bad file descriptor) [pid 5288] close(27) = -1 EBADF (Bad file descriptor) [pid 5288] close(28) = -1 EBADF (Bad file descriptor) [pid 5288] close(29) = -1 EBADF (Bad file descriptor) [pid 5288] exit_group(0 [pid 5292] <... futex resumed>) = ? [pid 5289] <... futex resumed>) = ? [pid 5292] +++ exited with 0 +++ [pid 5289] +++ exited with 0 +++ [pid 5288] <... exit_group resumed>) = ? [pid 5288] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=140, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5046] umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./46/binderfs") = 0 [ 104.927452][ T5289] EXT4-fs (loop0): This should not happen!! Data will be lost [ 104.927452][ T5289] [pid 5046] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./46/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./46/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./46/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./46") = 0 [pid 5046] mkdir("./47", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9c690) = 143 ./strace-static-x86_64: Process 5293 attached [pid 5293] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5293] chdir("./47") = 0 [pid 5293] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5293] setpgid(0, 0) = 0 [pid 5293] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5293] write(3, "1000", 4) = 4 [pid 5293] close(3) = 0 [pid 5293] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5293] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5293] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5293] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5293] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5293] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5293] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5293] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5293] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5294 attached [pid 5294] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5294] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5294] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5294] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5293] <... clone3 resumed> => {parent_tid=[144]}, 88) = 144 [pid 5293] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5293] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5294] <... futex resumed>) = 0 [pid 5294] memfd_create("syzkaller", 0 [pid 5293] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5294] <... memfd_create resumed>) = 3 [pid 5294] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5294] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5294] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5294] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5294] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5294] close(3) = 0 [pid 5294] mkdir("./file0", 0777) = 0 [pid 5294] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5294] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5294] chdir("./file0") = 0 [pid 5294] ioctl(4, LOOP_CLR_FD) = 0 [pid 5294] close(4) = 0 [pid 5294] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5293] <... futex resumed>) = 0 [pid 5293] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5294] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5293] <... futex resumed>) = 0 [pid 5293] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5294] <... open resumed>) = 4 [pid 5294] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5293] <... futex resumed>) = 0 [pid 5293] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5293] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5294] <... futex resumed>) = 1 [pid 5294] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5294] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5293] <... futex resumed>) = 0 [pid 5294] <... futex resumed>) = 1 [pid 5294] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5293] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5294] ftruncate(5, 33587195 [pid 5293] <... futex resumed>) = 0 [pid 5294] <... ftruncate resumed>) = 0 [pid 5293] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5294] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5293] <... futex resumed>) = 0 [pid 5293] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5294] sendfile(4, 5, NULL, 4 [pid 5293] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5294] <... sendfile resumed>) = 4 [pid 5294] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5293] <... futex resumed>) = 0 [pid 5293] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5294] sendfile(4, 5, NULL, 281474978811909 [pid 5293] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5293] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5293] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5293] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5293] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5297 attached => {parent_tid=[145]}, 88) = 145 [pid 5297] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [ 105.048010][ T5294] loop0: detected capacity change from 0 to 2048 [pid 5293] rt_sigprocmask(SIG_SETMASK, [], [pid 5297] <... rseq resumed>) = 0 [pid 5293] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5297] set_robust_list(0x7efbfa33d9a0, 24 [pid 5293] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5297] <... set_robust_list resumed>) = 0 [pid 5293] <... futex resumed>) = 0 [pid 5297] rt_sigprocmask(SIG_SETMASK, [], [pid 5293] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5297] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5297] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5297] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5293] <... futex resumed>) = 0 [pid 5297] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5293] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5293] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5297] <... futex resumed>) = 0 [pid 5297] prlimit64(0, RLIMIT_CPU, NULL, [pid 5293] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 105.115281][ T5297] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 105.131785][ T5297] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 31 with error 28 [ 105.144797][ T5297] EXT4-fs (loop0): This should not happen!! Data will be lost [ 105.144797][ T5297] [ 105.156299][ T5297] EXT4-fs (loop0): Total free blocks count 0 [pid 5297] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [ 105.162648][ T5297] EXT4-fs (loop0): Free/Dirty block details [ 105.168742][ T5297] EXT4-fs (loop0): free_blocks=2415919104 [ 105.175485][ T5297] EXT4-fs (loop0): dirty_blocks=32 [ 105.180717][ T5297] EXT4-fs (loop0): Block reservation details [ 105.186737][ T5297] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 105.194626][ T5294] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 105.207365][ T5294] EXT4-fs (loop0): This should not happen!! Data will be lost [pid 5297] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5294] <... sendfile resumed>) = 65536 [pid 5297] <... futex resumed>) = 0 [pid 5297] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5294] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5293] close(3 [pid 5294] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5293] <... close resumed>) = 0 [pid 5293] close(4) = 0 [pid 5293] close(5) = 0 [pid 5293] close(6) = -1 EBADF (Bad file descriptor) [pid 5293] close(7) = -1 EBADF (Bad file descriptor) [pid 5293] close(8) = -1 EBADF (Bad file descriptor) [pid 5293] close(9) = -1 EBADF (Bad file descriptor) [pid 5293] close(10) = -1 EBADF (Bad file descriptor) [pid 5293] close(11) = -1 EBADF (Bad file descriptor) [pid 5293] close(12) = -1 EBADF (Bad file descriptor) [pid 5293] close(13) = -1 EBADF (Bad file descriptor) [pid 5293] close(14) = -1 EBADF (Bad file descriptor) [pid 5293] close(15) = -1 EBADF (Bad file descriptor) [pid 5293] close(16) = -1 EBADF (Bad file descriptor) [pid 5293] close(17) = -1 EBADF (Bad file descriptor) [pid 5293] close(18) = -1 EBADF (Bad file descriptor) [pid 5293] close(19) = -1 EBADF (Bad file descriptor) [pid 5293] close(20) = -1 EBADF (Bad file descriptor) [pid 5293] close(21) = -1 EBADF (Bad file descriptor) [pid 5293] close(22) = -1 EBADF (Bad file descriptor) [pid 5293] close(23) = -1 EBADF (Bad file descriptor) [pid 5293] close(24) = -1 EBADF (Bad file descriptor) [pid 5293] close(25) = -1 EBADF (Bad file descriptor) [pid 5293] close(26) = -1 EBADF (Bad file descriptor) [pid 5293] close(27) = -1 EBADF (Bad file descriptor) [pid 5293] close(28) = -1 EBADF (Bad file descriptor) [pid 5293] close(29) = -1 EBADF (Bad file descriptor) [pid 5293] exit_group(0 [pid 5297] <... futex resumed>) = ? [pid 5297] +++ exited with 0 +++ [pid 5294] <... futex resumed>) = ? [pid 5293] <... exit_group resumed>) = ? [pid 5294] +++ exited with 0 +++ [pid 5293] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=143, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5046] umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./47/binderfs") = 0 [ 105.207365][ T5294] [pid 5046] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./47/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./47/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./47/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./47") = 0 [pid 5046] mkdir("./48", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5298 attached , child_tidptr=0x555555a9c690) = 146 [pid 5298] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5298] chdir("./48") = 0 [pid 5298] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5298] setpgid(0, 0) = 0 [pid 5298] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5298] write(3, "1000", 4) = 4 [pid 5298] close(3) = 0 [pid 5298] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5298] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5298] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5298] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5298] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5298] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5298] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5298] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5298] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5299 attached => {parent_tid=[147]}, 88) = 147 [pid 5298] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5298] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5298] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5299] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5299] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5299] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5299] memfd_create("syzkaller", 0) = 3 [pid 5299] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5299] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5299] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5299] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5299] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5299] close(3) = 0 [pid 5299] mkdir("./file0", 0777) = 0 [pid 5299] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5299] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5299] chdir("./file0") = 0 [pid 5299] ioctl(4, LOOP_CLR_FD) = 0 [pid 5299] close(4) = 0 [pid 5299] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5298] <... futex resumed>) = 0 [pid 5299] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5298] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5299] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5299] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5298] <... futex resumed>) = 0 [pid 5298] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5299] <... open resumed>) = 4 [pid 5299] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5298] <... futex resumed>) = 0 [pid 5299] <... futex resumed>) = 1 [pid 5298] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5299] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5298] <... futex resumed>) = 0 [pid 5298] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5299] <... open resumed>) = 5 [pid 5299] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5298] <... futex resumed>) = 0 [pid 5298] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5299] <... futex resumed>) = 1 [pid 5298] <... futex resumed>) = 0 [pid 5299] ftruncate(5, 33587195 [pid 5298] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5299] <... ftruncate resumed>) = 0 [pid 5299] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5299] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5298] <... futex resumed>) = 0 [pid 5298] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5299] <... futex resumed>) = 0 [pid 5298] <... futex resumed>) = 1 [pid 5299] sendfile(4, 5, NULL, 4 [pid 5298] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5299] <... sendfile resumed>) = 4 [pid 5299] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5298] <... futex resumed>) = 0 [pid 5298] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5299] <... futex resumed>) = 1 [pid 5298] <... futex resumed>) = 0 [pid 5299] sendfile(4, 5, NULL, 281474978811909 [pid 5298] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5298] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5298] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5298] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5298] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0} => {parent_tid=[148]}, 88) = 148 [pid 5298] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5298] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5298] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5302 attached [pid 5302] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5302] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5302] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5302] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5302] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5298] <... futex resumed>) = 0 [pid 5302] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5298] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5302] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5298] <... futex resumed>) = 0 [pid 5302] prlimit64(0, RLIMIT_CPU, NULL, [ 105.308306][ T5299] loop0: detected capacity change from 0 to 2048 [ 105.361683][ T5302] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 105.379114][ T5302] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 41 with error 28 [ 105.392264][ T5302] EXT4-fs (loop0): This should not happen!! Data will be lost [ 105.392264][ T5302] [ 105.402839][ T5302] EXT4-fs (loop0): Total free blocks count 0 [pid 5298] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5302] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5302] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 105.409174][ T5302] EXT4-fs (loop0): Free/Dirty block details [ 105.415830][ T5302] EXT4-fs (loop0): free_blocks=2415919104 [ 105.422882][ T5302] EXT4-fs (loop0): dirty_blocks=48 [ 105.428094][ T5302] EXT4-fs (loop0): Block reservation details [ 105.434136][ T5302] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 105.445075][ T5299] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 42 with max blocks 1 with error 28 [pid 5302] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5299] <... sendfile resumed>) = 86016 [pid 5299] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5298] close(3) = 0 [pid 5298] close(4) = 0 [pid 5298] close(5) = 0 [pid 5299] <... futex resumed>) = 0 [pid 5298] close(6 [pid 5299] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5298] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5298] close(7) = -1 EBADF (Bad file descriptor) [pid 5298] close(8) = -1 EBADF (Bad file descriptor) [pid 5298] close(9) = -1 EBADF (Bad file descriptor) [pid 5298] close(10) = -1 EBADF (Bad file descriptor) [pid 5298] close(11) = -1 EBADF (Bad file descriptor) [pid 5298] close(12) = -1 EBADF (Bad file descriptor) [pid 5298] close(13) = -1 EBADF (Bad file descriptor) [pid 5298] close(14) = -1 EBADF (Bad file descriptor) [pid 5298] close(15) = -1 EBADF (Bad file descriptor) [pid 5298] close(16) = -1 EBADF (Bad file descriptor) [pid 5298] close(17) = -1 EBADF (Bad file descriptor) [pid 5298] close(18) = -1 EBADF (Bad file descriptor) [pid 5298] close(19) = -1 EBADF (Bad file descriptor) [pid 5298] close(20) = -1 EBADF (Bad file descriptor) [pid 5298] close(21) = -1 EBADF (Bad file descriptor) [pid 5298] close(22) = -1 EBADF (Bad file descriptor) [pid 5298] close(23) = -1 EBADF (Bad file descriptor) [pid 5298] close(24) = -1 EBADF (Bad file descriptor) [pid 5298] close(25) = -1 EBADF (Bad file descriptor) [pid 5298] close(26) = -1 EBADF (Bad file descriptor) [pid 5298] close(27) = -1 EBADF (Bad file descriptor) [pid 5298] close(28) = -1 EBADF (Bad file descriptor) [pid 5298] close(29) = -1 EBADF (Bad file descriptor) [pid 5298] exit_group(0 [pid 5302] <... futex resumed>) = ? [pid 5299] <... futex resumed>) = ? [pid 5298] <... exit_group resumed>) = ? [pid 5302] +++ exited with 0 +++ [pid 5299] +++ exited with 0 +++ [pid 5298] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=146, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5046] umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./48/binderfs") = 0 [ 105.458341][ T5299] EXT4-fs (loop0): This should not happen!! Data will be lost [ 105.458341][ T5299] [pid 5046] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./48/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./48/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./48/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./48") = 0 [pid 5046] mkdir("./49", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5303 attached , child_tidptr=0x555555a9c690) = 149 [pid 5303] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5303] chdir("./49") = 0 [pid 5303] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5303] setpgid(0, 0) = 0 [pid 5303] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5303] write(3, "1000", 4) = 4 [pid 5303] close(3) = 0 [pid 5303] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5303] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5303] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5303] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5303] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5303] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5303] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5303] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5303] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5304 attached [pid 5304] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053 [pid 5303] <... clone3 resumed> => {parent_tid=[150]}, 88) = 150 [pid 5304] <... rseq resumed>) = 0 [pid 5303] rt_sigprocmask(SIG_SETMASK, [], [pid 5304] set_robust_list(0x7efc0265e9a0, 24 [pid 5303] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5304] <... set_robust_list resumed>) = 0 [pid 5304] rt_sigprocmask(SIG_SETMASK, [], [pid 5303] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5304] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5304] memfd_create("syzkaller", 0 [pid 5303] <... futex resumed>) = 0 [pid 5303] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5304] <... memfd_create resumed>) = 3 [pid 5304] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5304] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5304] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5304] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5304] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5304] close(3) = 0 [pid 5304] mkdir("./file0", 0777) = 0 [pid 5304] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5304] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5304] chdir("./file0") = 0 [pid 5304] ioctl(4, LOOP_CLR_FD) = 0 [pid 5304] close(4) = 0 [pid 5304] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5303] <... futex resumed>) = 0 [pid 5304] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5303] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5303] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5304] <... futex resumed>) = 0 [pid 5304] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5304] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5304] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5303] <... futex resumed>) = 0 [pid 5303] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5304] <... futex resumed>) = 0 [pid 5303] <... futex resumed>) = 1 [pid 5304] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5304] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5304] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5303] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5303] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5304] <... futex resumed>) = 0 [pid 5303] <... futex resumed>) = 1 [pid 5304] ftruncate(5, 33587195) = 0 [pid 5304] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5304] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5303] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5303] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5304] <... futex resumed>) = 0 [pid 5303] <... futex resumed>) = 1 [pid 5304] sendfile(4, 5, NULL, 4 [pid 5303] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5304] <... sendfile resumed>) = 4 [pid 5304] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5303] <... futex resumed>) = 0 [pid 5303] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5303] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5303] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5303] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5303] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5303] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0} [pid 5304] sendfile(4, 5, NULL, 281474978811909./strace-static-x86_64: Process 5307 attached [pid 5303] <... clone3 resumed> => {parent_tid=[151]}, 88) = 151 [pid 5307] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5303] rt_sigprocmask(SIG_SETMASK, [], [pid 5307] <... rseq resumed>) = 0 [pid 5307] set_robust_list(0x7efbfa33d9a0, 24 [pid 5303] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5307] <... set_robust_list resumed>) = 0 [pid 5307] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5303] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5307] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000 [pid 5303] <... futex resumed>) = 0 [pid 5303] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5307] <... mmap resumed>) = 0x20000000 [pid 5307] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5303] <... futex resumed>) = 0 [ 105.597873][ T5304] loop0: detected capacity change from 0 to 2048 [pid 5307] prlimit64(0, RLIMIT_CPU, NULL, [pid 5303] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 105.658831][ T5307] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 105.675237][ T5307] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 35 with error 28 [ 105.688348][ T5307] EXT4-fs (loop0): This should not happen!! Data will be lost [ 105.688348][ T5307] [ 105.698065][ T5307] EXT4-fs (loop0): Total free blocks count 0 [pid 5303] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5307] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5307] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5307] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5304] <... sendfile resumed>) = 73728 [pid 5304] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5304] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5303] close(3) = 0 [pid 5303] close(4) = 0 [pid 5303] close(5) = 0 [pid 5303] close(6) = -1 EBADF (Bad file descriptor) [pid 5303] close(7) = -1 EBADF (Bad file descriptor) [pid 5303] close(8) = -1 EBADF (Bad file descriptor) [pid 5303] close(9) = -1 EBADF (Bad file descriptor) [pid 5303] close(10) = -1 EBADF (Bad file descriptor) [pid 5303] close(11) = -1 EBADF (Bad file descriptor) [pid 5303] close(12) = -1 EBADF (Bad file descriptor) [pid 5303] close(13) = -1 EBADF (Bad file descriptor) [pid 5303] close(14) = -1 EBADF (Bad file descriptor) [pid 5303] close(15) = -1 EBADF (Bad file descriptor) [pid 5303] close(16) = -1 EBADF (Bad file descriptor) [pid 5303] close(17) = -1 EBADF (Bad file descriptor) [pid 5303] close(18) = -1 EBADF (Bad file descriptor) [pid 5303] close(19) = -1 EBADF (Bad file descriptor) [pid 5303] close(20) = -1 EBADF (Bad file descriptor) [pid 5303] close(21) = -1 EBADF (Bad file descriptor) [pid 5303] close(22) = -1 EBADF (Bad file descriptor) [pid 5303] close(23) = -1 EBADF (Bad file descriptor) [pid 5303] close(24) = -1 EBADF (Bad file descriptor) [pid 5303] close(25) = -1 EBADF (Bad file descriptor) [pid 5303] close(26) = -1 EBADF (Bad file descriptor) [pid 5303] close(27) = -1 EBADF (Bad file descriptor) [pid 5303] close(28) = -1 EBADF (Bad file descriptor) [pid 5303] close(29) = -1 EBADF (Bad file descriptor) [pid 5303] exit_group(0 [pid 5307] <... futex resumed>) = ? [pid 5307] +++ exited with 0 +++ [pid 5304] <... futex resumed>) = ? [pid 5303] <... exit_group resumed>) = ? [pid 5304] +++ exited with 0 +++ [pid 5303] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=149, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5046] umount2("./49", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./49/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./49/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./49/binderfs") = 0 [ 105.704076][ T5307] EXT4-fs (loop0): Free/Dirty block details [ 105.710094][ T5307] EXT4-fs (loop0): free_blocks=2415919104 [ 105.715830][ T5307] EXT4-fs (loop0): dirty_blocks=48 [ 105.721056][ T5307] EXT4-fs (loop0): Block reservation details [ 105.727439][ T5307] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 105.735190][ T5304] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 36 with max blocks 1 with error 28 [ 105.747891][ T5304] EXT4-fs (loop0): This should not happen!! Data will be lost [ 105.747891][ T5304] [pid 5046] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./49/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./49/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./49/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./49") = 0 [pid 5046] mkdir("./50", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5308 attached , child_tidptr=0x555555a9c690) = 152 [pid 5308] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5308] chdir("./50") = 0 [pid 5308] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5308] setpgid(0, 0) = 0 [pid 5308] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5308] write(3, "1000", 4) = 4 [pid 5308] close(3) = 0 [pid 5308] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5308] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5308] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5308] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5308] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5308] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5308] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5308] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5308] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5309 attached => {parent_tid=[153]}, 88) = 153 [pid 5309] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5308] rt_sigprocmask(SIG_SETMASK, [], [pid 5309] set_robust_list(0x7efc0265e9a0, 24 [pid 5308] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5309] <... set_robust_list resumed>) = 0 [pid 5308] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5309] rt_sigprocmask(SIG_SETMASK, [], [pid 5308] <... futex resumed>) = 0 [pid 5308] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5309] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5309] memfd_create("syzkaller", 0) = 3 [pid 5309] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5309] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5309] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5309] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5309] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5309] close(3) = 0 [pid 5309] mkdir("./file0", 0777) = 0 [pid 5309] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5309] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5309] chdir("./file0") = 0 [pid 5309] ioctl(4, LOOP_CLR_FD) = 0 [pid 5309] close(4) = 0 [pid 5309] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5309] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5308] <... futex resumed>) = 0 [pid 5308] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5309] <... futex resumed>) = 0 [pid 5308] <... futex resumed>) = 1 [pid 5309] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5308] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5309] <... open resumed>) = 4 [pid 5309] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5308] <... futex resumed>) = 0 [pid 5309] <... futex resumed>) = 1 [pid 5308] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5309] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5308] <... futex resumed>) = 0 [pid 5308] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5309] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5308] <... futex resumed>) = 0 [pid 5309] ftruncate(5, 33587195 [pid 5308] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5309] <... ftruncate resumed>) = 0 [pid 5308] <... futex resumed>) = 0 [pid 5308] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5309] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5308] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5309] <... futex resumed>) = 0 [pid 5308] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5309] sendfile(4, 5, NULL, 4) = 4 [pid 5308] <... futex resumed>) = 0 [pid 5308] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5309] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5308] <... futex resumed>) = 0 [pid 5308] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5308] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5308] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5309] <... futex resumed>) = 1 [pid 5308] <... mmap resumed>) = 0x7efbfa31d000 [pid 5309] sendfile(4, 5, NULL, 281474978811909 [pid 5308] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5308] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5308] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0} => {parent_tid=[154]}, 88) = 154 [pid 5308] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5308] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5308] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5312 attached [pid 5312] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5312] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 105.873532][ T5309] loop0: detected capacity change from 0 to 2048 [pid 5312] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5312] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5308] <... futex resumed>) = 0 [pid 5312] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5308] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5312] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5308] <... futex resumed>) = 0 [pid 5312] prlimit64(0, RLIMIT_CPU, NULL, [ 105.943584][ T5312] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 105.959219][ T5312] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 49 with error 28 [ 105.971617][ T5312] EXT4-fs (loop0): This should not happen!! Data will be lost [ 105.971617][ T5312] [ 105.981652][ T5312] EXT4-fs (loop0): Total free blocks count 0 [ 105.987768][ T5312] EXT4-fs (loop0): Free/Dirty block details [pid 5308] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5312] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5312] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 105.994073][ T5312] EXT4-fs (loop0): free_blocks=2415919104 [ 105.999917][ T5312] EXT4-fs (loop0): dirty_blocks=64 [ 106.005342][ T5312] EXT4-fs (loop0): Block reservation details [ 106.011709][ T5312] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 106.020185][ T5309] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 50 with max blocks 1 with error 28 [ 106.035148][ T5309] EXT4-fs (loop0): This should not happen!! Data will be lost [pid 5312] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5309] <... sendfile resumed>) = 102400 [pid 5309] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5309] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5308] close(3) = 0 [pid 5308] close(4) = 0 [pid 5308] close(5) = 0 [pid 5308] close(6) = -1 EBADF (Bad file descriptor) [pid 5308] close(7) = -1 EBADF (Bad file descriptor) [pid 5308] close(8) = -1 EBADF (Bad file descriptor) [pid 5308] close(9) = -1 EBADF (Bad file descriptor) [pid 5308] close(10) = -1 EBADF (Bad file descriptor) [pid 5308] close(11) = -1 EBADF (Bad file descriptor) [pid 5308] close(12) = -1 EBADF (Bad file descriptor) [pid 5308] close(13) = -1 EBADF (Bad file descriptor) [pid 5308] close(14) = -1 EBADF (Bad file descriptor) [pid 5308] close(15) = -1 EBADF (Bad file descriptor) [pid 5308] close(16) = -1 EBADF (Bad file descriptor) [pid 5308] close(17) = -1 EBADF (Bad file descriptor) [pid 5308] close(18) = -1 EBADF (Bad file descriptor) [pid 5308] close(19) = -1 EBADF (Bad file descriptor) [pid 5308] close(20) = -1 EBADF (Bad file descriptor) [pid 5308] close(21) = -1 EBADF (Bad file descriptor) [pid 5308] close(22) = -1 EBADF (Bad file descriptor) [pid 5308] close(23) = -1 EBADF (Bad file descriptor) [pid 5308] close(24) = -1 EBADF (Bad file descriptor) [pid 5308] close(25) = -1 EBADF (Bad file descriptor) [pid 5308] close(26) = -1 EBADF (Bad file descriptor) [pid 5308] close(27) = -1 EBADF (Bad file descriptor) [pid 5308] close(28) = -1 EBADF (Bad file descriptor) [pid 5308] close(29) = -1 EBADF (Bad file descriptor) [pid 5308] exit_group(0 [pid 5312] <... futex resumed>) = ? [pid 5308] <... exit_group resumed>) = ? [pid 5312] +++ exited with 0 +++ [pid 5309] <... futex resumed>) = ? [pid 5309] +++ exited with 0 +++ [pid 5308] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=152, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5046] umount2("./50", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./50/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./50/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./50/binderfs") = 0 [ 106.035148][ T5309] [pid 5046] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./50/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./50/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./50/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./50") = 0 [pid 5046] mkdir("./51", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9c690) = 155 ./strace-static-x86_64: Process 5313 attached [pid 5313] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5313] chdir("./51") = 0 [pid 5313] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5313] setpgid(0, 0) = 0 [pid 5313] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5313] write(3, "1000", 4) = 4 [pid 5313] close(3) = 0 [pid 5313] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5313] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5313] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5313] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5313] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5313] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5313] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5313] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5313] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5314 attached => {parent_tid=[156]}, 88) = 156 [pid 5314] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5313] rt_sigprocmask(SIG_SETMASK, [], [pid 5314] set_robust_list(0x7efc0265e9a0, 24 [pid 5313] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5314] <... set_robust_list resumed>) = 0 [pid 5313] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5314] rt_sigprocmask(SIG_SETMASK, [], [pid 5313] <... futex resumed>) = 0 [pid 5314] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5314] memfd_create("syzkaller", 0 [pid 5313] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5314] <... memfd_create resumed>) = 3 [pid 5314] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5314] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5314] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5314] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5314] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5314] close(3) = 0 [pid 5314] mkdir("./file0", 0777) = 0 [pid 5314] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5314] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5314] chdir("./file0") = 0 [pid 5314] ioctl(4, LOOP_CLR_FD) = 0 [pid 5314] close(4) = 0 [pid 5314] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5313] <... futex resumed>) = 0 [pid 5314] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5313] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5314] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5313] <... futex resumed>) = 0 [pid 5313] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5314] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5314] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5314] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5313] <... futex resumed>) = 0 [pid 5313] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5314] <... futex resumed>) = 0 [pid 5313] <... futex resumed>) = 1 [pid 5314] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5313] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5314] <... open resumed>) = 5 [pid 5314] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5313] <... futex resumed>) = 0 [pid 5314] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5313] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5314] ftruncate(5, 33587195 [pid 5313] <... futex resumed>) = 0 [pid 5313] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5314] <... ftruncate resumed>) = 0 [pid 5314] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5313] <... futex resumed>) = 0 [pid 5314] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5313] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5314] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5313] <... futex resumed>) = 0 [pid 5314] sendfile(4, 5, NULL, 4 [pid 5313] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5314] <... sendfile resumed>) = 4 [pid 5314] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5313] <... futex resumed>) = 0 [pid 5314] <... futex resumed>) = 1 [pid 5313] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5314] sendfile(4, 5, NULL, 281474978811909 [pid 5313] <... futex resumed>) = 0 [pid 5313] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5313] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5313] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5313] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5313] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5317 attached => {parent_tid=[157]}, 88) = 157 [pid 5317] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5313] rt_sigprocmask(SIG_SETMASK, [], [pid 5317] <... rseq resumed>) = 0 [pid 5313] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5317] set_robust_list(0x7efbfa33d9a0, 24 [pid 5313] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5317] <... set_robust_list resumed>) = 0 [pid 5313] <... futex resumed>) = 0 [ 106.173794][ T5314] loop0: detected capacity change from 0 to 2048 [pid 5317] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5313] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5317] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5317] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5313] <... futex resumed>) = 0 [pid 5317] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5313] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5317] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5313] <... futex resumed>) = 0 [pid 5317] prlimit64(0, RLIMIT_CPU, NULL, [ 106.257829][ T5317] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 106.275627][ T5317] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 137 with error 28 [ 106.288064][ T5317] EXT4-fs (loop0): This should not happen!! Data will be lost [ 106.288064][ T5317] [ 106.298969][ T5317] EXT4-fs (loop0): Total free blocks count 0 [pid 5313] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5317] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5317] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 106.304958][ T5317] EXT4-fs (loop0): Free/Dirty block details [ 106.311339][ T5317] EXT4-fs (loop0): free_blocks=2415919104 [ 106.317947][ T5317] EXT4-fs (loop0): dirty_blocks=144 [ 106.323168][ T5317] EXT4-fs (loop0): Block reservation details [ 106.329822][ T5317] EXT4-fs (loop0): i_reserved_data_blocks=9 [ 106.342267][ T5314] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 138 with max blocks 1 with error 28 [pid 5317] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5314] <... sendfile resumed>) = 282624 [pid 5314] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5314] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5313] close(3) = 0 [pid 5313] close(4) = 0 [pid 5313] close(5) = 0 [pid 5313] close(6) = -1 EBADF (Bad file descriptor) [pid 5313] close(7) = -1 EBADF (Bad file descriptor) [pid 5313] close(8) = -1 EBADF (Bad file descriptor) [pid 5313] close(9) = -1 EBADF (Bad file descriptor) [pid 5313] close(10) = -1 EBADF (Bad file descriptor) [pid 5313] close(11) = -1 EBADF (Bad file descriptor) [pid 5313] close(12) = -1 EBADF (Bad file descriptor) [pid 5313] close(13) = -1 EBADF (Bad file descriptor) [pid 5313] close(14) = -1 EBADF (Bad file descriptor) [pid 5313] close(15) = -1 EBADF (Bad file descriptor) [pid 5313] close(16) = -1 EBADF (Bad file descriptor) [pid 5313] close(17) = -1 EBADF (Bad file descriptor) [pid 5313] close(18) = -1 EBADF (Bad file descriptor) [pid 5313] close(19) = -1 EBADF (Bad file descriptor) [pid 5313] close(20) = -1 EBADF (Bad file descriptor) [pid 5313] close(21) = -1 EBADF (Bad file descriptor) [pid 5313] close(22) = -1 EBADF (Bad file descriptor) [pid 5313] close(23) = -1 EBADF (Bad file descriptor) [pid 5313] close(24) = -1 EBADF (Bad file descriptor) [pid 5313] close(25) = -1 EBADF (Bad file descriptor) [pid 5313] close(26) = -1 EBADF (Bad file descriptor) [pid 5313] close(27) = -1 EBADF (Bad file descriptor) [pid 5313] close(28) = -1 EBADF (Bad file descriptor) [pid 5313] close(29) = -1 EBADF (Bad file descriptor) [pid 5313] exit_group(0 [pid 5317] <... futex resumed>) = ? [pid 5313] <... exit_group resumed>) = ? [pid 5317] +++ exited with 0 +++ [pid 5314] <... futex resumed>) = ? [pid 5314] +++ exited with 0 +++ [pid 5313] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=155, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5046] umount2("./51", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./51/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./51/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./51/binderfs") = 0 [pid 5046] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 106.355063][ T5314] EXT4-fs (loop0): This should not happen!! Data will be lost [ 106.355063][ T5314] [pid 5046] newfstatat(AT_FDCWD, "./51/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./51/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./51/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./51") = 0 [pid 5046] mkdir("./52", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5318 attached , child_tidptr=0x555555a9c690) = 158 [pid 5318] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5318] chdir("./52") = 0 [pid 5318] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5318] setpgid(0, 0) = 0 [pid 5318] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5318] write(3, "1000", 4) = 4 [pid 5318] close(3) = 0 [pid 5318] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5318] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5318] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5318] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5318] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5318] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5318] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5318] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5318] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0} => {parent_tid=[159]}, 88) = 159 [pid 5318] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5319 attached NULL, 8) = 0 [pid 5318] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5319] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053 [pid 5318] <... futex resumed>) = 0 [pid 5318] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5319] <... rseq resumed>) = 0 [pid 5319] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5319] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5319] memfd_create("syzkaller", 0) = 3 [pid 5319] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5319] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5319] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5319] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5319] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5319] close(3) = 0 [pid 5319] mkdir("./file0", 0777) = 0 [pid 5319] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5319] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5319] chdir("./file0") = 0 [pid 5319] ioctl(4, LOOP_CLR_FD) = 0 [pid 5319] close(4) = 0 [pid 5319] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5318] <... futex resumed>) = 0 [pid 5319] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5318] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5319] <... futex resumed>) = 0 [pid 5318] <... futex resumed>) = 1 [pid 5319] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5318] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5319] <... open resumed>) = 4 [pid 5319] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5319] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5318] <... futex resumed>) = 0 [pid 5318] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5319] <... futex resumed>) = 0 [pid 5318] <... futex resumed>) = 1 [pid 5319] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5318] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5319] <... open resumed>) = 5 [pid 5319] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5318] <... futex resumed>) = 0 [pid 5319] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5318] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5319] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5318] <... futex resumed>) = 0 [pid 5319] ftruncate(5, 33587195) = 0 [pid 5318] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5319] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5318] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5319] <... futex resumed>) = 0 [pid 5318] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5319] sendfile(4, 5, NULL, 4 [pid 5318] <... futex resumed>) = 0 [pid 5319] <... sendfile resumed>) = 4 [pid 5318] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5319] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5318] <... futex resumed>) = 0 [pid 5319] <... futex resumed>) = 1 [pid 5318] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5319] sendfile(4, 5, NULL, 281474978811909 [pid 5318] <... futex resumed>) = 0 [pid 5318] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5318] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5318] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5318] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5318] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5322 attached [pid 5322] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5318] <... clone3 resumed> => {parent_tid=[160]}, 88) = 160 [pid 5322] <... rseq resumed>) = 0 [pid 5322] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5322] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5322] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5318] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5318] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 106.502940][ T5319] loop0: detected capacity change from 0 to 2048 [pid 5318] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5322] <... futex resumed>) = 0 [pid 5322] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5322] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5322] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5318] <... futex resumed>) = 0 [pid 5318] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5318] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5322] <... futex resumed>) = 0 [pid 5322] prlimit64(0, RLIMIT_CPU, NULL, [pid 5318] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 106.582659][ T5322] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 106.598234][ T5322] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 139 with error 28 [ 106.610980][ T5322] EXT4-fs (loop0): This should not happen!! Data will be lost [ 106.610980][ T5322] [ 106.621413][ T5322] EXT4-fs (loop0): Total free blocks count 0 [pid 5322] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5322] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 106.627900][ T5322] EXT4-fs (loop0): Free/Dirty block details [ 106.633868][ T5322] EXT4-fs (loop0): free_blocks=2415919104 [ 106.640008][ T5322] EXT4-fs (loop0): dirty_blocks=144 [ 106.645214][ T5322] EXT4-fs (loop0): Block reservation details [ 106.651558][ T5322] EXT4-fs (loop0): i_reserved_data_blocks=9 [ 106.662178][ T5319] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 140 with max blocks 1 with error 28 [ 106.674766][ T5319] EXT4-fs (loop0): This should not happen!! Data will be lost [pid 5322] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5319] <... sendfile resumed>) = 286720 [pid 5319] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5319] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5318] close(3) = 0 [pid 5318] close(4) = 0 [pid 5318] close(5) = 0 [pid 5318] close(6) = -1 EBADF (Bad file descriptor) [pid 5318] close(7) = -1 EBADF (Bad file descriptor) [pid 5318] close(8) = -1 EBADF (Bad file descriptor) [pid 5318] close(9) = -1 EBADF (Bad file descriptor) [pid 5318] close(10) = -1 EBADF (Bad file descriptor) [pid 5318] close(11) = -1 EBADF (Bad file descriptor) [pid 5318] close(12) = -1 EBADF (Bad file descriptor) [pid 5318] close(13) = -1 EBADF (Bad file descriptor) [pid 5318] close(14) = -1 EBADF (Bad file descriptor) [pid 5318] close(15) = -1 EBADF (Bad file descriptor) [pid 5318] close(16) = -1 EBADF (Bad file descriptor) [pid 5318] close(17) = -1 EBADF (Bad file descriptor) [pid 5318] close(18) = -1 EBADF (Bad file descriptor) [pid 5318] close(19) = -1 EBADF (Bad file descriptor) [pid 5318] close(20) = -1 EBADF (Bad file descriptor) [pid 5318] close(21) = -1 EBADF (Bad file descriptor) [pid 5318] close(22) = -1 EBADF (Bad file descriptor) [pid 5318] close(23) = -1 EBADF (Bad file descriptor) [pid 5318] close(24) = -1 EBADF (Bad file descriptor) [pid 5318] close(25) = -1 EBADF (Bad file descriptor) [pid 5318] close(26) = -1 EBADF (Bad file descriptor) [pid 5318] close(27) = -1 EBADF (Bad file descriptor) [pid 5318] close(28) = -1 EBADF (Bad file descriptor) [pid 5318] close(29) = -1 EBADF (Bad file descriptor) [pid 5318] exit_group(0 [pid 5319] <... futex resumed>) = ? [pid 5318] <... exit_group resumed>) = ? [pid 5319] +++ exited with 0 +++ [pid 5322] <... futex resumed>) = ? [pid 5322] +++ exited with 0 +++ [pid 5318] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=158, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./52", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./52/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./52/binderfs") = 0 [ 106.674766][ T5319] [pid 5046] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./52/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./52/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./52/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./52") = 0 [pid 5046] mkdir("./53", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5323 attached , child_tidptr=0x555555a9c690) = 161 [pid 5323] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5323] chdir("./53") = 0 [pid 5323] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5323] setpgid(0, 0) = 0 [pid 5323] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5323] write(3, "1000", 4) = 4 [pid 5323] close(3) = 0 [pid 5323] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5323] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5323] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5323] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5323] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5323] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5323] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5323] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5323] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5324 attached => {parent_tid=[162]}, 88) = 162 [pid 5324] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5323] rt_sigprocmask(SIG_SETMASK, [], [pid 5324] set_robust_list(0x7efc0265e9a0, 24 [pid 5323] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5324] <... set_robust_list resumed>) = 0 [pid 5323] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5324] rt_sigprocmask(SIG_SETMASK, [], [pid 5323] <... futex resumed>) = 0 [pid 5324] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5323] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5324] memfd_create("syzkaller", 0) = 3 [pid 5324] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5324] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5324] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5324] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5324] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5324] close(3) = 0 [pid 5324] mkdir("./file0", 0777) = 0 [pid 5324] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5324] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5324] chdir("./file0") = 0 [pid 5324] ioctl(4, LOOP_CLR_FD) = 0 [pid 5324] close(4) = 0 [pid 5324] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5323] <... futex resumed>) = 0 [pid 5323] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5324] <... futex resumed>) = 1 [pid 5323] <... futex resumed>) = 0 [pid 5324] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5323] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5324] <... open resumed>) = 4 [pid 5324] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5323] <... futex resumed>) = 0 [pid 5323] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5323] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5324] <... futex resumed>) = 1 [pid 5324] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5324] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5323] <... futex resumed>) = 0 [pid 5323] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5323] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5324] <... futex resumed>) = 1 [pid 5324] ftruncate(5, 33587195) = 0 [pid 5324] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5323] <... futex resumed>) = 0 [pid 5323] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5324] sendfile(4, 5, NULL, 4 [pid 5323] <... futex resumed>) = 0 [pid 5323] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5324] <... sendfile resumed>) = 4 [pid 5324] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5323] <... futex resumed>) = 0 [pid 5324] sendfile(4, 5, NULL, 281474978811909 [pid 5323] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5323] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5323] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5323] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [ 106.782779][ T5324] loop0: detected capacity change from 0 to 2048 [pid 5323] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5323] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5327 attached [pid 5327] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5323] <... clone3 resumed> => {parent_tid=[163]}, 88) = 163 [pid 5327] <... rseq resumed>) = 0 [pid 5327] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5327] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5327] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5323] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5323] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5323] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5327] <... futex resumed>) = 0 [pid 5327] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5327] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5323] <... futex resumed>) = 0 [pid 5323] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5323] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5327] <... futex resumed>) = 1 [ 106.852751][ T5327] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 106.868520][ T5327] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 57 with error 28 [ 106.882145][ T5327] EXT4-fs (loop0): This should not happen!! Data will be lost [ 106.882145][ T5327] [ 106.892065][ T5327] EXT4-fs (loop0): Total free blocks count 0 [pid 5327] prlimit64(0, RLIMIT_CPU, NULL, [pid 5323] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5327] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5327] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5327] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5324] <... sendfile resumed>) = 118784 [pid 5324] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5323] close(3 [pid 5324] <... futex resumed>) = 0 [pid 5323] <... close resumed>) = 0 [pid 5324] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5323] close(4) = 0 [pid 5323] close(5) = 0 [pid 5323] close(6) = -1 EBADF (Bad file descriptor) [pid 5323] close(7) = -1 EBADF (Bad file descriptor) [pid 5323] close(8) = -1 EBADF (Bad file descriptor) [pid 5323] close(9) = -1 EBADF (Bad file descriptor) [pid 5323] close(10) = -1 EBADF (Bad file descriptor) [pid 5323] close(11) = -1 EBADF (Bad file descriptor) [pid 5323] close(12) = -1 EBADF (Bad file descriptor) [pid 5323] close(13) = -1 EBADF (Bad file descriptor) [pid 5323] close(14) = -1 EBADF (Bad file descriptor) [pid 5323] close(15) = -1 EBADF (Bad file descriptor) [pid 5323] close(16) = -1 EBADF (Bad file descriptor) [pid 5323] close(17) = -1 EBADF (Bad file descriptor) [pid 5323] close(18) = -1 EBADF (Bad file descriptor) [pid 5323] close(19) = -1 EBADF (Bad file descriptor) [pid 5323] close(20) = -1 EBADF (Bad file descriptor) [pid 5323] close(21) = -1 EBADF (Bad file descriptor) [pid 5323] close(22) = -1 EBADF (Bad file descriptor) [pid 5323] close(23) = -1 EBADF (Bad file descriptor) [pid 5323] close(24) = -1 EBADF (Bad file descriptor) [pid 5323] close(25) = -1 EBADF (Bad file descriptor) [pid 5323] close(26) = -1 EBADF (Bad file descriptor) [pid 5323] close(27) = -1 EBADF (Bad file descriptor) [pid 5323] close(28) = -1 EBADF (Bad file descriptor) [pid 5323] close(29) = -1 EBADF (Bad file descriptor) [pid 5323] exit_group(0 [pid 5327] <... futex resumed>) = ? [pid 5324] <... futex resumed>) = ? [pid 5323] <... exit_group resumed>) = ? [pid 5327] +++ exited with 0 +++ [pid 5324] +++ exited with 0 +++ [pid 5323] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=161, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5046] umount2("./53", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./53/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./53/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./53/binderfs") = 0 [ 106.898174][ T5327] EXT4-fs (loop0): Free/Dirty block details [ 106.904158][ T5327] EXT4-fs (loop0): free_blocks=2415919104 [ 106.910179][ T5327] EXT4-fs (loop0): dirty_blocks=64 [ 106.915314][ T5327] EXT4-fs (loop0): Block reservation details [ 106.921326][ T5327] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 106.930004][ T5324] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 58 with max blocks 1 with error 28 [ 106.942761][ T5324] EXT4-fs (loop0): This should not happen!! Data will be lost [ 106.942761][ T5324] [pid 5046] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./53/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./53/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./53/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./53") = 0 [pid 5046] mkdir("./54", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5328 attached [pid 5328] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5328] chdir("./54") = 0 [pid 5328] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5328] setpgid(0, 0) = 0 [pid 5328] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5328] write(3, "1000", 4) = 4 [pid 5328] close(3) = 0 [pid 5328] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5328] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5328] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5328] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5328] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5328] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5328] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5328] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5046] <... clone resumed>, child_tidptr=0x555555a9c690) = 164 [pid 5328] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5328] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5329 attached [pid 5329] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053 [pid 5328] <... clone3 resumed> => {parent_tid=[165]}, 88) = 165 [pid 5329] <... rseq resumed>) = 0 [pid 5328] rt_sigprocmask(SIG_SETMASK, [], [pid 5329] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5328] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5329] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5328] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5329] memfd_create("syzkaller", 0 [pid 5328] <... futex resumed>) = 0 [pid 5328] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5329] <... memfd_create resumed>) = 3 [pid 5329] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5329] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5329] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5329] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5329] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5329] close(3) = 0 [pid 5329] mkdir("./file0", 0777) = 0 [pid 5329] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5329] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5329] chdir("./file0") = 0 [pid 5329] ioctl(4, LOOP_CLR_FD) = 0 [pid 5329] close(4) = 0 [pid 5329] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5329] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5328] <... futex resumed>) = 0 [pid 5328] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5329] <... futex resumed>) = 0 [pid 5329] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5328] <... futex resumed>) = 1 [pid 5328] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5329] <... open resumed>) = 4 [pid 5329] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5329] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5328] <... futex resumed>) = 0 [pid 5328] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5329] <... futex resumed>) = 0 [pid 5328] <... futex resumed>) = 1 [pid 5329] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5329] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5329] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5328] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5328] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5329] <... futex resumed>) = 0 [pid 5328] <... futex resumed>) = 1 [pid 5329] ftruncate(5, 33587195) = 0 [pid 5329] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5329] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5328] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5328] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5329] <... futex resumed>) = 0 [pid 5328] <... futex resumed>) = 1 [pid 5329] sendfile(4, 5, NULL, 4 [pid 5328] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5329] <... sendfile resumed>) = 4 [pid 5329] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5328] <... futex resumed>) = 0 [pid 5328] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5328] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5328] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5328] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE [pid 5329] sendfile(4, 5, NULL, 281474978811909 [pid 5328] <... mprotect resumed>) = 0 [pid 5328] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5328] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0} => {parent_tid=[166]}, 88) = 166 [pid 5328] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5328] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5328] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5332 attached [pid 5332] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5332] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5332] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 107.060738][ T5329] loop0: detected capacity change from 0 to 2048 [pid 5332] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5332] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5332] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5328] <... futex resumed>) = 0 [pid 5328] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5332] <... futex resumed>) = 0 [pid 5332] prlimit64(0, RLIMIT_CPU, NULL, [ 107.128699][ T5332] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 107.144976][ T5332] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 107.151325][ T5329] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 64 with max blocks 1 with error 28 [ 107.160185][ T5332] EXT4-fs (loop0): This should not happen!! Data will be lost [pid 5328] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5332] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5332] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5332] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5329] <... sendfile resumed>) = 131072 [pid 5329] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5328] close(3 [pid 5329] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5328] <... close resumed>) = 0 [pid 5328] close(4) = 0 [pid 5328] close(5) = 0 [pid 5328] close(6) = -1 EBADF (Bad file descriptor) [pid 5328] close(7) = -1 EBADF (Bad file descriptor) [pid 5328] close(8) = -1 EBADF (Bad file descriptor) [pid 5328] close(9) = -1 EBADF (Bad file descriptor) [pid 5328] close(10) = -1 EBADF (Bad file descriptor) [pid 5328] close(11) = -1 EBADF (Bad file descriptor) [pid 5328] close(12) = -1 EBADF (Bad file descriptor) [pid 5328] close(13) = -1 EBADF (Bad file descriptor) [pid 5328] close(14) = -1 EBADF (Bad file descriptor) [pid 5328] close(15) = -1 EBADF (Bad file descriptor) [pid 5328] close(16) = -1 EBADF (Bad file descriptor) [pid 5328] close(17) = -1 EBADF (Bad file descriptor) [pid 5328] close(18) = -1 EBADF (Bad file descriptor) [pid 5328] close(19) = -1 EBADF (Bad file descriptor) [pid 5328] close(20) = -1 EBADF (Bad file descriptor) [pid 5328] close(21) = -1 EBADF (Bad file descriptor) [pid 5328] close(22) = -1 EBADF (Bad file descriptor) [pid 5328] close(23) = -1 EBADF (Bad file descriptor) [pid 5328] close(24) = -1 EBADF (Bad file descriptor) [pid 5328] close(25) = -1 EBADF (Bad file descriptor) [pid 5328] close(26) = -1 EBADF (Bad file descriptor) [pid 5328] close(27) = -1 EBADF (Bad file descriptor) [pid 5328] close(28) = -1 EBADF (Bad file descriptor) [pid 5328] close(29) = -1 EBADF (Bad file descriptor) [pid 5328] exit_group(0 [pid 5332] <... futex resumed>) = ? [pid 5329] <... futex resumed>) = ? [pid 5328] <... exit_group resumed>) = ? [pid 5332] +++ exited with 0 +++ [pid 5329] +++ exited with 0 +++ [pid 5328] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=164, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5046] umount2("./54", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [ 107.160185][ T5332] [ 107.171026][ T5329] EXT4-fs (loop0): This should not happen!! Data will be lost [ 107.171026][ T5329] [ 107.182188][ T5332] EXT4-fs (loop0): Total free blocks count 0 [ 107.189446][ T5329] EXT4-fs (loop0): Total free blocks count 0 [ 107.201868][ T5329] EXT4-fs (loop0): Free/Dirty block details [ 107.208517][ T5332] EXT4-fs (loop0): Free/Dirty block details [ 107.208539][ T5332] EXT4-fs (loop0): free_blocks=2415919104 [ 107.208562][ T5332] EXT4-fs (loop0): dirty_blocks=80 [pid 5046] umount2("./54/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./54/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./54/binderfs") = 0 [pid 5046] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./54/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./54/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./54/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./54") = 0 [pid 5046] mkdir("./55", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5333 attached , child_tidptr=0x555555a9c690) = 167 [pid 5333] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5333] chdir("./55") = 0 [pid 5333] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5333] setpgid(0, 0) = 0 [pid 5333] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5333] write(3, "1000", 4) = 4 [pid 5333] close(3) = 0 [pid 5333] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5333] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5333] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5333] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5333] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5333] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5333] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5333] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5333] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5334 attached [pid 5334] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053 [pid 5333] <... clone3 resumed> => {parent_tid=[168]}, 88) = 168 [pid 5334] <... rseq resumed>) = 0 [pid 5333] rt_sigprocmask(SIG_SETMASK, [], [pid 5334] set_robust_list(0x7efc0265e9a0, 24 [pid 5333] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5334] <... set_robust_list resumed>) = 0 [pid 5333] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5334] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5333] <... futex resumed>) = 0 [pid 5334] memfd_create("syzkaller", 0 [pid 5333] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5334] <... memfd_create resumed>) = 3 [pid 5334] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5334] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5334] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5334] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5334] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5334] close(3) = 0 [pid 5334] mkdir("./file0", 0777) = 0 [pid 5334] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5334] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5334] chdir("./file0") = 0 [pid 5334] ioctl(4, LOOP_CLR_FD) = 0 [pid 5334] close(4) = 0 [pid 5334] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5333] <... futex resumed>) = 0 [pid 5334] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5333] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5333] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5334] <... open resumed>) = 4 [pid 5334] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5334] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5333] <... futex resumed>) = 0 [pid 5333] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5334] <... futex resumed>) = 0 [pid 5333] <... futex resumed>) = 1 [pid 5334] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5334] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5334] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5333] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5333] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5334] <... futex resumed>) = 0 [pid 5333] <... futex resumed>) = 1 [pid 5334] ftruncate(5, 33587195 [pid 5333] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5334] <... ftruncate resumed>) = 0 [pid 5334] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5333] <... futex resumed>) = 0 [pid 5334] sendfile(4, 5, NULL, 4 [pid 5333] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5334] <... sendfile resumed>) = 4 [pid 5333] <... futex resumed>) = 0 [pid 5333] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5334] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5333] <... futex resumed>) = 0 [pid 5334] <... futex resumed>) = 1 [pid 5333] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5334] sendfile(4, 5, NULL, 281474978811909 [pid 5333] <... futex resumed>) = 0 [pid 5333] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5333] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5333] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5333] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5333] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5337 attached => {parent_tid=[169]}, 88) = 169 [pid 5337] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5333] rt_sigprocmask(SIG_SETMASK, [], [pid 5337] <... rseq resumed>) = 0 [pid 5337] set_robust_list(0x7efbfa33d9a0, 24 [pid 5333] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5337] <... set_robust_list resumed>) = 0 [pid 5333] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5337] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5333] <... futex resumed>) = 0 [pid 5337] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000 [ 107.372002][ T5334] loop0: detected capacity change from 0 to 2048 [pid 5333] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5337] <... mmap resumed>) = 0x20000000 [pid 5337] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5337] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5333] <... futex resumed>) = 0 [pid 5333] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5337] <... futex resumed>) = 0 [pid 5333] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 107.448544][ T5337] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 107.464347][ T5337] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 121 with error 28 [ 107.477406][ T5337] EXT4-fs (loop0): This should not happen!! Data will be lost [ 107.477406][ T5337] [ 107.487229][ T5337] EXT4-fs (loop0): Total free blocks count 0 [pid 5337] prlimit64(0, RLIMIT_CPU, NULL, [pid 5333] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5337] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5337] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 107.493255][ T5337] EXT4-fs (loop0): Free/Dirty block details [ 107.500885][ T5337] EXT4-fs (loop0): free_blocks=2415919104 [ 107.506677][ T5337] EXT4-fs (loop0): dirty_blocks=128 [ 107.511894][ T5337] EXT4-fs (loop0): Block reservation details [ 107.518033][ T5337] EXT4-fs (loop0): i_reserved_data_blocks=8 [ 107.530636][ T5334] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 122 with max blocks 1 with error 28 [pid 5337] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5334] <... sendfile resumed>) = 249856 [pid 5334] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5334] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5333] close(3) = 0 [pid 5333] close(4) = 0 [pid 5333] close(5) = 0 [pid 5333] close(6) = -1 EBADF (Bad file descriptor) [pid 5333] close(7) = -1 EBADF (Bad file descriptor) [pid 5333] close(8) = -1 EBADF (Bad file descriptor) [pid 5333] close(9) = -1 EBADF (Bad file descriptor) [pid 5333] close(10) = -1 EBADF (Bad file descriptor) [pid 5333] close(11) = -1 EBADF (Bad file descriptor) [pid 5333] close(12) = -1 EBADF (Bad file descriptor) [pid 5333] close(13) = -1 EBADF (Bad file descriptor) [pid 5333] close(14) = -1 EBADF (Bad file descriptor) [pid 5333] close(15) = -1 EBADF (Bad file descriptor) [pid 5333] close(16) = -1 EBADF (Bad file descriptor) [pid 5333] close(17) = -1 EBADF (Bad file descriptor) [pid 5333] close(18) = -1 EBADF (Bad file descriptor) [pid 5333] close(19) = -1 EBADF (Bad file descriptor) [pid 5333] close(20) = -1 EBADF (Bad file descriptor) [pid 5333] close(21) = -1 EBADF (Bad file descriptor) [pid 5333] close(22) = -1 EBADF (Bad file descriptor) [pid 5333] close(23) = -1 EBADF (Bad file descriptor) [pid 5333] close(24) = -1 EBADF (Bad file descriptor) [pid 5333] close(25) = -1 EBADF (Bad file descriptor) [pid 5333] close(26) = -1 EBADF (Bad file descriptor) [pid 5333] close(27) = -1 EBADF (Bad file descriptor) [pid 5333] close(28) = -1 EBADF (Bad file descriptor) [pid 5333] close(29) = -1 EBADF (Bad file descriptor) [pid 5333] exit_group(0 [pid 5337] <... futex resumed>) = ? [pid 5337] +++ exited with 0 +++ [pid 5334] <... futex resumed>) = ? [pid 5333] <... exit_group resumed>) = ? [pid 5334] +++ exited with 0 +++ [pid 5333] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=167, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5046] umount2("./55", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./55/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./55/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./55/binderfs") = 0 [ 107.543184][ T5334] EXT4-fs (loop0): This should not happen!! Data will be lost [ 107.543184][ T5334] [pid 5046] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./55/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./55/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./55/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./55") = 0 [pid 5046] mkdir("./56", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5338 attached , child_tidptr=0x555555a9c690) = 170 [pid 5338] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5338] chdir("./56") = 0 [pid 5338] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5338] setpgid(0, 0) = 0 [pid 5338] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5338] write(3, "1000", 4) = 4 [pid 5338] close(3) = 0 [pid 5338] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5338] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5338] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5338] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5338] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5338] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5338] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5338] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5338] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5339 attached => {parent_tid=[171]}, 88) = 171 [pid 5339] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5338] rt_sigprocmask(SIG_SETMASK, [], [pid 5339] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5338] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5339] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5338] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5338] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5339] memfd_create("syzkaller", 0) = 3 [pid 5339] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5339] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5339] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5339] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5339] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5339] close(3) = 0 [pid 5339] mkdir("./file0", 0777) = 0 [pid 5339] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5339] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5339] chdir("./file0") = 0 [pid 5339] ioctl(4, LOOP_CLR_FD) = 0 [pid 5339] close(4) = 0 [pid 5339] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5339] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5338] <... futex resumed>) = 0 [pid 5338] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5339] <... futex resumed>) = 0 [pid 5338] <... futex resumed>) = 1 [pid 5339] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5338] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5339] <... open resumed>) = 4 [pid 5339] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5339] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5338] <... futex resumed>) = 0 [pid 5338] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5339] <... futex resumed>) = 0 [pid 5339] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5339] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5339] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5338] <... futex resumed>) = 1 [pid 5338] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5338] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5339] <... futex resumed>) = 0 [ 107.666373][ T5339] loop0: detected capacity change from 0 to 2048 [pid 5339] ftruncate(5, 33587195) = 0 [pid 5339] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5338] <... futex resumed>) = 1 [pid 5339] <... futex resumed>) = 0 [pid 5339] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5338] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5338] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5339] <... futex resumed>) = 0 [pid 5339] sendfile(4, 5, NULL, 4) = 4 [pid 5339] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5339] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5338] <... futex resumed>) = 1 [pid 5338] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5338] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5339] <... futex resumed>) = 0 [pid 5338] <... futex resumed>) = 1 [pid 5339] sendfile(4, 5, NULL, 281474978811909 [pid 5338] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5338] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5338] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5338] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5338] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5342 attached [pid 5342] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5342] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5342] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5342] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5338] <... clone3 resumed> => {parent_tid=[172]}, 88) = 172 [pid 5338] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5338] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5338] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5342] <... futex resumed>) = 0 [pid 5342] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5342] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5338] <... futex resumed>) = 0 [pid 5338] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5338] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5342] <... futex resumed>) = 1 [ 107.755979][ T5339] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 107.772023][ T5339] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 82 with max blocks 1 with error 28 [ 107.772301][ T5342] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 82 with error 28 [ 107.797498][ T5342] EXT4-fs (loop0): This should not happen!! Data will be lost [pid 5342] prlimit64(0, RLIMIT_CPU, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5338] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5342] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5342] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5339] <... sendfile resumed>) = 167936 [pid 5339] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5338] close(3) = 0 [pid 5339] <... futex resumed>) = 0 [pid 5338] close(4) = 0 [pid 5338] close(5) = 0 [pid 5338] close(6) = -1 EBADF (Bad file descriptor) [pid 5338] close(7) = -1 EBADF (Bad file descriptor) [pid 5338] close(8) = -1 EBADF (Bad file descriptor) [pid 5338] close(9) = -1 EBADF (Bad file descriptor) [pid 5338] close(10) = -1 EBADF (Bad file descriptor) [pid 5338] close(11) = -1 EBADF (Bad file descriptor) [pid 5338] close(12) = -1 EBADF (Bad file descriptor) [pid 5338] close(13) = -1 EBADF (Bad file descriptor) [pid 5338] close(14) = -1 EBADF (Bad file descriptor) [pid 5338] close(15) = -1 EBADF (Bad file descriptor) [pid 5338] close(16) = -1 EBADF (Bad file descriptor) [pid 5338] close(17) = -1 EBADF (Bad file descriptor) [pid 5338] close(18) = -1 EBADF (Bad file descriptor) [pid 5338] close(19) = -1 EBADF (Bad file descriptor) [pid 5338] close(20) = -1 EBADF (Bad file descriptor) [pid 5338] close(21 [pid 5339] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5338] close(22) = -1 EBADF (Bad file descriptor) [pid 5338] close(23) = -1 EBADF (Bad file descriptor) [pid 5338] close(24) = -1 EBADF (Bad file descriptor) [pid 5338] close(25) = -1 EBADF (Bad file descriptor) [pid 5338] close(26) = -1 EBADF (Bad file descriptor) [pid 5338] close(27) = -1 EBADF (Bad file descriptor) [pid 5338] close(28) = -1 EBADF (Bad file descriptor) [pid 5338] close(29) = -1 EBADF (Bad file descriptor) [pid 5338] exit_group(0 [pid 5342] <... futex resumed>) = ? [pid 5339] <... futex resumed>) = ? [pid 5338] <... exit_group resumed>) = ? [pid 5342] +++ exited with 0 +++ [pid 5339] +++ exited with 0 +++ [pid 5338] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=170, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5046] umount2("./56", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./56/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./56/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./56/binderfs") = 0 [pid 5046] umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./56/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 107.797498][ T5342] [ 107.800776][ T5339] EXT4-fs (loop0): This should not happen!! Data will be lost [ 107.800776][ T5339] [ 107.807362][ T5342] EXT4-fs (loop0): Total free blocks count 0 [ 107.807385][ T5342] EXT4-fs (loop0): Free/Dirty block details [ 107.807405][ T5342] EXT4-fs (loop0): free_blocks=2415919104 [ 107.807428][ T5342] EXT4-fs (loop0): dirty_blocks=96 [ 107.807447][ T5342] EXT4-fs (loop0): Block reservation details [ 107.807464][ T5342] EXT4-fs (loop0): i_reserved_data_blocks=6 [pid 5046] umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./56/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./56/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./56") = 0 [pid 5046] mkdir("./57", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9c690) = 173 ./strace-static-x86_64: Process 5343 attached [pid 5343] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5343] chdir("./57") = 0 [pid 5343] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5343] setpgid(0, 0) = 0 [pid 5343] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5343] write(3, "1000", 4) = 4 [pid 5343] close(3) = 0 [pid 5343] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5343] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5343] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5343] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5343] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5343] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5343] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5343] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5343] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0} => {parent_tid=[174]}, 88) = 174 [pid 5343] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5343] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5343] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5344 attached [pid 5344] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5344] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5344] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5344] memfd_create("syzkaller", 0) = 3 [pid 5344] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5344] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5344] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5344] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5344] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5344] close(3) = 0 [pid 5344] mkdir("./file0", 0777) = 0 [pid 5344] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5344] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5344] chdir("./file0") = 0 [pid 5344] ioctl(4, LOOP_CLR_FD) = 0 [pid 5344] close(4) = 0 [pid 5344] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5343] <... futex resumed>) = 0 [pid 5343] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5343] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5344] <... futex resumed>) = 1 [pid 5344] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5344] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5343] <... futex resumed>) = 0 [pid 5344] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5343] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5344] <... open resumed>) = 5 [pid 5343] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5344] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5343] <... futex resumed>) = 0 [pid 5344] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5343] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5344] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5343] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5344] ftruncate(5, 33587195) = 0 [pid 5344] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5343] <... futex resumed>) = 0 [pid 5344] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5343] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5344] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5343] <... futex resumed>) = 0 [pid 5344] sendfile(4, 5, NULL, 4 [pid 5343] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5344] <... sendfile resumed>) = 4 [pid 5344] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5343] <... futex resumed>) = 0 [pid 5343] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5343] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5343] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5343] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5343] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5343] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0} [pid 5344] <... futex resumed>) = 1 [pid 5343] <... clone3 resumed> => {parent_tid=[175]}, 88) = 175 ./strace-static-x86_64: Process 5347 attached [pid 5344] sendfile(4, 5, NULL, 281474978811909 [pid 5343] rt_sigprocmask(SIG_SETMASK, [], [pid 5347] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5343] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5343] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5343] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5347] <... rseq resumed>) = 0 [pid 5347] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5347] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5347] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [ 107.958105][ T5344] loop0: detected capacity change from 0 to 2048 [pid 5347] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5343] <... futex resumed>) = 0 [pid 5347] <... futex resumed>) = 1 [pid 5343] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5347] prlimit64(0, RLIMIT_CPU, NULL, [pid 5343] <... futex resumed>) = 0 [ 108.022243][ T5347] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 108.039035][ T5347] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 95 with error 28 [ 108.051775][ T5347] EXT4-fs (loop0): This should not happen!! Data will be lost [ 108.051775][ T5347] [ 108.062343][ T5347] EXT4-fs (loop0): Total free blocks count 0 [pid 5343] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5347] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5347] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 108.068529][ T5347] EXT4-fs (loop0): Free/Dirty block details [ 108.074435][ T5347] EXT4-fs (loop0): free_blocks=2415919104 [ 108.080770][ T5347] EXT4-fs (loop0): dirty_blocks=96 [ 108.085880][ T5347] EXT4-fs (loop0): Block reservation details [ 108.091913][ T5347] EXT4-fs (loop0): i_reserved_data_blocks=6 [ 108.104518][ T5344] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 96 with max blocks 1 with error 28 [pid 5347] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5344] <... sendfile resumed>) = 196608 [pid 5344] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5344] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5343] close(3) = 0 [pid 5343] close(4) = 0 [pid 5343] close(5) = 0 [pid 5343] close(6) = -1 EBADF (Bad file descriptor) [pid 5343] close(7) = -1 EBADF (Bad file descriptor) [pid 5343] close(8) = -1 EBADF (Bad file descriptor) [pid 5343] close(9) = -1 EBADF (Bad file descriptor) [pid 5343] close(10) = -1 EBADF (Bad file descriptor) [pid 5343] close(11) = -1 EBADF (Bad file descriptor) [pid 5343] close(12) = -1 EBADF (Bad file descriptor) [pid 5343] close(13) = -1 EBADF (Bad file descriptor) [pid 5343] close(14) = -1 EBADF (Bad file descriptor) [pid 5343] close(15) = -1 EBADF (Bad file descriptor) [pid 5343] close(16) = -1 EBADF (Bad file descriptor) [pid 5343] close(17) = -1 EBADF (Bad file descriptor) [pid 5343] close(18) = -1 EBADF (Bad file descriptor) [pid 5343] close(19) = -1 EBADF (Bad file descriptor) [pid 5343] close(20) = -1 EBADF (Bad file descriptor) [pid 5343] close(21) = -1 EBADF (Bad file descriptor) [pid 5343] close(22) = -1 EBADF (Bad file descriptor) [pid 5343] close(23) = -1 EBADF (Bad file descriptor) [pid 5343] close(24) = -1 EBADF (Bad file descriptor) [pid 5343] close(25) = -1 EBADF (Bad file descriptor) [pid 5343] close(26) = -1 EBADF (Bad file descriptor) [pid 5343] close(27) = -1 EBADF (Bad file descriptor) [pid 5343] close(28) = -1 EBADF (Bad file descriptor) [pid 5343] close(29) = -1 EBADF (Bad file descriptor) [pid 5343] exit_group(0 [pid 5347] <... futex resumed>) = ? [pid 5343] <... exit_group resumed>) = ? [pid 5347] +++ exited with 0 +++ [pid 5344] <... futex resumed>) = ? [pid 5344] +++ exited with 0 +++ [pid 5343] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=173, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5046] umount2("./57", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./57/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./57/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./57/binderfs") = 0 [ 108.116924][ T5344] EXT4-fs (loop0): This should not happen!! Data will be lost [ 108.116924][ T5344] [pid 5046] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./57/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./57/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./57/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./57") = 0 [pid 5046] mkdir("./58", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5348 attached , child_tidptr=0x555555a9c690) = 176 [pid 5348] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5348] chdir("./58") = 0 [pid 5348] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5348] setpgid(0, 0) = 0 [pid 5348] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5348] write(3, "1000", 4) = 4 [pid 5348] close(3) = 0 [pid 5348] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5348] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5348] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5348] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5348] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5348] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5348] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5348] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5348] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5349 attached [pid 5349] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5349] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5349] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5349] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5348] <... clone3 resumed> => {parent_tid=[177]}, 88) = 177 [pid 5348] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5348] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5349] <... futex resumed>) = 0 [pid 5348] <... futex resumed>) = 1 [pid 5349] memfd_create("syzkaller", 0 [pid 5348] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5349] <... memfd_create resumed>) = 3 [pid 5349] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5349] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5349] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5349] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5349] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5349] close(3) = 0 [pid 5349] mkdir("./file0", 0777) = 0 [pid 5349] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5349] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5349] chdir("./file0") = 0 [pid 5349] ioctl(4, LOOP_CLR_FD) = 0 [pid 5349] close(4) = 0 [pid 5349] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5349] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5348] <... futex resumed>) = 0 [pid 5348] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5348] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5349] <... futex resumed>) = 0 [pid 5349] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5349] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5348] <... futex resumed>) = 0 [pid 5349] <... futex resumed>) = 1 [pid 5348] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5349] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5348] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5349] <... open resumed>) = 5 [pid 5349] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5348] <... futex resumed>) = 0 [pid 5349] <... futex resumed>) = 1 [pid 5348] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5349] ftruncate(5, 33587195 [pid 5348] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5349] <... ftruncate resumed>) = 0 [pid 5349] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5348] <... futex resumed>) = 0 [pid 5348] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5349] sendfile(4, 5, NULL, 4 [pid 5348] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5349] <... sendfile resumed>) = 4 [pid 5349] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5348] <... futex resumed>) = 0 [pid 5349] <... futex resumed>) = 1 [pid 5348] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5349] sendfile(4, 5, NULL, 281474978811909 [pid 5348] <... futex resumed>) = 0 [pid 5348] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 108.237417][ T5349] loop0: detected capacity change from 0 to 2048 [pid 5348] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5348] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5348] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5348] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5352 attached => {parent_tid=[178]}, 88) = 178 [pid 5352] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5348] rt_sigprocmask(SIG_SETMASK, [], [pid 5352] <... rseq resumed>) = 0 [pid 5348] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5352] set_robust_list(0x7efbfa33d9a0, 24 [pid 5348] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5352] <... set_robust_list resumed>) = 0 [pid 5348] <... futex resumed>) = 0 [pid 5352] rt_sigprocmask(SIG_SETMASK, [], [pid 5348] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5352] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5352] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5352] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5348] <... futex resumed>) = 0 [pid 5348] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5352] <... futex resumed>) = 1 [pid 5348] <... futex resumed>) = 0 [pid 5352] prlimit64(0, RLIMIT_CPU, NULL, [ 108.308906][ T5352] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 108.324381][ T5352] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 57 with error 28 [ 108.337182][ T5352] EXT4-fs (loop0): This should not happen!! Data will be lost [ 108.337182][ T5352] [ 108.347234][ T5352] EXT4-fs (loop0): Total free blocks count 0 [ 108.353253][ T5352] EXT4-fs (loop0): Free/Dirty block details [pid 5348] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5352] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5352] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5352] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5349] <... sendfile resumed>) = 118784 [pid 5349] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5348] close(3) = 0 [pid 5348] close(4 [pid 5349] <... futex resumed>) = 0 [pid 5348] <... close resumed>) = 0 [pid 5349] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5348] close(5) = 0 [pid 5348] close(6) = -1 EBADF (Bad file descriptor) [pid 5348] close(7) = -1 EBADF (Bad file descriptor) [pid 5348] close(8) = -1 EBADF (Bad file descriptor) [pid 5348] close(9) = -1 EBADF (Bad file descriptor) [pid 5348] close(10) = -1 EBADF (Bad file descriptor) [pid 5348] close(11) = -1 EBADF (Bad file descriptor) [pid 5348] close(12) = -1 EBADF (Bad file descriptor) [pid 5348] close(13) = -1 EBADF (Bad file descriptor) [pid 5348] close(14) = -1 EBADF (Bad file descriptor) [pid 5348] close(15) = -1 EBADF (Bad file descriptor) [pid 5348] close(16) = -1 EBADF (Bad file descriptor) [pid 5348] close(17) = -1 EBADF (Bad file descriptor) [pid 5348] close(18) = -1 EBADF (Bad file descriptor) [pid 5348] close(19) = -1 EBADF (Bad file descriptor) [pid 5348] close(20) = -1 EBADF (Bad file descriptor) [pid 5348] close(21) = -1 EBADF (Bad file descriptor) [pid 5348] close(22) = -1 EBADF (Bad file descriptor) [pid 5348] close(23) = -1 EBADF (Bad file descriptor) [pid 5348] close(24) = -1 EBADF (Bad file descriptor) [pid 5348] close(25) = -1 EBADF (Bad file descriptor) [pid 5348] close(26) = -1 EBADF (Bad file descriptor) [pid 5348] close(27) = -1 EBADF (Bad file descriptor) [pid 5348] close(28) = -1 EBADF (Bad file descriptor) [pid 5348] close(29) = -1 EBADF (Bad file descriptor) [pid 5348] exit_group(0 [pid 5352] <... futex resumed>) = ? [pid 5349] <... futex resumed>) = ? [pid 5348] <... exit_group resumed>) = ? [pid 5352] +++ exited with 0 +++ [pid 5349] +++ exited with 0 +++ [pid 5348] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=176, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./58/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./58/binderfs") = 0 [ 108.359242][ T5352] EXT4-fs (loop0): free_blocks=2415919104 [ 108.364988][ T5352] EXT4-fs (loop0): dirty_blocks=64 [ 108.370156][ T5352] EXT4-fs (loop0): Block reservation details [ 108.376164][ T5352] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 108.385757][ T5349] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 58 with max blocks 1 with error 28 [ 108.398610][ T5349] EXT4-fs (loop0): This should not happen!! Data will be lost [ 108.398610][ T5349] [pid 5046] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./58/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./58/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./58/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./58") = 0 [pid 5046] mkdir("./59", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5353 attached [pid 5353] set_robust_list(0x555555a9c6a0, 24 [pid 5046] <... clone resumed>, child_tidptr=0x555555a9c690) = 179 [pid 5353] <... set_robust_list resumed>) = 0 [pid 5353] chdir("./59") = 0 [pid 5353] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5353] setpgid(0, 0) = 0 [pid 5353] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5353] write(3, "1000", 4) = 4 [pid 5353] close(3) = 0 [pid 5353] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5353] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5353] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5353] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5353] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5353] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5353] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5353] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5353] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5354 attached [pid 5354] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5354] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5354] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5354] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5353] <... clone3 resumed> => {parent_tid=[180]}, 88) = 180 [pid 5353] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5353] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5354] <... futex resumed>) = 0 [pid 5354] memfd_create("syzkaller", 0 [pid 5353] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5354] <... memfd_create resumed>) = 3 [pid 5354] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5354] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5354] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5354] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5354] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5354] close(3) = 0 [pid 5354] mkdir("./file0", 0777) = 0 [pid 5354] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5354] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5354] chdir("./file0") = 0 [pid 5354] ioctl(4, LOOP_CLR_FD) = 0 [pid 5354] close(4) = 0 [pid 5354] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5353] <... futex resumed>) = 0 [pid 5354] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5353] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5354] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5353] <... futex resumed>) = 0 [pid 5354] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5353] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5354] <... open resumed>) = 4 [pid 5354] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5353] <... futex resumed>) = 0 [pid 5354] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5353] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5354] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5353] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5354] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5354] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5353] <... futex resumed>) = 0 [pid 5353] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5354] ftruncate(5, 33587195 [pid 5353] <... futex resumed>) = 0 [pid 5353] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5354] <... ftruncate resumed>) = 0 [pid 5354] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5353] <... futex resumed>) = 0 [pid 5354] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5353] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5353] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5354] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5354] sendfile(4, 5, NULL, 4) = 4 [pid 5354] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5353] <... futex resumed>) = 0 [pid 5354] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5353] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5354] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5353] <... futex resumed>) = 0 [pid 5354] sendfile(4, 5, NULL, 281474978811909 [ 108.523128][ T5354] loop0: detected capacity change from 0 to 2048 [pid 5353] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5353] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5353] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5353] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5353] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0} => {parent_tid=[181]}, 88) = 181 [pid 5353] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5357 attached NULL, 8) = 0 [pid 5357] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5353] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5357] <... rseq resumed>) = 0 [pid 5353] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5357] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5357] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5357] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5357] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5353] <... futex resumed>) = 0 [pid 5353] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5357] prlimit64(0, RLIMIT_CPU, NULL, [pid 5353] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 108.606410][ T5357] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 108.622695][ T5357] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 131 with error 28 [ 108.635090][ T5357] EXT4-fs (loop0): This should not happen!! Data will be lost [ 108.635090][ T5357] [ 108.644804][ T5357] EXT4-fs (loop0): Total free blocks count 0 [ 108.650876][ T5357] EXT4-fs (loop0): Free/Dirty block details [pid 5353] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5357] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [ 108.656854][ T5357] EXT4-fs (loop0): free_blocks=2415919104 [ 108.662857][ T5357] EXT4-fs (loop0): dirty_blocks=144 [ 108.668148][ T5357] EXT4-fs (loop0): Block reservation details [ 108.674156][ T5357] EXT4-fs (loop0): i_reserved_data_blocks=9 [ 108.685159][ T5354] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 132 with max blocks 1 with error 28 [ 108.697740][ T5354] EXT4-fs (loop0): This should not happen!! Data will be lost [pid 5357] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5357] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5354] <... sendfile resumed>) = 270336 [pid 5354] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5353] close(3 [pid 5354] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5353] <... close resumed>) = 0 [pid 5353] close(4) = 0 [pid 5353] close(5) = 0 [pid 5353] close(6) = -1 EBADF (Bad file descriptor) [pid 5353] close(7) = -1 EBADF (Bad file descriptor) [pid 5353] close(8) = -1 EBADF (Bad file descriptor) [pid 5353] close(9) = -1 EBADF (Bad file descriptor) [pid 5353] close(10) = -1 EBADF (Bad file descriptor) [pid 5353] close(11) = -1 EBADF (Bad file descriptor) [pid 5353] close(12) = -1 EBADF (Bad file descriptor) [pid 5353] close(13) = -1 EBADF (Bad file descriptor) [pid 5353] close(14) = -1 EBADF (Bad file descriptor) [pid 5353] close(15) = -1 EBADF (Bad file descriptor) [pid 5353] close(16) = -1 EBADF (Bad file descriptor) [pid 5353] close(17) = -1 EBADF (Bad file descriptor) [pid 5353] close(18) = -1 EBADF (Bad file descriptor) [pid 5353] close(19) = -1 EBADF (Bad file descriptor) [pid 5353] close(20) = -1 EBADF (Bad file descriptor) [pid 5353] close(21) = -1 EBADF (Bad file descriptor) [pid 5353] close(22) = -1 EBADF (Bad file descriptor) [pid 5353] close(23) = -1 EBADF (Bad file descriptor) [pid 5353] close(24) = -1 EBADF (Bad file descriptor) [pid 5353] close(25) = -1 EBADF (Bad file descriptor) [pid 5353] close(26) = -1 EBADF (Bad file descriptor) [pid 5353] close(27) = -1 EBADF (Bad file descriptor) [pid 5353] close(28) = -1 EBADF (Bad file descriptor) [pid 5353] close(29) = -1 EBADF (Bad file descriptor) [pid 5353] exit_group(0 [pid 5357] <... futex resumed>) = ? [pid 5357] +++ exited with 0 +++ [pid 5354] <... futex resumed>) = ? [pid 5354] +++ exited with 0 +++ [pid 5353] <... exit_group resumed>) = ? [pid 5353] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=179, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./59/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./59/binderfs") = 0 [ 108.697740][ T5354] [pid 5046] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./59/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./59/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./59/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./59") = 0 [pid 5046] mkdir("./60", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5358 attached , child_tidptr=0x555555a9c690) = 182 [pid 5358] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5358] chdir("./60") = 0 [pid 5358] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5358] setpgid(0, 0) = 0 [pid 5358] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5358] write(3, "1000", 4) = 4 [pid 5358] close(3) = 0 [pid 5358] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5358] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5358] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5358] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5358] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5358] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5358] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5358] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5358] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5359 attached [pid 5359] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053 [pid 5358] <... clone3 resumed> => {parent_tid=[183]}, 88) = 183 [pid 5358] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5358] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5359] <... rseq resumed>) = 0 [pid 5358] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5359] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5359] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5359] memfd_create("syzkaller", 0) = 3 [pid 5359] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5359] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5359] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5359] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5359] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5359] close(3) = 0 [pid 5359] mkdir("./file0", 0777) = 0 [pid 5359] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5359] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5359] chdir("./file0") = 0 [pid 5359] ioctl(4, LOOP_CLR_FD) = 0 [pid 5359] close(4) = 0 [pid 5359] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5358] <... futex resumed>) = 0 [pid 5359] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5358] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5359] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5358] <... futex resumed>) = 0 [pid 5359] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5358] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5359] <... open resumed>) = 4 [pid 5359] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5358] <... futex resumed>) = 0 [pid 5359] <... futex resumed>) = 1 [pid 5358] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5359] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5358] <... futex resumed>) = 0 [pid 5358] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5359] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5358] <... futex resumed>) = 0 [pid 5359] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5358] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5359] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5359] ftruncate(5, 33587195) = 0 [pid 5358] <... futex resumed>) = 0 [pid 5359] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5358] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5359] <... futex resumed>) = 0 [pid 5358] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5359] sendfile(4, 5, NULL, 4) = 4 [pid 5358] <... futex resumed>) = 0 [pid 5358] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5359] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5358] <... futex resumed>) = 0 [pid 5358] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5359] <... futex resumed>) = 1 [pid 5358] <... futex resumed>) = 0 [pid 5358] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5359] sendfile(4, 5, NULL, 281474978811909 [pid 5358] <... futex resumed>) = 0 [pid 5358] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5358] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5358] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 108.829383][ T5359] loop0: detected capacity change from 0 to 2048 [pid 5358] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0} => {parent_tid=[184]}, 88) = 184 [pid 5358] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5362 attached NULL, 8) = 0 [pid 5358] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5362] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5358] <... futex resumed>) = 0 [pid 5358] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5362] <... rseq resumed>) = 0 [pid 5362] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5362] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5362] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5362] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5358] <... futex resumed>) = 0 [pid 5358] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5358] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5362] <... futex resumed>) = 1 [ 108.905687][ T5362] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 108.922947][ T5362] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 120 with error 28 [ 108.927352][ T5359] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 120 with max blocks 1 with error 28 [ 108.935575][ T5362] EXT4-fs (loop0): This should not happen!! Data will be lost [pid 5362] prlimit64(0, RLIMIT_CPU, NULL, [pid 5358] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5362] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5362] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5362] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5359] <... sendfile resumed>) = 245760 [pid 5359] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5359] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5358] close(3) = 0 [pid 5358] close(4) = 0 [pid 5358] close(5) = 0 [pid 5358] close(6) = -1 EBADF (Bad file descriptor) [pid 5358] close(7) = -1 EBADF (Bad file descriptor) [pid 5358] close(8) = -1 EBADF (Bad file descriptor) [pid 5358] close(9) = -1 EBADF (Bad file descriptor) [pid 5358] close(10) = -1 EBADF (Bad file descriptor) [pid 5358] close(11) = -1 EBADF (Bad file descriptor) [pid 5358] close(12) = -1 EBADF (Bad file descriptor) [pid 5358] close(13) = -1 EBADF (Bad file descriptor) [pid 5358] close(14) = -1 EBADF (Bad file descriptor) [pid 5358] close(15) = -1 EBADF (Bad file descriptor) [pid 5358] close(16) = -1 EBADF (Bad file descriptor) [pid 5358] close(17) = -1 EBADF (Bad file descriptor) [pid 5358] close(18) = -1 EBADF (Bad file descriptor) [pid 5358] close(19) = -1 EBADF (Bad file descriptor) [pid 5358] close(20) = -1 EBADF (Bad file descriptor) [pid 5358] close(21) = -1 EBADF (Bad file descriptor) [pid 5358] close(22) = -1 EBADF (Bad file descriptor) [pid 5358] close(23) = -1 EBADF (Bad file descriptor) [pid 5358] close(24) = -1 EBADF (Bad file descriptor) [pid 5358] close(25) = -1 EBADF (Bad file descriptor) [pid 5358] close(26) = -1 EBADF (Bad file descriptor) [pid 5358] close(27) = -1 EBADF (Bad file descriptor) [pid 5358] close(28) = -1 EBADF (Bad file descriptor) [pid 5358] close(29) = -1 EBADF (Bad file descriptor) [pid 5358] exit_group(0 [pid 5359] <... futex resumed>) = ? [pid 5362] <... futex resumed>) = ? [pid 5358] <... exit_group resumed>) = ? [pid 5359] +++ exited with 0 +++ [pid 5362] +++ exited with 0 +++ [pid 5358] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=182, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5046] umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./60/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./60/binderfs") = 0 [ 108.935575][ T5362] [ 108.957909][ T5362] EXT4-fs (loop0): Total free blocks count 0 [ 108.964192][ T5362] EXT4-fs (loop0): Free/Dirty block details [ 108.964587][ T5359] EXT4-fs (loop0): This should not happen!! Data will be lost [ 108.964587][ T5359] [ 108.970178][ T5362] EXT4-fs (loop0): free_blocks=2415919104 [ 108.970202][ T5362] EXT4-fs (loop0): dirty_blocks=128 [ 108.970221][ T5362] EXT4-fs (loop0): Block reservation details [ 108.970240][ T5362] EXT4-fs (loop0): i_reserved_data_blocks=8 [pid 5046] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./60/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./60/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./60/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./60") = 0 [pid 5046] mkdir("./61", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5363 attached , child_tidptr=0x555555a9c690) = 185 [pid 5363] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5363] chdir("./61") = 0 [pid 5363] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5363] setpgid(0, 0) = 0 [pid 5363] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5363] write(3, "1000", 4) = 4 [pid 5363] close(3) = 0 [pid 5363] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5363] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5363] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5363] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5363] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5363] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5363] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5363] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5363] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0} => {parent_tid=[186]}, 88) = 186 [pid 5363] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5363] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5363] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5364 attached [pid 5364] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5364] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5364] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5364] memfd_create("syzkaller", 0) = 3 [pid 5364] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5364] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5364] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5364] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5364] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5364] close(3) = 0 [pid 5364] mkdir("./file0", 0777) = 0 [pid 5364] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5364] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5364] chdir("./file0") = 0 [pid 5364] ioctl(4, LOOP_CLR_FD) = 0 [pid 5364] close(4) = 0 [pid 5364] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5363] <... futex resumed>) = 0 [pid 5364] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5363] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5364] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5363] <... futex resumed>) = 0 [pid 5364] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5363] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5364] <... open resumed>) = 4 [pid 5364] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5363] <... futex resumed>) = 0 [pid 5364] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5363] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5364] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5363] <... futex resumed>) = 0 [pid 5364] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5363] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5364] <... open resumed>) = 5 [pid 5364] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5363] <... futex resumed>) = 0 [pid 5363] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5364] <... futex resumed>) = 1 [pid 5363] <... futex resumed>) = 0 [pid 5364] ftruncate(5, 33587195 [pid 5363] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5364] <... ftruncate resumed>) = 0 [pid 5364] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5363] <... futex resumed>) = 0 [pid 5364] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5363] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5364] sendfile(4, 5, NULL, 4 [pid 5363] <... futex resumed>) = 0 [pid 5364] <... sendfile resumed>) = 4 [pid 5363] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5364] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5363] <... futex resumed>) = 0 [pid 5363] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5363] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5364] <... futex resumed>) = 1 [pid 5363] <... futex resumed>) = 0 [pid 5364] sendfile(4, 5, NULL, 281474978811909 [pid 5363] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5363] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5363] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5363] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0} => {parent_tid=[187]}, 88) = 187 ./strace-static-x86_64: Process 5367 attached [pid 5367] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5363] rt_sigprocmask(SIG_SETMASK, [], [pid 5367] <... rseq resumed>) = 0 [pid 5367] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5367] rt_sigprocmask(SIG_SETMASK, [], [pid 5363] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5367] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5367] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5363] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5363] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5367] <... futex resumed>) = 0 [pid 5367] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5367] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5363] <... futex resumed>) = 0 [ 109.109296][ T5364] loop0: detected capacity change from 0 to 2048 [pid 5367] prlimit64(0, RLIMIT_CPU, NULL, [pid 5363] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 109.174351][ T5367] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 109.191440][ T5367] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 55 with error 28 [ 109.203944][ T5367] EXT4-fs (loop0): This should not happen!! Data will be lost [ 109.203944][ T5367] [ 109.214083][ T5367] EXT4-fs (loop0): Total free blocks count 0 [pid 5363] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5367] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5367] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 109.220131][ T5367] EXT4-fs (loop0): Free/Dirty block details [ 109.226149][ T5367] EXT4-fs (loop0): free_blocks=2415919104 [ 109.231930][ T5367] EXT4-fs (loop0): dirty_blocks=64 [ 109.237092][ T5367] EXT4-fs (loop0): Block reservation details [ 109.243127][ T5367] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 109.252588][ T5364] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 56 with max blocks 1 with error 28 [ 109.265765][ T5364] EXT4-fs (loop0): This should not happen!! Data will be lost [pid 5367] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5364] <... sendfile resumed>) = 114688 [pid 5364] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5364] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5363] close(3) = 0 [pid 5363] close(4) = 0 [pid 5363] close(5) = 0 [pid 5363] close(6) = -1 EBADF (Bad file descriptor) [pid 5363] close(7) = -1 EBADF (Bad file descriptor) [pid 5363] close(8) = -1 EBADF (Bad file descriptor) [pid 5363] close(9) = -1 EBADF (Bad file descriptor) [pid 5363] close(10) = -1 EBADF (Bad file descriptor) [pid 5363] close(11) = -1 EBADF (Bad file descriptor) [pid 5363] close(12) = -1 EBADF (Bad file descriptor) [pid 5363] close(13) = -1 EBADF (Bad file descriptor) [pid 5363] close(14) = -1 EBADF (Bad file descriptor) [pid 5363] close(15) = -1 EBADF (Bad file descriptor) [pid 5363] close(16) = -1 EBADF (Bad file descriptor) [pid 5363] close(17) = -1 EBADF (Bad file descriptor) [pid 5363] close(18) = -1 EBADF (Bad file descriptor) [pid 5363] close(19) = -1 EBADF (Bad file descriptor) [pid 5363] close(20) = -1 EBADF (Bad file descriptor) [pid 5363] close(21) = -1 EBADF (Bad file descriptor) [pid 5363] close(22) = -1 EBADF (Bad file descriptor) [pid 5363] close(23) = -1 EBADF (Bad file descriptor) [pid 5363] close(24) = -1 EBADF (Bad file descriptor) [pid 5363] close(25) = -1 EBADF (Bad file descriptor) [pid 5363] close(26) = -1 EBADF (Bad file descriptor) [pid 5363] close(27) = -1 EBADF (Bad file descriptor) [pid 5363] close(28) = -1 EBADF (Bad file descriptor) [pid 5363] close(29) = -1 EBADF (Bad file descriptor) [pid 5363] exit_group(0 [pid 5367] <... futex resumed>) = ? [pid 5364] <... futex resumed>) = ? [pid 5363] <... exit_group resumed>) = ? [pid 5367] +++ exited with 0 +++ [pid 5364] +++ exited with 0 +++ [pid 5363] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=185, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./61/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./61/binderfs") = 0 [ 109.265765][ T5364] [pid 5046] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./61/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./61/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./61/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./61") = 0 [pid 5046] mkdir("./62", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5368 attached , child_tidptr=0x555555a9c690) = 188 [pid 5368] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5368] chdir("./62") = 0 [pid 5368] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5368] setpgid(0, 0) = 0 [pid 5368] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5368] write(3, "1000", 4) = 4 [pid 5368] close(3) = 0 [pid 5368] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5368] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5368] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5368] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5368] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5368] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5368] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5368] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5368] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0} => {parent_tid=[189]}, 88) = 189 [pid 5368] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5368] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5368] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5369 attached [pid 5369] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5369] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5369] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5369] memfd_create("syzkaller", 0) = 3 [pid 5369] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5369] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5369] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5369] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5369] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5369] close(3) = 0 [pid 5369] mkdir("./file0", 0777) = 0 [pid 5369] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5369] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5369] chdir("./file0") = 0 [pid 5369] ioctl(4, LOOP_CLR_FD) = 0 [pid 5369] close(4) = 0 [pid 5369] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5368] <... futex resumed>) = 0 [pid 5369] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5368] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5369] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5368] <... futex resumed>) = 0 [pid 5369] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5368] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5369] <... open resumed>) = 4 [pid 5369] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5368] <... futex resumed>) = 0 [pid 5368] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5368] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5369] <... futex resumed>) = 1 [pid 5369] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5369] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5368] <... futex resumed>) = 0 [pid 5369] <... futex resumed>) = 1 [pid 5368] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5369] ftruncate(5, 33587195 [pid 5368] <... futex resumed>) = 0 [pid 5369] <... ftruncate resumed>) = 0 [pid 5368] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5369] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5369] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5368] <... futex resumed>) = 0 [pid 5368] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5369] <... futex resumed>) = 0 [pid 5368] <... futex resumed>) = 1 [pid 5369] sendfile(4, 5, NULL, 4 [pid 5368] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5369] <... sendfile resumed>) = 4 [pid 5369] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5368] <... futex resumed>) = 0 [pid 5368] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5368] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5369] <... futex resumed>) = 1 [pid 5368] <... futex resumed>) = 0 [pid 5369] sendfile(4, 5, NULL, 281474978811909 [pid 5368] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5368] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5368] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5368] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0} => {parent_tid=[190]}, 88) = 190 ./strace-static-x86_64: Process 5372 attached [pid 5368] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5372] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5368] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 109.385449][ T5369] loop0: detected capacity change from 0 to 2048 [pid 5368] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5372] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5372] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5372] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5372] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5368] <... futex resumed>) = 0 [pid 5368] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5368] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5372] prlimit64(0, RLIMIT_CPU, NULL, [pid 5368] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 109.452860][ T5372] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 109.469447][ T5372] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 41 with error 28 [ 109.481986][ T5372] EXT4-fs (loop0): This should not happen!! Data will be lost [ 109.481986][ T5372] [ 109.491711][ T5372] EXT4-fs (loop0): Total free blocks count 0 [pid 5372] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5372] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 109.498097][ T5372] EXT4-fs (loop0): Free/Dirty block details [ 109.504398][ T5372] EXT4-fs (loop0): free_blocks=2415919104 [ 109.510211][ T5372] EXT4-fs (loop0): dirty_blocks=48 [ 109.515333][ T5372] EXT4-fs (loop0): Block reservation details [ 109.521368][ T5372] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 109.531718][ T5369] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 42 with max blocks 1 with error 28 [pid 5372] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5369] <... sendfile resumed>) = 86016 [pid 5369] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5369] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5368] close(3) = 0 [pid 5368] close(4) = 0 [pid 5368] close(5) = 0 [pid 5368] close(6) = -1 EBADF (Bad file descriptor) [pid 5368] close(7) = -1 EBADF (Bad file descriptor) [pid 5368] close(8) = -1 EBADF (Bad file descriptor) [pid 5368] close(9) = -1 EBADF (Bad file descriptor) [pid 5368] close(10) = -1 EBADF (Bad file descriptor) [pid 5368] close(11) = -1 EBADF (Bad file descriptor) [pid 5368] close(12) = -1 EBADF (Bad file descriptor) [pid 5368] close(13) = -1 EBADF (Bad file descriptor) [pid 5368] close(14) = -1 EBADF (Bad file descriptor) [pid 5368] close(15) = -1 EBADF (Bad file descriptor) [pid 5368] close(16) = -1 EBADF (Bad file descriptor) [pid 5368] close(17) = -1 EBADF (Bad file descriptor) [pid 5368] close(18) = -1 EBADF (Bad file descriptor) [pid 5368] close(19) = -1 EBADF (Bad file descriptor) [pid 5368] close(20) = -1 EBADF (Bad file descriptor) [pid 5368] close(21) = -1 EBADF (Bad file descriptor) [pid 5368] close(22) = -1 EBADF (Bad file descriptor) [pid 5368] close(23) = -1 EBADF (Bad file descriptor) [pid 5368] close(24) = -1 EBADF (Bad file descriptor) [pid 5368] close(25) = -1 EBADF (Bad file descriptor) [pid 5368] close(26) = -1 EBADF (Bad file descriptor) [pid 5368] close(27) = -1 EBADF (Bad file descriptor) [pid 5368] close(28) = -1 EBADF (Bad file descriptor) [pid 5368] close(29) = -1 EBADF (Bad file descriptor) [pid 5368] exit_group(0 [pid 5372] <... futex resumed>) = ? [pid 5369] <... futex resumed>) = ? [pid 5368] <... exit_group resumed>) = ? [pid 5372] +++ exited with 0 +++ [pid 5369] +++ exited with 0 +++ [pid 5368] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=188, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5046] umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./62/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./62/binderfs") = 0 [ 109.548069][ T5369] EXT4-fs (loop0): This should not happen!! Data will be lost [ 109.548069][ T5369] [pid 5046] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./62/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./62/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./62/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./62") = 0 [pid 5046] mkdir("./63", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5373 attached , child_tidptr=0x555555a9c690) = 191 [pid 5373] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5373] chdir("./63") = 0 [pid 5373] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5373] setpgid(0, 0) = 0 [pid 5373] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5373] write(3, "1000", 4) = 4 [pid 5373] close(3) = 0 [pid 5373] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5373] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5373] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5373] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5373] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5373] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5373] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5373] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5373] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5374 attached => {parent_tid=[192]}, 88) = 192 [pid 5374] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5373] rt_sigprocmask(SIG_SETMASK, [], [pid 5374] set_robust_list(0x7efc0265e9a0, 24 [pid 5373] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5374] <... set_robust_list resumed>) = 0 [pid 5373] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5374] rt_sigprocmask(SIG_SETMASK, [], [pid 5373] <... futex resumed>) = 0 [pid 5374] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5373] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5374] memfd_create("syzkaller", 0) = 3 [pid 5374] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5374] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5374] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5374] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5374] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5374] close(3) = 0 [pid 5374] mkdir("./file0", 0777) = 0 [pid 5374] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5374] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5374] chdir("./file0") = 0 [pid 5374] ioctl(4, LOOP_CLR_FD) = 0 [pid 5374] close(4) = 0 [pid 5374] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5374] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5373] <... futex resumed>) = 0 [pid 5373] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5374] <... futex resumed>) = 0 [pid 5373] <... futex resumed>) = 1 [pid 5374] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5373] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5374] <... open resumed>) = 4 [pid 5374] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5373] <... futex resumed>) = 0 [pid 5374] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5373] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5374] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5373] <... futex resumed>) = 0 [pid 5373] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5374] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5374] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5373] <... futex resumed>) = 0 [pid 5374] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5373] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5374] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5373] <... futex resumed>) = 0 [pid 5374] ftruncate(5, 33587195 [pid 5373] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5374] <... ftruncate resumed>) = 0 [pid 5374] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5373] <... futex resumed>) = 0 [pid 5374] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5373] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5374] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5374] sendfile(4, 5, NULL, 4 [pid 5373] <... futex resumed>) = 0 [pid 5373] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5374] <... sendfile resumed>) = 4 [pid 5374] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5374] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5373] <... futex resumed>) = 0 [pid 5373] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5374] <... futex resumed>) = 0 [pid 5373] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5374] sendfile(4, 5, NULL, 281474978811909 [pid 5373] <... futex resumed>) = 0 [ 109.661890][ T5374] loop0: detected capacity change from 0 to 2048 [pid 5373] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5373] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5373] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5373] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5377 attached => {parent_tid=[193]}, 88) = 193 [pid 5373] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5373] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5373] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5377] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5377] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5377] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5377] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5377] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5377] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5373] <... futex resumed>) = 0 [pid 5373] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5377] <... futex resumed>) = 0 [pid 5373] <... futex resumed>) = 1 [pid 5377] prlimit64(0, RLIMIT_CPU, NULL, [ 109.747957][ T5377] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 109.763533][ T5377] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 115 with error 28 [ 109.776130][ T5377] EXT4-fs (loop0): This should not happen!! Data will be lost [ 109.776130][ T5377] [ 109.785897][ T5377] EXT4-fs (loop0): Total free blocks count 0 [ 109.792373][ T5377] EXT4-fs (loop0): Free/Dirty block details [pid 5373] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5377] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5377] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 109.798364][ T5377] EXT4-fs (loop0): free_blocks=2415919104 [ 109.804095][ T5377] EXT4-fs (loop0): dirty_blocks=128 [ 109.809345][ T5377] EXT4-fs (loop0): Block reservation details [ 109.815345][ T5377] EXT4-fs (loop0): i_reserved_data_blocks=8 [ 109.826051][ T5374] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 116 with max blocks 1 with error 28 [ 109.840321][ T5374] EXT4-fs (loop0): This should not happen!! Data will be lost [pid 5377] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5374] <... sendfile resumed>) = 237568 [pid 5374] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5373] close(3 [pid 5374] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5373] <... close resumed>) = 0 [pid 5373] close(4) = 0 [pid 5373] close(5) = 0 [pid 5373] close(6) = -1 EBADF (Bad file descriptor) [pid 5373] close(7) = -1 EBADF (Bad file descriptor) [pid 5373] close(8) = -1 EBADF (Bad file descriptor) [pid 5373] close(9) = -1 EBADF (Bad file descriptor) [pid 5373] close(10) = -1 EBADF (Bad file descriptor) [pid 5373] close(11) = -1 EBADF (Bad file descriptor) [pid 5373] close(12) = -1 EBADF (Bad file descriptor) [pid 5373] close(13) = -1 EBADF (Bad file descriptor) [pid 5373] close(14) = -1 EBADF (Bad file descriptor) [pid 5373] close(15) = -1 EBADF (Bad file descriptor) [pid 5373] close(16) = -1 EBADF (Bad file descriptor) [pid 5373] close(17) = -1 EBADF (Bad file descriptor) [pid 5373] close(18) = -1 EBADF (Bad file descriptor) [pid 5373] close(19) = -1 EBADF (Bad file descriptor) [pid 5373] close(20) = -1 EBADF (Bad file descriptor) [pid 5373] close(21) = -1 EBADF (Bad file descriptor) [pid 5373] close(22) = -1 EBADF (Bad file descriptor) [pid 5373] close(23) = -1 EBADF (Bad file descriptor) [pid 5373] close(24) = -1 EBADF (Bad file descriptor) [pid 5373] close(25) = -1 EBADF (Bad file descriptor) [pid 5373] close(26) = -1 EBADF (Bad file descriptor) [pid 5373] close(27) = -1 EBADF (Bad file descriptor) [pid 5373] close(28) = -1 EBADF (Bad file descriptor) [pid 5373] close(29) = -1 EBADF (Bad file descriptor) [pid 5373] exit_group(0 [pid 5377] <... futex resumed>) = ? [pid 5374] <... futex resumed>) = ? [pid 5373] <... exit_group resumed>) = ? [pid 5377] +++ exited with 0 +++ [pid 5374] +++ exited with 0 +++ [pid 5373] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=191, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./63", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./63/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./63/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./63/binderfs") = 0 [ 109.840321][ T5374] [pid 5046] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./63/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./63/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./63/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./63") = 0 [pid 5046] mkdir("./64", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5378 attached , child_tidptr=0x555555a9c690) = 194 [pid 5378] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5378] chdir("./64") = 0 [pid 5378] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5378] setpgid(0, 0) = 0 [pid 5378] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5378] write(3, "1000", 4) = 4 [pid 5378] close(3) = 0 [pid 5378] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5378] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5378] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5378] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5378] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5378] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5378] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5378] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5378] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5379 attached => {parent_tid=[195]}, 88) = 195 [pid 5378] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5378] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5378] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5379] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5379] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5379] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5379] memfd_create("syzkaller", 0) = 3 [pid 5379] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5379] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5379] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5379] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5379] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5379] close(3) = 0 [pid 5379] mkdir("./file0", 0777) = 0 [pid 5379] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5379] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5379] chdir("./file0") = 0 [pid 5379] ioctl(4, LOOP_CLR_FD) = 0 [pid 5379] close(4) = 0 [pid 5379] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5378] <... futex resumed>) = 0 [pid 5379] <... futex resumed>) = 1 [pid 5378] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5379] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5378] <... futex resumed>) = 0 [pid 5378] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5379] <... open resumed>) = 4 [pid 5379] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5378] <... futex resumed>) = 0 [pid 5378] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5378] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5379] <... futex resumed>) = 1 [pid 5379] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5379] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5378] <... futex resumed>) = 0 [pid 5379] ftruncate(5, 33587195 [pid 5378] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5379] <... ftruncate resumed>) = 0 [pid 5378] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5379] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5378] <... futex resumed>) = 0 [pid 5378] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5379] sendfile(4, 5, NULL, 4) = 4 [pid 5378] <... futex resumed>) = 0 [pid 5378] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5379] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5378] <... futex resumed>) = 0 [pid 5378] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5379] sendfile(4, 5, NULL, 281474978811909 [pid 5378] <... futex resumed>) = 0 [pid 5378] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5378] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5378] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5378] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5378] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0} => {parent_tid=[196]}, 88) = 196 ./strace-static-x86_64: Process 5382 attached [pid 5378] rt_sigprocmask(SIG_SETMASK, [], [pid 5382] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5378] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5378] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5378] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5382] <... rseq resumed>) = 0 [pid 5382] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5382] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5382] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5382] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5378] <... futex resumed>) = 0 [pid 5378] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5382] prlimit64(0, RLIMIT_CPU, NULL, [pid 5378] <... futex resumed>) = 0 [ 109.962735][ T5379] loop0: detected capacity change from 0 to 2048 [ 110.022120][ T5382] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 110.037428][ T5382] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 56 with error 28 [ 110.038838][ T5379] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 56 with max blocks 1 with error 28 [ 110.049861][ T5382] EXT4-fs (loop0): This should not happen!! Data will be lost [ 110.049861][ T5382] [pid 5378] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5379] <... sendfile resumed>) = 114688 [pid 5379] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5379] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5382] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5382] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5382] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5378] close(3) = 0 [pid 5378] close(4) = 0 [pid 5378] close(5) = 0 [pid 5378] close(6) = -1 EBADF (Bad file descriptor) [pid 5378] close(7) = -1 EBADF (Bad file descriptor) [pid 5378] close(8) = -1 EBADF (Bad file descriptor) [pid 5378] close(9) = -1 EBADF (Bad file descriptor) [pid 5378] close(10) = -1 EBADF (Bad file descriptor) [pid 5378] close(11) = -1 EBADF (Bad file descriptor) [pid 5378] close(12) = -1 EBADF (Bad file descriptor) [pid 5378] close(13) = -1 EBADF (Bad file descriptor) [pid 5378] close(14) = -1 EBADF (Bad file descriptor) [pid 5378] close(15) = -1 EBADF (Bad file descriptor) [pid 5378] close(16) = -1 EBADF (Bad file descriptor) [pid 5378] close(17) = -1 EBADF (Bad file descriptor) [pid 5378] close(18) = -1 EBADF (Bad file descriptor) [pid 5378] close(19) = -1 EBADF (Bad file descriptor) [pid 5378] close(20) = -1 EBADF (Bad file descriptor) [pid 5378] close(21) = -1 EBADF (Bad file descriptor) [pid 5378] close(22) = -1 EBADF (Bad file descriptor) [pid 5378] close(23) = -1 EBADF (Bad file descriptor) [pid 5378] close(24) = -1 EBADF (Bad file descriptor) [pid 5378] close(25) = -1 EBADF (Bad file descriptor) [pid 5378] close(26) = -1 EBADF (Bad file descriptor) [pid 5378] close(27) = -1 EBADF (Bad file descriptor) [pid 5378] close(28) = -1 EBADF (Bad file descriptor) [pid 5378] close(29) = -1 EBADF (Bad file descriptor) [pid 5378] exit_group(0 [pid 5382] <... futex resumed>) = ? [pid 5379] <... futex resumed>) = ? [pid 5378] <... exit_group resumed>) = ? [pid 5379] +++ exited with 0 +++ [pid 5382] +++ exited with 0 +++ [pid 5378] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=194, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./64", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./64/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./64/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./64/binderfs") = 0 [ 110.066286][ T5379] EXT4-fs (loop0): This should not happen!! Data will be lost [ 110.066286][ T5379] [ 110.071755][ T5382] EXT4-fs (loop0): Total free blocks count 0 [ 110.084094][ T5379] EXT4-fs (loop0): Total free blocks count 0 [ 110.087761][ T5382] EXT4-fs (loop0): Free/Dirty block details [ 110.094395][ T5379] EXT4-fs (loop0): Free/Dirty block details [ 110.099695][ T5382] EXT4-fs (loop0): free_blocks=2415919104 [ 110.111526][ T5382] EXT4-fs (loop0): dirty_blocks=64 [pid 5046] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./64/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./64/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./64/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./64") = 0 [pid 5046] mkdir("./65", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9c690) = 197 ./strace-static-x86_64: Process 5383 attached [pid 5383] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5383] chdir("./65") = 0 [pid 5383] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5383] setpgid(0, 0) = 0 [pid 5383] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5383] write(3, "1000", 4) = 4 [pid 5383] close(3) = 0 [pid 5383] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5383] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5383] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5383] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5383] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5383] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5383] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5383] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5383] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0} => {parent_tid=[198]}, 88) = 198 [pid 5383] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5383] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5383] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5384 attached [pid 5384] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5384] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5384] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5384] memfd_create("syzkaller", 0) = 3 [pid 5384] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5384] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5384] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5384] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5384] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5384] close(3) = 0 [pid 5384] mkdir("./file0", 0777) = 0 [pid 5384] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5384] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5384] chdir("./file0") = 0 [pid 5384] ioctl(4, LOOP_CLR_FD) = 0 [pid 5384] close(4) = 0 [pid 5384] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5383] <... futex resumed>) = 0 [pid 5384] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5383] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5383] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5384] <... open resumed>) = 4 [pid 5384] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5384] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5383] <... futex resumed>) = 0 [pid 5383] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5384] <... futex resumed>) = 0 [pid 5383] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5384] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5384] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5383] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5384] <... futex resumed>) = 0 [pid 5383] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5384] ftruncate(5, 33587195 [pid 5383] <... futex resumed>) = 0 [pid 5383] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5384] <... ftruncate resumed>) = 0 [pid 5384] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5383] <... futex resumed>) = 0 [pid 5383] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5384] sendfile(4, 5, NULL, 4 [pid 5383] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5384] <... sendfile resumed>) = 4 [pid 5384] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5383] <... futex resumed>) = 0 [pid 5384] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5383] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5384] <... futex resumed>) = 0 [pid 5384] sendfile(4, 5, NULL, 281474978811909 [pid 5383] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5383] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5383] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5383] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5383] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0} => {parent_tid=[199]}, 88) = 199 [pid 5383] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5383] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5383] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5387 attached [pid 5387] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5387] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5387] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5387] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [ 110.243118][ T5384] loop0: detected capacity change from 0 to 2048 [pid 5387] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5383] <... futex resumed>) = 0 [pid 5383] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5383] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5387] <... futex resumed>) = 1 [pid 5387] prlimit64(0, RLIMIT_CPU, NULL, [pid 5383] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5383] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5383] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [ 110.312849][ T5384] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 110.328387][ T5384] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 92 with max blocks 1 with error 28 [ 110.340816][ T5384] EXT4-fs (loop0): This should not happen!! Data will be lost [ 110.340816][ T5384] [ 110.351117][ T5384] EXT4-fs (loop0): Total free blocks count 0 [pid 5384] <... sendfile resumed>) = 188416 [pid 5384] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5384] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5387] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5387] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5387] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5383] close(3) = 0 [pid 5383] close(4) = 0 [pid 5383] close(5) = 0 [pid 5383] close(6) = -1 EBADF (Bad file descriptor) [pid 5383] close(7) = -1 EBADF (Bad file descriptor) [pid 5383] close(8) = -1 EBADF (Bad file descriptor) [pid 5383] close(9) = -1 EBADF (Bad file descriptor) [pid 5383] close(10) = -1 EBADF (Bad file descriptor) [pid 5383] close(11) = -1 EBADF (Bad file descriptor) [pid 5383] close(12) = -1 EBADF (Bad file descriptor) [pid 5383] close(13) = -1 EBADF (Bad file descriptor) [pid 5383] close(14) = -1 EBADF (Bad file descriptor) [pid 5383] close(15) = -1 EBADF (Bad file descriptor) [pid 5383] close(16) = -1 EBADF (Bad file descriptor) [pid 5383] close(17) = -1 EBADF (Bad file descriptor) [pid 5383] close(18) = -1 EBADF (Bad file descriptor) [pid 5383] close(19) = -1 EBADF (Bad file descriptor) [pid 5383] close(20) = -1 EBADF (Bad file descriptor) [pid 5383] close(21) = -1 EBADF (Bad file descriptor) [pid 5383] close(22) = -1 EBADF (Bad file descriptor) [pid 5383] close(23) = -1 EBADF (Bad file descriptor) [pid 5383] close(24) = -1 EBADF (Bad file descriptor) [pid 5383] close(25) = -1 EBADF (Bad file descriptor) [pid 5383] close(26) = -1 EBADF (Bad file descriptor) [pid 5383] close(27) = -1 EBADF (Bad file descriptor) [pid 5383] close(28) = -1 EBADF (Bad file descriptor) [pid 5383] close(29) = -1 EBADF (Bad file descriptor) [pid 5383] exit_group(0 [pid 5387] <... futex resumed>) = ? [pid 5384] <... futex resumed>) = ? [pid 5383] <... exit_group resumed>) = ? [pid 5384] +++ exited with 0 +++ [pid 5387] +++ exited with 0 +++ [pid 5383] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=197, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./65", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./65/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./65/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./65/binderfs") = 0 [ 110.357461][ T5384] EXT4-fs (loop0): Free/Dirty block details [ 110.363811][ T5384] EXT4-fs (loop0): free_blocks=2415919104 [ 110.369979][ T5384] EXT4-fs (loop0): dirty_blocks=96 [ 110.375105][ T5384] EXT4-fs (loop0): Block reservation details [ 110.381474][ T5384] EXT4-fs (loop0): i_reserved_data_blocks=6 [ 110.389914][ T5387] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 92 with error 28 [ 110.402601][ T5387] EXT4-fs (loop0): This should not happen!! Data will be lost [ 110.402601][ T5387] [pid 5046] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./65/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./65/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./65/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./65") = 0 [pid 5046] mkdir("./66", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9c690) = 200 ./strace-static-x86_64: Process 5388 attached [pid 5388] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5388] chdir("./66") = 0 [pid 5388] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5388] setpgid(0, 0) = 0 [pid 5388] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5388] write(3, "1000", 4) = 4 [pid 5388] close(3) = 0 [pid 5388] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5388] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5388] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5388] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5388] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5388] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5388] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5388] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5388] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5389 attached => {parent_tid=[201]}, 88) = 201 [pid 5388] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5389] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5389] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5389] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5389] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5388] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5389] <... futex resumed>) = 0 [pid 5388] <... futex resumed>) = 1 [pid 5389] memfd_create("syzkaller", 0 [pid 5388] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5389] <... memfd_create resumed>) = 3 [pid 5389] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5389] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5389] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5389] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5389] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5389] close(3) = 0 [pid 5389] mkdir("./file0", 0777) = 0 [pid 5389] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5389] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5389] chdir("./file0") = 0 [pid 5389] ioctl(4, LOOP_CLR_FD) = 0 [pid 5389] close(4) = 0 [pid 5389] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5388] <... futex resumed>) = 0 [pid 5389] <... futex resumed>) = 1 [pid 5388] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5389] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5388] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5389] <... open resumed>) = 4 [pid 5389] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5388] <... futex resumed>) = 0 [pid 5389] <... futex resumed>) = 1 [pid 5388] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5388] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5389] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5389] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5388] <... futex resumed>) = 0 [pid 5388] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5389] <... futex resumed>) = 1 [pid 5388] <... futex resumed>) = 0 [pid 5389] ftruncate(5, 33587195 [pid 5388] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5389] <... ftruncate resumed>) = 0 [pid 5389] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5388] <... futex resumed>) = 0 [pid 5388] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5389] <... futex resumed>) = 1 [pid 5388] <... futex resumed>) = 0 [pid 5388] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5389] sendfile(4, 5, NULL, 4) = 4 [pid 5389] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5388] <... futex resumed>) = 0 [pid 5389] <... futex resumed>) = 1 [pid 5388] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5389] sendfile(4, 5, NULL, 281474978811909 [pid 5388] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5388] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [ 110.551330][ T5389] loop0: detected capacity change from 0 to 2048 [pid 5388] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5388] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5388] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5392 attached [pid 5392] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5388] <... clone3 resumed> => {parent_tid=[202]}, 88) = 202 [pid 5392] <... rseq resumed>) = 0 [pid 5392] set_robust_list(0x7efbfa33d9a0, 24 [pid 5388] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5388] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5388] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5392] <... set_robust_list resumed>) = 0 [pid 5392] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5392] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5392] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5388] <... futex resumed>) = 0 [pid 5388] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5388] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5392] <... futex resumed>) = 1 [ 110.643298][ T5392] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 110.658615][ T5392] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 177 with error 28 [ 110.671671][ T5392] EXT4-fs (loop0): This should not happen!! Data will be lost [ 110.671671][ T5392] [ 110.681397][ T5392] EXT4-fs (loop0): Total free blocks count 0 [pid 5392] prlimit64(0, RLIMIT_CPU, NULL, [pid 5388] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5392] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5392] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 110.687971][ T5392] EXT4-fs (loop0): Free/Dirty block details [ 110.694482][ T5392] EXT4-fs (loop0): free_blocks=2415919104 [ 110.700619][ T5392] EXT4-fs (loop0): dirty_blocks=192 [ 110.705840][ T5392] EXT4-fs (loop0): Block reservation details [ 110.711984][ T5392] EXT4-fs (loop0): i_reserved_data_blocks=12 [ 110.724453][ T5389] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 178 with max blocks 1 with error 28 [pid 5392] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5389] <... sendfile resumed>) = 364544 [pid 5389] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5389] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5388] close(3) = 0 [pid 5388] close(4) = 0 [pid 5388] close(5) = 0 [pid 5388] close(6) = -1 EBADF (Bad file descriptor) [pid 5388] close(7) = -1 EBADF (Bad file descriptor) [pid 5388] close(8) = -1 EBADF (Bad file descriptor) [pid 5388] close(9) = -1 EBADF (Bad file descriptor) [pid 5388] close(10) = -1 EBADF (Bad file descriptor) [pid 5388] close(11) = -1 EBADF (Bad file descriptor) [pid 5388] close(12) = -1 EBADF (Bad file descriptor) [pid 5388] close(13) = -1 EBADF (Bad file descriptor) [pid 5388] close(14) = -1 EBADF (Bad file descriptor) [pid 5388] close(15) = -1 EBADF (Bad file descriptor) [pid 5388] close(16) = -1 EBADF (Bad file descriptor) [pid 5388] close(17) = -1 EBADF (Bad file descriptor) [pid 5388] close(18) = -1 EBADF (Bad file descriptor) [pid 5388] close(19) = -1 EBADF (Bad file descriptor) [pid 5388] close(20) = -1 EBADF (Bad file descriptor) [pid 5388] close(21) = -1 EBADF (Bad file descriptor) [pid 5388] close(22) = -1 EBADF (Bad file descriptor) [pid 5388] close(23) = -1 EBADF (Bad file descriptor) [pid 5388] close(24) = -1 EBADF (Bad file descriptor) [pid 5388] close(25) = -1 EBADF (Bad file descriptor) [pid 5388] close(26) = -1 EBADF (Bad file descriptor) [pid 5388] close(27) = -1 EBADF (Bad file descriptor) [pid 5388] close(28) = -1 EBADF (Bad file descriptor) [pid 5388] close(29) = -1 EBADF (Bad file descriptor) [pid 5388] exit_group(0 [pid 5392] <... futex resumed>) = ? [pid 5392] +++ exited with 0 +++ [pid 5388] <... exit_group resumed>) = ? [pid 5389] <... futex resumed>) = ? [pid 5389] +++ exited with 0 +++ [pid 5388] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=200, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5046] umount2("./66", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./66/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./66/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./66/binderfs") = 0 [ 110.737469][ T5389] EXT4-fs (loop0): This should not happen!! Data will be lost [ 110.737469][ T5389] [pid 5046] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./66/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./66/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./66/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./66") = 0 [pid 5046] mkdir("./67", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5393 attached , child_tidptr=0x555555a9c690) = 203 [pid 5393] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5393] chdir("./67") = 0 [pid 5393] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5393] setpgid(0, 0) = 0 [pid 5393] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5393] write(3, "1000", 4) = 4 [pid 5393] close(3) = 0 [pid 5393] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5393] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5393] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5393] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5393] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5393] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5393] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5393] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5393] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5394 attached [pid 5394] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5394] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5394] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5394] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5393] <... clone3 resumed> => {parent_tid=[204]}, 88) = 204 [pid 5393] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5393] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5394] <... futex resumed>) = 0 [pid 5393] <... futex resumed>) = 1 [pid 5394] memfd_create("syzkaller", 0 [pid 5393] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5394] <... memfd_create resumed>) = 3 [pid 5394] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5394] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5394] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5394] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5394] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5394] close(3) = 0 [pid 5394] mkdir("./file0", 0777) = 0 [pid 5394] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5394] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5394] chdir("./file0") = 0 [pid 5394] ioctl(4, LOOP_CLR_FD) = 0 [pid 5394] close(4) = 0 [pid 5394] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5394] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5393] <... futex resumed>) = 0 [pid 5393] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5394] <... futex resumed>) = 0 [pid 5394] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5394] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5393] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5394] <... futex resumed>) = 0 [pid 5394] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5393] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5394] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5393] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5394] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5393] <... futex resumed>) = 0 [pid 5393] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5394] <... open resumed>) = 5 [ 110.876280][ T5394] loop0: detected capacity change from 0 to 2048 [pid 5394] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5393] <... futex resumed>) = 0 [pid 5394] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5393] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5394] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5393] <... futex resumed>) = 0 [pid 5394] ftruncate(5, 33587195) = 0 [pid 5393] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5394] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5393] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5393] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5393] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = 0 [pid 5394] <... futex resumed>) = 1 [pid 5393] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5394] sendfile(4, 5, NULL, 4) = 4 [pid 5394] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5393] <... futex resumed>) = 0 [pid 5394] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5393] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5394] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5393] <... futex resumed>) = 0 [pid 5394] sendfile(4, 5, NULL, 281474978811909 [pid 5393] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5393] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5393] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5393] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5393] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5397 attached => {parent_tid=[205]}, 88) = 205 [pid 5397] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5393] rt_sigprocmask(SIG_SETMASK, [], [pid 5397] set_robust_list(0x7efbfa33d9a0, 24 [pid 5393] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5397] <... set_robust_list resumed>) = 0 [pid 5393] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5397] rt_sigprocmask(SIG_SETMASK, [], [pid 5393] <... futex resumed>) = 0 [pid 5397] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5393] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5397] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5397] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5393] <... futex resumed>) = 0 [pid 5397] <... futex resumed>) = 1 [pid 5393] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5397] prlimit64(0, RLIMIT_CPU, NULL, [pid 5393] <... futex resumed>) = 0 [ 110.956942][ T5394] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 110.972376][ T5394] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 28 with max blocks 1 with error 28 [ 110.985221][ T5394] EXT4-fs (loop0): This should not happen!! Data will be lost [ 110.985221][ T5394] [ 111.000338][ T5394] EXT4-fs (loop0): Total free blocks count 0 [pid 5393] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5393] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5393] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5394] <... sendfile resumed>) = 57344 [pid 5394] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 111.006347][ T5394] EXT4-fs (loop0): Free/Dirty block details [ 111.012752][ T5394] EXT4-fs (loop0): free_blocks=2415919104 [ 111.018562][ T5394] EXT4-fs (loop0): dirty_blocks=32 [ 111.023694][ T5394] EXT4-fs (loop0): Block reservation details [ 111.029795][ T5394] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 111.036192][ T5397] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 28 with error 28 [pid 5394] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5397] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5397] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5393] close(3) = 0 [pid 5393] close(4) = 0 [pid 5393] close(5) = 0 [pid 5393] close(6) = -1 EBADF (Bad file descriptor) [pid 5393] close(7) = -1 EBADF (Bad file descriptor) [pid 5393] close(8) = -1 EBADF (Bad file descriptor) [pid 5393] close(9) = -1 EBADF (Bad file descriptor) [pid 5393] close(10) = -1 EBADF (Bad file descriptor) [pid 5397] <... futex resumed>) = 0 [pid 5393] close(11 [pid 5397] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5393] close(12) = -1 EBADF (Bad file descriptor) [pid 5393] close(13) = -1 EBADF (Bad file descriptor) [pid 5393] close(14) = -1 EBADF (Bad file descriptor) [pid 5393] close(15) = -1 EBADF (Bad file descriptor) [pid 5393] close(16) = -1 EBADF (Bad file descriptor) [pid 5393] close(17) = -1 EBADF (Bad file descriptor) [pid 5393] close(18) = -1 EBADF (Bad file descriptor) [pid 5393] close(19) = -1 EBADF (Bad file descriptor) [pid 5393] close(20) = -1 EBADF (Bad file descriptor) [pid 5393] close(21) = -1 EBADF (Bad file descriptor) [pid 5393] close(22) = -1 EBADF (Bad file descriptor) [pid 5393] close(23) = -1 EBADF (Bad file descriptor) [pid 5393] close(24) = -1 EBADF (Bad file descriptor) [pid 5393] close(25) = -1 EBADF (Bad file descriptor) [pid 5393] close(26) = -1 EBADF (Bad file descriptor) [pid 5393] close(27) = -1 EBADF (Bad file descriptor) [pid 5393] close(28) = -1 EBADF (Bad file descriptor) [pid 5393] close(29) = -1 EBADF (Bad file descriptor) [pid 5393] exit_group(0 [pid 5397] <... futex resumed>) = ? [pid 5394] <... futex resumed>) = ? [pid 5393] <... exit_group resumed>) = ? [pid 5397] +++ exited with 0 +++ [pid 5394] +++ exited with 0 +++ [pid 5393] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=203, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5046] umount2("./67", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./67/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./67/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./67/binderfs") = 0 [ 111.050250][ T5397] EXT4-fs (loop0): This should not happen!! Data will be lost [ 111.050250][ T5397] [pid 5046] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./67/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./67/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./67/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./67") = 0 [pid 5046] mkdir("./68", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5398 attached , child_tidptr=0x555555a9c690) = 206 [pid 5398] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5398] chdir("./68") = 0 [pid 5398] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5398] setpgid(0, 0) = 0 [pid 5398] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5398] write(3, "1000", 4) = 4 [pid 5398] close(3) = 0 [pid 5398] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5398] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5398] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5398] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5398] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5398] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5398] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5398] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5398] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5399 attached => {parent_tid=[207]}, 88) = 207 [pid 5399] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053 [pid 5398] rt_sigprocmask(SIG_SETMASK, [], [pid 5399] <... rseq resumed>) = 0 [pid 5398] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5399] set_robust_list(0x7efc0265e9a0, 24 [pid 5398] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5399] <... set_robust_list resumed>) = 0 [pid 5399] rt_sigprocmask(SIG_SETMASK, [], [pid 5398] <... futex resumed>) = 0 [pid 5399] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5398] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5399] memfd_create("syzkaller", 0) = 3 [pid 5399] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5399] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5399] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5399] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5399] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5399] close(3) = 0 [pid 5399] mkdir("./file0", 0777) = 0 [pid 5399] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5399] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5399] chdir("./file0") = 0 [pid 5399] ioctl(4, LOOP_CLR_FD) = 0 [pid 5399] close(4) = 0 [pid 5399] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5398] <... futex resumed>) = 0 [pid 5399] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5398] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5399] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5398] <... futex resumed>) = 0 [pid 5399] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5398] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5399] <... open resumed>) = 4 [pid 5399] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5398] <... futex resumed>) = 0 [pid 5399] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5398] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5399] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5398] <... futex resumed>) = 0 [pid 5399] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5398] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5399] <... open resumed>) = 5 [pid 5399] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5399] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5398] <... futex resumed>) = 0 [pid 5398] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5399] <... futex resumed>) = 0 [pid 5398] <... futex resumed>) = 1 [pid 5399] ftruncate(5, 33587195 [pid 5398] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5399] <... ftruncate resumed>) = 0 [pid 5399] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5398] <... futex resumed>) = 0 [pid 5399] <... futex resumed>) = 1 [pid 5398] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5399] sendfile(4, 5, NULL, 4 [pid 5398] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5399] <... sendfile resumed>) = 4 [pid 5399] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5398] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5399] <... futex resumed>) = 0 [pid 5399] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5398] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5399] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5398] <... futex resumed>) = 0 [pid 5399] sendfile(4, 5, NULL, 281474978811909 [pid 5398] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5398] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5398] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5398] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5398] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5402 attached => {parent_tid=[208]}, 88) = 208 [pid 5402] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [ 111.172778][ T5399] loop0: detected capacity change from 0 to 2048 [pid 5398] rt_sigprocmask(SIG_SETMASK, [], [pid 5402] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5402] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5398] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5398] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5402] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000 [pid 5398] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5402] <... mmap resumed>) = 0x20000000 [pid 5402] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5398] <... futex resumed>) = 0 [pid 5402] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5398] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5402] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5398] <... futex resumed>) = 0 [pid 5402] prlimit64(0, RLIMIT_CPU, NULL, [ 111.248144][ T5402] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 111.263910][ T5402] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 174 with error 28 [ 111.264261][ T5399] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 174 with max blocks 1 with error 28 [ 111.290025][ T5399] EXT4-fs (loop0): This should not happen!! Data will be lost [pid 5398] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5399] <... sendfile resumed>) = 356352 [pid 5399] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5399] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5402] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5402] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5402] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5398] close(3) = 0 [pid 5398] close(4) = 0 [pid 5398] close(5) = 0 [pid 5398] close(6) = -1 EBADF (Bad file descriptor) [pid 5398] close(7) = -1 EBADF (Bad file descriptor) [pid 5398] close(8) = -1 EBADF (Bad file descriptor) [pid 5398] close(9) = -1 EBADF (Bad file descriptor) [pid 5398] close(10) = -1 EBADF (Bad file descriptor) [pid 5398] close(11) = -1 EBADF (Bad file descriptor) [pid 5398] close(12) = -1 EBADF (Bad file descriptor) [pid 5398] close(13) = -1 EBADF (Bad file descriptor) [pid 5398] close(14) = -1 EBADF (Bad file descriptor) [pid 5398] close(15) = -1 EBADF (Bad file descriptor) [pid 5398] close(16) = -1 EBADF (Bad file descriptor) [pid 5398] close(17) = -1 EBADF (Bad file descriptor) [pid 5398] close(18) = -1 EBADF (Bad file descriptor) [pid 5398] close(19) = -1 EBADF (Bad file descriptor) [pid 5398] close(20) = -1 EBADF (Bad file descriptor) [pid 5398] close(21) = -1 EBADF (Bad file descriptor) [pid 5398] close(22) = -1 EBADF (Bad file descriptor) [pid 5398] close(23) = -1 EBADF (Bad file descriptor) [pid 5398] close(24) = -1 EBADF (Bad file descriptor) [pid 5398] close(25) = -1 EBADF (Bad file descriptor) [pid 5398] close(26) = -1 EBADF (Bad file descriptor) [pid 5398] close(27) = -1 EBADF (Bad file descriptor) [pid 5398] close(28) = -1 EBADF (Bad file descriptor) [pid 5398] close(29) = -1 EBADF (Bad file descriptor) [pid 5398] exit_group(0 [pid 5402] <... futex resumed>) = ? [pid 5398] <... exit_group resumed>) = ? [pid 5402] +++ exited with 0 +++ [pid 5399] <... futex resumed>) = ? [pid 5399] +++ exited with 0 +++ [pid 5398] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=206, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5046] umount2("./68", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./68/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./68/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./68/binderfs") = 0 [ 111.290025][ T5399] [ 111.290578][ T5402] EXT4-fs (loop0): This should not happen!! Data will be lost [ 111.290578][ T5402] [ 111.301001][ T5399] EXT4-fs (loop0): Total free blocks count 0 [ 111.315739][ T5402] EXT4-fs (loop0): Total free blocks count 0 [ 111.318261][ T5399] EXT4-fs (loop0): Free/Dirty block details [ 111.325401][ T5402] EXT4-fs (loop0): Free/Dirty block details [ 111.328983][ T5399] EXT4-fs (loop0): free_blocks=2415919104 [ 111.333869][ T5402] EXT4-fs (loop0): free_blocks=2415919104 [pid 5046] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./68/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./68/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./68/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./68") = 0 [pid 5046] mkdir("./69", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5403 attached , child_tidptr=0x555555a9c690) = 209 [pid 5403] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5403] chdir("./69") = 0 [pid 5403] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5403] setpgid(0, 0) = 0 [pid 5403] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5403] write(3, "1000", 4) = 4 [pid 5403] close(3) = 0 [pid 5403] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5403] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5403] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5403] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5403] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5403] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5403] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5403] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5403] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5404 attached => {parent_tid=[210]}, 88) = 210 [pid 5404] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5403] rt_sigprocmask(SIG_SETMASK, [], [pid 5404] set_robust_list(0x7efc0265e9a0, 24 [pid 5403] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5404] <... set_robust_list resumed>) = 0 [pid 5403] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5404] rt_sigprocmask(SIG_SETMASK, [], [pid 5403] <... futex resumed>) = 0 [pid 5404] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5404] memfd_create("syzkaller", 0 [pid 5403] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5404] <... memfd_create resumed>) = 3 [pid 5404] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5404] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5404] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5404] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5404] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5404] close(3) = 0 [pid 5404] mkdir("./file0", 0777) = 0 [pid 5404] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5404] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5404] chdir("./file0") = 0 [pid 5404] ioctl(4, LOOP_CLR_FD) = 0 [pid 5404] close(4) = 0 [pid 5404] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5403] <... futex resumed>) = 0 [pid 5404] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5403] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5404] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5404] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5403] <... futex resumed>) = 0 [pid 5403] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5404] <... open resumed>) = 4 [pid 5404] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5403] <... futex resumed>) = 0 [pid 5404] <... futex resumed>) = 1 [pid 5403] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5403] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5404] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5404] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5403] <... futex resumed>) = 0 [pid 5404] <... futex resumed>) = 1 [pid 5403] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5404] ftruncate(5, 33587195 [pid 5403] <... futex resumed>) = 0 [pid 5404] <... ftruncate resumed>) = 0 [pid 5403] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5404] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5403] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5404] <... futex resumed>) = 0 [pid 5403] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5404] sendfile(4, 5, NULL, 4 [pid 5403] <... futex resumed>) = 0 [pid 5404] <... sendfile resumed>) = 4 [pid 5403] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5404] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5403] <... futex resumed>) = 0 [pid 5403] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5404] sendfile(4, 5, NULL, 281474978811909 [pid 5403] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 111.469222][ T5404] loop0: detected capacity change from 0 to 2048 [pid 5403] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5403] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5403] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5403] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5407 attached [pid 5407] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5403] <... clone3 resumed> => {parent_tid=[211]}, 88) = 211 [pid 5407] <... rseq resumed>) = 0 [pid 5407] set_robust_list(0x7efbfa33d9a0, 24 [pid 5403] rt_sigprocmask(SIG_SETMASK, [], [pid 5407] <... set_robust_list resumed>) = 0 [pid 5407] rt_sigprocmask(SIG_SETMASK, [], [pid 5403] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5407] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5403] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5407] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000 [pid 5403] <... futex resumed>) = 0 [pid 5403] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5407] <... mmap resumed>) = 0x20000000 [pid 5407] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5403] <... futex resumed>) = 0 [pid 5407] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5403] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5407] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5403] <... futex resumed>) = 0 [pid 5407] prlimit64(0, RLIMIT_CPU, NULL, [ 111.545325][ T5407] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 111.562118][ T5407] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 43 with error 28 [ 111.575027][ T5407] EXT4-fs (loop0): This should not happen!! Data will be lost [ 111.575027][ T5407] [ 111.585747][ T5407] EXT4-fs (loop0): Total free blocks count 0 [pid 5403] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5407] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5407] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 111.591996][ T5407] EXT4-fs (loop0): Free/Dirty block details [ 111.598814][ T5407] EXT4-fs (loop0): free_blocks=2415919104 [ 111.604657][ T5407] EXT4-fs (loop0): dirty_blocks=48 [ 111.609868][ T5407] EXT4-fs (loop0): Block reservation details [ 111.615919][ T5407] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 111.631328][ T5404] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 44 with max blocks 1 with error 28 [pid 5407] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5404] <... sendfile resumed>) = 90112 [pid 5404] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5404] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5403] close(3) = 0 [pid 5403] close(4) = 0 [pid 5403] close(5) = 0 [pid 5403] close(6) = -1 EBADF (Bad file descriptor) [pid 5403] close(7) = -1 EBADF (Bad file descriptor) [pid 5403] close(8) = -1 EBADF (Bad file descriptor) [pid 5403] close(9) = -1 EBADF (Bad file descriptor) [pid 5403] close(10) = -1 EBADF (Bad file descriptor) [pid 5403] close(11) = -1 EBADF (Bad file descriptor) [pid 5403] close(12) = -1 EBADF (Bad file descriptor) [pid 5403] close(13) = -1 EBADF (Bad file descriptor) [pid 5403] close(14) = -1 EBADF (Bad file descriptor) [pid 5403] close(15) = -1 EBADF (Bad file descriptor) [pid 5403] close(16) = -1 EBADF (Bad file descriptor) [pid 5403] close(17) = -1 EBADF (Bad file descriptor) [pid 5403] close(18) = -1 EBADF (Bad file descriptor) [pid 5403] close(19) = -1 EBADF (Bad file descriptor) [pid 5403] close(20) = -1 EBADF (Bad file descriptor) [pid 5403] close(21) = -1 EBADF (Bad file descriptor) [pid 5403] close(22) = -1 EBADF (Bad file descriptor) [pid 5403] close(23) = -1 EBADF (Bad file descriptor) [pid 5403] close(24) = -1 EBADF (Bad file descriptor) [pid 5403] close(25) = -1 EBADF (Bad file descriptor) [pid 5403] close(26) = -1 EBADF (Bad file descriptor) [pid 5403] close(27) = -1 EBADF (Bad file descriptor) [pid 5403] close(28) = -1 EBADF (Bad file descriptor) [pid 5403] close(29) = -1 EBADF (Bad file descriptor) [pid 5403] exit_group(0) = ? [pid 5407] <... futex resumed>) = ? [pid 5404] <... futex resumed>) = ? [pid 5404] +++ exited with 0 +++ [pid 5407] +++ exited with 0 +++ [pid 5403] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=209, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./69", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./69/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./69/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./69/binderfs") = 0 [pid 5046] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./69/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./69/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./69/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./69") = 0 [pid 5046] mkdir("./70", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 111.644633][ T5404] EXT4-fs (loop0): This should not happen!! Data will be lost [ 111.644633][ T5404] [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9c690) = 212 ./strace-static-x86_64: Process 5408 attached [pid 5408] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5408] chdir("./70") = 0 [pid 5408] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5408] setpgid(0, 0) = 0 [pid 5408] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5408] write(3, "1000", 4) = 4 [pid 5408] close(3) = 0 [pid 5408] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5408] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5408] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5408] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5408] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5408] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5408] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5408] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5408] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5409 attached [pid 5409] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053 [pid 5408] <... clone3 resumed> => {parent_tid=[213]}, 88) = 213 [pid 5409] <... rseq resumed>) = 0 [pid 5408] rt_sigprocmask(SIG_SETMASK, [], [pid 5409] set_robust_list(0x7efc0265e9a0, 24 [pid 5408] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5409] <... set_robust_list resumed>) = 0 [pid 5409] rt_sigprocmask(SIG_SETMASK, [], [pid 5408] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5409] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5408] <... futex resumed>) = 0 [pid 5409] memfd_create("syzkaller", 0) = 3 [pid 5409] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5408] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5409] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5409] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5409] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5409] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5409] close(3) = 0 [pid 5409] mkdir("./file0", 0777) = 0 [pid 5409] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5409] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5409] chdir("./file0") = 0 [pid 5409] ioctl(4, LOOP_CLR_FD) = 0 [pid 5409] close(4) = 0 [pid 5409] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5408] <... futex resumed>) = 0 [pid 5408] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5409] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5408] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5409] <... open resumed>) = 4 [pid 5409] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5408] <... futex resumed>) = 0 [pid 5409] <... futex resumed>) = 1 [pid 5408] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5408] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5409] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5409] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5408] <... futex resumed>) = 0 [pid 5409] ftruncate(5, 33587195 [pid 5408] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5408] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5409] <... ftruncate resumed>) = 0 [pid 5409] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5408] <... futex resumed>) = 0 [pid 5408] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5409] <... futex resumed>) = 1 [pid 5408] <... futex resumed>) = 0 [pid 5409] sendfile(4, 5, NULL, 4 [pid 5408] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5409] <... sendfile resumed>) = 4 [pid 5409] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5408] <... futex resumed>) = 0 [pid 5409] <... futex resumed>) = 1 [pid 5409] sendfile(4, 5, NULL, 281474978811909 [pid 5408] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5408] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 111.758281][ T5409] loop0: detected capacity change from 0 to 2048 [pid 5408] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5408] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5408] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5408] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5412 attached [pid 5412] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5408] <... clone3 resumed> => {parent_tid=[214]}, 88) = 214 [pid 5412] <... rseq resumed>) = 0 [pid 5408] rt_sigprocmask(SIG_SETMASK, [], [pid 5412] set_robust_list(0x7efbfa33d9a0, 24 [pid 5408] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5408] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5412] <... set_robust_list resumed>) = 0 [pid 5408] <... futex resumed>) = 0 [pid 5412] rt_sigprocmask(SIG_SETMASK, [], [pid 5408] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5412] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5412] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5412] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5408] <... futex resumed>) = 0 [pid 5412] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5408] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5412] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5408] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 111.828228][ T5412] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 111.843768][ T5412] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 49 with error 28 [ 111.856475][ T5412] EXT4-fs (loop0): This should not happen!! Data will be lost [ 111.856475][ T5412] [ 111.866221][ T5412] EXT4-fs (loop0): Total free blocks count 0 [ 111.872328][ T5412] EXT4-fs (loop0): Free/Dirty block details [pid 5412] prlimit64(0, RLIMIT_CPU, NULL, [pid 5408] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5412] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5412] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5409] <... sendfile resumed>) = 102400 [pid 5412] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5409] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5409] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5408] close(3) = 0 [pid 5408] close(4) = 0 [pid 5408] close(5) = 0 [pid 5408] close(6) = -1 EBADF (Bad file descriptor) [pid 5408] close(7) = -1 EBADF (Bad file descriptor) [pid 5408] close(8) = -1 EBADF (Bad file descriptor) [pid 5408] close(9) = -1 EBADF (Bad file descriptor) [pid 5408] close(10) = -1 EBADF (Bad file descriptor) [pid 5408] close(11) = -1 EBADF (Bad file descriptor) [pid 5408] close(12) = -1 EBADF (Bad file descriptor) [pid 5408] close(13) = -1 EBADF (Bad file descriptor) [pid 5408] close(14) = -1 EBADF (Bad file descriptor) [pid 5408] close(15) = -1 EBADF (Bad file descriptor) [pid 5408] close(16) = -1 EBADF (Bad file descriptor) [pid 5408] close(17) = -1 EBADF (Bad file descriptor) [pid 5408] close(18) = -1 EBADF (Bad file descriptor) [pid 5408] close(19) = -1 EBADF (Bad file descriptor) [pid 5408] close(20) = -1 EBADF (Bad file descriptor) [pid 5408] close(21) = -1 EBADF (Bad file descriptor) [pid 5408] close(22) = -1 EBADF (Bad file descriptor) [pid 5408] close(23) = -1 EBADF (Bad file descriptor) [pid 5408] close(24) = -1 EBADF (Bad file descriptor) [pid 5408] close(25) = -1 EBADF (Bad file descriptor) [pid 5408] close(26) = -1 EBADF (Bad file descriptor) [pid 5408] close(27) = -1 EBADF (Bad file descriptor) [pid 5408] close(28) = -1 EBADF (Bad file descriptor) [pid 5408] close(29) = -1 EBADF (Bad file descriptor) [pid 5408] exit_group(0 [pid 5412] <... futex resumed>) = ? [pid 5412] +++ exited with 0 +++ [pid 5409] <... futex resumed>) = ? [pid 5408] <... exit_group resumed>) = ? [pid 5409] +++ exited with 0 +++ [pid 5408] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=212, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5046] umount2("./70", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./70/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./70/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./70/binderfs") = 0 [ 111.878295][ T5412] EXT4-fs (loop0): free_blocks=2415919104 [ 111.884045][ T5412] EXT4-fs (loop0): dirty_blocks=64 [ 111.889302][ T5412] EXT4-fs (loop0): Block reservation details [ 111.895312][ T5412] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 111.903944][ T5409] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 50 with max blocks 1 with error 28 [ 111.916306][ T5409] EXT4-fs (loop0): This should not happen!! Data will be lost [ 111.916306][ T5409] [pid 5046] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./70/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./70/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./70/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./70") = 0 [pid 5046] mkdir("./71", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9c690) = 215 ./strace-static-x86_64: Process 5413 attached [pid 5413] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5413] chdir("./71") = 0 [pid 5413] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5413] setpgid(0, 0) = 0 [pid 5413] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5413] write(3, "1000", 4) = 4 [pid 5413] close(3) = 0 [pid 5413] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5413] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5413] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5413] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5413] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5413] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5413] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5413] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5413] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5414 attached [pid 5414] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053 [pid 5413] <... clone3 resumed> => {parent_tid=[216]}, 88) = 216 [pid 5414] <... rseq resumed>) = 0 [pid 5414] set_robust_list(0x7efc0265e9a0, 24 [pid 5413] rt_sigprocmask(SIG_SETMASK, [], [pid 5414] <... set_robust_list resumed>) = 0 [pid 5413] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5414] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5413] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5414] memfd_create("syzkaller", 0 [pid 5413] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5414] <... memfd_create resumed>) = 3 [pid 5414] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5414] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5414] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5414] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5414] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5414] close(3) = 0 [pid 5414] mkdir("./file0", 0777) = 0 [pid 5414] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5414] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5414] chdir("./file0") = 0 [pid 5414] ioctl(4, LOOP_CLR_FD) = 0 [pid 5414] close(4) = 0 [pid 5414] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5413] <... futex resumed>) = 0 [pid 5413] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5414] <... futex resumed>) = 1 [pid 5413] <... futex resumed>) = 0 [pid 5414] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5413] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5414] <... open resumed>) = 4 [pid 5414] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5413] <... futex resumed>) = 0 [pid 5414] <... futex resumed>) = 1 [pid 5413] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5414] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5413] <... futex resumed>) = 0 [pid 5414] <... open resumed>) = 5 [pid 5413] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5414] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5413] <... futex resumed>) = 0 [pid 5414] <... futex resumed>) = 1 [pid 5413] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5414] ftruncate(5, 33587195 [pid 5413] <... futex resumed>) = 0 [pid 5414] <... ftruncate resumed>) = 0 [pid 5413] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5414] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5413] <... futex resumed>) = 0 [pid 5413] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5414] sendfile(4, 5, NULL, 4 [pid 5413] <... futex resumed>) = 0 [pid 5414] <... sendfile resumed>) = 4 [pid 5413] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5414] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5414] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5413] <... futex resumed>) = 0 [pid 5413] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5414] <... futex resumed>) = 0 [pid 5413] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5414] sendfile(4, 5, NULL, 281474978811909 [pid 5413] <... futex resumed>) = 0 [pid 5413] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5413] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [ 112.029095][ T5414] loop0: detected capacity change from 0 to 2048 [pid 5413] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5413] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5417 attached [pid 5417] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5413] <... clone3 resumed> => {parent_tid=[217]}, 88) = 217 [pid 5417] <... rseq resumed>) = 0 [pid 5413] rt_sigprocmask(SIG_SETMASK, [], [pid 5417] set_robust_list(0x7efbfa33d9a0, 24 [pid 5413] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5417] <... set_robust_list resumed>) = 0 [pid 5413] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5417] rt_sigprocmask(SIG_SETMASK, [], [pid 5413] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5417] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5417] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5417] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5413] <... futex resumed>) = 0 [pid 5413] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5413] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 112.102818][ T5417] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 112.118436][ T5417] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 169 with error 28 [ 112.131411][ T5417] EXT4-fs (loop0): This should not happen!! Data will be lost [ 112.131411][ T5417] [ 112.141473][ T5417] EXT4-fs (loop0): Total free blocks count 0 [pid 5417] prlimit64(0, RLIMIT_CPU, NULL, [pid 5413] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5417] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5417] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 112.148608][ T5417] EXT4-fs (loop0): Free/Dirty block details [ 112.154574][ T5417] EXT4-fs (loop0): free_blocks=2415919104 [ 112.161227][ T5417] EXT4-fs (loop0): dirty_blocks=176 [ 112.166497][ T5417] EXT4-fs (loop0): Block reservation details [ 112.174625][ T5417] EXT4-fs (loop0): i_reserved_data_blocks=11 [ 112.189385][ T5414] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 170 with max blocks 1 with error 28 [pid 5417] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5414] <... sendfile resumed>) = 348160 [pid 5414] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5413] close(3 [pid 5414] <... futex resumed>) = 0 [pid 5413] <... close resumed>) = 0 [pid 5414] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5413] close(4) = 0 [pid 5413] close(5) = 0 [pid 5413] close(6) = -1 EBADF (Bad file descriptor) [pid 5413] close(7) = -1 EBADF (Bad file descriptor) [pid 5413] close(8) = -1 EBADF (Bad file descriptor) [pid 5413] close(9) = -1 EBADF (Bad file descriptor) [pid 5413] close(10) = -1 EBADF (Bad file descriptor) [pid 5413] close(11) = -1 EBADF (Bad file descriptor) [pid 5413] close(12) = -1 EBADF (Bad file descriptor) [pid 5413] close(13) = -1 EBADF (Bad file descriptor) [pid 5413] close(14) = -1 EBADF (Bad file descriptor) [pid 5413] close(15) = -1 EBADF (Bad file descriptor) [pid 5413] close(16) = -1 EBADF (Bad file descriptor) [pid 5413] close(17) = -1 EBADF (Bad file descriptor) [pid 5413] close(18) = -1 EBADF (Bad file descriptor) [pid 5413] close(19) = -1 EBADF (Bad file descriptor) [pid 5413] close(20) = -1 EBADF (Bad file descriptor) [pid 5413] close(21) = -1 EBADF (Bad file descriptor) [pid 5413] close(22) = -1 EBADF (Bad file descriptor) [pid 5413] close(23) = -1 EBADF (Bad file descriptor) [pid 5413] close(24) = -1 EBADF (Bad file descriptor) [pid 5413] close(25) = -1 EBADF (Bad file descriptor) [pid 5413] close(26) = -1 EBADF (Bad file descriptor) [pid 5413] close(27) = -1 EBADF (Bad file descriptor) [pid 5413] close(28) = -1 EBADF (Bad file descriptor) [pid 5413] close(29) = -1 EBADF (Bad file descriptor) [pid 5413] exit_group(0 [pid 5417] <... futex resumed>) = ? [pid 5413] <... exit_group resumed>) = ? [pid 5417] +++ exited with 0 +++ [pid 5414] <... futex resumed>) = ? [pid 5414] +++ exited with 0 +++ [pid 5413] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=215, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./71", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./71/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./71/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./71/binderfs") = 0 [pid 5046] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [ 112.201942][ T5414] EXT4-fs (loop0): This should not happen!! Data will be lost [ 112.201942][ T5414] [pid 5046] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./71/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./71/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./71/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./71") = 0 [pid 5046] mkdir("./72", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9c690) = 218 ./strace-static-x86_64: Process 5418 attached [pid 5418] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5418] chdir("./72") = 0 [pid 5418] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5418] setpgid(0, 0) = 0 [pid 5418] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5418] write(3, "1000", 4) = 4 [pid 5418] close(3) = 0 [pid 5418] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5418] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5418] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5418] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5418] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5418] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5418] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5418] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5418] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0} => {parent_tid=[219]}, 88) = 219 [pid 5418] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5418] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5418] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5419 attached [pid 5419] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5419] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5419] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5419] memfd_create("syzkaller", 0) = 3 [pid 5419] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5419] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5419] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5419] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5419] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5419] close(3) = 0 [pid 5419] mkdir("./file0", 0777) = 0 [pid 5419] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5419] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5419] chdir("./file0") = 0 [pid 5419] ioctl(4, LOOP_CLR_FD) = 0 [pid 5419] close(4) = 0 [pid 5419] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5418] <... futex resumed>) = 0 [pid 5419] <... futex resumed>) = 1 [pid 5419] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5418] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5419] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5418] <... futex resumed>) = 0 [pid 5418] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5419] <... open resumed>) = 4 [pid 5419] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5418] <... futex resumed>) = 0 [pid 5419] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5418] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5419] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5418] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5419] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5419] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5418] <... futex resumed>) = 0 [pid 5418] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5418] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5419] ftruncate(5, 33587195) = 0 [pid 5419] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5418] <... futex resumed>) = 0 [pid 5418] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5418] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5419] <... futex resumed>) = 1 [pid 5419] sendfile(4, 5, NULL, 4) = 4 [pid 5419] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5418] <... futex resumed>) = 0 [pid 5418] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5418] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5418] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5418] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5418] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5418] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5422 attached [pid 5422] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5418] <... clone3 resumed> => {parent_tid=[220]}, 88) = 220 [pid 5422] <... rseq resumed>) = 0 [pid 5418] rt_sigprocmask(SIG_SETMASK, [], [pid 5422] set_robust_list(0x7efbfa33d9a0, 24 [pid 5418] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5422] <... set_robust_list resumed>) = 0 [pid 5418] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5422] rt_sigprocmask(SIG_SETMASK, [], [pid 5418] <... futex resumed>) = 0 [pid 5422] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5418] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5422] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000 [pid 5419] <... futex resumed>) = 1 [ 112.349051][ T5419] loop0: detected capacity change from 0 to 2048 [pid 5419] sendfile(4, 5, NULL, 281474978811909 [pid 5422] <... mmap resumed>) = 0x20000000 [pid 5422] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5422] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5418] <... futex resumed>) = 0 [pid 5418] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5422] <... futex resumed>) = 0 [pid 5418] <... futex resumed>) = 1 [pid 5418] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 112.428884][ T5422] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 112.445217][ T5422] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 81 with error 28 [ 112.457828][ T5422] EXT4-fs (loop0): This should not happen!! Data will be lost [ 112.457828][ T5422] [ 112.467815][ T5422] EXT4-fs (loop0): Total free blocks count 0 [pid 5422] prlimit64(0, RLIMIT_CPU, NULL, [pid 5418] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5422] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [ 112.474229][ T5422] EXT4-fs (loop0): Free/Dirty block details [ 112.480271][ T5422] EXT4-fs (loop0): free_blocks=2415919104 [ 112.486690][ T5422] EXT4-fs (loop0): dirty_blocks=96 [ 112.492047][ T5422] EXT4-fs (loop0): Block reservation details [ 112.499553][ T5422] EXT4-fs (loop0): i_reserved_data_blocks=6 [ 112.509740][ T5419] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 82 with max blocks 1 with error 28 [pid 5422] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5422] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5419] <... sendfile resumed>) = 167936 [pid 5419] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5419] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5418] close(3) = 0 [pid 5418] close(4) = 0 [pid 5418] close(5) = 0 [pid 5418] close(6) = -1 EBADF (Bad file descriptor) [pid 5418] close(7) = -1 EBADF (Bad file descriptor) [pid 5418] close(8) = -1 EBADF (Bad file descriptor) [pid 5418] close(9) = -1 EBADF (Bad file descriptor) [pid 5418] close(10) = -1 EBADF (Bad file descriptor) [pid 5418] close(11) = -1 EBADF (Bad file descriptor) [pid 5418] close(12) = -1 EBADF (Bad file descriptor) [pid 5418] close(13) = -1 EBADF (Bad file descriptor) [pid 5418] close(14) = -1 EBADF (Bad file descriptor) [pid 5418] close(15) = -1 EBADF (Bad file descriptor) [pid 5418] close(16) = -1 EBADF (Bad file descriptor) [pid 5418] close(17) = -1 EBADF (Bad file descriptor) [pid 5418] close(18) = -1 EBADF (Bad file descriptor) [pid 5418] close(19) = -1 EBADF (Bad file descriptor) [pid 5418] close(20) = -1 EBADF (Bad file descriptor) [pid 5418] close(21) = -1 EBADF (Bad file descriptor) [pid 5418] close(22) = -1 EBADF (Bad file descriptor) [pid 5418] close(23) = -1 EBADF (Bad file descriptor) [pid 5418] close(24) = -1 EBADF (Bad file descriptor) [pid 5418] close(25) = -1 EBADF (Bad file descriptor) [pid 5418] close(26) = -1 EBADF (Bad file descriptor) [pid 5418] close(27) = -1 EBADF (Bad file descriptor) [pid 5418] close(28) = -1 EBADF (Bad file descriptor) [pid 5418] close(29) = -1 EBADF (Bad file descriptor) [pid 5418] exit_group(0 [pid 5422] <... futex resumed>) = ? [pid 5419] <... futex resumed>) = ? [pid 5418] <... exit_group resumed>) = ? [pid 5422] +++ exited with 0 +++ [pid 5419] +++ exited with 0 +++ [pid 5418] +++ exited with 0 +++ [ 112.522466][ T5419] EXT4-fs (loop0): This should not happen!! Data will be lost [ 112.522466][ T5419] [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=218, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5046] umount2("./72", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./72/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./72/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./72/binderfs") = 0 [pid 5046] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./72/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./72/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./72/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./72") = 0 [pid 5046] mkdir("./73", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9c690) = 221 ./strace-static-x86_64: Process 5423 attached [pid 5423] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5423] chdir("./73") = 0 [pid 5423] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5423] setpgid(0, 0) = 0 [pid 5423] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5423] write(3, "1000", 4) = 4 [pid 5423] close(3) = 0 [pid 5423] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5423] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5423] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5423] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5423] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5423] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5423] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5423] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5423] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5424 attached [pid 5424] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053 [pid 5423] <... clone3 resumed> => {parent_tid=[222]}, 88) = 222 [pid 5424] <... rseq resumed>) = 0 [pid 5423] rt_sigprocmask(SIG_SETMASK, [], [pid 5424] set_robust_list(0x7efc0265e9a0, 24 [pid 5423] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5424] <... set_robust_list resumed>) = 0 [pid 5423] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5424] rt_sigprocmask(SIG_SETMASK, [], [pid 5423] <... futex resumed>) = 0 [pid 5424] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5423] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5424] memfd_create("syzkaller", 0) = 3 [pid 5424] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5424] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5424] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5424] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5424] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5424] close(3) = 0 [pid 5424] mkdir("./file0", 0777) = 0 [pid 5424] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5424] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5424] chdir("./file0") = 0 [pid 5424] ioctl(4, LOOP_CLR_FD) = 0 [pid 5424] close(4) = 0 [pid 5424] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5424] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5423] <... futex resumed>) = 0 [pid 5423] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5424] <... futex resumed>) = 0 [pid 5423] <... futex resumed>) = 1 [pid 5424] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5423] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5424] <... open resumed>) = 4 [pid 5424] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5423] <... futex resumed>) = 0 [pid 5424] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5423] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5424] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5423] <... futex resumed>) = 0 [pid 5424] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5423] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5424] <... open resumed>) = 5 [pid 5424] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5423] <... futex resumed>) = 0 [pid 5424] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5423] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5424] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5423] <... futex resumed>) = 0 [pid 5424] ftruncate(5, 33587195 [pid 5423] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5424] <... ftruncate resumed>) = 0 [pid 5424] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5423] <... futex resumed>) = 0 [pid 5424] <... futex resumed>) = 1 [pid 5423] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5424] sendfile(4, 5, NULL, 4 [pid 5423] <... futex resumed>) = 0 [pid 5423] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5424] <... sendfile resumed>) = 4 [ 112.682817][ T5424] loop0: detected capacity change from 0 to 2048 [pid 5424] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5423] <... futex resumed>) = 0 [pid 5424] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5423] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5424] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5423] <... futex resumed>) = 0 [pid 5424] sendfile(4, 5, NULL, 281474978811909 [pid 5423] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5423] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5423] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5423] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5423] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5427 attached [pid 5427] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5423] <... clone3 resumed> => {parent_tid=[223]}, 88) = 223 [pid 5427] <... rseq resumed>) = 0 [pid 5423] rt_sigprocmask(SIG_SETMASK, [], [pid 5427] set_robust_list(0x7efbfa33d9a0, 24 [pid 5423] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5427] <... set_robust_list resumed>) = 0 [pid 5423] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5427] rt_sigprocmask(SIG_SETMASK, [], [pid 5423] <... futex resumed>) = 0 [pid 5427] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5423] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5427] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5427] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5423] <... futex resumed>) = 0 [pid 5427] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5423] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5427] <... futex resumed>) = 0 [pid 5423] <... futex resumed>) = 1 [pid 5423] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 112.746579][ T5427] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 112.762754][ T5427] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 24 with error 28 [ 112.766970][ T5424] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 1 with error 28 [ 112.775148][ T5427] EXT4-fs (loop0): This should not happen!! Data will be lost [pid 5427] prlimit64(0, RLIMIT_CPU, NULL, [pid 5423] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5424] <... sendfile resumed>) = 49152 [pid 5424] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5424] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5427] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5427] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5423] close(3) = 0 [pid 5423] close(4) = 0 [pid 5427] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5423] close(5) = 0 [pid 5423] close(6) = -1 EBADF (Bad file descriptor) [pid 5423] close(7) = -1 EBADF (Bad file descriptor) [pid 5423] close(8) = -1 EBADF (Bad file descriptor) [pid 5423] close(9) = -1 EBADF (Bad file descriptor) [pid 5423] close(10) = -1 EBADF (Bad file descriptor) [pid 5423] close(11) = -1 EBADF (Bad file descriptor) [pid 5423] close(12) = -1 EBADF (Bad file descriptor) [pid 5423] close(13) = -1 EBADF (Bad file descriptor) [pid 5423] close(14) = -1 EBADF (Bad file descriptor) [pid 5423] close(15) = -1 EBADF (Bad file descriptor) [pid 5423] close(16) = -1 EBADF (Bad file descriptor) [pid 5423] close(17) = -1 EBADF (Bad file descriptor) [pid 5423] close(18) = -1 EBADF (Bad file descriptor) [pid 5423] close(19) = -1 EBADF (Bad file descriptor) [pid 5423] close(20) = -1 EBADF (Bad file descriptor) [pid 5423] close(21) = -1 EBADF (Bad file descriptor) [pid 5423] close(22) = -1 EBADF (Bad file descriptor) [pid 5423] close(23) = -1 EBADF (Bad file descriptor) [pid 5423] close(24) = -1 EBADF (Bad file descriptor) [pid 5423] close(25) = -1 EBADF (Bad file descriptor) [pid 5423] close(26) = -1 EBADF (Bad file descriptor) [pid 5423] close(27) = -1 EBADF (Bad file descriptor) [pid 5423] close(28) = -1 EBADF (Bad file descriptor) [pid 5423] close(29) = -1 EBADF (Bad file descriptor) [pid 5423] exit_group(0 [pid 5427] <... futex resumed>) = ? [pid 5424] <... futex resumed>) = ? [pid 5423] <... exit_group resumed>) = ? [pid 5427] +++ exited with 0 +++ [pid 5424] +++ exited with 0 +++ [pid 5423] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=221, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5046] umount2("./73", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./73/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./73/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./73/binderfs") = 0 [ 112.775148][ T5427] [ 112.788839][ T5424] EXT4-fs (loop0): This should not happen!! Data will be lost [ 112.788839][ T5424] [ 112.799049][ T5427] EXT4-fs (loop0): Total free blocks count 0 [ 112.807607][ T5424] EXT4-fs (loop0): Total free blocks count 0 [ 112.814492][ T5427] EXT4-fs (loop0): Free/Dirty block details [ 112.819734][ T5424] EXT4-fs (loop0): Free/Dirty block details [ 112.831386][ T5424] EXT4-fs (loop0): free_blocks=2415919104 [ 112.837192][ T5424] EXT4-fs (loop0): dirty_blocks=32 [pid 5046] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./73/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./73/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./73/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./73") = 0 [pid 5046] mkdir("./74", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9c690) = 224 ./strace-static-x86_64: Process 5428 attached [pid 5428] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5428] chdir("./74") = 0 [pid 5428] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5428] setpgid(0, 0) = 0 [pid 5428] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5428] write(3, "1000", 4) = 4 [pid 5428] close(3) = 0 [pid 5428] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5428] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5428] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5428] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5428] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5428] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5428] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5428] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5428] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5429 attached [pid 5429] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5428] <... clone3 resumed> => {parent_tid=[225]}, 88) = 225 [pid 5428] rt_sigprocmask(SIG_SETMASK, [], [pid 5429] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5428] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5429] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5429] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5428] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5429] <... futex resumed>) = 0 [pid 5428] <... futex resumed>) = 1 [pid 5429] memfd_create("syzkaller", 0 [pid 5428] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5429] <... memfd_create resumed>) = 3 [pid 5429] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5429] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5429] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5429] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5429] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5429] close(3) = 0 [pid 5429] mkdir("./file0", 0777) = 0 [pid 5429] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5429] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5429] chdir("./file0") = 0 [pid 5429] ioctl(4, LOOP_CLR_FD) = 0 [pid 5429] close(4) = 0 [pid 5429] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5428] <... futex resumed>) = 0 [pid 5429] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5428] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5429] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5428] <... futex resumed>) = 0 [pid 5429] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5428] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5429] <... open resumed>) = 4 [pid 5429] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5428] <... futex resumed>) = 0 [pid 5429] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5428] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5429] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5428] <... futex resumed>) = 0 [pid 5429] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5428] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5429] <... open resumed>) = 5 [pid 5429] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5428] <... futex resumed>) = 0 [pid 5429] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5428] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5429] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5428] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5429] ftruncate(5, 33587195) = 0 [pid 5429] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5428] <... futex resumed>) = 0 [pid 5429] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5428] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5429] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5428] <... futex resumed>) = 0 [pid 5429] sendfile(4, 5, NULL, 4) = 4 [pid 5428] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5429] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5428] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5429] <... futex resumed>) = 0 [pid 5428] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5429] sendfile(4, 5, NULL, 281474978811909 [pid 5428] <... futex resumed>) = 0 [pid 5428] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5428] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [ 112.953835][ T5429] loop0: detected capacity change from 0 to 2048 [pid 5428] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5428] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5428] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5432 attached => {parent_tid=[226]}, 88) = 226 [pid 5432] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5428] rt_sigprocmask(SIG_SETMASK, [], [pid 5432] <... rseq resumed>) = 0 [pid 5428] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5432] set_robust_list(0x7efbfa33d9a0, 24 [pid 5428] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5432] <... set_robust_list resumed>) = 0 [pid 5428] <... futex resumed>) = 0 [pid 5432] rt_sigprocmask(SIG_SETMASK, [], [pid 5428] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5432] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5432] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5432] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5428] <... futex resumed>) = 0 [pid 5428] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5428] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 113.028988][ T5432] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 113.044546][ T5432] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 73 with error 28 [ 113.058695][ T5432] EXT4-fs (loop0): This should not happen!! Data will be lost [ 113.058695][ T5432] [ 113.068616][ T5432] EXT4-fs (loop0): Total free blocks count 0 [pid 5432] prlimit64(0, RLIMIT_CPU, NULL, [pid 5428] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5432] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5432] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 113.074609][ T5432] EXT4-fs (loop0): Free/Dirty block details [ 113.080664][ T5432] EXT4-fs (loop0): free_blocks=2415919104 [ 113.086569][ T5432] EXT4-fs (loop0): dirty_blocks=80 [ 113.093023][ T5432] EXT4-fs (loop0): Block reservation details [ 113.099124][ T5432] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 113.108652][ T5429] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 74 with max blocks 1 with error 28 [ 113.121008][ T5429] EXT4-fs (loop0): This should not happen!! Data will be lost [pid 5432] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5429] <... sendfile resumed>) = 151552 [pid 5429] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5428] close(3 [pid 5429] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5428] <... close resumed>) = 0 [pid 5428] close(4) = 0 [pid 5428] close(5) = 0 [pid 5428] close(6) = -1 EBADF (Bad file descriptor) [pid 5428] close(7) = -1 EBADF (Bad file descriptor) [pid 5428] close(8) = -1 EBADF (Bad file descriptor) [pid 5428] close(9) = -1 EBADF (Bad file descriptor) [pid 5428] close(10) = -1 EBADF (Bad file descriptor) [pid 5428] close(11) = -1 EBADF (Bad file descriptor) [pid 5428] close(12) = -1 EBADF (Bad file descriptor) [pid 5428] close(13) = -1 EBADF (Bad file descriptor) [pid 5428] close(14) = -1 EBADF (Bad file descriptor) [pid 5428] close(15) = -1 EBADF (Bad file descriptor) [pid 5428] close(16) = -1 EBADF (Bad file descriptor) [pid 5428] close(17) = -1 EBADF (Bad file descriptor) [pid 5428] close(18) = -1 EBADF (Bad file descriptor) [pid 5428] close(19) = -1 EBADF (Bad file descriptor) [pid 5428] close(20) = -1 EBADF (Bad file descriptor) [pid 5428] close(21) = -1 EBADF (Bad file descriptor) [pid 5428] close(22) = -1 EBADF (Bad file descriptor) [pid 5428] close(23) = -1 EBADF (Bad file descriptor) [pid 5428] close(24) = -1 EBADF (Bad file descriptor) [pid 5428] close(25) = -1 EBADF (Bad file descriptor) [pid 5428] close(26) = -1 EBADF (Bad file descriptor) [pid 5428] close(27) = -1 EBADF (Bad file descriptor) [pid 5428] close(28) = -1 EBADF (Bad file descriptor) [pid 5428] close(29) = -1 EBADF (Bad file descriptor) [pid 5428] exit_group(0 [pid 5432] <... futex resumed>) = ? [pid 5429] <... futex resumed>) = ? [pid 5428] <... exit_group resumed>) = ? [pid 5432] +++ exited with 0 +++ [pid 5429] +++ exited with 0 +++ [pid 5428] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=224, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5046] umount2("./74", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./74/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./74/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./74/binderfs") = 0 [ 113.121008][ T5429] [pid 5046] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./74/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./74/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./74/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./74") = 0 [pid 5046] mkdir("./75", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9c690) = 227 ./strace-static-x86_64: Process 5433 attached [pid 5433] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5433] chdir("./75") = 0 [pid 5433] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5433] setpgid(0, 0) = 0 [pid 5433] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5433] write(3, "1000", 4) = 4 [pid 5433] close(3) = 0 [pid 5433] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5433] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5433] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5433] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5433] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5433] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5433] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5433] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5433] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0} => {parent_tid=[228]}, 88) = 228 ./strace-static-x86_64: Process 5434 attached [pid 5434] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053 [pid 5433] rt_sigprocmask(SIG_SETMASK, [], [pid 5434] <... rseq resumed>) = 0 [pid 5434] set_robust_list(0x7efc0265e9a0, 24 [pid 5433] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5434] <... set_robust_list resumed>) = 0 [pid 5434] rt_sigprocmask(SIG_SETMASK, [], [pid 5433] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5434] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5433] <... futex resumed>) = 0 [pid 5433] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5434] memfd_create("syzkaller", 0) = 3 [pid 5434] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5434] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5434] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5434] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5434] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5434] close(3) = 0 [pid 5434] mkdir("./file0", 0777) = 0 [pid 5434] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5434] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5434] chdir("./file0") = 0 [pid 5434] ioctl(4, LOOP_CLR_FD) = 0 [pid 5434] close(4) = 0 [pid 5434] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5433] <... futex resumed>) = 0 [pid 5434] <... futex resumed>) = 1 [pid 5433] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5434] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5433] <... futex resumed>) = 0 [pid 5433] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5434] <... open resumed>) = 4 [pid 5434] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5434] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5433] <... futex resumed>) = 0 [pid 5433] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5434] <... futex resumed>) = 0 [pid 5434] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5434] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5433] <... futex resumed>) = 1 [pid 5434] <... futex resumed>) = 0 [pid 5434] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5433] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5433] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5434] <... futex resumed>) = 0 [pid 5433] <... futex resumed>) = 1 [pid 5433] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5434] ftruncate(5, 33587195) = 0 [pid 5434] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5433] <... futex resumed>) = 0 [pid 5434] sendfile(4, 5, NULL, 4 [pid 5433] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5434] <... sendfile resumed>) = 4 [pid 5433] <... futex resumed>) = 0 [pid 5434] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5433] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5434] <... futex resumed>) = 0 [pid 5433] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5434] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5433] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5434] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5433] <... futex resumed>) = 0 [pid 5434] sendfile(4, 5, NULL, 281474978811909 [pid 5433] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5433] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5433] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5433] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5433] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5437 attached => {parent_tid=[229]}, 88) = 229 [pid 5437] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5433] rt_sigprocmask(SIG_SETMASK, [], [pid 5437] <... rseq resumed>) = 0 [pid 5437] set_robust_list(0x7efbfa33d9a0, 24 [pid 5433] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 113.237371][ T5434] loop0: detected capacity change from 0 to 2048 [pid 5437] <... set_robust_list resumed>) = 0 [pid 5433] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5437] rt_sigprocmask(SIG_SETMASK, [], [pid 5433] <... futex resumed>) = 0 [pid 5437] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5437] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5433] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5437] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5433] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5437] <... futex resumed>) = 0 [pid 5433] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5437] prlimit64(0, RLIMIT_CPU, NULL, [pid 5433] <... futex resumed>) = 0 [ 113.318086][ T5437] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 113.334478][ T5437] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 135 with error 28 [ 113.347076][ T5437] EXT4-fs (loop0): This should not happen!! Data will be lost [ 113.347076][ T5437] [ 113.357440][ T5437] EXT4-fs (loop0): Total free blocks count 0 [pid 5433] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5437] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5437] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 113.363454][ T5437] EXT4-fs (loop0): Free/Dirty block details [ 113.369652][ T5437] EXT4-fs (loop0): free_blocks=2415919104 [ 113.375387][ T5437] EXT4-fs (loop0): dirty_blocks=144 [ 113.380858][ T5437] EXT4-fs (loop0): Block reservation details [ 113.387903][ T5437] EXT4-fs (loop0): i_reserved_data_blocks=9 [ 113.399617][ T5434] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 136 with max blocks 1 with error 28 [pid 5437] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5434] <... sendfile resumed>) = 278528 [pid 5434] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5434] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5433] close(3) = 0 [pid 5433] close(4) = 0 [pid 5433] close(5) = 0 [pid 5433] close(6) = -1 EBADF (Bad file descriptor) [pid 5433] close(7) = -1 EBADF (Bad file descriptor) [pid 5433] close(8) = -1 EBADF (Bad file descriptor) [pid 5433] close(9) = -1 EBADF (Bad file descriptor) [pid 5433] close(10) = -1 EBADF (Bad file descriptor) [pid 5433] close(11) = -1 EBADF (Bad file descriptor) [pid 5433] close(12) = -1 EBADF (Bad file descriptor) [pid 5433] close(13) = -1 EBADF (Bad file descriptor) [pid 5433] close(14) = -1 EBADF (Bad file descriptor) [pid 5433] close(15) = -1 EBADF (Bad file descriptor) [pid 5433] close(16) = -1 EBADF (Bad file descriptor) [pid 5433] close(17) = -1 EBADF (Bad file descriptor) [pid 5433] close(18) = -1 EBADF (Bad file descriptor) [pid 5433] close(19) = -1 EBADF (Bad file descriptor) [pid 5433] close(20) = -1 EBADF (Bad file descriptor) [pid 5433] close(21) = -1 EBADF (Bad file descriptor) [pid 5433] close(22) = -1 EBADF (Bad file descriptor) [pid 5433] close(23) = -1 EBADF (Bad file descriptor) [pid 5433] close(24) = -1 EBADF (Bad file descriptor) [pid 5433] close(25) = -1 EBADF (Bad file descriptor) [pid 5433] close(26) = -1 EBADF (Bad file descriptor) [pid 5433] close(27) = -1 EBADF (Bad file descriptor) [pid 5433] close(28) = -1 EBADF (Bad file descriptor) [pid 5433] close(29) = -1 EBADF (Bad file descriptor) [pid 5433] exit_group(0 [pid 5437] <... futex resumed>) = ? [pid 5434] <... futex resumed>) = ? [pid 5437] +++ exited with 0 +++ [pid 5434] +++ exited with 0 +++ [pid 5433] <... exit_group resumed>) = ? [pid 5433] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=227, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5046] umount2("./75", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./75/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./75/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./75/binderfs") = 0 [ 113.412052][ T5434] EXT4-fs (loop0): This should not happen!! Data will be lost [ 113.412052][ T5434] [pid 5046] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./75/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./75/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./75/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./75") = 0 [pid 5046] mkdir("./76", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5438 attached [pid 5438] set_robust_list(0x555555a9c6a0, 24 [pid 5046] <... clone resumed>, child_tidptr=0x555555a9c690) = 230 [pid 5438] <... set_robust_list resumed>) = 0 [pid 5438] chdir("./76") = 0 [pid 5438] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5438] setpgid(0, 0) = 0 [pid 5438] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5438] write(3, "1000", 4) = 4 [pid 5438] close(3) = 0 [pid 5438] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5438] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5438] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5438] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5438] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5438] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5438] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5438] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5438] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0} => {parent_tid=[231]}, 88) = 231 [pid 5438] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5438] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5438] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5439 attached [pid 5439] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5439] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5439] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5439] memfd_create("syzkaller", 0) = 3 [pid 5439] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5439] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5439] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5439] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5439] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5439] close(3) = 0 [pid 5439] mkdir("./file0", 0777) = 0 [pid 5439] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5439] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5439] chdir("./file0") = 0 [pid 5439] ioctl(4, LOOP_CLR_FD) = 0 [pid 5439] close(4) = 0 [pid 5439] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5439] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5438] <... futex resumed>) = 0 [pid 5438] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5439] <... futex resumed>) = 0 [pid 5439] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5438] <... futex resumed>) = 1 [pid 5438] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5439] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5438] <... futex resumed>) = 0 [pid 5439] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5438] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5439] <... futex resumed>) = 0 [pid 5438] <... futex resumed>) = 1 [pid 5439] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5439] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5439] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5438] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5438] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5439] <... futex resumed>) = 0 [pid 5438] <... futex resumed>) = 1 [pid 5439] ftruncate(5, 33587195 [pid 5438] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5439] <... ftruncate resumed>) = 0 [pid 5439] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5438] <... futex resumed>) = 0 [pid 5438] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5439] sendfile(4, 5, NULL, 4 [pid 5438] <... futex resumed>) = 0 [pid 5438] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5439] <... sendfile resumed>) = 4 [pid 5439] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5438] <... futex resumed>) = 0 [pid 5439] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5438] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5439] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5438] <... futex resumed>) = 0 [pid 5439] sendfile(4, 5, NULL, 281474978811909 [pid 5438] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5438] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5438] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5438] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5438] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0} => {parent_tid=[232]}, 88) = 232 [pid 5438] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5438] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5438] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5442 attached [pid 5442] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5442] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5442] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5442] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [ 113.542204][ T5439] loop0: detected capacity change from 0 to 2048 [pid 5442] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5438] <... futex resumed>) = 0 [pid 5442] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5438] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5442] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5438] <... futex resumed>) = 0 [pid 5442] prlimit64(0, RLIMIT_CPU, NULL, [pid 5438] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 113.606498][ T5442] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 113.624070][ T5442] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 83 with error 28 [ 113.639600][ T5442] EXT4-fs (loop0): This should not happen!! Data will be lost [ 113.639600][ T5442] [ 113.649676][ T5442] EXT4-fs (loop0): Total free blocks count 0 [pid 5442] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5442] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 113.655700][ T5442] EXT4-fs (loop0): Free/Dirty block details [ 113.661868][ T5442] EXT4-fs (loop0): free_blocks=2415919104 [ 113.667673][ T5442] EXT4-fs (loop0): dirty_blocks=96 [ 113.672795][ T5442] EXT4-fs (loop0): Block reservation details [ 113.678828][ T5442] EXT4-fs (loop0): i_reserved_data_blocks=6 [ 113.688929][ T5439] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 84 with max blocks 1 with error 28 [pid 5442] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5439] <... sendfile resumed>) = 172032 [pid 5439] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5439] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5438] close(3) = 0 [pid 5438] close(4) = 0 [pid 5438] close(5) = 0 [pid 5438] close(6) = -1 EBADF (Bad file descriptor) [pid 5438] close(7) = -1 EBADF (Bad file descriptor) [pid 5438] close(8) = -1 EBADF (Bad file descriptor) [pid 5438] close(9) = -1 EBADF (Bad file descriptor) [pid 5438] close(10) = -1 EBADF (Bad file descriptor) [pid 5438] close(11) = -1 EBADF (Bad file descriptor) [pid 5438] close(12) = -1 EBADF (Bad file descriptor) [pid 5438] close(13) = -1 EBADF (Bad file descriptor) [pid 5438] close(14) = -1 EBADF (Bad file descriptor) [pid 5438] close(15) = -1 EBADF (Bad file descriptor) [pid 5438] close(16) = -1 EBADF (Bad file descriptor) [pid 5438] close(17) = -1 EBADF (Bad file descriptor) [pid 5438] close(18) = -1 EBADF (Bad file descriptor) [pid 5438] close(19) = -1 EBADF (Bad file descriptor) [pid 5438] close(20) = -1 EBADF (Bad file descriptor) [pid 5438] close(21) = -1 EBADF (Bad file descriptor) [pid 5438] close(22) = -1 EBADF (Bad file descriptor) [pid 5438] close(23) = -1 EBADF (Bad file descriptor) [pid 5438] close(24) = -1 EBADF (Bad file descriptor) [pid 5438] close(25) = -1 EBADF (Bad file descriptor) [pid 5438] close(26) = -1 EBADF (Bad file descriptor) [pid 5438] close(27) = -1 EBADF (Bad file descriptor) [pid 5438] close(28) = -1 EBADF (Bad file descriptor) [pid 5438] close(29) = -1 EBADF (Bad file descriptor) [pid 5438] exit_group(0 [pid 5439] <... futex resumed>) = ? [pid 5442] <... futex resumed>) = ? [pid 5438] <... exit_group resumed>) = ? [pid 5442] +++ exited with 0 +++ [pid 5439] +++ exited with 0 +++ [pid 5438] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=230, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./76", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./76/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./76/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./76/binderfs") = 0 [pid 5046] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./76/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 113.706414][ T5439] EXT4-fs (loop0): This should not happen!! Data will be lost [ 113.706414][ T5439] [pid 5046] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./76/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./76/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./76") = 0 [pid 5046] mkdir("./77", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9c690) = 233 ./strace-static-x86_64: Process 5443 attached [pid 5443] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5443] chdir("./77") = 0 [pid 5443] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5443] setpgid(0, 0) = 0 [pid 5443] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5443] write(3, "1000", 4) = 4 [pid 5443] close(3) = 0 [pid 5443] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5443] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5443] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5443] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5443] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5443] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5443] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5443] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5443] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5444 attached [pid 5444] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053 [pid 5443] <... clone3 resumed> => {parent_tid=[234]}, 88) = 234 [pid 5444] <... rseq resumed>) = 0 [pid 5443] rt_sigprocmask(SIG_SETMASK, [], [pid 5444] set_robust_list(0x7efc0265e9a0, 24 [pid 5443] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5444] <... set_robust_list resumed>) = 0 [pid 5444] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5444] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5443] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5444] <... futex resumed>) = 0 [pid 5444] memfd_create("syzkaller", 0) = 3 [pid 5444] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5443] <... futex resumed>) = 1 [pid 5443] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5444] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5444] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5444] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5444] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5444] close(3) = 0 [pid 5444] mkdir("./file0", 0777) = 0 [pid 5444] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5444] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5444] chdir("./file0") = 0 [pid 5444] ioctl(4, LOOP_CLR_FD) = 0 [pid 5444] close(4) = 0 [pid 5444] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5443] <... futex resumed>) = 0 [pid 5443] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5443] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5444] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5444] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5443] <... futex resumed>) = 0 [pid 5444] <... futex resumed>) = 1 [pid 5443] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5443] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5444] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5444] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5443] <... futex resumed>) = 0 [pid 5444] <... futex resumed>) = 1 [pid 5443] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5443] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5444] ftruncate(5, 33587195) = 0 [pid 5444] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5443] <... futex resumed>) = 0 [pid 5443] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5443] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5444] sendfile(4, 5, NULL, 4) = 4 [pid 5444] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5443] <... futex resumed>) = 0 [pid 5443] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5444] <... futex resumed>) = 1 [pid 5443] <... futex resumed>) = 0 [pid 5444] sendfile(4, 5, NULL, 281474978811909 [pid 5443] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5443] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5443] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5443] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5443] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0} => {parent_tid=[235]}, 88) = 235 [pid 5443] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 5447 attached [pid 5443] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5447] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5447] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5443] <... futex resumed>) = 0 [pid 5447] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5443] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5447] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5447] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5443] <... futex resumed>) = 0 [pid 5447] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5443] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5447] <... futex resumed>) = 0 [pid 5443] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 113.845560][ T5444] loop0: detected capacity change from 0 to 2048 [pid 5447] prlimit64(0, RLIMIT_CPU, NULL, [pid 5443] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 113.905508][ T5447] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 113.920650][ T5447] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 23 with error 28 [ 113.933404][ T5447] EXT4-fs (loop0): This should not happen!! Data will be lost [ 113.933404][ T5447] [ 113.943194][ T5447] EXT4-fs (loop0): Total free blocks count 0 [ 113.949259][ T5447] EXT4-fs (loop0): Free/Dirty block details [pid 5447] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5447] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5447] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5444] <... sendfile resumed>) = 49152 [pid 5444] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5444] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5443] close(3) = 0 [pid 5443] close(4) = 0 [pid 5443] close(5) = 0 [pid 5443] close(6) = -1 EBADF (Bad file descriptor) [pid 5443] close(7) = -1 EBADF (Bad file descriptor) [pid 5443] close(8) = -1 EBADF (Bad file descriptor) [pid 5443] close(9) = -1 EBADF (Bad file descriptor) [pid 5443] close(10) = -1 EBADF (Bad file descriptor) [pid 5443] close(11) = -1 EBADF (Bad file descriptor) [pid 5443] close(12) = -1 EBADF (Bad file descriptor) [pid 5443] close(13) = -1 EBADF (Bad file descriptor) [pid 5443] close(14) = -1 EBADF (Bad file descriptor) [pid 5443] close(15) = -1 EBADF (Bad file descriptor) [pid 5443] close(16) = -1 EBADF (Bad file descriptor) [pid 5443] close(17) = -1 EBADF (Bad file descriptor) [pid 5443] close(18) = -1 EBADF (Bad file descriptor) [pid 5443] close(19) = -1 EBADF (Bad file descriptor) [pid 5443] close(20) = -1 EBADF (Bad file descriptor) [pid 5443] close(21) = -1 EBADF (Bad file descriptor) [pid 5443] close(22) = -1 EBADF (Bad file descriptor) [pid 5443] close(23) = -1 EBADF (Bad file descriptor) [pid 5443] close(24) = -1 EBADF (Bad file descriptor) [pid 5443] close(25) = -1 EBADF (Bad file descriptor) [pid 5443] close(26) = -1 EBADF (Bad file descriptor) [pid 5443] close(27) = -1 EBADF (Bad file descriptor) [pid 5443] close(28) = -1 EBADF (Bad file descriptor) [pid 5443] close(29) = -1 EBADF (Bad file descriptor) [pid 5443] exit_group(0 [pid 5447] <... futex resumed>) = ? [pid 5447] +++ exited with 0 +++ [pid 5444] <... futex resumed>) = ? [pid 5443] <... exit_group resumed>) = ? [pid 5444] +++ exited with 0 +++ [pid 5443] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=233, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./77", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./77/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./77/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./77/binderfs") = 0 [ 113.955248][ T5447] EXT4-fs (loop0): free_blocks=2415919104 [ 113.961311][ T5447] EXT4-fs (loop0): dirty_blocks=32 [ 113.966451][ T5447] EXT4-fs (loop0): Block reservation details [ 113.972480][ T5447] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 113.980357][ T5444] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 1 with error 28 [ 113.993190][ T5444] EXT4-fs (loop0): This should not happen!! Data will be lost [ 113.993190][ T5444] [pid 5046] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./77/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./77/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./77/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./77") = 0 [pid 5046] mkdir("./78", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5448 attached , child_tidptr=0x555555a9c690) = 236 [pid 5448] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5448] chdir("./78") = 0 [pid 5448] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5448] setpgid(0, 0) = 0 [pid 5448] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5448] write(3, "1000", 4) = 4 [pid 5448] close(3) = 0 [pid 5448] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5448] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5448] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5448] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5448] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5448] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5448] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5448] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5448] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5449 attached [pid 5449] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053 [pid 5448] <... clone3 resumed> => {parent_tid=[237]}, 88) = 237 [pid 5449] <... rseq resumed>) = 0 [pid 5449] set_robust_list(0x7efc0265e9a0, 24 [pid 5448] rt_sigprocmask(SIG_SETMASK, [], [pid 5449] <... set_robust_list resumed>) = 0 [pid 5448] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5449] rt_sigprocmask(SIG_SETMASK, [], [pid 5448] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5449] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5448] <... futex resumed>) = 0 [pid 5449] memfd_create("syzkaller", 0 [pid 5448] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5449] <... memfd_create resumed>) = 3 [pid 5449] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5449] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5449] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5449] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5449] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5449] close(3) = 0 [pid 5449] mkdir("./file0", 0777) = 0 [pid 5449] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5449] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5449] chdir("./file0") = 0 [pid 5449] ioctl(4, LOOP_CLR_FD) = 0 [pid 5449] close(4) = 0 [pid 5449] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5448] <... futex resumed>) = 0 [pid 5449] <... futex resumed>) = 1 [pid 5448] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5449] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5448] <... futex resumed>) = 0 [pid 5448] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5449] <... open resumed>) = 4 [pid 5449] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5448] <... futex resumed>) = 0 [pid 5449] <... futex resumed>) = 1 [ 114.121039][ T5449] loop0: detected capacity change from 0 to 2048 [pid 5448] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5449] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5448] <... futex resumed>) = 0 [pid 5448] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5449] <... open resumed>) = 5 [pid 5449] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5449] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5448] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5448] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5449] <... futex resumed>) = 0 [pid 5448] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5449] ftruncate(5, 33587195) = 0 [pid 5449] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5448] <... futex resumed>) = 0 [pid 5449] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5448] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5449] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5448] <... futex resumed>) = 0 [pid 5449] sendfile(4, 5, NULL, 4 [pid 5448] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5449] <... sendfile resumed>) = 4 [pid 5449] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5448] <... futex resumed>) = 0 [pid 5448] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5449] <... futex resumed>) = 1 [pid 5448] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5449] sendfile(4, 5, NULL, 281474978811909 [pid 5448] <... futex resumed>) = 0 [pid 5448] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5448] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5448] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5448] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0} => {parent_tid=[238]}, 88) = 238 ./strace-static-x86_64: Process 5452 attached [pid 5448] rt_sigprocmask(SIG_SETMASK, [], [pid 5452] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5448] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5452] <... rseq resumed>) = 0 [pid 5448] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5452] set_robust_list(0x7efbfa33d9a0, 24 [pid 5448] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5452] <... set_robust_list resumed>) = 0 [pid 5452] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5452] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5452] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5448] <... futex resumed>) = 0 [pid 5448] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5448] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5452] prlimit64(0, RLIMIT_CPU, NULL, [pid 5448] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 114.216033][ T5449] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 114.231626][ T5449] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 72 with max blocks 1 with error 28 [ 114.244346][ T5449] EXT4-fs (loop0): This should not happen!! Data will be lost [ 114.244346][ T5449] [ 114.254202][ T5449] EXT4-fs (loop0): Total free blocks count 0 [ 114.260313][ T5449] EXT4-fs (loop0): Free/Dirty block details [pid 5449] <... sendfile resumed>) = 147456 [pid 5449] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5449] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5452] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5452] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5452] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5448] close(3) = 0 [pid 5448] close(4) = 0 [pid 5448] close(5) = 0 [pid 5448] close(6) = -1 EBADF (Bad file descriptor) [pid 5448] close(7) = -1 EBADF (Bad file descriptor) [pid 5448] close(8) = -1 EBADF (Bad file descriptor) [pid 5448] close(9) = -1 EBADF (Bad file descriptor) [pid 5448] close(10) = -1 EBADF (Bad file descriptor) [pid 5448] close(11) = -1 EBADF (Bad file descriptor) [pid 5448] close(12) = -1 EBADF (Bad file descriptor) [pid 5448] close(13) = -1 EBADF (Bad file descriptor) [pid 5448] close(14) = -1 EBADF (Bad file descriptor) [pid 5448] close(15) = -1 EBADF (Bad file descriptor) [pid 5448] close(16) = -1 EBADF (Bad file descriptor) [pid 5448] close(17) = -1 EBADF (Bad file descriptor) [pid 5448] close(18) = -1 EBADF (Bad file descriptor) [pid 5448] close(19) = -1 EBADF (Bad file descriptor) [pid 5448] close(20) = -1 EBADF (Bad file descriptor) [pid 5448] close(21) = -1 EBADF (Bad file descriptor) [pid 5448] close(22) = -1 EBADF (Bad file descriptor) [pid 5448] close(23) = -1 EBADF (Bad file descriptor) [pid 5448] close(24) = -1 EBADF (Bad file descriptor) [pid 5448] close(25) = -1 EBADF (Bad file descriptor) [pid 5448] close(26) = -1 EBADF (Bad file descriptor) [pid 5448] close(27) = -1 EBADF (Bad file descriptor) [pid 5448] close(28) = -1 EBADF (Bad file descriptor) [pid 5448] close(29) = -1 EBADF (Bad file descriptor) [pid 5448] exit_group(0 [pid 5452] <... futex resumed>) = ? [pid 5449] <... futex resumed>) = ? [pid 5452] +++ exited with 0 +++ [pid 5449] +++ exited with 0 +++ [pid 5448] <... exit_group resumed>) = ? [pid 5448] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=236, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 5046] umount2("./78", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./78/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./78/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./78/binderfs") = 0 [ 114.266281][ T5449] EXT4-fs (loop0): free_blocks=2415919104 [ 114.272475][ T5449] EXT4-fs (loop0): dirty_blocks=80 [ 114.280004][ T5449] EXT4-fs (loop0): Block reservation details [ 114.286042][ T5449] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 114.292525][ T5452] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 72 with error 28 [ 114.305865][ T5452] EXT4-fs (loop0): This should not happen!! Data will be lost [ 114.305865][ T5452] [pid 5046] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./78/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./78/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./78/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./78") = 0 [pid 5046] mkdir("./79", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5453 attached , child_tidptr=0x555555a9c690) = 239 [pid 5453] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5453] chdir("./79") = 0 [pid 5453] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5453] setpgid(0, 0) = 0 [pid 5453] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5453] write(3, "1000", 4) = 4 [pid 5453] close(3) = 0 [pid 5453] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5453] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5453] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5453] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5453] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5453] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5453] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5453] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5453] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0} => {parent_tid=[240]}, 88) = 240 [pid 5453] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5453] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5453] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5454 attached [pid 5454] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5454] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5454] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5454] memfd_create("syzkaller", 0) = 3 [pid 5454] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5454] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5454] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5454] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5454] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5454] close(3) = 0 [pid 5454] mkdir("./file0", 0777) = 0 [pid 5454] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5454] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5454] chdir("./file0") = 0 [pid 5454] ioctl(4, LOOP_CLR_FD) = 0 [pid 5454] close(4) = 0 [pid 5454] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5454] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5453] <... futex resumed>) = 0 [pid 5453] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5454] <... futex resumed>) = 0 [pid 5453] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5454] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5454] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5454] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5453] <... futex resumed>) = 0 [pid 5453] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5454] <... futex resumed>) = 0 [pid 5453] <... futex resumed>) = 1 [pid 5454] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5453] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5454] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5453] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5454] <... futex resumed>) = 0 [pid 5453] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5454] ftruncate(5, 33587195) = 0 [pid 5454] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5453] <... futex resumed>) = 0 [pid 5454] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5453] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5453] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5454] <... futex resumed>) = 0 [pid 5453] <... futex resumed>) = 1 [pid 5454] sendfile(4, 5, NULL, 4 [pid 5453] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5454] <... sendfile resumed>) = 4 [pid 5454] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5453] <... futex resumed>) = 0 [pid 5454] <... futex resumed>) = 1 [pid 5453] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5454] sendfile(4, 5, NULL, 281474978811909 [pid 5453] <... futex resumed>) = 0 [pid 5453] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 114.418588][ T5454] loop0: detected capacity change from 0 to 2048 [pid 5453] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5453] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5453] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5453] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5457 attached [pid 5457] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5453] <... clone3 resumed> => {parent_tid=[241]}, 88) = 241 [pid 5457] <... rseq resumed>) = 0 [pid 5457] set_robust_list(0x7efbfa33d9a0, 24 [pid 5453] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5457] <... set_robust_list resumed>) = 0 [pid 5457] rt_sigprocmask(SIG_SETMASK, [], [pid 5453] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5453] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5457] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5457] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5457] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5453] <... futex resumed>) = 0 [pid 5453] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5453] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 114.502089][ T5457] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 114.518513][ T5457] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 63 with error 28 [ 114.530854][ T5457] EXT4-fs (loop0): This should not happen!! Data will be lost [ 114.530854][ T5457] [ 114.540754][ T5457] EXT4-fs (loop0): Total free blocks count 0 [pid 5457] prlimit64(0, RLIMIT_CPU, NULL, [pid 5453] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5457] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5457] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5457] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5454] <... sendfile resumed>) = 131072 [pid 5454] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5453] close(3 [pid 5454] <... futex resumed>) = 0 [pid 5453] <... close resumed>) = 0 [pid 5454] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5453] close(4) = 0 [pid 5453] close(5) = 0 [pid 5453] close(6) = -1 EBADF (Bad file descriptor) [pid 5453] close(7) = -1 EBADF (Bad file descriptor) [pid 5453] close(8) = -1 EBADF (Bad file descriptor) [pid 5453] close(9) = -1 EBADF (Bad file descriptor) [pid 5453] close(10) = -1 EBADF (Bad file descriptor) [pid 5453] close(11) = -1 EBADF (Bad file descriptor) [pid 5453] close(12) = -1 EBADF (Bad file descriptor) [pid 5453] close(13) = -1 EBADF (Bad file descriptor) [pid 5453] close(14) = -1 EBADF (Bad file descriptor) [pid 5453] close(15) = -1 EBADF (Bad file descriptor) [pid 5453] close(16) = -1 EBADF (Bad file descriptor) [pid 5453] close(17) = -1 EBADF (Bad file descriptor) [pid 5453] close(18) = -1 EBADF (Bad file descriptor) [pid 5453] close(19) = -1 EBADF (Bad file descriptor) [pid 5453] close(20) = -1 EBADF (Bad file descriptor) [pid 5453] close(21) = -1 EBADF (Bad file descriptor) [pid 5453] close(22) = -1 EBADF (Bad file descriptor) [pid 5453] close(23) = -1 EBADF (Bad file descriptor) [pid 5453] close(24) = -1 EBADF (Bad file descriptor) [pid 5453] close(25) = -1 EBADF (Bad file descriptor) [pid 5453] close(26) = -1 EBADF (Bad file descriptor) [pid 5453] close(27) = -1 EBADF (Bad file descriptor) [pid 5453] close(28) = -1 EBADF (Bad file descriptor) [pid 5453] close(29) = -1 EBADF (Bad file descriptor) [pid 5453] exit_group(0 [pid 5457] <... futex resumed>) = ? [pid 5454] <... futex resumed>) = ? [pid 5453] <... exit_group resumed>) = ? [pid 5457] +++ exited with 0 +++ [pid 5454] +++ exited with 0 +++ [pid 5453] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=239, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [ 114.546861][ T5457] EXT4-fs (loop0): Free/Dirty block details [ 114.552833][ T5457] EXT4-fs (loop0): free_blocks=2415919104 [ 114.559257][ T5457] EXT4-fs (loop0): dirty_blocks=64 [ 114.564416][ T5457] EXT4-fs (loop0): Block reservation details [ 114.570873][ T5457] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 114.579387][ T5454] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 64 with max blocks 1 with error 28 [ 114.592188][ T5454] EXT4-fs (loop0): This should not happen!! Data will be lost [ 114.592188][ T5454] [pid 5046] umount2("./79", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./79/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./79/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./79/binderfs") = 0 [pid 5046] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./79/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./79/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./79/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./79") = 0 [pid 5046] mkdir("./80", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9c690) = 242 ./strace-static-x86_64: Process 5458 attached [pid 5458] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5458] chdir("./80") = 0 [pid 5458] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5458] setpgid(0, 0) = 0 [pid 5458] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5458] write(3, "1000", 4) = 4 [pid 5458] close(3) = 0 [pid 5458] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5458] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5458] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5458] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5458] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5458] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5458] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5458] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5458] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5459 attached => {parent_tid=[243]}, 88) = 243 [pid 5459] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5458] rt_sigprocmask(SIG_SETMASK, [], [pid 5459] set_robust_list(0x7efc0265e9a0, 24 [pid 5458] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5459] <... set_robust_list resumed>) = 0 [pid 5458] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5459] rt_sigprocmask(SIG_SETMASK, [], [pid 5458] <... futex resumed>) = 0 [pid 5459] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5459] memfd_create("syzkaller", 0 [pid 5458] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5459] <... memfd_create resumed>) = 3 [pid 5459] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5459] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5459] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5459] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5459] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5459] close(3) = 0 [pid 5459] mkdir("./file0", 0777) = 0 [pid 5459] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5459] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5459] chdir("./file0") = 0 [pid 5459] ioctl(4, LOOP_CLR_FD) = 0 [pid 5459] close(4) = 0 [pid 5459] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5458] <... futex resumed>) = 0 [pid 5459] <... futex resumed>) = 1 [pid 5458] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5459] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5458] <... futex resumed>) = 0 [pid 5459] <... open resumed>) = 4 [pid 5458] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5459] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5459] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5458] <... futex resumed>) = 0 [pid 5458] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5459] <... futex resumed>) = 0 [pid 5458] <... futex resumed>) = 1 [pid 5459] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5458] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5459] <... open resumed>) = 5 [pid 5459] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5459] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5458] <... futex resumed>) = 0 [pid 5458] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5459] <... futex resumed>) = 0 [pid 5458] <... futex resumed>) = 1 [pid 5459] ftruncate(5, 33587195 [pid 5458] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5459] <... ftruncate resumed>) = 0 [pid 5459] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5458] <... futex resumed>) = 0 [pid 5459] <... futex resumed>) = 1 [pid 5459] sendfile(4, 5, NULL, 4 [pid 5458] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5459] <... sendfile resumed>) = 4 [pid 5458] <... futex resumed>) = 0 [pid 5458] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5459] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5458] <... futex resumed>) = 0 [pid 5458] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5459] <... futex resumed>) = 1 [pid 5458] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5459] sendfile(4, 5, NULL, 281474978811909 [pid 5458] <... futex resumed>) = 0 [pid 5458] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5458] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5458] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5458] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0} => {parent_tid=[244]}, 88) = 244 ./strace-static-x86_64: Process 5462 attached [pid 5458] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5458] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5458] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5462] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5462] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5462] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5462] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [ 114.754824][ T5459] loop0: detected capacity change from 0 to 2048 [pid 5462] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5462] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5458] <... futex resumed>) = 0 [pid 5458] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5462] <... futex resumed>) = 0 [pid 5458] <... futex resumed>) = 1 [pid 5462] prlimit64(0, RLIMIT_CPU, NULL, [ 114.818147][ T5462] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 114.835073][ T5462] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 109 with error 28 [ 114.847622][ T5462] EXT4-fs (loop0): This should not happen!! Data will be lost [ 114.847622][ T5462] [ 114.858708][ T5462] EXT4-fs (loop0): Total free blocks count 0 [pid 5458] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5462] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [ 114.864727][ T5462] EXT4-fs (loop0): Free/Dirty block details [ 114.871037][ T5462] EXT4-fs (loop0): free_blocks=2415919104 [ 114.877294][ T5462] EXT4-fs (loop0): dirty_blocks=112 [ 114.882692][ T5462] EXT4-fs (loop0): Block reservation details [ 114.888807][ T5462] EXT4-fs (loop0): i_reserved_data_blocks=7 [ 114.900303][ T5459] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 110 with max blocks 1 with error 28 [pid 5462] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5462] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5459] <... sendfile resumed>) = 225280 [pid 5459] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5459] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5458] close(3) = 0 [pid 5458] close(4) = 0 [pid 5458] close(5) = 0 [pid 5458] close(6) = -1 EBADF (Bad file descriptor) [pid 5458] close(7) = -1 EBADF (Bad file descriptor) [pid 5458] close(8) = -1 EBADF (Bad file descriptor) [pid 5458] close(9) = -1 EBADF (Bad file descriptor) [pid 5458] close(10) = -1 EBADF (Bad file descriptor) [pid 5458] close(11) = -1 EBADF (Bad file descriptor) [pid 5458] close(12) = -1 EBADF (Bad file descriptor) [pid 5458] close(13) = -1 EBADF (Bad file descriptor) [pid 5458] close(14) = -1 EBADF (Bad file descriptor) [pid 5458] close(15) = -1 EBADF (Bad file descriptor) [pid 5458] close(16) = -1 EBADF (Bad file descriptor) [pid 5458] close(17) = -1 EBADF (Bad file descriptor) [pid 5458] close(18) = -1 EBADF (Bad file descriptor) [pid 5458] close(19) = -1 EBADF (Bad file descriptor) [pid 5458] close(20) = -1 EBADF (Bad file descriptor) [pid 5458] close(21) = -1 EBADF (Bad file descriptor) [pid 5458] close(22) = -1 EBADF (Bad file descriptor) [pid 5458] close(23) = -1 EBADF (Bad file descriptor) [pid 5458] close(24) = -1 EBADF (Bad file descriptor) [pid 5458] close(25) = -1 EBADF (Bad file descriptor) [pid 5458] close(26) = -1 EBADF (Bad file descriptor) [pid 5458] close(27) = -1 EBADF (Bad file descriptor) [pid 5458] close(28) = -1 EBADF (Bad file descriptor) [pid 5458] close(29) = -1 EBADF (Bad file descriptor) [pid 5458] exit_group(0 [pid 5462] <... futex resumed>) = ? [pid 5462] +++ exited with 0 +++ [pid 5459] <... futex resumed>) = ? [pid 5458] <... exit_group resumed>) = ? [pid 5459] +++ exited with 0 +++ [pid 5458] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=242, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5046] umount2("./80", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./80/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./80/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./80/binderfs") = 0 [ 114.913349][ T5459] EXT4-fs (loop0): This should not happen!! Data will be lost [ 114.913349][ T5459] [pid 5046] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./80/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./80/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./80/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./80") = 0 [pid 5046] mkdir("./81", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9c690) = 245 ./strace-static-x86_64: Process 5463 attached [pid 5463] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5463] chdir("./81") = 0 [pid 5463] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5463] setpgid(0, 0) = 0 [pid 5463] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5463] write(3, "1000", 4) = 4 [pid 5463] close(3) = 0 [pid 5463] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5463] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5463] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5463] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5463] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5463] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5463] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5463] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5463] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5464 attached [pid 5464] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5464] set_robust_list(0x7efc0265e9a0, 24 [pid 5463] <... clone3 resumed> => {parent_tid=[246]}, 88) = 246 [pid 5464] <... set_robust_list resumed>) = 0 [pid 5463] rt_sigprocmask(SIG_SETMASK, [], [pid 5464] rt_sigprocmask(SIG_SETMASK, [], [pid 5463] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5464] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5463] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5464] memfd_create("syzkaller", 0 [pid 5463] <... futex resumed>) = 0 [pid 5463] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5464] <... memfd_create resumed>) = 3 [pid 5464] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5464] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5464] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5464] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5464] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5464] close(3) = 0 [pid 5464] mkdir("./file0", 0777) = 0 [pid 5464] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5464] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5464] chdir("./file0") = 0 [pid 5464] ioctl(4, LOOP_CLR_FD) = 0 [pid 5464] close(4) = 0 [pid 5464] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5463] <... futex resumed>) = 0 [pid 5464] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5463] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5464] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5463] <... futex resumed>) = 0 [pid 5464] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5463] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5464] <... open resumed>) = 4 [pid 5464] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5463] <... futex resumed>) = 0 [pid 5464] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5463] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5464] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5463] <... futex resumed>) = 0 [pid 5464] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5463] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5464] <... open resumed>) = 5 [pid 5464] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5463] <... futex resumed>) = 0 [pid 5464] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5463] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5464] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5463] <... futex resumed>) = 0 [pid 5464] ftruncate(5, 33587195 [pid 5463] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5464] <... ftruncate resumed>) = 0 [pid 5464] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5463] <... futex resumed>) = 0 [pid 5464] sendfile(4, 5, NULL, 4 [pid 5463] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5464] <... sendfile resumed>) = 4 [pid 5463] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5464] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5463] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5464] <... futex resumed>) = 0 [pid 5463] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5464] sendfile(4, 5, NULL, 281474978811909 [pid 5463] <... futex resumed>) = 0 [pid 5463] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5463] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5463] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5463] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5463] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0} => {parent_tid=[247]}, 88) = 247 [pid 5463] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5467 attached [pid 5467] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5463] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5467] <... rseq resumed>) = 0 [pid 5467] set_robust_list(0x7efbfa33d9a0, 24 [pid 5463] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5467] <... set_robust_list resumed>) = 0 [pid 5467] rt_sigprocmask(SIG_SETMASK, [], [pid 5463] <... futex resumed>) = 0 [pid 5467] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5463] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5467] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5467] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5463] <... futex resumed>) = 0 [pid 5463] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5467] prlimit64(0, RLIMIT_CPU, NULL, [ 115.053183][ T5464] loop0: detected capacity change from 0 to 2048 [ 115.113860][ T5467] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 115.129276][ T5467] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 39 with error 28 [ 115.142291][ T5467] EXT4-fs (loop0): This should not happen!! Data will be lost [ 115.142291][ T5467] [ 115.153949][ T5467] EXT4-fs (loop0): Total free blocks count 0 [pid 5463] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5467] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5467] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 115.160302][ T5467] EXT4-fs (loop0): Free/Dirty block details [ 115.166295][ T5467] EXT4-fs (loop0): free_blocks=2415919104 [ 115.172877][ T5467] EXT4-fs (loop0): dirty_blocks=48 [ 115.178574][ T5467] EXT4-fs (loop0): Block reservation details [ 115.184578][ T5467] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 115.192958][ T5464] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 40 with max blocks 1 with error 28 [ 115.205643][ T5464] EXT4-fs (loop0): This should not happen!! Data will be lost [pid 5467] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5464] <... sendfile resumed>) = 81920 [pid 5464] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5464] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5463] close(3) = 0 [pid 5463] close(4) = 0 [pid 5463] close(5) = 0 [pid 5463] close(6) = -1 EBADF (Bad file descriptor) [pid 5463] close(7) = -1 EBADF (Bad file descriptor) [pid 5463] close(8) = -1 EBADF (Bad file descriptor) [pid 5463] close(9) = -1 EBADF (Bad file descriptor) [pid 5463] close(10) = -1 EBADF (Bad file descriptor) [pid 5463] close(11) = -1 EBADF (Bad file descriptor) [pid 5463] close(12) = -1 EBADF (Bad file descriptor) [pid 5463] close(13) = -1 EBADF (Bad file descriptor) [pid 5463] close(14) = -1 EBADF (Bad file descriptor) [pid 5463] close(15) = -1 EBADF (Bad file descriptor) [pid 5463] close(16) = -1 EBADF (Bad file descriptor) [pid 5463] close(17) = -1 EBADF (Bad file descriptor) [pid 5463] close(18) = -1 EBADF (Bad file descriptor) [pid 5463] close(19) = -1 EBADF (Bad file descriptor) [pid 5463] close(20) = -1 EBADF (Bad file descriptor) [pid 5463] close(21) = -1 EBADF (Bad file descriptor) [pid 5463] close(22) = -1 EBADF (Bad file descriptor) [pid 5463] close(23) = -1 EBADF (Bad file descriptor) [pid 5463] close(24) = -1 EBADF (Bad file descriptor) [pid 5463] close(25) = -1 EBADF (Bad file descriptor) [pid 5463] close(26) = -1 EBADF (Bad file descriptor) [pid 5463] close(27) = -1 EBADF (Bad file descriptor) [pid 5463] close(28) = -1 EBADF (Bad file descriptor) [pid 5463] close(29) = -1 EBADF (Bad file descriptor) [pid 5463] exit_group(0 [pid 5467] <... futex resumed>) = ? [pid 5463] <... exit_group resumed>) = ? [pid 5464] <... futex resumed>) = ? [pid 5464] +++ exited with 0 +++ [pid 5467] +++ exited with 0 +++ [pid 5463] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=245, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5046] umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [ 115.205643][ T5464] [pid 5046] umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./81/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./81/binderfs") = 0 [pid 5046] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./81/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./81/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./81/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./81") = 0 [pid 5046] mkdir("./82", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9c690) = 248 ./strace-static-x86_64: Process 5468 attached [pid 5468] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5468] chdir("./82") = 0 [pid 5468] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5468] setpgid(0, 0) = 0 [pid 5468] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5468] write(3, "1000", 4) = 4 [pid 5468] close(3) = 0 [pid 5468] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5468] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5468] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5468] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5468] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5468] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5468] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5468] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5468] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5469 attached => {parent_tid=[249]}, 88) = 249 [pid 5469] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5469] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5468] rt_sigprocmask(SIG_SETMASK, [], [pid 5469] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5468] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5469] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5468] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5469] <... futex resumed>) = 0 [pid 5468] <... futex resumed>) = 1 [pid 5469] memfd_create("syzkaller", 0 [pid 5468] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5469] <... memfd_create resumed>) = 3 [pid 5469] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5469] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5469] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5469] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5469] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5469] close(3) = 0 [pid 5469] mkdir("./file0", 0777) = 0 [pid 5469] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5469] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5469] chdir("./file0") = 0 [pid 5469] ioctl(4, LOOP_CLR_FD) = 0 [pid 5469] close(4) = 0 [pid 5469] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5469] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5468] <... futex resumed>) = 0 [pid 5469] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5468] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5469] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5468] <... futex resumed>) = 0 [pid 5468] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5469] <... open resumed>) = 4 [pid 5469] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5468] <... futex resumed>) = 0 [pid 5468] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5469] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5468] <... futex resumed>) = 0 [pid 5468] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5469] <... open resumed>) = 5 [pid 5469] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5469] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5468] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5468] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5469] <... futex resumed>) = 0 [pid 5468] <... futex resumed>) = 1 [pid 5468] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5469] ftruncate(5, 33587195) = 0 [pid 5469] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5468] <... futex resumed>) = 0 [pid 5468] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5468] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5469] <... futex resumed>) = 1 [pid 5469] sendfile(4, 5, NULL, 4) = 4 [pid 5469] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5468] <... futex resumed>) = 0 [pid 5468] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5469] sendfile(4, 5, NULL, 281474978811909 [pid 5468] <... futex resumed>) = 0 [pid 5468] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5468] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5468] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [ 115.374904][ T5469] loop0: detected capacity change from 0 to 2048 [pid 5468] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5468] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5473 attached [pid 5473] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5473] set_robust_list(0x7efbfa33d9a0, 24 [pid 5468] <... clone3 resumed> => {parent_tid=[250]}, 88) = 250 [pid 5473] <... set_robust_list resumed>) = 0 [pid 5468] rt_sigprocmask(SIG_SETMASK, [], [pid 5473] rt_sigprocmask(SIG_SETMASK, [], [pid 5468] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5473] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5468] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5473] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000 [pid 5468] <... futex resumed>) = 0 [pid 5473] <... mmap resumed>) = 0x20000000 [pid 5468] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5473] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5468] <... futex resumed>) = 0 [pid 5468] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5468] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 115.462768][ T5473] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 115.478180][ T5473] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 169 with error 28 [ 115.491969][ T5473] EXT4-fs (loop0): This should not happen!! Data will be lost [ 115.491969][ T5473] [ 115.501720][ T5473] EXT4-fs (loop0): Total free blocks count 0 [pid 5473] prlimit64(0, RLIMIT_CPU, NULL, [pid 5468] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5473] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5473] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 115.508936][ T5473] EXT4-fs (loop0): Free/Dirty block details [ 115.514936][ T5473] EXT4-fs (loop0): free_blocks=2415919104 [ 115.522120][ T5473] EXT4-fs (loop0): dirty_blocks=176 [ 115.527889][ T5473] EXT4-fs (loop0): Block reservation details [ 115.533967][ T5473] EXT4-fs (loop0): i_reserved_data_blocks=11 [ 115.549827][ T5469] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 170 with max blocks 1 with error 28 [pid 5473] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5469] <... sendfile resumed>) = 348160 [pid 5469] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5469] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5468] close(3) = 0 [pid 5468] close(4) = 0 [pid 5468] close(5) = 0 [pid 5468] close(6) = -1 EBADF (Bad file descriptor) [pid 5468] close(7) = -1 EBADF (Bad file descriptor) [pid 5468] close(8) = -1 EBADF (Bad file descriptor) [pid 5468] close(9) = -1 EBADF (Bad file descriptor) [pid 5468] close(10) = -1 EBADF (Bad file descriptor) [pid 5468] close(11) = -1 EBADF (Bad file descriptor) [pid 5468] close(12) = -1 EBADF (Bad file descriptor) [pid 5468] close(13) = -1 EBADF (Bad file descriptor) [pid 5468] close(14) = -1 EBADF (Bad file descriptor) [pid 5468] close(15) = -1 EBADF (Bad file descriptor) [pid 5468] close(16) = -1 EBADF (Bad file descriptor) [pid 5468] close(17) = -1 EBADF (Bad file descriptor) [pid 5468] close(18) = -1 EBADF (Bad file descriptor) [pid 5468] close(19) = -1 EBADF (Bad file descriptor) [pid 5468] close(20) = -1 EBADF (Bad file descriptor) [pid 5468] close(21) = -1 EBADF (Bad file descriptor) [pid 5468] close(22) = -1 EBADF (Bad file descriptor) [pid 5468] close(23) = -1 EBADF (Bad file descriptor) [pid 5468] close(24) = -1 EBADF (Bad file descriptor) [pid 5468] close(25) = -1 EBADF (Bad file descriptor) [pid 5468] close(26) = -1 EBADF (Bad file descriptor) [pid 5468] close(27) = -1 EBADF (Bad file descriptor) [pid 5468] close(28) = -1 EBADF (Bad file descriptor) [pid 5468] close(29) = -1 EBADF (Bad file descriptor) [pid 5468] exit_group(0) = ? [pid 5473] <... futex resumed>) = ? [pid 5473] +++ exited with 0 +++ [pid 5469] <... futex resumed>) = ? [pid 5469] +++ exited with 0 +++ [pid 5468] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=248, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./82/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./82/binderfs") = 0 [pid 5046] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./82/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 115.563946][ T5469] EXT4-fs (loop0): This should not happen!! Data will be lost [ 115.563946][ T5469] [pid 5046] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./82/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./82/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./82") = 0 [pid 5046] mkdir("./83", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5475 attached [pid 5475] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5475] chdir("./83" [pid 5046] <... clone resumed>, child_tidptr=0x555555a9c690) = 251 [pid 5475] <... chdir resumed>) = 0 [pid 5475] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5475] setpgid(0, 0) = 0 [pid 5475] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5475] write(3, "1000", 4) = 4 [pid 5475] close(3) = 0 [pid 5475] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5475] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5475] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5475] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5475] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5475] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5475] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5475] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5475] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5476 attached => {parent_tid=[252]}, 88) = 252 [pid 5476] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5475] rt_sigprocmask(SIG_SETMASK, [], [pid 5476] set_robust_list(0x7efc0265e9a0, 24 [pid 5475] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5476] <... set_robust_list resumed>) = 0 [pid 5475] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5476] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5475] <... futex resumed>) = 0 [pid 5476] memfd_create("syzkaller", 0 [pid 5475] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5476] <... memfd_create resumed>) = 3 [pid 5476] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5476] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5476] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5476] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5476] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5476] close(3) = 0 [pid 5476] mkdir("./file0", 0777) = 0 [pid 5476] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5476] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5476] chdir("./file0") = 0 [pid 5476] ioctl(4, LOOP_CLR_FD) = 0 [pid 5476] close(4) = 0 [pid 5476] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5475] <... futex resumed>) = 0 [pid 5475] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5476] <... futex resumed>) = 1 [pid 5475] <... futex resumed>) = 0 [pid 5476] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5475] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5476] <... open resumed>) = 4 [pid 5476] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5475] <... futex resumed>) = 0 [pid 5476] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5475] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5476] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5475] <... futex resumed>) = 0 [pid 5476] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5475] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5476] <... open resumed>) = 5 [pid 5476] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5475] <... futex resumed>) = 0 [pid 5475] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5476] <... futex resumed>) = 1 [pid 5475] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5476] ftruncate(5, 33587195) = 0 [pid 5476] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5475] <... futex resumed>) = 0 [pid 5476] <... futex resumed>) = 1 [pid 5475] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5476] sendfile(4, 5, NULL, 4 [pid 5475] <... futex resumed>) = 0 [pid 5476] <... sendfile resumed>) = 4 [pid 5475] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5476] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5475] <... futex resumed>) = 0 [pid 5475] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5476] <... futex resumed>) = 1 [pid 5475] <... futex resumed>) = 0 [pid 5476] sendfile(4, 5, NULL, 281474978811909 [pid 5475] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5475] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5475] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5475] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5475] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5479 attached => {parent_tid=[253]}, 88) = 253 [pid 5475] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5475] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5475] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5479] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5479] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5479] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5479] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5479] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5475] <... futex resumed>) = 0 [pid 5479] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5475] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5479] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5475] <... futex resumed>) = 0 [pid 5479] prlimit64(0, RLIMIT_CPU, NULL, [ 115.681046][ T5476] loop0: detected capacity change from 0 to 2048 [ 115.733511][ T5479] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 115.748562][ T5479] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 89 with error 28 [ 115.761079][ T5479] EXT4-fs (loop0): This should not happen!! Data will be lost [ 115.761079][ T5479] [ 115.770883][ T5479] EXT4-fs (loop0): Total free blocks count 0 [pid 5475] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5479] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5479] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 115.781612][ T5479] EXT4-fs (loop0): Free/Dirty block details [ 115.787592][ T5479] EXT4-fs (loop0): free_blocks=2415919104 [ 115.793327][ T5479] EXT4-fs (loop0): dirty_blocks=96 [ 115.798713][ T5479] EXT4-fs (loop0): Block reservation details [ 115.804719][ T5479] EXT4-fs (loop0): i_reserved_data_blocks=6 [ 115.814154][ T5476] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 90 with max blocks 1 with error 28 [pid 5479] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5476] <... sendfile resumed>) = 184320 [pid 5476] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5476] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5475] close(3) = 0 [pid 5475] close(4) = 0 [pid 5475] close(5) = 0 [pid 5475] close(6) = -1 EBADF (Bad file descriptor) [pid 5475] close(7) = -1 EBADF (Bad file descriptor) [pid 5475] close(8) = -1 EBADF (Bad file descriptor) [pid 5475] close(9) = -1 EBADF (Bad file descriptor) [pid 5475] close(10) = -1 EBADF (Bad file descriptor) [pid 5475] close(11) = -1 EBADF (Bad file descriptor) [pid 5475] close(12) = -1 EBADF (Bad file descriptor) [pid 5475] close(13) = -1 EBADF (Bad file descriptor) [pid 5475] close(14) = -1 EBADF (Bad file descriptor) [pid 5475] close(15) = -1 EBADF (Bad file descriptor) [pid 5475] close(16) = -1 EBADF (Bad file descriptor) [pid 5475] close(17) = -1 EBADF (Bad file descriptor) [pid 5475] close(18) = -1 EBADF (Bad file descriptor) [pid 5475] close(19) = -1 EBADF (Bad file descriptor) [pid 5475] close(20) = -1 EBADF (Bad file descriptor) [pid 5475] close(21) = -1 EBADF (Bad file descriptor) [pid 5475] close(22) = -1 EBADF (Bad file descriptor) [pid 5475] close(23) = -1 EBADF (Bad file descriptor) [pid 5475] close(24) = -1 EBADF (Bad file descriptor) [pid 5475] close(25) = -1 EBADF (Bad file descriptor) [pid 5475] close(26) = -1 EBADF (Bad file descriptor) [pid 5475] close(27) = -1 EBADF (Bad file descriptor) [pid 5475] close(28) = -1 EBADF (Bad file descriptor) [pid 5475] close(29) = -1 EBADF (Bad file descriptor) [pid 5475] exit_group(0 [pid 5479] <... futex resumed>) = ? [pid 5476] <... futex resumed>) = ? [pid 5475] <... exit_group resumed>) = ? [pid 5479] +++ exited with 0 +++ [pid 5476] +++ exited with 0 +++ [pid 5475] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=251, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5046] umount2("./83", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./83/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./83/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./83/binderfs") = 0 [ 115.828025][ T5476] EXT4-fs (loop0): This should not happen!! Data will be lost [ 115.828025][ T5476] [pid 5046] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./83/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./83/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./83/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./83") = 0 [pid 5046] mkdir("./84", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9c690) = 254 ./strace-static-x86_64: Process 5481 attached [pid 5481] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5481] chdir("./84") = 0 [pid 5481] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5481] setpgid(0, 0) = 0 [pid 5481] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5481] write(3, "1000", 4) = 4 [pid 5481] close(3) = 0 [pid 5481] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5481] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5481] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5481] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5481] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5481] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5481] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5481] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5481] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5482 attached [pid 5482] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053 [pid 5481] <... clone3 resumed> => {parent_tid=[255]}, 88) = 255 [pid 5482] <... rseq resumed>) = 0 [pid 5481] rt_sigprocmask(SIG_SETMASK, [], [pid 5482] set_robust_list(0x7efc0265e9a0, 24 [pid 5481] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5482] <... set_robust_list resumed>) = 0 [pid 5481] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5482] rt_sigprocmask(SIG_SETMASK, [], [pid 5481] <... futex resumed>) = 0 [pid 5482] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5481] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5482] memfd_create("syzkaller", 0) = 3 [pid 5482] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5482] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5482] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5482] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5482] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5482] close(3) = 0 [pid 5482] mkdir("./file0", 0777) = 0 [pid 5482] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5482] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5482] chdir("./file0") = 0 [pid 5482] ioctl(4, LOOP_CLR_FD) = 0 [pid 5482] close(4) = 0 [pid 5482] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5481] <... futex resumed>) = 0 [pid 5482] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5481] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5482] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5481] <... futex resumed>) = 0 [pid 5482] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5481] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5482] <... open resumed>) = 4 [pid 5482] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5481] <... futex resumed>) = 0 [pid 5482] <... futex resumed>) = 1 [pid 5481] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5482] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5481] <... futex resumed>) = 0 [pid 5482] <... open resumed>) = 5 [pid 5481] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5482] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5481] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5481] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5482] <... futex resumed>) = 0 [pid 5481] <... futex resumed>) = 0 [pid 5482] ftruncate(5, 33587195 [pid 5481] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5482] <... ftruncate resumed>) = 0 [pid 5482] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5481] <... futex resumed>) = 0 [pid 5481] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5481] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5482] <... futex resumed>) = 1 [pid 5482] sendfile(4, 5, NULL, 4) = 4 [pid 5482] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5481] <... futex resumed>) = 0 [pid 5481] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5481] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5481] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5482] <... futex resumed>) = 1 [pid 5482] sendfile(4, 5, NULL, 281474978811909 [pid 5481] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5481] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5481] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5485 attached => {parent_tid=[256]}, 88) = 256 [pid 5485] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5481] rt_sigprocmask(SIG_SETMASK, [], [ 115.963967][ T5482] loop0: detected capacity change from 0 to 2048 [pid 5485] <... rseq resumed>) = 0 [pid 5481] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5485] set_robust_list(0x7efbfa33d9a0, 24 [pid 5481] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5485] <... set_robust_list resumed>) = 0 [pid 5481] <... futex resumed>) = 0 [pid 5485] rt_sigprocmask(SIG_SETMASK, [], [pid 5481] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5485] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5485] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5485] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5481] <... futex resumed>) = 0 [pid 5485] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5481] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5485] <... futex resumed>) = 0 [pid 5485] prlimit64(0, RLIMIT_CPU, NULL, [ 116.052701][ T5485] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 116.068463][ T5485] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 131 with error 28 [ 116.082016][ T5485] EXT4-fs (loop0): This should not happen!! Data will be lost [ 116.082016][ T5485] [ 116.092381][ T5485] EXT4-fs (loop0): Total free blocks count 0 [pid 5481] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5485] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5485] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 116.099597][ T5485] EXT4-fs (loop0): Free/Dirty block details [ 116.105756][ T5485] EXT4-fs (loop0): free_blocks=2415919104 [ 116.111629][ T5485] EXT4-fs (loop0): dirty_blocks=144 [ 116.117985][ T5485] EXT4-fs (loop0): Block reservation details [ 116.123994][ T5485] EXT4-fs (loop0): i_reserved_data_blocks=9 [ 116.135681][ T5482] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 132 with max blocks 1 with error 28 [pid 5485] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5482] <... sendfile resumed>) = 270336 [pid 5482] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5481] close(3 [pid 5482] <... futex resumed>) = 0 [pid 5481] <... close resumed>) = 0 [pid 5482] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5481] close(4) = 0 [pid 5481] close(5) = 0 [pid 5481] close(6) = -1 EBADF (Bad file descriptor) [pid 5481] close(7) = -1 EBADF (Bad file descriptor) [pid 5481] close(8) = -1 EBADF (Bad file descriptor) [pid 5481] close(9) = -1 EBADF (Bad file descriptor) [pid 5481] close(10) = -1 EBADF (Bad file descriptor) [pid 5481] close(11) = -1 EBADF (Bad file descriptor) [pid 5481] close(12) = -1 EBADF (Bad file descriptor) [pid 5481] close(13) = -1 EBADF (Bad file descriptor) [pid 5481] close(14) = -1 EBADF (Bad file descriptor) [pid 5481] close(15) = -1 EBADF (Bad file descriptor) [pid 5481] close(16) = -1 EBADF (Bad file descriptor) [pid 5481] close(17) = -1 EBADF (Bad file descriptor) [pid 5481] close(18) = -1 EBADF (Bad file descriptor) [pid 5481] close(19) = -1 EBADF (Bad file descriptor) [pid 5481] close(20) = -1 EBADF (Bad file descriptor) [pid 5481] close(21) = -1 EBADF (Bad file descriptor) [pid 5481] close(22) = -1 EBADF (Bad file descriptor) [pid 5481] close(23) = -1 EBADF (Bad file descriptor) [pid 5481] close(24) = -1 EBADF (Bad file descriptor) [pid 5481] close(25) = -1 EBADF (Bad file descriptor) [pid 5481] close(26) = -1 EBADF (Bad file descriptor) [pid 5481] close(27) = -1 EBADF (Bad file descriptor) [pid 5481] close(28) = -1 EBADF (Bad file descriptor) [pid 5481] close(29) = -1 EBADF (Bad file descriptor) [pid 5481] exit_group(0 [pid 5485] <... futex resumed>) = ? [pid 5482] <... futex resumed>) = ? [pid 5485] +++ exited with 0 +++ [pid 5482] +++ exited with 0 +++ [pid 5481] <... exit_group resumed>) = ? [pid 5481] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=254, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./84", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./84/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./84/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./84/binderfs") = 0 [ 116.148222][ T5482] EXT4-fs (loop0): This should not happen!! Data will be lost [ 116.148222][ T5482] [pid 5046] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./84/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./84/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./84/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./84") = 0 [pid 5046] mkdir("./85", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5488 attached , child_tidptr=0x555555a9c690) = 257 [pid 5488] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5488] chdir("./85") = 0 [pid 5488] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5488] setpgid(0, 0) = 0 [pid 5488] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5488] write(3, "1000", 4) = 4 [pid 5488] close(3) = 0 [pid 5488] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5488] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5488] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5488] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5488] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5488] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5488] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5488] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5488] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5489 attached => {parent_tid=[258]}, 88) = 258 [pid 5489] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053 [pid 5488] rt_sigprocmask(SIG_SETMASK, [], [pid 5489] <... rseq resumed>) = 0 [pid 5488] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5489] set_robust_list(0x7efc0265e9a0, 24 [pid 5488] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5489] <... set_robust_list resumed>) = 0 [pid 5488] <... futex resumed>) = 0 [pid 5489] rt_sigprocmask(SIG_SETMASK, [], [pid 5488] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5489] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5489] memfd_create("syzkaller", 0) = 3 [pid 5489] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5489] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5489] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5489] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5489] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5489] close(3) = 0 [pid 5489] mkdir("./file0", 0777) = 0 [pid 5489] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5489] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5489] chdir("./file0") = 0 [pid 5489] ioctl(4, LOOP_CLR_FD) = 0 [pid 5489] close(4) = 0 [pid 5489] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5489] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5488] <... futex resumed>) = 0 [pid 5488] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5489] <... futex resumed>) = 0 [pid 5488] <... futex resumed>) = 1 [pid 5489] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5488] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5489] <... open resumed>) = 4 [pid 5489] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5488] <... futex resumed>) = 0 [pid 5488] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5489] <... futex resumed>) = 1 [pid 5488] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5489] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5489] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5488] <... futex resumed>) = 0 [pid 5489] <... futex resumed>) = 1 [pid 5488] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5489] ftruncate(5, 33587195 [pid 5488] <... futex resumed>) = 0 [pid 5489] <... ftruncate resumed>) = 0 [pid 5488] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5489] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5488] <... futex resumed>) = 0 [pid 5489] <... futex resumed>) = 1 [pid 5488] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5489] sendfile(4, 5, NULL, 4 [pid 5488] <... futex resumed>) = 0 [pid 5489] <... sendfile resumed>) = 4 [pid 5488] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5489] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5488] <... futex resumed>) = 0 [pid 5488] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5489] <... futex resumed>) = 1 [pid 5488] <... futex resumed>) = 0 [pid 5489] sendfile(4, 5, NULL, 281474978811909 [pid 5488] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5488] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5488] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5488] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5488] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0} => {parent_tid=[259]}, 88) = 259 [pid 5488] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 5492 attached [pid 5488] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5492] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5488] <... futex resumed>) = 0 [pid 5488] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5492] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5492] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5492] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5492] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 116.298995][ T5489] loop0: detected capacity change from 0 to 2048 [pid 5488] <... futex resumed>) = 0 [pid 5492] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5488] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5492] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5488] <... futex resumed>) = 0 [pid 5492] prlimit64(0, RLIMIT_CPU, NULL, [pid 5488] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 116.351560][ T5492] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 116.366973][ T5492] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 43 with error 28 [ 116.381063][ T5492] EXT4-fs (loop0): This should not happen!! Data will be lost [ 116.381063][ T5492] [ 116.390869][ T5492] EXT4-fs (loop0): Total free blocks count 0 [pid 5492] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5492] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5492] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5489] <... sendfile resumed>) = 90112 [pid 5489] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5489] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5488] close(3) = 0 [pid 5488] close(4) = 0 [pid 5488] close(5) = 0 [pid 5488] close(6) = -1 EBADF (Bad file descriptor) [pid 5488] close(7) = -1 EBADF (Bad file descriptor) [pid 5488] close(8) = -1 EBADF (Bad file descriptor) [pid 5488] close(9) = -1 EBADF (Bad file descriptor) [pid 5488] close(10) = -1 EBADF (Bad file descriptor) [pid 5488] close(11) = -1 EBADF (Bad file descriptor) [pid 5488] close(12) = -1 EBADF (Bad file descriptor) [pid 5488] close(13) = -1 EBADF (Bad file descriptor) [pid 5488] close(14) = -1 EBADF (Bad file descriptor) [pid 5488] close(15) = -1 EBADF (Bad file descriptor) [pid 5488] close(16) = -1 EBADF (Bad file descriptor) [pid 5488] close(17) = -1 EBADF (Bad file descriptor) [pid 5488] close(18) = -1 EBADF (Bad file descriptor) [pid 5488] close(19) = -1 EBADF (Bad file descriptor) [pid 5488] close(20) = -1 EBADF (Bad file descriptor) [pid 5488] close(21) = -1 EBADF (Bad file descriptor) [pid 5488] close(22) = -1 EBADF (Bad file descriptor) [pid 5488] close(23) = -1 EBADF (Bad file descriptor) [pid 5488] close(24) = -1 EBADF (Bad file descriptor) [pid 5488] close(25) = -1 EBADF (Bad file descriptor) [pid 5488] close(26) = -1 EBADF (Bad file descriptor) [pid 5488] close(27) = -1 EBADF (Bad file descriptor) [pid 5488] close(28) = -1 EBADF (Bad file descriptor) [pid 5488] close(29) = -1 EBADF (Bad file descriptor) [pid 5488] exit_group(0 [pid 5492] <... futex resumed>) = ? [pid 5488] <... exit_group resumed>) = ? [pid 5492] +++ exited with 0 +++ [pid 5489] <... futex resumed>) = ? [pid 5489] +++ exited with 0 +++ [pid 5488] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=257, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5046] umount2("./85", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./85/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./85/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./85/binderfs") = 0 [ 116.396975][ T5492] EXT4-fs (loop0): Free/Dirty block details [ 116.402878][ T5492] EXT4-fs (loop0): free_blocks=2415919104 [ 116.408736][ T5492] EXT4-fs (loop0): dirty_blocks=48 [ 116.413867][ T5492] EXT4-fs (loop0): Block reservation details [ 116.420548][ T5492] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 116.429236][ T5489] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 44 with max blocks 1 with error 28 [ 116.441917][ T5489] EXT4-fs (loop0): This should not happen!! Data will be lost [ 116.441917][ T5489] [pid 5046] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./85/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./85/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./85/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./85") = 0 [pid 5046] mkdir("./86", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9c690) = 260 ./strace-static-x86_64: Process 5493 attached [pid 5493] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5493] chdir("./86") = 0 [pid 5493] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5493] setpgid(0, 0) = 0 [pid 5493] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5493] write(3, "1000", 4) = 4 [pid 5493] close(3) = 0 [pid 5493] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5493] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5493] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5493] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5493] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5493] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5493] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5493] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5493] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5494 attached [pid 5494] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5494] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5493] <... clone3 resumed> => {parent_tid=[261]}, 88) = 261 [pid 5494] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5494] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5493] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5493] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5494] <... futex resumed>) = 0 [pid 5493] <... futex resumed>) = 1 [pid 5494] memfd_create("syzkaller", 0 [pid 5493] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5494] <... memfd_create resumed>) = 3 [pid 5494] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5494] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5494] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5494] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5494] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5494] close(3) = 0 [pid 5494] mkdir("./file0", 0777) = 0 [pid 5494] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5494] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5494] chdir("./file0") = 0 [pid 5494] ioctl(4, LOOP_CLR_FD) = 0 [pid 5494] close(4) = 0 [pid 5494] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5494] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5493] <... futex resumed>) = 0 [pid 5493] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5494] <... futex resumed>) = 0 [pid 5494] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5493] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5494] <... open resumed>) = 4 [pid 5494] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5493] <... futex resumed>) = 0 [pid 5494] <... futex resumed>) = 1 [pid 5493] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5494] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5493] <... futex resumed>) = 0 [pid 5494] <... open resumed>) = 5 [pid 5493] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5494] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5493] <... futex resumed>) = 0 [pid 5493] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5494] ftruncate(5, 33587195 [pid 5493] <... futex resumed>) = 0 [pid 5494] <... ftruncate resumed>) = 0 [pid 5493] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5494] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5493] <... futex resumed>) = 0 [pid 5494] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5493] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5494] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5493] <... futex resumed>) = 0 [pid 5494] sendfile(4, 5, NULL, 4 [pid 5493] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5494] <... sendfile resumed>) = 4 [pid 5494] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5493] <... futex resumed>) = 0 [pid 5494] sendfile(4, 5, NULL, 281474978811909 [pid 5493] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5493] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5493] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5493] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5493] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 116.550204][ T5494] loop0: detected capacity change from 0 to 2048 [pid 5493] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5497 attached => {parent_tid=[262]}, 88) = 262 [pid 5493] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5493] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5493] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5497] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5497] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5497] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5497] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5497] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5493] <... futex resumed>) = 0 [pid 5493] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5493] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 116.623712][ T5497] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 116.639824][ T5497] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 52 with error 28 [ 116.640583][ T5494] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 52 with max blocks 1 with error 28 [ 116.664594][ T5497] EXT4-fs (loop0): This should not happen!! Data will be lost [pid 5497] prlimit64(0, RLIMIT_CPU, NULL, [pid 5493] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5497] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5497] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5497] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5494] <... sendfile resumed>) = 106496 [pid 5494] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5493] close(3) = 0 [pid 5493] close(4) = 0 [pid 5493] close(5) = 0 [pid 5493] close(6) = -1 EBADF (Bad file descriptor) [pid 5493] close(7) = -1 EBADF (Bad file descriptor) [pid 5493] close(8) = -1 EBADF (Bad file descriptor) [pid 5493] close(9) = -1 EBADF (Bad file descriptor) [pid 5494] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5493] close(10) = -1 EBADF (Bad file descriptor) [pid 5493] close(11) = -1 EBADF (Bad file descriptor) [pid 5493] close(12) = -1 EBADF (Bad file descriptor) [pid 5493] close(13) = -1 EBADF (Bad file descriptor) [pid 5493] close(14) = -1 EBADF (Bad file descriptor) [pid 5493] close(15) = -1 EBADF (Bad file descriptor) [pid 5493] close(16) = -1 EBADF (Bad file descriptor) [pid 5493] close(17) = -1 EBADF (Bad file descriptor) [pid 5493] close(18) = -1 EBADF (Bad file descriptor) [pid 5493] close(19) = -1 EBADF (Bad file descriptor) [pid 5493] close(20) = -1 EBADF (Bad file descriptor) [pid 5493] close(21) = -1 EBADF (Bad file descriptor) [pid 5493] close(22) = -1 EBADF (Bad file descriptor) [pid 5493] close(23) = -1 EBADF (Bad file descriptor) [pid 5493] close(24) = -1 EBADF (Bad file descriptor) [pid 5493] close(25) = -1 EBADF (Bad file descriptor) [pid 5493] close(26) = -1 EBADF (Bad file descriptor) [pid 5493] close(27) = -1 EBADF (Bad file descriptor) [pid 5493] close(28) = -1 EBADF (Bad file descriptor) [pid 5493] close(29) = -1 EBADF (Bad file descriptor) [pid 5493] exit_group(0 [pid 5497] <... futex resumed>) = ? [pid 5494] <... futex resumed>) = ? [pid 5493] <... exit_group resumed>) = ? [pid 5497] +++ exited with 0 +++ [pid 5494] +++ exited with 0 +++ [pid 5493] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=260, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5046] umount2("./86", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./86/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./86/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./86/binderfs") = 0 [ 116.664594][ T5497] [ 116.664975][ T5494] EXT4-fs (loop0): This should not happen!! Data will be lost [ 116.664975][ T5494] [ 116.684223][ T5497] EXT4-fs (loop0): Total free blocks count 0 [ 116.686947][ T5494] EXT4-fs (loop0): Total free blocks count 0 [ 116.690761][ T5497] EXT4-fs (loop0): Free/Dirty block details [ 116.699410][ T5494] EXT4-fs (loop0): Free/Dirty block details [ 116.702793][ T5497] EXT4-fs (loop0): free_blocks=2415919104 [ 116.709388][ T5494] EXT4-fs (loop0): free_blocks=2415919104 [pid 5046] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./86/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./86/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./86/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./86") = 0 [pid 5046] mkdir("./87", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9c690) = 263 ./strace-static-x86_64: Process 5498 attached [pid 5498] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5498] chdir("./87") = 0 [pid 5498] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5498] setpgid(0, 0) = 0 [pid 5498] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5498] write(3, "1000", 4) = 4 [pid 5498] close(3) = 0 [pid 5498] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5498] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5498] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5498] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5498] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5498] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5498] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5498] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5498] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0} => {parent_tid=[264]}, 88) = 264 ./strace-static-x86_64: Process 5499 attached [pid 5498] rt_sigprocmask(SIG_SETMASK, [], [pid 5499] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053 [pid 5498] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5498] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5498] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5499] <... rseq resumed>) = 0 [pid 5499] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5499] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5499] memfd_create("syzkaller", 0) = 3 [pid 5499] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5499] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5499] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5499] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5499] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5499] close(3) = 0 [pid 5499] mkdir("./file0", 0777) = 0 [pid 5499] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5499] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5499] chdir("./file0") = 0 [pid 5499] ioctl(4, LOOP_CLR_FD) = 0 [pid 5499] close(4) = 0 [pid 5499] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5498] <... futex resumed>) = 0 [pid 5498] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5499] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5498] <... futex resumed>) = 0 [pid 5498] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5499] <... open resumed>) = 4 [pid 5499] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5498] <... futex resumed>) = 0 [pid 5499] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5498] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5499] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5498] <... futex resumed>) = 0 [pid 5498] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5499] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5499] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5498] <... futex resumed>) = 0 [pid 5498] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5498] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5499] ftruncate(5, 33587195) = 0 [pid 5499] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5498] <... futex resumed>) = 0 [pid 5499] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5498] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5499] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5498] <... futex resumed>) = 0 [pid 5499] sendfile(4, 5, NULL, 4 [pid 5498] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5499] <... sendfile resumed>) = 4 [pid 5499] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5498] <... futex resumed>) = 0 [pid 5499] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5498] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5499] <... futex resumed>) = 0 [ 116.845358][ T5499] loop0: detected capacity change from 0 to 2048 [pid 5499] sendfile(4, 5, NULL, 281474978811909 [pid 5498] <... futex resumed>) = 1 [pid 5498] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5498] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5498] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5498] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5498] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5502 attached => {parent_tid=[265]}, 88) = 265 [pid 5502] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5498] rt_sigprocmask(SIG_SETMASK, [], [pid 5502] <... rseq resumed>) = 0 [pid 5502] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5502] rt_sigprocmask(SIG_SETMASK, [], [pid 5498] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5498] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5502] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5498] <... futex resumed>) = 0 [pid 5502] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000 [pid 5498] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5502] <... mmap resumed>) = 0x20000000 [pid 5502] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5498] <... futex resumed>) = 0 [pid 5498] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5498] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5502] <... futex resumed>) = 1 [pid 5502] prlimit64(0, RLIMIT_CPU, NULL, [pid 5498] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 116.924309][ T5502] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 116.939597][ T5502] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 133 with error 28 [ 116.952274][ T5502] EXT4-fs (loop0): This should not happen!! Data will be lost [ 116.952274][ T5502] [ 116.962090][ T5502] EXT4-fs (loop0): Total free blocks count 0 [ 116.968217][ T5502] EXT4-fs (loop0): Free/Dirty block details [pid 5502] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5502] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5502] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5499] <... sendfile resumed>) = 274432 [pid 5499] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5498] close(3) = 0 [pid 5498] close(4) = 0 [pid 5498] close(5 [pid 5499] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5498] <... close resumed>) = 0 [pid 5498] close(6) = -1 EBADF (Bad file descriptor) [pid 5498] close(7) = -1 EBADF (Bad file descriptor) [pid 5498] close(8) = -1 EBADF (Bad file descriptor) [pid 5498] close(9) = -1 EBADF (Bad file descriptor) [pid 5498] close(10) = -1 EBADF (Bad file descriptor) [pid 5498] close(11) = -1 EBADF (Bad file descriptor) [pid 5498] close(12) = -1 EBADF (Bad file descriptor) [pid 5498] close(13) = -1 EBADF (Bad file descriptor) [pid 5498] close(14) = -1 EBADF (Bad file descriptor) [pid 5498] close(15) = -1 EBADF (Bad file descriptor) [pid 5498] close(16) = -1 EBADF (Bad file descriptor) [pid 5498] close(17) = -1 EBADF (Bad file descriptor) [pid 5498] close(18) = -1 EBADF (Bad file descriptor) [pid 5498] close(19) = -1 EBADF (Bad file descriptor) [pid 5498] close(20) = -1 EBADF (Bad file descriptor) [pid 5498] close(21) = -1 EBADF (Bad file descriptor) [pid 5498] close(22) = -1 EBADF (Bad file descriptor) [pid 5498] close(23) = -1 EBADF (Bad file descriptor) [pid 5498] close(24) = -1 EBADF (Bad file descriptor) [pid 5498] close(25) = -1 EBADF (Bad file descriptor) [pid 5498] close(26) = -1 EBADF (Bad file descriptor) [pid 5498] close(27) = -1 EBADF (Bad file descriptor) [pid 5498] close(28) = -1 EBADF (Bad file descriptor) [pid 5498] close(29) = -1 EBADF (Bad file descriptor) [pid 5498] exit_group(0 [pid 5502] <... futex resumed>) = ? [pid 5502] +++ exited with 0 +++ [pid 5499] <... futex resumed>) = ? [pid 5499] +++ exited with 0 +++ [pid 5498] <... exit_group resumed>) = ? [pid 5498] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=263, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./87", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./87/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./87/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./87/binderfs") = 0 [ 116.974129][ T5502] EXT4-fs (loop0): free_blocks=2415919104 [ 116.979992][ T5502] EXT4-fs (loop0): dirty_blocks=144 [ 116.985226][ T5502] EXT4-fs (loop0): Block reservation details [ 116.991327][ T5502] EXT4-fs (loop0): i_reserved_data_blocks=9 [ 117.002026][ T5499] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 134 with max blocks 1 with error 28 [ 117.014877][ T5499] EXT4-fs (loop0): This should not happen!! Data will be lost [ 117.014877][ T5499] [pid 5046] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./87/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./87/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./87/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./87") = 0 [pid 5046] mkdir("./88", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5503 attached , child_tidptr=0x555555a9c690) = 266 [pid 5503] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5503] chdir("./88") = 0 [pid 5503] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5503] setpgid(0, 0) = 0 [pid 5503] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5503] write(3, "1000", 4) = 4 [pid 5503] close(3) = 0 [pid 5503] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5503] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5503] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5503] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5503] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5503] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5503] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5503] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5503] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5504 attached [pid 5504] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5504] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5504] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5504] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5503] <... clone3 resumed> => {parent_tid=[267]}, 88) = 267 [pid 5503] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5503] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5504] <... futex resumed>) = 0 [pid 5503] <... futex resumed>) = 1 [pid 5504] memfd_create("syzkaller", 0 [pid 5503] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5504] <... memfd_create resumed>) = 3 [pid 5504] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5504] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5504] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5504] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5504] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5504] close(3) = 0 [pid 5504] mkdir("./file0", 0777) = 0 [pid 5504] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5504] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5504] chdir("./file0") = 0 [pid 5504] ioctl(4, LOOP_CLR_FD) = 0 [pid 5504] close(4) = 0 [pid 5504] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5503] <... futex resumed>) = 0 [pid 5504] <... futex resumed>) = 1 [pid 5503] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5504] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5503] <... futex resumed>) = 0 [pid 5503] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5504] <... open resumed>) = 4 [pid 5504] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5503] <... futex resumed>) = 0 [pid 5504] <... futex resumed>) = 1 [pid 5503] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5504] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5503] <... futex resumed>) = 0 [pid 5503] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5504] <... open resumed>) = 5 [pid 5504] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5503] <... futex resumed>) = 0 [pid 5504] <... futex resumed>) = 1 [pid 5503] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5503] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5504] ftruncate(5, 33587195) = 0 [pid 5504] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5503] <... futex resumed>) = 0 [pid 5503] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5503] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5504] sendfile(4, 5, NULL, 4) = 4 [pid 5504] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5503] <... futex resumed>) = 0 [pid 5503] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5503] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5503] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5503] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5503] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5504] <... futex resumed>) = 1 [pid 5503] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5504] sendfile(4, 5, NULL, 281474978811909 [pid 5503] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0} => {parent_tid=[268]}, 88) = 268 ./strace-static-x86_64: Process 5507 attached [pid 5503] rt_sigprocmask(SIG_SETMASK, [], [pid 5507] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5503] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5503] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 117.145886][ T5504] loop0: detected capacity change from 0 to 2048 [pid 5503] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5507] <... rseq resumed>) = 0 [pid 5507] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5507] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5507] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5507] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5503] <... futex resumed>) = 0 [pid 5503] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5503] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 117.224786][ T5507] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 117.241499][ T5504] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 86 with max blocks 1 with error 28 [ 117.246730][ T5507] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 86 with error 28 [ 117.255672][ T5504] EXT4-fs (loop0): This should not happen!! Data will be lost [pid 5507] prlimit64(0, RLIMIT_CPU, NULL, [pid 5503] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5504] <... sendfile resumed>) = 176128 [pid 5504] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5504] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5507] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5507] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5503] close(3 [pid 5507] <... futex resumed>) = 0 [pid 5503] <... close resumed>) = 0 [pid 5507] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5503] close(4) = 0 [pid 5503] close(5) = 0 [pid 5503] close(6) = -1 EBADF (Bad file descriptor) [pid 5503] close(7) = -1 EBADF (Bad file descriptor) [pid 5503] close(8) = -1 EBADF (Bad file descriptor) [pid 5503] close(9) = -1 EBADF (Bad file descriptor) [pid 5503] close(10) = -1 EBADF (Bad file descriptor) [pid 5503] close(11) = -1 EBADF (Bad file descriptor) [pid 5503] close(12) = -1 EBADF (Bad file descriptor) [pid 5503] close(13) = -1 EBADF (Bad file descriptor) [pid 5503] close(14) = -1 EBADF (Bad file descriptor) [pid 5503] close(15) = -1 EBADF (Bad file descriptor) [pid 5503] close(16) = -1 EBADF (Bad file descriptor) [pid 5503] close(17) = -1 EBADF (Bad file descriptor) [pid 5503] close(18) = -1 EBADF (Bad file descriptor) [pid 5503] close(19) = -1 EBADF (Bad file descriptor) [pid 5503] close(20) = -1 EBADF (Bad file descriptor) [pid 5503] close(21) = -1 EBADF (Bad file descriptor) [pid 5503] close(22) = -1 EBADF (Bad file descriptor) [pid 5503] close(23) = -1 EBADF (Bad file descriptor) [pid 5503] close(24) = -1 EBADF (Bad file descriptor) [pid 5503] close(25) = -1 EBADF (Bad file descriptor) [pid 5503] close(26) = -1 EBADF (Bad file descriptor) [pid 5503] close(27) = -1 EBADF (Bad file descriptor) [pid 5503] close(28) = -1 EBADF (Bad file descriptor) [pid 5503] close(29) = -1 EBADF (Bad file descriptor) [pid 5503] exit_group(0) = ? [pid 5507] <... futex resumed>) = ? [pid 5504] <... futex resumed>) = ? [pid 5507] +++ exited with 0 +++ [pid 5504] +++ exited with 0 +++ [pid 5503] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=266, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5046] umount2("./88", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./88/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./88/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./88/binderfs") = 0 [ 117.255672][ T5504] [ 117.266673][ T5507] EXT4-fs (loop0): This should not happen!! Data will be lost [ 117.266673][ T5507] [ 117.279876][ T5504] EXT4-fs (loop0): Total free blocks count 0 [ 117.286324][ T5507] EXT4-fs (loop0): Total free blocks count 0 [ 117.292110][ T5504] EXT4-fs (loop0): Free/Dirty block details [ 117.297821][ T5507] EXT4-fs (loop0): Free/Dirty block details [ 117.305122][ T5504] EXT4-fs (loop0): free_blocks=2415919104 [ 117.309828][ T5507] EXT4-fs (loop0): free_blocks=2415919104 [pid 5046] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./88/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./88/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./88/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./88") = 0 [pid 5046] mkdir("./89", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9c690) = 269 ./strace-static-x86_64: Process 5508 attached [pid 5508] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5508] chdir("./89") = 0 [pid 5508] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5508] setpgid(0, 0) = 0 [pid 5508] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5508] write(3, "1000", 4) = 4 [pid 5508] close(3) = 0 [pid 5508] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5508] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5508] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5508] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5508] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5508] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5508] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5508] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5508] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0} => {parent_tid=[270]}, 88) = 270 ./strace-static-x86_64: Process 5509 attached [pid 5509] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053 [pid 5508] rt_sigprocmask(SIG_SETMASK, [], [pid 5509] <... rseq resumed>) = 0 [pid 5509] set_robust_list(0x7efc0265e9a0, 24 [pid 5508] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5509] <... set_robust_list resumed>) = 0 [pid 5509] rt_sigprocmask(SIG_SETMASK, [], [pid 5508] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5509] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5509] memfd_create("syzkaller", 0 [pid 5508] <... futex resumed>) = 0 [pid 5509] <... memfd_create resumed>) = 3 [pid 5508] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5509] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5509] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5509] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5509] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5509] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5509] close(3) = 0 [pid 5509] mkdir("./file0", 0777) = 0 [pid 5509] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5509] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5509] chdir("./file0") = 0 [pid 5509] ioctl(4, LOOP_CLR_FD) = 0 [pid 5509] close(4) = 0 [pid 5509] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5509] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5508] <... futex resumed>) = 0 [pid 5508] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5509] <... futex resumed>) = 0 [pid 5509] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5509] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5509] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5508] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5508] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5509] <... futex resumed>) = 0 [pid 5509] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5508] <... futex resumed>) = 1 [pid 5509] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5508] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5509] <... futex resumed>) = 0 [pid 5509] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5508] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5508] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5509] <... futex resumed>) = 0 [pid 5509] ftruncate(5, 33587195 [pid 5508] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5509] <... ftruncate resumed>) = 0 [pid 5509] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5508] <... futex resumed>) = 0 [pid 5508] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5509] <... futex resumed>) = 1 [pid 5509] sendfile(4, 5, NULL, 4) = 4 [pid 5508] <... futex resumed>) = 0 [pid 5508] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5509] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5508] <... futex resumed>) = 0 [pid 5508] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5509] <... futex resumed>) = 1 [pid 5508] <... futex resumed>) = 0 [pid 5508] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5509] sendfile(4, 5, NULL, 281474978811909 [pid 5508] <... futex resumed>) = 0 [ 117.446337][ T5509] loop0: detected capacity change from 0 to 2048 [pid 5508] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5508] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5508] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5508] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5512 attached => {parent_tid=[271]}, 88) = 271 [pid 5512] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5508] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5508] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5508] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5512] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5512] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5512] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5512] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5512] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5508] <... futex resumed>) = 0 [pid 5508] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5512] <... futex resumed>) = 0 [pid 5508] <... futex resumed>) = 1 [pid 5508] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5512] prlimit64(0, RLIMIT_CPU, NULL, [pid 5508] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 117.540572][ T5512] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 117.555872][ T5512] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 203 with error 28 [ 117.568353][ T5512] EXT4-fs (loop0): This should not happen!! Data will be lost [ 117.568353][ T5512] [ 117.578547][ T5512] EXT4-fs (loop0): Total free blocks count 0 [ 117.584537][ T5512] EXT4-fs (loop0): Free/Dirty block details [ 117.591472][ T5512] EXT4-fs (loop0): free_blocks=2415919104 [ 117.597316][ T5512] EXT4-fs (loop0): dirty_blocks=208 [ 117.602537][ T5512] EXT4-fs (loop0): Block reservation details [ 117.610137][ T5512] EXT4-fs (loop0): i_reserved_data_blocks=13 [ 117.624285][ T5509] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 204 with max blocks 1 with error 28 [pid 5512] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5512] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5509] <... sendfile resumed>) = 417792 [pid 5512] <... futex resumed>) = 0 [pid 5509] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5512] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5509] <... futex resumed>) = 0 [pid 5509] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5508] close(3) = 0 [pid 5508] close(4) = 0 [pid 5508] close(5) = 0 [pid 5508] close(6) = -1 EBADF (Bad file descriptor) [pid 5508] close(7) = -1 EBADF (Bad file descriptor) [pid 5508] close(8) = -1 EBADF (Bad file descriptor) [pid 5508] close(9) = -1 EBADF (Bad file descriptor) [pid 5508] close(10) = -1 EBADF (Bad file descriptor) [pid 5508] close(11) = -1 EBADF (Bad file descriptor) [pid 5508] close(12) = -1 EBADF (Bad file descriptor) [pid 5508] close(13) = -1 EBADF (Bad file descriptor) [pid 5508] close(14) = -1 EBADF (Bad file descriptor) [pid 5508] close(15) = -1 EBADF (Bad file descriptor) [pid 5508] close(16) = -1 EBADF (Bad file descriptor) [pid 5508] close(17) = -1 EBADF (Bad file descriptor) [pid 5508] close(18) = -1 EBADF (Bad file descriptor) [pid 5508] close(19) = -1 EBADF (Bad file descriptor) [pid 5508] close(20) = -1 EBADF (Bad file descriptor) [pid 5508] close(21) = -1 EBADF (Bad file descriptor) [pid 5508] close(22) = -1 EBADF (Bad file descriptor) [pid 5508] close(23) = -1 EBADF (Bad file descriptor) [pid 5508] close(24) = -1 EBADF (Bad file descriptor) [pid 5508] close(25) = -1 EBADF (Bad file descriptor) [pid 5508] close(26) = -1 EBADF (Bad file descriptor) [pid 5508] close(27) = -1 EBADF (Bad file descriptor) [pid 5508] close(28) = -1 EBADF (Bad file descriptor) [pid 5508] close(29) = -1 EBADF (Bad file descriptor) [pid 5508] exit_group(0 [pid 5509] <... futex resumed>) = ? [pid 5512] <... futex resumed>) = ? [pid 5508] <... exit_group resumed>) = ? [pid 5512] +++ exited with 0 +++ [pid 5509] +++ exited with 0 +++ [pid 5508] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=269, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./89", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./89/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./89/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./89/binderfs") = 0 [ 117.636999][ T5509] EXT4-fs (loop0): This should not happen!! Data will be lost [ 117.636999][ T5509] [pid 5046] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./89/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./89/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./89/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./89") = 0 [pid 5046] mkdir("./90", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5514 attached , child_tidptr=0x555555a9c690) = 272 [pid 5514] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5514] chdir("./90") = 0 [pid 5514] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5514] setpgid(0, 0) = 0 [pid 5514] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5514] write(3, "1000", 4) = 4 [pid 5514] close(3) = 0 [pid 5514] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5514] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5514] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5514] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5514] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5514] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5514] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5514] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5514] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5516 attached => {parent_tid=[273]}, 88) = 273 [pid 5516] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5514] rt_sigprocmask(SIG_SETMASK, [], [pid 5516] set_robust_list(0x7efc0265e9a0, 24 [pid 5514] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5516] <... set_robust_list resumed>) = 0 [pid 5514] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5516] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5514] <... futex resumed>) = 0 [pid 5516] memfd_create("syzkaller", 0 [pid 5514] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5516] <... memfd_create resumed>) = 3 [pid 5516] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5516] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5516] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5516] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5516] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5516] close(3) = 0 [pid 5516] mkdir("./file0", 0777) = 0 [pid 5516] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5516] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5516] chdir("./file0") = 0 [pid 5516] ioctl(4, LOOP_CLR_FD) = 0 [pid 5516] close(4) = 0 [pid 5516] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5516] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5514] <... futex resumed>) = 0 [pid 5514] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5516] <... futex resumed>) = 0 [pid 5514] <... futex resumed>) = 1 [pid 5516] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5514] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5516] <... open resumed>) = 4 [pid 5516] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5514] <... futex resumed>) = 0 [pid 5516] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5514] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5516] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5516] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5514] <... futex resumed>) = 0 [pid 5516] <... open resumed>) = 5 [pid 5514] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5516] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5514] <... futex resumed>) = 0 [pid 5516] <... futex resumed>) = 1 [pid 5516] ftruncate(5, 33587195 [pid 5514] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5514] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5516] <... ftruncate resumed>) = 0 [pid 5516] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5516] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5514] <... futex resumed>) = 0 [pid 5514] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5516] <... futex resumed>) = 0 [pid 5514] <... futex resumed>) = 1 [pid 5516] sendfile(4, 5, NULL, 4 [pid 5514] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5516] <... sendfile resumed>) = 4 [pid 5516] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5514] <... futex resumed>) = 0 [pid 5514] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5516] sendfile(4, 5, NULL, 281474978811909 [pid 5514] <... futex resumed>) = 0 [pid 5514] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5514] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [ 117.768272][ T5516] loop0: detected capacity change from 0 to 2048 [pid 5514] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5514] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5514] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0} => {parent_tid=[274]}, 88) = 274 [pid 5514] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5514] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5519 attached [pid 5519] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5519] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5519] rt_sigprocmask(SIG_SETMASK, [], [pid 5514] <... futex resumed>) = 0 [pid 5514] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5519] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5519] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5519] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5514] <... futex resumed>) = 0 [pid 5514] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5514] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5519] <... futex resumed>) = 1 [pid 5519] prlimit64(0, RLIMIT_CPU, NULL, [pid 5514] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 117.854802][ T5519] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 117.870292][ T5519] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 125 with error 28 [ 117.882923][ T5519] EXT4-fs (loop0): This should not happen!! Data will be lost [ 117.882923][ T5519] [ 117.892646][ T5519] EXT4-fs (loop0): Total free blocks count 0 [ 117.898775][ T5519] EXT4-fs (loop0): Free/Dirty block details [pid 5519] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5519] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 117.904753][ T5519] EXT4-fs (loop0): free_blocks=2415919104 [ 117.910874][ T5519] EXT4-fs (loop0): dirty_blocks=128 [ 117.916096][ T5519] EXT4-fs (loop0): Block reservation details [ 117.922157][ T5519] EXT4-fs (loop0): i_reserved_data_blocks=8 [ 117.934108][ T5516] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 126 with max blocks 1 with error 28 [ 117.946984][ T5516] EXT4-fs (loop0): This should not happen!! Data will be lost [pid 5519] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5516] <... sendfile resumed>) = 258048 [pid 5516] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5516] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5514] close(3) = 0 [pid 5514] close(4) = 0 [pid 5514] close(5) = 0 [pid 5514] close(6) = -1 EBADF (Bad file descriptor) [pid 5514] close(7) = -1 EBADF (Bad file descriptor) [pid 5514] close(8) = -1 EBADF (Bad file descriptor) [pid 5514] close(9) = -1 EBADF (Bad file descriptor) [pid 5514] close(10) = -1 EBADF (Bad file descriptor) [pid 5514] close(11) = -1 EBADF (Bad file descriptor) [pid 5514] close(12) = -1 EBADF (Bad file descriptor) [pid 5514] close(13) = -1 EBADF (Bad file descriptor) [pid 5514] close(14) = -1 EBADF (Bad file descriptor) [pid 5514] close(15) = -1 EBADF (Bad file descriptor) [pid 5514] close(16) = -1 EBADF (Bad file descriptor) [pid 5514] close(17) = -1 EBADF (Bad file descriptor) [pid 5514] close(18) = -1 EBADF (Bad file descriptor) [pid 5514] close(19) = -1 EBADF (Bad file descriptor) [pid 5514] close(20) = -1 EBADF (Bad file descriptor) [pid 5514] close(21) = -1 EBADF (Bad file descriptor) [pid 5514] close(22) = -1 EBADF (Bad file descriptor) [pid 5514] close(23) = -1 EBADF (Bad file descriptor) [pid 5514] close(24) = -1 EBADF (Bad file descriptor) [pid 5514] close(25) = -1 EBADF (Bad file descriptor) [pid 5514] close(26) = -1 EBADF (Bad file descriptor) [pid 5514] close(27) = -1 EBADF (Bad file descriptor) [pid 5514] close(28) = -1 EBADF (Bad file descriptor) [pid 5514] close(29) = -1 EBADF (Bad file descriptor) [pid 5514] exit_group(0 [pid 5516] <... futex resumed>) = ? [pid 5514] <... exit_group resumed>) = ? [pid 5519] <... futex resumed>) = ? [pid 5516] +++ exited with 0 +++ [pid 5519] +++ exited with 0 +++ [pid 5514] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=272, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./90", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./90/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./90/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./90/binderfs") = 0 [ 117.946984][ T5516] [pid 5046] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./90/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./90/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./90/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./90") = 0 [pid 5046] mkdir("./91", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5520 attached [pid 5520] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5520] chdir("./91") = 0 [pid 5520] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5046] <... clone resumed>, child_tidptr=0x555555a9c690) = 275 [pid 5520] setpgid(0, 0) = 0 [pid 5520] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5520] write(3, "1000", 4) = 4 [pid 5520] close(3) = 0 [pid 5520] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5520] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5520] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5520] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5520] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5520] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5520] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5520] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5520] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5521 attached [pid 5521] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5521] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5520] <... clone3 resumed> => {parent_tid=[276]}, 88) = 276 [pid 5521] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5521] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5520] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5520] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5521] <... futex resumed>) = 0 [pid 5520] <... futex resumed>) = 1 [pid 5521] memfd_create("syzkaller", 0 [pid 5520] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5521] <... memfd_create resumed>) = 3 [pid 5521] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5521] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5521] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5521] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5521] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5521] close(3) = 0 [pid 5521] mkdir("./file0", 0777) = 0 [pid 5521] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5521] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5521] chdir("./file0") = 0 [pid 5521] ioctl(4, LOOP_CLR_FD) = 0 [pid 5521] close(4) = 0 [pid 5521] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5520] <... futex resumed>) = 0 [pid 5520] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5520] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5521] <... futex resumed>) = 1 [pid 5521] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5521] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5520] <... futex resumed>) = 0 [pid 5520] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5520] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5521] <... futex resumed>) = 1 [pid 5521] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5521] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5520] <... futex resumed>) = 0 [pid 5520] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5520] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5521] <... futex resumed>) = 1 [pid 5521] ftruncate(5, 33587195) = 0 [pid 5521] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5520] <... futex resumed>) = 0 [pid 5521] <... futex resumed>) = 1 [pid 5520] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5521] sendfile(4, 5, NULL, 4 [pid 5520] <... futex resumed>) = 0 [pid 5521] <... sendfile resumed>) = 4 [pid 5520] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5521] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5520] <... futex resumed>) = 0 [pid 5520] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5520] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5520] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5521] <... futex resumed>) = 1 [pid 5521] sendfile(4, 5, NULL, 281474978811909 [pid 5520] <... mmap resumed>) = 0x7efbfa31d000 [pid 5520] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5520] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5520] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0} => {parent_tid=[277]}, 88) = 277 [pid 5520] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5520] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5520] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5524 attached [pid 5524] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5524] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5524] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5524] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5524] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5520] <... futex resumed>) = 0 [pid 5524] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5520] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5524] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5520] <... futex resumed>) = 0 [pid 5524] prlimit64(0, RLIMIT_CPU, NULL, [ 118.095832][ T5521] loop0: detected capacity change from 0 to 2048 [pid 5520] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 118.155824][ T5521] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 118.171427][ T5521] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 48 with max blocks 1 with error 28 [ 118.184707][ T5521] EXT4-fs (loop0): This should not happen!! Data will be lost [ 118.184707][ T5521] [ 118.196316][ T5521] EXT4-fs (loop0): Total free blocks count 0 [pid 5521] <... sendfile resumed>) = 98304 [pid 5521] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 118.203921][ T5521] EXT4-fs (loop0): Free/Dirty block details [ 118.209986][ T5521] EXT4-fs (loop0): free_blocks=2415919104 [ 118.215961][ T5521] EXT4-fs (loop0): dirty_blocks=64 [ 118.222214][ T5521] EXT4-fs (loop0): Block reservation details [ 118.228329][ T5521] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 118.234857][ T5524] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 48 with error 28 [ 118.248218][ T5524] EXT4-fs (loop0): This should not happen!! Data will be lost [pid 5521] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5524] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5524] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5524] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5520] close(3) = 0 [pid 5520] close(4) = 0 [pid 5520] close(5) = 0 [pid 5520] close(6) = -1 EBADF (Bad file descriptor) [pid 5520] close(7) = -1 EBADF (Bad file descriptor) [pid 5520] close(8) = -1 EBADF (Bad file descriptor) [pid 5520] close(9) = -1 EBADF (Bad file descriptor) [pid 5520] close(10) = -1 EBADF (Bad file descriptor) [pid 5520] close(11) = -1 EBADF (Bad file descriptor) [pid 5520] close(12) = -1 EBADF (Bad file descriptor) [pid 5520] close(13) = -1 EBADF (Bad file descriptor) [pid 5520] close(14) = -1 EBADF (Bad file descriptor) [pid 5520] close(15) = -1 EBADF (Bad file descriptor) [pid 5520] close(16) = -1 EBADF (Bad file descriptor) [pid 5520] close(17) = -1 EBADF (Bad file descriptor) [pid 5520] close(18) = -1 EBADF (Bad file descriptor) [pid 5520] close(19) = -1 EBADF (Bad file descriptor) [pid 5520] close(20) = -1 EBADF (Bad file descriptor) [pid 5520] close(21) = -1 EBADF (Bad file descriptor) [pid 5520] close(22) = -1 EBADF (Bad file descriptor) [pid 5520] close(23) = -1 EBADF (Bad file descriptor) [pid 5520] close(24) = -1 EBADF (Bad file descriptor) [pid 5520] close(25) = -1 EBADF (Bad file descriptor) [pid 5520] close(26) = -1 EBADF (Bad file descriptor) [pid 5520] close(27) = -1 EBADF (Bad file descriptor) [pid 5520] close(28) = -1 EBADF (Bad file descriptor) [pid 5520] close(29) = -1 EBADF (Bad file descriptor) [pid 5520] exit_group(0 [pid 5524] <... futex resumed>) = ? [pid 5521] <... futex resumed>) = ? [pid 5520] <... exit_group resumed>) = ? [pid 5524] +++ exited with 0 +++ [pid 5521] +++ exited with 0 +++ [pid 5520] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=275, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./91", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./91/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./91/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./91/binderfs") = 0 [ 118.248218][ T5524] [pid 5046] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./91/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./91/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./91/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./91") = 0 [pid 5046] mkdir("./92", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5525 attached , child_tidptr=0x555555a9c690) = 278 [pid 5525] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5525] chdir("./92") = 0 [pid 5525] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5525] setpgid(0, 0) = 0 [pid 5525] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5525] write(3, "1000", 4) = 4 [pid 5525] close(3) = 0 [pid 5525] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5525] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5525] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5525] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5525] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5525] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5525] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5525] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5525] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5526 attached => {parent_tid=[279]}, 88) = 279 [pid 5526] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5525] rt_sigprocmask(SIG_SETMASK, [], [pid 5526] set_robust_list(0x7efc0265e9a0, 24 [pid 5525] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5526] <... set_robust_list resumed>) = 0 [pid 5525] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5526] rt_sigprocmask(SIG_SETMASK, [], [pid 5525] <... futex resumed>) = 0 [pid 5526] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5525] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5526] memfd_create("syzkaller", 0) = 3 [pid 5526] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5526] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5526] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5526] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5526] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5526] close(3) = 0 [pid 5526] mkdir("./file0", 0777) = 0 [pid 5526] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5526] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5526] chdir("./file0") = 0 [pid 5526] ioctl(4, LOOP_CLR_FD) = 0 [pid 5526] close(4) = 0 [pid 5526] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5525] <... futex resumed>) = 0 [pid 5526] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5525] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5526] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5526] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5525] <... futex resumed>) = 0 [pid 5526] <... open resumed>) = 4 [pid 5525] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5526] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5525] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5526] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5525] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5526] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5525] <... futex resumed>) = 0 [pid 5525] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5526] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5526] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5525] <... futex resumed>) = 0 [pid 5525] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5525] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5526] <... futex resumed>) = 1 [pid 5526] ftruncate(5, 33587195) = 0 [pid 5526] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5525] <... futex resumed>) = 0 [pid 5525] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5525] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5526] <... futex resumed>) = 1 [pid 5526] sendfile(4, 5, NULL, 4) = 4 [pid 5526] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5525] <... futex resumed>) = 0 [pid 5525] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5525] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5526] <... futex resumed>) = 1 [pid 5525] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5526] sendfile(4, 5, NULL, 281474978811909 [pid 5525] <... mmap resumed>) = 0x7efbfa31d000 [pid 5525] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5525] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 118.359990][ T5526] loop0: detected capacity change from 0 to 2048 [pid 5525] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5529 attached [pid 5529] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5525] <... clone3 resumed> => {parent_tid=[280]}, 88) = 280 [pid 5525] rt_sigprocmask(SIG_SETMASK, [], [pid 5529] set_robust_list(0x7efbfa33d9a0, 24 [pid 5525] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5529] <... set_robust_list resumed>) = 0 [pid 5529] rt_sigprocmask(SIG_SETMASK, [], [pid 5525] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5525] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5529] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5529] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5529] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5525] <... futex resumed>) = 0 [pid 5525] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5525] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 118.438260][ T5529] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 118.454523][ T5529] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 54 with error 28 [ 118.455685][ T5526] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 54 with max blocks 1 with error 28 [ 118.466994][ T5529] EXT4-fs (loop0): This should not happen!! Data will be lost [pid 5529] prlimit64(0, RLIMIT_CPU, NULL, [pid 5525] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5526] <... sendfile resumed>) = 110592 [pid 5526] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5526] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5529] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5529] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5525] close(3 [pid 5529] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5525] <... close resumed>) = 0 [pid 5525] close(4) = 0 [pid 5525] close(5) = 0 [pid 5525] close(6) = -1 EBADF (Bad file descriptor) [pid 5525] close(7) = -1 EBADF (Bad file descriptor) [pid 5525] close(8) = -1 EBADF (Bad file descriptor) [pid 5525] close(9) = -1 EBADF (Bad file descriptor) [pid 5525] close(10) = -1 EBADF (Bad file descriptor) [pid 5525] close(11) = -1 EBADF (Bad file descriptor) [pid 5525] close(12) = -1 EBADF (Bad file descriptor) [pid 5525] close(13) = -1 EBADF (Bad file descriptor) [pid 5525] close(14) = -1 EBADF (Bad file descriptor) [pid 5525] close(15) = -1 EBADF (Bad file descriptor) [pid 5525] close(16) = -1 EBADF (Bad file descriptor) [pid 5525] close(17) = -1 EBADF (Bad file descriptor) [pid 5525] close(18) = -1 EBADF (Bad file descriptor) [pid 5525] close(19) = -1 EBADF (Bad file descriptor) [pid 5525] close(20) = -1 EBADF (Bad file descriptor) [pid 5525] close(21) = -1 EBADF (Bad file descriptor) [pid 5525] close(22) = -1 EBADF (Bad file descriptor) [pid 5525] close(23) = -1 EBADF (Bad file descriptor) [pid 5525] close(24) = -1 EBADF (Bad file descriptor) [pid 5525] close(25) = -1 EBADF (Bad file descriptor) [pid 5525] close(26) = -1 EBADF (Bad file descriptor) [pid 5525] close(27) = -1 EBADF (Bad file descriptor) [pid 5525] close(28) = -1 EBADF (Bad file descriptor) [pid 5525] close(29) = -1 EBADF (Bad file descriptor) [pid 5525] exit_group(0 [pid 5526] <... futex resumed>) = ? [pid 5529] <... futex resumed>) = ? [pid 5529] +++ exited with 0 +++ [pid 5526] +++ exited with 0 +++ [pid 5525] <... exit_group resumed>) = ? [pid 5525] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=278, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5046] umount2("./92", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./92", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [ 118.466994][ T5529] [ 118.489279][ T5526] EXT4-fs (loop0): This should not happen!! Data will be lost [ 118.489279][ T5526] [ 118.490831][ T5529] EXT4-fs (loop0): Total free blocks count 0 [ 118.499122][ T5526] EXT4-fs (loop0): Total free blocks count 0 [ 118.511521][ T5529] EXT4-fs (loop0): Free/Dirty block details [ 118.511556][ T5526] EXT4-fs (loop0): Free/Dirty block details [ 118.518494][ T5529] EXT4-fs (loop0): free_blocks=2415919104 [ 118.523635][ T5526] EXT4-fs (loop0): free_blocks=2415919104 [pid 5046] umount2("./92/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./92/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./92/binderfs") = 0 [pid 5046] umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./92/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./92/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./92/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./92") = 0 [pid 5046] mkdir("./93", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5530 attached , child_tidptr=0x555555a9c690) = 281 [pid 5530] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5530] chdir("./93") = 0 [pid 5530] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5530] setpgid(0, 0) = 0 [pid 5530] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5530] write(3, "1000", 4) = 4 [pid 5530] close(3) = 0 [pid 5530] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5530] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5530] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5530] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5530] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5530] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5530] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5530] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5530] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5531 attached => {parent_tid=[282]}, 88) = 282 [pid 5531] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5530] rt_sigprocmask(SIG_SETMASK, [], [pid 5531] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5530] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5531] rt_sigprocmask(SIG_SETMASK, [], [pid 5530] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5531] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5530] <... futex resumed>) = 0 [pid 5530] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5531] memfd_create("syzkaller", 0) = 3 [pid 5531] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5531] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5531] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5531] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5531] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5531] close(3) = 0 [pid 5531] mkdir("./file0", 0777) = 0 [pid 5531] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5531] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5531] chdir("./file0") = 0 [pid 5531] ioctl(4, LOOP_CLR_FD) = 0 [pid 5531] close(4) = 0 [pid 5531] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5531] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5530] <... futex resumed>) = 0 [pid 5530] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5531] <... futex resumed>) = 0 [pid 5530] <... futex resumed>) = 1 [pid 5531] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5530] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5531] <... open resumed>) = 4 [pid 5531] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5530] <... futex resumed>) = 0 [pid 5531] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5530] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5531] <... futex resumed>) = 0 [pid 5530] <... futex resumed>) = 1 [pid 5531] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5530] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5531] <... open resumed>) = 5 [pid 5531] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5530] <... futex resumed>) = 0 [pid 5530] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5531] ftruncate(5, 33587195 [pid 5530] <... futex resumed>) = 0 [pid 5530] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5531] <... ftruncate resumed>) = 0 [pid 5531] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5530] <... futex resumed>) = 0 [pid 5531] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5530] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5531] sendfile(4, 5, NULL, 4 [pid 5530] <... futex resumed>) = 0 [pid 5530] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5531] <... sendfile resumed>) = 4 [pid 5531] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5530] <... futex resumed>) = 0 [pid 5530] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5531] sendfile(4, 5, NULL, 281474978811909 [pid 5530] <... futex resumed>) = 0 [pid 5530] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 118.669577][ T5531] loop0: detected capacity change from 0 to 2048 [pid 5530] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5530] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5530] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5530] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5534 attached => {parent_tid=[283]}, 88) = 283 [pid 5530] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5530] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5530] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5534] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5534] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5534] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5534] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5534] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5530] <... futex resumed>) = 0 [pid 5534] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5530] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5534] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5530] <... futex resumed>) = 0 [pid 5534] prlimit64(0, RLIMIT_CPU, NULL, [ 118.758990][ T5534] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 118.775272][ T5534] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 147 with error 28 [ 118.788965][ T5534] EXT4-fs (loop0): This should not happen!! Data will be lost [ 118.788965][ T5534] [ 118.799117][ T5534] EXT4-fs (loop0): Total free blocks count 0 [pid 5530] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5534] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5534] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 118.805136][ T5534] EXT4-fs (loop0): Free/Dirty block details [ 118.811183][ T5534] EXT4-fs (loop0): free_blocks=2415919104 [ 118.817874][ T5534] EXT4-fs (loop0): dirty_blocks=160 [ 118.823110][ T5534] EXT4-fs (loop0): Block reservation details [ 118.829218][ T5534] EXT4-fs (loop0): i_reserved_data_blocks=10 [ 118.840751][ T5531] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 148 with max blocks 1 with error 28 [pid 5534] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5531] <... sendfile resumed>) = 303104 [pid 5531] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5530] close(3 [pid 5531] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5530] <... close resumed>) = 0 [pid 5530] close(4) = 0 [pid 5530] close(5) = 0 [pid 5530] close(6) = -1 EBADF (Bad file descriptor) [pid 5530] close(7) = -1 EBADF (Bad file descriptor) [pid 5530] close(8) = -1 EBADF (Bad file descriptor) [pid 5530] close(9) = -1 EBADF (Bad file descriptor) [pid 5530] close(10) = -1 EBADF (Bad file descriptor) [pid 5530] close(11) = -1 EBADF (Bad file descriptor) [pid 5530] close(12) = -1 EBADF (Bad file descriptor) [pid 5530] close(13) = -1 EBADF (Bad file descriptor) [pid 5530] close(14) = -1 EBADF (Bad file descriptor) [pid 5530] close(15) = -1 EBADF (Bad file descriptor) [pid 5530] close(16) = -1 EBADF (Bad file descriptor) [pid 5530] close(17) = -1 EBADF (Bad file descriptor) [pid 5530] close(18) = -1 EBADF (Bad file descriptor) [pid 5530] close(19) = -1 EBADF (Bad file descriptor) [pid 5530] close(20) = -1 EBADF (Bad file descriptor) [pid 5530] close(21) = -1 EBADF (Bad file descriptor) [pid 5530] close(22) = -1 EBADF (Bad file descriptor) [pid 5530] close(23) = -1 EBADF (Bad file descriptor) [pid 5530] close(24) = -1 EBADF (Bad file descriptor) [pid 5530] close(25) = -1 EBADF (Bad file descriptor) [pid 5530] close(26) = -1 EBADF (Bad file descriptor) [pid 5530] close(27) = -1 EBADF (Bad file descriptor) [pid 5530] close(28) = -1 EBADF (Bad file descriptor) [pid 5530] close(29) = -1 EBADF (Bad file descriptor) [pid 5530] exit_group(0 [pid 5534] <... futex resumed>) = ? [pid 5531] <... futex resumed>) = ? [pid 5534] +++ exited with 0 +++ [pid 5531] +++ exited with 0 +++ [pid 5530] <... exit_group resumed>) = ? [pid 5530] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=281, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5046] umount2("./93", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./93", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./93/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./93/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./93/binderfs") = 0 [ 118.853454][ T5531] EXT4-fs (loop0): This should not happen!! Data will be lost [ 118.853454][ T5531] [pid 5046] umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./93/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./93/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./93/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./93") = 0 [pid 5046] mkdir("./94", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9c690) = 284 ./strace-static-x86_64: Process 5535 attached [pid 5535] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5535] chdir("./94") = 0 [pid 5535] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5535] setpgid(0, 0) = 0 [pid 5535] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5535] write(3, "1000", 4) = 4 [pid 5535] close(3) = 0 [pid 5535] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5535] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5535] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5535] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5535] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5535] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5535] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5535] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5535] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5536 attached => {parent_tid=[285]}, 88) = 285 [pid 5535] rt_sigprocmask(SIG_SETMASK, [], [pid 5536] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5535] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5536] set_robust_list(0x7efc0265e9a0, 24 [pid 5535] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5536] <... set_robust_list resumed>) = 0 [pid 5536] rt_sigprocmask(SIG_SETMASK, [], [pid 5535] <... futex resumed>) = 0 [pid 5536] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5535] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5536] memfd_create("syzkaller", 0) = 3 [pid 5536] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5536] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5536] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5536] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5536] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5536] close(3) = 0 [pid 5536] mkdir("./file0", 0777) = 0 [pid 5536] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5536] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5536] chdir("./file0") = 0 [pid 5536] ioctl(4, LOOP_CLR_FD) = 0 [pid 5536] close(4) = 0 [pid 5536] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5535] <... futex resumed>) = 0 [pid 5536] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5535] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5536] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5535] <... futex resumed>) = 0 [pid 5536] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5535] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5536] <... open resumed>) = 4 [pid 5536] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5535] <... futex resumed>) = 0 [pid 5535] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5535] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5536] <... futex resumed>) = 1 [pid 5536] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5536] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5535] <... futex resumed>) = 0 [pid 5535] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5535] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5536] <... futex resumed>) = 1 [pid 5536] ftruncate(5, 33587195) = 0 [pid 5536] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5535] <... futex resumed>) = 0 [pid 5536] <... futex resumed>) = 1 [pid 5536] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5535] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5536] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5535] <... futex resumed>) = 0 [pid 5536] sendfile(4, 5, NULL, 4 [pid 5535] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5536] <... sendfile resumed>) = 4 [pid 5536] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5535] <... futex resumed>) = 0 [pid 5535] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5536] <... futex resumed>) = 1 [pid 5535] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5536] sendfile(4, 5, NULL, 281474978811909 [pid 5535] <... futex resumed>) = 0 [pid 5535] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5535] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5535] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5535] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0} => {parent_tid=[286]}, 88) = 286 [pid 5535] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5535] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5535] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5539 attached [pid 5539] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5539] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5539] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5539] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5539] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5539] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5535] <... futex resumed>) = 0 [pid 5535] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5539] <... futex resumed>) = 0 [ 118.985882][ T5536] loop0: detected capacity change from 0 to 2048 [pid 5539] prlimit64(0, RLIMIT_CPU, NULL, [pid 5535] <... futex resumed>) = 1 [ 119.043060][ T5539] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 119.059822][ T5539] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 119.073138][ T5539] EXT4-fs (loop0): This should not happen!! Data will be lost [ 119.073138][ T5539] [ 119.082977][ T5539] EXT4-fs (loop0): Total free blocks count 0 [pid 5535] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5539] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5539] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5539] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5536] <... sendfile resumed>) = 69632 [pid 5536] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5536] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5535] close(3) = 0 [pid 5535] close(4) = 0 [pid 5535] close(5) = 0 [pid 5535] close(6) = -1 EBADF (Bad file descriptor) [pid 5535] close(7) = -1 EBADF (Bad file descriptor) [pid 5535] close(8) = -1 EBADF (Bad file descriptor) [pid 5535] close(9) = -1 EBADF (Bad file descriptor) [pid 5535] close(10) = -1 EBADF (Bad file descriptor) [pid 5535] close(11) = -1 EBADF (Bad file descriptor) [pid 5535] close(12) = -1 EBADF (Bad file descriptor) [pid 5535] close(13) = -1 EBADF (Bad file descriptor) [pid 5535] close(14) = -1 EBADF (Bad file descriptor) [pid 5535] close(15) = -1 EBADF (Bad file descriptor) [pid 5535] close(16) = -1 EBADF (Bad file descriptor) [pid 5535] close(17) = -1 EBADF (Bad file descriptor) [pid 5535] close(18) = -1 EBADF (Bad file descriptor) [pid 5535] close(19) = -1 EBADF (Bad file descriptor) [pid 5535] close(20) = -1 EBADF (Bad file descriptor) [pid 5535] close(21) = -1 EBADF (Bad file descriptor) [pid 5535] close(22) = -1 EBADF (Bad file descriptor) [pid 5535] close(23) = -1 EBADF (Bad file descriptor) [pid 5535] close(24) = -1 EBADF (Bad file descriptor) [pid 5535] close(25) = -1 EBADF (Bad file descriptor) [pid 5535] close(26) = -1 EBADF (Bad file descriptor) [pid 5535] close(27) = -1 EBADF (Bad file descriptor) [pid 5535] close(28) = -1 EBADF (Bad file descriptor) [pid 5535] close(29) = -1 EBADF (Bad file descriptor) [pid 5535] exit_group(0) = ? [pid 5539] <... futex resumed>) = ? [pid 5536] <... futex resumed>) = ? [pid 5539] +++ exited with 0 +++ [pid 5536] +++ exited with 0 +++ [pid 5535] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=284, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./94", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./94", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./94/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./94/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./94/binderfs") = 0 [ 119.089098][ T5539] EXT4-fs (loop0): Free/Dirty block details [ 119.095057][ T5539] EXT4-fs (loop0): free_blocks=2415919104 [ 119.100878][ T5539] EXT4-fs (loop0): dirty_blocks=48 [ 119.106006][ T5539] EXT4-fs (loop0): Block reservation details [ 119.112106][ T5539] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 119.119650][ T5536] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 34 with max blocks 1 with error 28 [ 119.133017][ T5536] EXT4-fs (loop0): This should not happen!! Data will be lost [ 119.133017][ T5536] [pid 5046] umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./94/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./94/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./94/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./94") = 0 [pid 5046] mkdir("./95", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9c690) = 287 ./strace-static-x86_64: Process 5540 attached [pid 5540] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5540] chdir("./95") = 0 [pid 5540] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5540] setpgid(0, 0) = 0 [pid 5540] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5540] write(3, "1000", 4) = 4 [pid 5540] close(3) = 0 [pid 5540] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5540] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5540] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5540] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5540] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5540] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5540] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5540] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5540] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5541 attached [pid 5541] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053 [pid 5540] <... clone3 resumed> => {parent_tid=[288]}, 88) = 288 [pid 5541] <... rseq resumed>) = 0 [pid 5540] rt_sigprocmask(SIG_SETMASK, [], [pid 5541] set_robust_list(0x7efc0265e9a0, 24 [pid 5540] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5541] <... set_robust_list resumed>) = 0 [pid 5540] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5541] rt_sigprocmask(SIG_SETMASK, [], [pid 5540] <... futex resumed>) = 0 [pid 5541] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5540] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5541] memfd_create("syzkaller", 0) = 3 [pid 5541] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5541] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5541] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5541] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5541] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5541] close(3) = 0 [pid 5541] mkdir("./file0", 0777) = 0 [pid 5541] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5541] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5541] chdir("./file0") = 0 [pid 5541] ioctl(4, LOOP_CLR_FD) = 0 [pid 5541] close(4) = 0 [pid 5541] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5540] <... futex resumed>) = 0 [pid 5540] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5541] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5540] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5541] <... open resumed>) = 4 [pid 5541] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5540] <... futex resumed>) = 0 [pid 5541] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5540] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5541] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5540] <... futex resumed>) = 0 [pid 5541] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5540] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5541] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5540] <... futex resumed>) = 0 [pid 5541] ftruncate(5, 33587195 [pid 5540] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5541] <... ftruncate resumed>) = 0 [pid 5540] <... futex resumed>) = 0 [pid 5541] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5540] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5541] <... futex resumed>) = 0 [pid 5540] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5540] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5541] sendfile(4, 5, NULL, 4 [pid 5540] <... futex resumed>) = 0 [pid 5540] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5541] <... sendfile resumed>) = 4 [pid 5541] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5540] <... futex resumed>) = 0 [pid 5541] sendfile(4, 5, NULL, 281474978811909 [pid 5540] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5540] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5540] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5540] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5540] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5540] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5544 attached [pid 5544] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5540] <... clone3 resumed> => {parent_tid=[289]}, 88) = 289 [pid 5544] <... rseq resumed>) = 0 [pid 5540] rt_sigprocmask(SIG_SETMASK, [], [pid 5544] set_robust_list(0x7efbfa33d9a0, 24 [pid 5540] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5544] <... set_robust_list resumed>) = 0 [pid 5540] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5544] rt_sigprocmask(SIG_SETMASK, [], [pid 5540] <... futex resumed>) = 0 [pid 5544] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5540] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5544] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5544] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5540] <... futex resumed>) = 0 [pid 5544] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5540] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5544] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5540] <... futex resumed>) = 0 [ 119.273167][ T5541] loop0: detected capacity change from 0 to 2048 [pid 5544] prlimit64(0, RLIMIT_CPU, NULL, [pid 5540] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5541] <... sendfile resumed>) = 94208 [pid 5541] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5541] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5540] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 119.334606][ T5544] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 119.351198][ T5544] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 46 with error 28 [ 119.356943][ T5541] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 46 with max blocks 1 with error 28 [ 119.363916][ T5544] EXT4-fs (loop0): This should not happen!! Data will be lost [pid 5540] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5544] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5544] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5540] close(3 [pid 5544] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5540] <... close resumed>) = 0 [pid 5540] close(4) = 0 [pid 5540] close(5) = 0 [pid 5540] close(6) = -1 EBADF (Bad file descriptor) [pid 5540] close(7) = -1 EBADF (Bad file descriptor) [pid 5540] close(8) = -1 EBADF (Bad file descriptor) [pid 5540] close(9) = -1 EBADF (Bad file descriptor) [pid 5540] close(10) = -1 EBADF (Bad file descriptor) [pid 5540] close(11) = -1 EBADF (Bad file descriptor) [pid 5540] close(12) = -1 EBADF (Bad file descriptor) [pid 5540] close(13) = -1 EBADF (Bad file descriptor) [pid 5540] close(14) = -1 EBADF (Bad file descriptor) [pid 5540] close(15) = -1 EBADF (Bad file descriptor) [pid 5540] close(16) = -1 EBADF (Bad file descriptor) [pid 5540] close(17) = -1 EBADF (Bad file descriptor) [pid 5540] close(18) = -1 EBADF (Bad file descriptor) [pid 5540] close(19) = -1 EBADF (Bad file descriptor) [pid 5540] close(20) = -1 EBADF (Bad file descriptor) [pid 5540] close(21) = -1 EBADF (Bad file descriptor) [pid 5540] close(22) = -1 EBADF (Bad file descriptor) [pid 5540] close(23) = -1 EBADF (Bad file descriptor) [pid 5540] close(24) = -1 EBADF (Bad file descriptor) [pid 5540] close(25) = -1 EBADF (Bad file descriptor) [pid 5540] close(26) = -1 EBADF (Bad file descriptor) [pid 5540] close(27) = -1 EBADF (Bad file descriptor) [pid 5540] close(28) = -1 EBADF (Bad file descriptor) [pid 5540] close(29) = -1 EBADF (Bad file descriptor) [pid 5540] exit_group(0) = ? [pid 5544] <... futex resumed>) = ? [pid 5544] +++ exited with 0 +++ [pid 5541] <... futex resumed>) = ? [pid 5541] +++ exited with 0 +++ [pid 5540] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=287, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5046] umount2("./95", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./95", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./95/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./95/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./95/binderfs") = 0 [ 119.363916][ T5544] [ 119.375757][ T5541] EXT4-fs (loop0): This should not happen!! Data will be lost [ 119.375757][ T5541] [ 119.375777][ T5541] EXT4-fs (loop0): Total free blocks count 0 [ 119.375796][ T5541] EXT4-fs (loop0): Free/Dirty block details [ 119.375814][ T5541] EXT4-fs (loop0): free_blocks=2415919104 [ 119.375834][ T5541] EXT4-fs (loop0): dirty_blocks=48 [ 119.375852][ T5541] EXT4-fs (loop0): Block reservation details [ 119.375869][ T5541] EXT4-fs (loop0): i_reserved_data_blocks=3 [pid 5046] umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./95/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./95/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./95/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./95") = 0 [pid 5046] mkdir("./96", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5545 attached , child_tidptr=0x555555a9c690) = 290 [pid 5545] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5545] chdir("./96") = 0 [pid 5545] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5545] setpgid(0, 0) = 0 [pid 5545] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5545] write(3, "1000", 4) = 4 [pid 5545] close(3) = 0 [pid 5545] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5545] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5545] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5545] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5545] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5545] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5545] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5545] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5545] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0} => {parent_tid=[291]}, 88) = 291 [pid 5545] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5545] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5545] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5546 attached [pid 5546] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5546] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5546] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5546] memfd_create("syzkaller", 0) = 3 [pid 5546] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5546] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5546] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5546] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5546] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5546] close(3) = 0 [pid 5546] mkdir("./file0", 0777) = 0 [pid 5546] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5546] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5546] chdir("./file0") = 0 [pid 5546] ioctl(4, LOOP_CLR_FD) = 0 [pid 5546] close(4) = 0 [pid 5546] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5546] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5545] <... futex resumed>) = 0 [pid 5545] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5546] <... futex resumed>) = 0 [pid 5545] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5546] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5546] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5546] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5545] <... futex resumed>) = 0 [pid 5545] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5546] <... futex resumed>) = 0 [pid 5546] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5545] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5546] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5545] <... futex resumed>) = 0 [pid 5545] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5546] <... futex resumed>) = 1 [pid 5545] <... futex resumed>) = 0 [pid 5546] ftruncate(5, 33587195 [pid 5545] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5546] <... ftruncate resumed>) = 0 [pid 5546] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5545] <... futex resumed>) = 0 [pid 5546] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5545] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5546] sendfile(4, 5, NULL, 4 [pid 5545] <... futex resumed>) = 0 [pid 5546] <... sendfile resumed>) = 4 [pid 5545] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5546] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5545] <... futex resumed>) = 0 [pid 5545] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5545] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5546] <... futex resumed>) = 1 [pid 5545] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5546] sendfile(4, 5, NULL, 281474978811909 [pid 5545] <... mmap resumed>) = 0x7efbfa31d000 [pid 5545] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [ 119.547051][ T5546] loop0: detected capacity change from 0 to 2048 [pid 5545] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5545] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5549 attached => {parent_tid=[292]}, 88) = 292 [pid 5545] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5545] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5545] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5549] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5549] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5549] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5549] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5549] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5545] <... futex resumed>) = 0 [pid 5545] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5545] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5549] <... futex resumed>) = 1 [pid 5549] prlimit64(0, RLIMIT_CPU, NULL, [pid 5545] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5545] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [ 119.632859][ T5549] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 119.650755][ T5549] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 129 with error 28 [ 119.663352][ T5549] EXT4-fs (loop0): This should not happen!! Data will be lost [ 119.663352][ T5549] [ 119.673136][ T5549] EXT4-fs (loop0): Total free blocks count 0 [pid 5549] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5549] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 119.679242][ T5549] EXT4-fs (loop0): Free/Dirty block details [ 119.685468][ T5549] EXT4-fs (loop0): free_blocks=2415919104 [ 119.691293][ T5549] EXT4-fs (loop0): dirty_blocks=144 [ 119.696505][ T5549] EXT4-fs (loop0): Block reservation details [ 119.702533][ T5549] EXT4-fs (loop0): i_reserved_data_blocks=9 [ 119.712926][ T5546] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 130 with max blocks 1 with error 28 [ 119.725579][ T5546] EXT4-fs (loop0): This should not happen!! Data will be lost [pid 5549] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5546] <... sendfile resumed>) = 266240 [pid 5546] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5546] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5545] close(3) = 0 [pid 5545] close(4) = 0 [pid 5545] close(5) = 0 [pid 5545] close(6) = -1 EBADF (Bad file descriptor) [pid 5545] close(7) = -1 EBADF (Bad file descriptor) [pid 5545] close(8) = -1 EBADF (Bad file descriptor) [pid 5545] close(9) = -1 EBADF (Bad file descriptor) [pid 5545] close(10) = -1 EBADF (Bad file descriptor) [pid 5545] close(11) = -1 EBADF (Bad file descriptor) [pid 5545] close(12) = -1 EBADF (Bad file descriptor) [pid 5545] close(13) = -1 EBADF (Bad file descriptor) [pid 5545] close(14) = -1 EBADF (Bad file descriptor) [pid 5545] close(15) = -1 EBADF (Bad file descriptor) [pid 5545] close(16) = -1 EBADF (Bad file descriptor) [pid 5545] close(17) = -1 EBADF (Bad file descriptor) [pid 5545] close(18) = -1 EBADF (Bad file descriptor) [pid 5545] close(19) = -1 EBADF (Bad file descriptor) [pid 5545] close(20) = -1 EBADF (Bad file descriptor) [pid 5545] close(21) = -1 EBADF (Bad file descriptor) [pid 5545] close(22) = -1 EBADF (Bad file descriptor) [pid 5545] close(23) = -1 EBADF (Bad file descriptor) [pid 5545] close(24) = -1 EBADF (Bad file descriptor) [pid 5545] close(25) = -1 EBADF (Bad file descriptor) [pid 5545] close(26) = -1 EBADF (Bad file descriptor) [pid 5545] close(27) = -1 EBADF (Bad file descriptor) [pid 5545] close(28) = -1 EBADF (Bad file descriptor) [pid 5545] close(29) = -1 EBADF (Bad file descriptor) [pid 5545] exit_group(0 [pid 5549] <... futex resumed>) = ? [pid 5545] <... exit_group resumed>) = ? [pid 5546] <... futex resumed>) = ? [pid 5549] +++ exited with 0 +++ [pid 5546] +++ exited with 0 +++ [pid 5545] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=290, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5046] umount2("./96", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./96", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./96/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./96/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./96/binderfs") = 0 [ 119.725579][ T5546] [pid 5046] umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./96/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./96/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./96/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./96") = 0 [pid 5046] mkdir("./97", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5550 attached , child_tidptr=0x555555a9c690) = 293 [pid 5550] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5550] chdir("./97") = 0 [pid 5550] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5550] setpgid(0, 0) = 0 [pid 5550] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5550] write(3, "1000", 4) = 4 [pid 5550] close(3) = 0 [pid 5550] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5550] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5550] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5550] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5550] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5550] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5550] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5550] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5550] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5551 attached => {parent_tid=[294]}, 88) = 294 [pid 5551] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053 [pid 5550] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5551] <... rseq resumed>) = 0 [pid 5550] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5551] set_robust_list(0x7efc0265e9a0, 24 [pid 5550] <... futex resumed>) = 0 [pid 5550] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5551] <... set_robust_list resumed>) = 0 [pid 5551] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5551] memfd_create("syzkaller", 0) = 3 [pid 5551] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5551] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5551] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5551] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5551] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5551] close(3) = 0 [pid 5551] mkdir("./file0", 0777) = 0 [pid 5551] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5551] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5551] chdir("./file0") = 0 [pid 5551] ioctl(4, LOOP_CLR_FD) = 0 [pid 5551] close(4) = 0 [pid 5551] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5551] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5550] <... futex resumed>) = 0 [pid 5551] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5550] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5550] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5551] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5551] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5550] <... futex resumed>) = 0 [pid 5551] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5550] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5551] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5550] <... futex resumed>) = 0 [pid 5551] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5550] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5551] <... open resumed>) = 5 [pid 5551] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5550] <... futex resumed>) = 0 [pid 5550] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5550] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5551] ftruncate(5, 33587195) = 0 [pid 5551] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5550] <... futex resumed>) = 0 [pid 5550] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5551] sendfile(4, 5, NULL, 4 [pid 5550] <... futex resumed>) = 0 [pid 5550] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5551] <... sendfile resumed>) = 4 [pid 5551] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5551] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5550] <... futex resumed>) = 0 [pid 5550] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5551] <... futex resumed>) = 0 [ 119.856219][ T5551] loop0: detected capacity change from 0 to 2048 [pid 5551] sendfile(4, 5, NULL, 281474978811909 [pid 5550] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5550] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5550] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5550] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5550] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0} => {parent_tid=[295]}, 88) = 295 [pid 5550] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 5554 attached [pid 5550] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5554] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5550] <... futex resumed>) = 0 [pid 5554] <... rseq resumed>) = 0 [pid 5550] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5554] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5554] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5554] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5554] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5550] <... futex resumed>) = 0 [pid 5550] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5550] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5554] <... futex resumed>) = 1 [pid 5554] prlimit64(0, RLIMIT_CPU, NULL, [pid 5550] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 119.925906][ T5554] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 119.941330][ T5554] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 53 with error 28 [ 119.954021][ T5554] EXT4-fs (loop0): This should not happen!! Data will be lost [ 119.954021][ T5554] [ 119.963717][ T5554] EXT4-fs (loop0): Total free blocks count 0 [ 119.969804][ T5554] EXT4-fs (loop0): Free/Dirty block details [pid 5554] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5554] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5554] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5551] <... sendfile resumed>) = 110592 [pid 5551] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5551] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5550] close(3) = 0 [pid 5550] close(4) = 0 [pid 5550] close(5) = 0 [pid 5550] close(6) = -1 EBADF (Bad file descriptor) [pid 5550] close(7) = -1 EBADF (Bad file descriptor) [pid 5550] close(8) = -1 EBADF (Bad file descriptor) [pid 5550] close(9) = -1 EBADF (Bad file descriptor) [pid 5550] close(10) = -1 EBADF (Bad file descriptor) [pid 5550] close(11) = -1 EBADF (Bad file descriptor) [pid 5550] close(12) = -1 EBADF (Bad file descriptor) [pid 5550] close(13) = -1 EBADF (Bad file descriptor) [pid 5550] close(14) = -1 EBADF (Bad file descriptor) [pid 5550] close(15) = -1 EBADF (Bad file descriptor) [pid 5550] close(16) = -1 EBADF (Bad file descriptor) [pid 5550] close(17) = -1 EBADF (Bad file descriptor) [pid 5550] close(18) = -1 EBADF (Bad file descriptor) [pid 5550] close(19) = -1 EBADF (Bad file descriptor) [pid 5550] close(20) = -1 EBADF (Bad file descriptor) [pid 5550] close(21) = -1 EBADF (Bad file descriptor) [pid 5550] close(22) = -1 EBADF (Bad file descriptor) [pid 5550] close(23) = -1 EBADF (Bad file descriptor) [pid 5550] close(24) = -1 EBADF (Bad file descriptor) [pid 5550] close(25) = -1 EBADF (Bad file descriptor) [pid 5550] close(26) = -1 EBADF (Bad file descriptor) [pid 5550] close(27) = -1 EBADF (Bad file descriptor) [pid 5550] close(28) = -1 EBADF (Bad file descriptor) [pid 5550] close(29) = -1 EBADF (Bad file descriptor) [pid 5550] exit_group(0 [pid 5554] <... futex resumed>) = ? [pid 5550] <... exit_group resumed>) = ? [pid 5554] +++ exited with 0 +++ [pid 5551] <... futex resumed>) = ? [pid 5551] +++ exited with 0 +++ [pid 5550] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=293, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5046] umount2("./97", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 119.975737][ T5554] EXT4-fs (loop0): free_blocks=2415919104 [ 119.981859][ T5554] EXT4-fs (loop0): dirty_blocks=64 [ 119.987264][ T5554] EXT4-fs (loop0): Block reservation details [ 119.993261][ T5554] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 120.001615][ T5551] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 54 with max blocks 1 with error 28 [ 120.014767][ T5551] EXT4-fs (loop0): This should not happen!! Data will be lost [ 120.014767][ T5551] [pid 5046] openat(AT_FDCWD, "./97", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./97/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./97/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./97/binderfs") = 0 [pid 5046] umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./97/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./97/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./97/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./97") = 0 [pid 5046] mkdir("./98", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5555 attached , child_tidptr=0x555555a9c690) = 296 [pid 5555] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5555] chdir("./98") = 0 [pid 5555] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5555] setpgid(0, 0) = 0 [pid 5555] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5555] write(3, "1000", 4) = 4 [pid 5555] close(3) = 0 [pid 5555] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5555] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5555] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5555] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5555] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5555] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5555] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5555] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5555] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5556 attached => {parent_tid=[297]}, 88) = 297 [pid 5556] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053 [pid 5555] rt_sigprocmask(SIG_SETMASK, [], [pid 5556] <... rseq resumed>) = 0 [pid 5555] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5556] set_robust_list(0x7efc0265e9a0, 24 [pid 5555] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5556] <... set_robust_list resumed>) = 0 [pid 5555] <... futex resumed>) = 0 [pid 5556] rt_sigprocmask(SIG_SETMASK, [], [pid 5555] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5556] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5556] memfd_create("syzkaller", 0) = 3 [pid 5556] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5556] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5556] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5556] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5556] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5556] close(3) = 0 [pid 5556] mkdir("./file0", 0777) = 0 [pid 5556] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5556] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5556] chdir("./file0") = 0 [pid 5556] ioctl(4, LOOP_CLR_FD) = 0 [pid 5556] close(4) = 0 [pid 5556] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5555] <... futex resumed>) = 0 [pid 5556] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5555] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5556] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5556] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5555] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5556] <... open resumed>) = 4 [pid 5556] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5555] <... futex resumed>) = 0 [pid 5556] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5555] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5555] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5556] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5556] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5556] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5555] <... futex resumed>) = 0 [pid 5556] ftruncate(5, 33587195 [pid 5555] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5556] <... ftruncate resumed>) = 0 [pid 5555] <... futex resumed>) = 0 [pid 5555] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5556] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5556] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5555] <... futex resumed>) = 0 [pid 5555] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5556] <... futex resumed>) = 0 [pid 5555] <... futex resumed>) = 1 [pid 5556] sendfile(4, 5, NULL, 4 [pid 5555] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5556] <... sendfile resumed>) = 4 [pid 5556] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5555] <... futex resumed>) = 0 [pid 5556] <... futex resumed>) = 1 [pid 5555] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5556] sendfile(4, 5, NULL, 281474978811909 [pid 5555] <... futex resumed>) = 0 [pid 5555] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5555] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5555] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5555] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5555] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5559 attached => {parent_tid=[298]}, 88) = 298 [pid 5559] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5555] rt_sigprocmask(SIG_SETMASK, [], [pid 5559] set_robust_list(0x7efbfa33d9a0, 24 [pid 5555] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5555] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 120.136059][ T5556] loop0: detected capacity change from 0 to 2048 [pid 5555] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5559] <... set_robust_list resumed>) = 0 [pid 5559] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5559] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5559] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5559] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5555] <... futex resumed>) = 0 [pid 5555] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5559] <... futex resumed>) = 0 [pid 5555] <... futex resumed>) = 1 [pid 5559] prlimit64(0, RLIMIT_CPU, NULL, [ 120.216428][ T5559] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 120.232632][ T5559] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 115 with error 28 [ 120.245674][ T5559] EXT4-fs (loop0): This should not happen!! Data will be lost [ 120.245674][ T5559] [ 120.255406][ T5559] EXT4-fs (loop0): Total free blocks count 0 [pid 5555] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5559] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5559] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 120.262277][ T5559] EXT4-fs (loop0): Free/Dirty block details [ 120.268308][ T5559] EXT4-fs (loop0): free_blocks=2415919104 [ 120.274091][ T5559] EXT4-fs (loop0): dirty_blocks=128 [ 120.279652][ T5559] EXT4-fs (loop0): Block reservation details [ 120.285685][ T5559] EXT4-fs (loop0): i_reserved_data_blocks=8 [ 120.297044][ T5556] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 116 with max blocks 1 with error 28 [pid 5559] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5556] <... sendfile resumed>) = 237568 [pid 5556] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5556] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5555] close(3) = 0 [pid 5555] close(4) = 0 [pid 5555] close(5) = 0 [pid 5555] close(6) = -1 EBADF (Bad file descriptor) [pid 5555] close(7) = -1 EBADF (Bad file descriptor) [pid 5555] close(8) = -1 EBADF (Bad file descriptor) [pid 5555] close(9) = -1 EBADF (Bad file descriptor) [pid 5555] close(10) = -1 EBADF (Bad file descriptor) [pid 5555] close(11) = -1 EBADF (Bad file descriptor) [pid 5555] close(12) = -1 EBADF (Bad file descriptor) [pid 5555] close(13) = -1 EBADF (Bad file descriptor) [pid 5555] close(14) = -1 EBADF (Bad file descriptor) [pid 5555] close(15) = -1 EBADF (Bad file descriptor) [pid 5555] close(16) = -1 EBADF (Bad file descriptor) [pid 5555] close(17) = -1 EBADF (Bad file descriptor) [pid 5555] close(18) = -1 EBADF (Bad file descriptor) [pid 5555] close(19) = -1 EBADF (Bad file descriptor) [pid 5555] close(20) = -1 EBADF (Bad file descriptor) [pid 5555] close(21) = -1 EBADF (Bad file descriptor) [pid 5555] close(22) = -1 EBADF (Bad file descriptor) [pid 5555] close(23) = -1 EBADF (Bad file descriptor) [pid 5555] close(24) = -1 EBADF (Bad file descriptor) [pid 5555] close(25) = -1 EBADF (Bad file descriptor) [pid 5555] close(26) = -1 EBADF (Bad file descriptor) [pid 5555] close(27) = -1 EBADF (Bad file descriptor) [pid 5555] close(28) = -1 EBADF (Bad file descriptor) [pid 5555] close(29) = -1 EBADF (Bad file descriptor) [pid 5555] exit_group(0 [pid 5559] <... futex resumed>) = ? [pid 5556] <... futex resumed>) = ? [pid 5555] <... exit_group resumed>) = ? [pid 5559] +++ exited with 0 +++ [pid 5556] +++ exited with 0 +++ [pid 5555] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=296, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5046] umount2("./98", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./98", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./98/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./98/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./98/binderfs") = 0 [ 120.309858][ T5556] EXT4-fs (loop0): This should not happen!! Data will be lost [ 120.309858][ T5556] [pid 5046] umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./98/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./98/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./98/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./98") = 0 [pid 5046] mkdir("./99", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9c690) = 299 ./strace-static-x86_64: Process 5560 attached [pid 5560] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5560] chdir("./99") = 0 [pid 5560] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5560] setpgid(0, 0) = 0 [pid 5560] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5560] write(3, "1000", 4) = 4 [pid 5560] close(3) = 0 [pid 5560] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5560] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5560] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5560] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5560] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5560] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5560] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5560] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5560] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5561 attached => {parent_tid=[300]}, 88) = 300 [pid 5560] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5560] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5560] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5561] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5561] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5561] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5561] memfd_create("syzkaller", 0) = 3 [pid 5561] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5561] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5561] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5561] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5561] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5561] close(3) = 0 [pid 5561] mkdir("./file0", 0777) = 0 [pid 5561] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5561] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5561] chdir("./file0") = 0 [pid 5561] ioctl(4, LOOP_CLR_FD) = 0 [pid 5561] close(4) = 0 [pid 5561] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5560] <... futex resumed>) = 0 [pid 5560] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5560] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5561] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5561] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5561] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5560] <... futex resumed>) = 0 [pid 5560] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5561] <... futex resumed>) = 0 [pid 5560] <... futex resumed>) = 1 [pid 5561] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5561] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5560] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5561] <... futex resumed>) = 0 [pid 5561] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5560] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5560] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5561] <... futex resumed>) = 0 [pid 5561] ftruncate(5, 33587195) = 0 [pid 5561] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5561] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5560] <... futex resumed>) = 1 [pid 5560] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5560] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5561] <... futex resumed>) = 0 [pid 5561] sendfile(4, 5, NULL, 4) = 4 [pid 5560] <... futex resumed>) = 1 [pid 5560] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5561] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5560] <... futex resumed>) = 0 [pid 5560] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5561] <... futex resumed>) = 1 [pid 5560] <... futex resumed>) = 0 [pid 5561] sendfile(4, 5, NULL, 281474978811909 [pid 5560] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5560] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5560] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [ 120.423422][ T5561] loop0: detected capacity change from 0 to 2048 [pid 5560] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5560] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5564 attached [pid 5564] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5564] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5564] rt_sigprocmask(SIG_SETMASK, [], [pid 5560] <... clone3 resumed> => {parent_tid=[301]}, 88) = 301 [pid 5564] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5564] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5560] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5560] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5560] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5564] <... futex resumed>) = 0 [pid 5564] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5564] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5560] <... futex resumed>) = 0 [pid 5564] <... futex resumed>) = 1 [pid 5560] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5564] prlimit64(0, RLIMIT_CPU, NULL, [pid 5560] <... futex resumed>) = 0 [pid 5560] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 120.510524][ T5564] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 120.525678][ T5564] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 117 with error 28 [ 120.539013][ T5564] EXT4-fs (loop0): This should not happen!! Data will be lost [ 120.539013][ T5564] [ 120.548847][ T5564] EXT4-fs (loop0): Total free blocks count 0 [ 120.554937][ T5564] EXT4-fs (loop0): Free/Dirty block details [pid 5564] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5564] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5561] <... sendfile resumed>) = 241664 [pid 5564] <... futex resumed>) = 0 [pid 5564] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5561] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5561] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5560] close(3) = 0 [pid 5560] close(4) = 0 [pid 5560] close(5) = 0 [pid 5560] close(6) = -1 EBADF (Bad file descriptor) [pid 5560] close(7) = -1 EBADF (Bad file descriptor) [pid 5560] close(8) = -1 EBADF (Bad file descriptor) [pid 5560] close(9) = -1 EBADF (Bad file descriptor) [pid 5560] close(10) = -1 EBADF (Bad file descriptor) [pid 5560] close(11) = -1 EBADF (Bad file descriptor) [ 120.562107][ T5564] EXT4-fs (loop0): free_blocks=2415919104 [ 120.567952][ T5564] EXT4-fs (loop0): dirty_blocks=128 [ 120.573280][ T5564] EXT4-fs (loop0): Block reservation details [ 120.579410][ T5564] EXT4-fs (loop0): i_reserved_data_blocks=8 [ 120.589952][ T5561] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 118 with max blocks 1 with error 28 [ 120.602828][ T5561] EXT4-fs (loop0): This should not happen!! Data will be lost [ 120.602828][ T5561] [pid 5560] close(12) = -1 EBADF (Bad file descriptor) [pid 5560] close(13) = -1 EBADF (Bad file descriptor) [pid 5560] close(14) = -1 EBADF (Bad file descriptor) [pid 5560] close(15) = -1 EBADF (Bad file descriptor) [pid 5560] close(16) = -1 EBADF (Bad file descriptor) [pid 5560] close(17) = -1 EBADF (Bad file descriptor) [pid 5560] close(18) = -1 EBADF (Bad file descriptor) [pid 5560] close(19) = -1 EBADF (Bad file descriptor) [pid 5560] close(20) = -1 EBADF (Bad file descriptor) [pid 5560] close(21) = -1 EBADF (Bad file descriptor) [pid 5560] close(22) = -1 EBADF (Bad file descriptor) [pid 5560] close(23) = -1 EBADF (Bad file descriptor) [pid 5560] close(24) = -1 EBADF (Bad file descriptor) [pid 5560] close(25) = -1 EBADF (Bad file descriptor) [pid 5560] close(26) = -1 EBADF (Bad file descriptor) [pid 5560] close(27) = -1 EBADF (Bad file descriptor) [pid 5560] close(28) = -1 EBADF (Bad file descriptor) [pid 5560] close(29) = -1 EBADF (Bad file descriptor) [pid 5560] exit_group(0) = ? [pid 5564] <... futex resumed>) = ? [pid 5561] <... futex resumed>) = ? [pid 5564] +++ exited with 0 +++ [pid 5561] +++ exited with 0 +++ [pid 5560] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=299, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5046] umount2("./99", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./99", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./99/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./99/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./99/binderfs") = 0 [pid 5046] umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./99/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./99/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./99/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./99") = 0 [pid 5046] mkdir("./100", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5565 attached [pid 5565] set_robust_list(0x555555a9c6a0, 24 [pid 5046] <... clone resumed>, child_tidptr=0x555555a9c690) = 302 [pid 5565] <... set_robust_list resumed>) = 0 [pid 5565] chdir("./100") = 0 [pid 5565] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5565] setpgid(0, 0) = 0 [pid 5565] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5565] write(3, "1000", 4) = 4 [pid 5565] close(3) = 0 [pid 5565] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5565] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5565] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5565] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5565] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5565] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5565] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5565] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5565] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5566 attached [pid 5566] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053 [pid 5565] <... clone3 resumed> => {parent_tid=[303]}, 88) = 303 [pid 5566] <... rseq resumed>) = 0 [pid 5565] rt_sigprocmask(SIG_SETMASK, [], [pid 5566] set_robust_list(0x7efc0265e9a0, 24 [pid 5565] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5566] <... set_robust_list resumed>) = 0 [pid 5565] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5566] rt_sigprocmask(SIG_SETMASK, [], [pid 5565] <... futex resumed>) = 0 [pid 5566] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5565] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5566] memfd_create("syzkaller", 0) = 3 [pid 5566] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5566] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5566] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5566] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5566] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5566] close(3) = 0 [pid 5566] mkdir("./file0", 0777) = 0 [pid 5566] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5566] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5566] chdir("./file0") = 0 [pid 5566] ioctl(4, LOOP_CLR_FD) = 0 [pid 5566] close(4) = 0 [pid 5566] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5565] <... futex resumed>) = 0 [pid 5566] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5565] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5566] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5565] <... futex resumed>) = 0 [pid 5566] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5565] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5566] <... open resumed>) = 4 [pid 5566] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5565] <... futex resumed>) = 0 [pid 5565] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5565] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5566] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5566] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5565] <... futex resumed>) = 0 [pid 5565] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5565] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5566] ftruncate(5, 33587195) = 0 [pid 5566] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5566] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5565] <... futex resumed>) = 0 [pid 5565] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5566] <... futex resumed>) = 0 [pid 5565] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5566] sendfile(4, 5, NULL, 4) = 4 [pid 5566] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5565] <... futex resumed>) = 0 [pid 5566] sendfile(4, 5, NULL, 281474978811909 [ 120.755565][ T5566] loop0: detected capacity change from 0 to 2048 [pid 5565] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5565] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5565] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5565] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5565] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5565] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0} => {parent_tid=[304]}, 88) = 304 [pid 5565] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5565] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5565] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5569 attached [pid 5569] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5569] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5569] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5569] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5569] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5565] <... futex resumed>) = 0 [pid 5565] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5565] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5569] <... futex resumed>) = 1 [ 120.827009][ T5569] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 120.843099][ T5569] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 75 with error 28 [ 120.855787][ T5569] EXT4-fs (loop0): This should not happen!! Data will be lost [ 120.855787][ T5569] [ 120.865535][ T5569] EXT4-fs (loop0): Total free blocks count 0 [ 120.871555][ T5569] EXT4-fs (loop0): Free/Dirty block details [pid 5569] prlimit64(0, RLIMIT_CPU, NULL, [pid 5565] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5569] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5569] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 120.877589][ T5569] EXT4-fs (loop0): free_blocks=2415919104 [ 120.883561][ T5569] EXT4-fs (loop0): dirty_blocks=80 [ 120.888744][ T5569] EXT4-fs (loop0): Block reservation details [ 120.894734][ T5569] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 120.905353][ T5566] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 76 with max blocks 1 with error 28 [ 120.918103][ T5566] EXT4-fs (loop0): This should not happen!! Data will be lost [ 120.918103][ T5566] [pid 5569] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5566] <... sendfile resumed>) = 155648 [pid 5566] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5565] close(3 [pid 5566] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5565] <... close resumed>) = 0 [pid 5565] close(4) = 0 [pid 5565] close(5) = 0 [pid 5565] close(6) = -1 EBADF (Bad file descriptor) [pid 5565] close(7) = -1 EBADF (Bad file descriptor) [pid 5565] close(8) = -1 EBADF (Bad file descriptor) [pid 5565] close(9) = -1 EBADF (Bad file descriptor) [pid 5565] close(10) = -1 EBADF (Bad file descriptor) [pid 5565] close(11) = -1 EBADF (Bad file descriptor) [pid 5565] close(12) = -1 EBADF (Bad file descriptor) [pid 5565] close(13) = -1 EBADF (Bad file descriptor) [pid 5565] close(14) = -1 EBADF (Bad file descriptor) [pid 5565] close(15) = -1 EBADF (Bad file descriptor) [pid 5565] close(16) = -1 EBADF (Bad file descriptor) [pid 5565] close(17) = -1 EBADF (Bad file descriptor) [pid 5565] close(18) = -1 EBADF (Bad file descriptor) [pid 5565] close(19) = -1 EBADF (Bad file descriptor) [pid 5565] close(20) = -1 EBADF (Bad file descriptor) [pid 5565] close(21) = -1 EBADF (Bad file descriptor) [pid 5565] close(22) = -1 EBADF (Bad file descriptor) [pid 5565] close(23) = -1 EBADF (Bad file descriptor) [pid 5565] close(24) = -1 EBADF (Bad file descriptor) [pid 5565] close(25) = -1 EBADF (Bad file descriptor) [pid 5565] close(26) = -1 EBADF (Bad file descriptor) [pid 5565] close(27) = -1 EBADF (Bad file descriptor) [pid 5565] close(28) = -1 EBADF (Bad file descriptor) [pid 5565] close(29) = -1 EBADF (Bad file descriptor) [pid 5565] exit_group(0 [pid 5569] <... futex resumed>) = ? [pid 5569] +++ exited with 0 +++ [pid 5566] <... futex resumed>) = ? [pid 5565] <... exit_group resumed>) = ? [pid 5566] +++ exited with 0 +++ [pid 5565] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=302, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5046] umount2("./100", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./100", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./100/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./100/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./100/binderfs") = 0 [pid 5046] umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./100/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./100/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./100/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./100") = 0 [pid 5046] mkdir("./101", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5570 attached , child_tidptr=0x555555a9c690) = 305 [pid 5570] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5570] chdir("./101") = 0 [pid 5570] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5570] setpgid(0, 0) = 0 [pid 5570] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5570] write(3, "1000", 4) = 4 [pid 5570] close(3) = 0 [pid 5570] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5570] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5570] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5570] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5570] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5570] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5570] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5570] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5570] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0} => {parent_tid=[306]}, 88) = 306 [pid 5570] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5570] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5570] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5571 attached [pid 5571] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5571] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5571] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5571] memfd_create("syzkaller", 0) = 3 [pid 5571] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5571] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5571] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5571] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5571] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5571] close(3) = 0 [pid 5571] mkdir("./file0", 0777) = 0 [pid 5571] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5571] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5571] chdir("./file0") = 0 [pid 5571] ioctl(4, LOOP_CLR_FD) = 0 [pid 5571] close(4) = 0 [pid 5571] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5570] <... futex resumed>) = 0 [pid 5571] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5570] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5571] <... futex resumed>) = 0 [pid 5571] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5570] <... futex resumed>) = 1 [pid 5570] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5571] <... open resumed>) = 4 [pid 5571] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5570] <... futex resumed>) = 0 [pid 5571] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5570] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5571] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5570] <... futex resumed>) = 0 [pid 5571] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5570] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5571] <... open resumed>) = 5 [pid 5571] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5570] <... futex resumed>) = 0 [pid 5570] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5570] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5571] <... futex resumed>) = 1 [pid 5571] ftruncate(5, 33587195) = 0 [pid 5571] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5570] <... futex resumed>) = 0 [pid 5571] <... futex resumed>) = 1 [pid 5570] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5571] sendfile(4, 5, NULL, 4 [pid 5570] <... futex resumed>) = 0 [pid 5571] <... sendfile resumed>) = 4 [pid 5570] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5571] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5570] <... futex resumed>) = 0 [pid 5570] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5570] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5570] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5571] <... futex resumed>) = 1 [pid 5570] <... mmap resumed>) = 0x7efbfa31d000 [pid 5571] sendfile(4, 5, NULL, 281474978811909 [pid 5570] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5570] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5570] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5574 attached [pid 5574] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5574] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5574] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5574] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5570] <... clone3 resumed> => {parent_tid=[307]}, 88) = 307 [pid 5570] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5570] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5574] <... futex resumed>) = 0 [pid 5570] <... futex resumed>) = 1 [pid 5574] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000 [pid 5570] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5574] <... mmap resumed>) = 0x20000000 [pid 5574] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5570] <... futex resumed>) = 0 [pid 5570] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 121.039408][ T5571] loop0: detected capacity change from 0 to 2048 [ 121.061935][ T5571] EXT4-fs mount: 138 callbacks suppressed [ 121.061948][ T5571] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5570] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5574] <... futex resumed>) = 1 [ 121.122801][ T5574] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 121.138482][ T5574] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 35 with error 28 [ 121.151957][ T5574] EXT4-fs (loop0): This should not happen!! Data will be lost [ 121.151957][ T5574] [ 121.162513][ T5574] EXT4-fs (loop0): Total free blocks count 0 [pid 5574] prlimit64(0, RLIMIT_CPU, NULL, [pid 5570] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5574] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5574] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5574] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5571] <... sendfile resumed>) = 73728 [pid 5571] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5570] close(3 [pid 5571] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5570] <... close resumed>) = 0 [pid 5570] close(4) = 0 [pid 5570] close(5) = 0 [pid 5570] close(6) = -1 EBADF (Bad file descriptor) [pid 5570] close(7) = -1 EBADF (Bad file descriptor) [pid 5570] close(8) = -1 EBADF (Bad file descriptor) [pid 5570] close(9) = -1 EBADF (Bad file descriptor) [pid 5570] close(10) = -1 EBADF (Bad file descriptor) [pid 5570] close(11) = -1 EBADF (Bad file descriptor) [pid 5570] close(12) = -1 EBADF (Bad file descriptor) [pid 5570] close(13) = -1 EBADF (Bad file descriptor) [pid 5570] close(14) = -1 EBADF (Bad file descriptor) [pid 5570] close(15) = -1 EBADF (Bad file descriptor) [pid 5570] close(16) = -1 EBADF (Bad file descriptor) [pid 5570] close(17) = -1 EBADF (Bad file descriptor) [pid 5570] close(18) = -1 EBADF (Bad file descriptor) [pid 5570] close(19) = -1 EBADF (Bad file descriptor) [pid 5570] close(20) = -1 EBADF (Bad file descriptor) [pid 5570] close(21) = -1 EBADF (Bad file descriptor) [pid 5570] close(22) = -1 EBADF (Bad file descriptor) [pid 5570] close(23) = -1 EBADF (Bad file descriptor) [pid 5570] close(24) = -1 EBADF (Bad file descriptor) [pid 5570] close(25) = -1 EBADF (Bad file descriptor) [pid 5570] close(26) = -1 EBADF (Bad file descriptor) [pid 5570] close(27) = -1 EBADF (Bad file descriptor) [pid 5570] close(28) = -1 EBADF (Bad file descriptor) [pid 5570] close(29) = -1 EBADF (Bad file descriptor) [pid 5570] exit_group(0 [pid 5571] <... futex resumed>) = ? [pid 5570] <... exit_group resumed>) = ? [pid 5574] <... futex resumed>) = ? [pid 5571] +++ exited with 0 +++ [pid 5574] +++ exited with 0 +++ [pid 5570] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=305, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5046] umount2("./101", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./101", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./101/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./101/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./101/binderfs") = 0 [ 121.168731][ T5574] EXT4-fs (loop0): Free/Dirty block details [ 121.175242][ T5574] EXT4-fs (loop0): free_blocks=2415919104 [ 121.181072][ T5574] EXT4-fs (loop0): dirty_blocks=48 [ 121.186490][ T5574] EXT4-fs (loop0): Block reservation details [ 121.192575][ T5574] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 121.202030][ T5571] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 36 with max blocks 1 with error 28 [pid 5046] umount2("./101/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./101/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./101/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./101/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./101/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./101/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./101") = 0 [pid 5046] mkdir("./102", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9c690) = 308 ./strace-static-x86_64: Process 5575 attached [pid 5575] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5575] chdir("./102") = 0 [pid 5575] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5575] setpgid(0, 0) = 0 [pid 5575] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5575] write(3, "1000", 4) = 4 [pid 5575] close(3) = 0 [pid 5575] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5575] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5575] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5575] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5575] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5575] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5575] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5575] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5575] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0} => {parent_tid=[309]}, 88) = 309 [pid 5575] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5575] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5575] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5576 attached [pid 5576] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5576] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5576] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5576] memfd_create("syzkaller", 0) = 3 [pid 5576] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5576] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5576] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5576] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5576] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5576] close(3) = 0 [pid 5576] mkdir("./file0", 0777) = 0 [pid 5576] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5576] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5576] chdir("./file0") = 0 [pid 5576] ioctl(4, LOOP_CLR_FD) = 0 [pid 5576] close(4) = 0 [pid 5576] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5576] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5575] <... futex resumed>) = 0 [pid 5575] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5576] <... futex resumed>) = 0 [pid 5576] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5575] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5576] <... open resumed>) = 4 [pid 5576] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5575] <... futex resumed>) = 0 [pid 5575] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5576] <... futex resumed>) = 1 [pid 5575] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5576] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5576] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5575] <... futex resumed>) = 0 [pid 5575] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5576] ftruncate(5, 33587195 [pid 5575] <... futex resumed>) = 0 [pid 5575] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5576] <... ftruncate resumed>) = 0 [pid 5576] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5575] <... futex resumed>) = 0 [pid 5575] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5576] sendfile(4, 5, NULL, 4 [pid 5575] <... futex resumed>) = 0 [pid 5576] <... sendfile resumed>) = 4 [pid 5575] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5576] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5575] <... futex resumed>) = 0 [pid 5575] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5576] <... futex resumed>) = 1 [pid 5575] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5576] sendfile(4, 5, NULL, 281474978811909 [pid 5575] <... futex resumed>) = 0 [pid 5575] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5575] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5575] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5575] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5579 attached [pid 5579] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5575] <... clone3 resumed> => {parent_tid=[310]}, 88) = 310 [pid 5579] <... rseq resumed>) = 0 [pid 5575] rt_sigprocmask(SIG_SETMASK, [], [pid 5579] set_robust_list(0x7efbfa33d9a0, 24 [pid 5575] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5579] <... set_robust_list resumed>) = 0 [pid 5575] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5579] rt_sigprocmask(SIG_SETMASK, [], [pid 5575] <... futex resumed>) = 0 [pid 5579] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5575] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5579] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5579] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5575] <... futex resumed>) = 0 [pid 5579] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5575] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5579] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5575] <... futex resumed>) = 0 [pid 5579] prlimit64(0, RLIMIT_CPU, NULL, [ 121.331063][ T5576] loop0: detected capacity change from 0 to 2048 [ 121.351398][ T5576] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5575] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5575] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [ 121.398980][ T5579] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 121.414719][ T5579] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 19 with error 28 [ 121.428876][ T5579] EXT4-fs (loop0): This should not happen!! Data will be lost [ 121.428876][ T5579] [ 121.439211][ T5579] EXT4-fs (loop0): Total free blocks count 0 [pid 5579] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5579] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5579] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5576] <... sendfile resumed>) = 40960 [pid 5576] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5576] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5575] close(3) = 0 [pid 5575] close(4) = 0 [pid 5575] close(5) = 0 [pid 5575] close(6) = -1 EBADF (Bad file descriptor) [pid 5575] close(7) = -1 EBADF (Bad file descriptor) [pid 5575] close(8) = -1 EBADF (Bad file descriptor) [pid 5575] close(9) = -1 EBADF (Bad file descriptor) [pid 5575] close(10) = -1 EBADF (Bad file descriptor) [pid 5575] close(11) = -1 EBADF (Bad file descriptor) [pid 5575] close(12) = -1 EBADF (Bad file descriptor) [pid 5575] close(13) = -1 EBADF (Bad file descriptor) [pid 5575] close(14) = -1 EBADF (Bad file descriptor) [pid 5575] close(15) = -1 EBADF (Bad file descriptor) [pid 5575] close(16) = -1 EBADF (Bad file descriptor) [pid 5575] close(17) = -1 EBADF (Bad file descriptor) [pid 5575] close(18) = -1 EBADF (Bad file descriptor) [pid 5575] close(19) = -1 EBADF (Bad file descriptor) [pid 5575] close(20) = -1 EBADF (Bad file descriptor) [pid 5575] close(21) = -1 EBADF (Bad file descriptor) [pid 5575] close(22) = -1 EBADF (Bad file descriptor) [pid 5575] close(23) = -1 EBADF (Bad file descriptor) [pid 5575] close(24) = -1 EBADF (Bad file descriptor) [pid 5575] close(25) = -1 EBADF (Bad file descriptor) [pid 5575] close(26) = -1 EBADF (Bad file descriptor) [pid 5575] close(27) = -1 EBADF (Bad file descriptor) [pid 5575] close(28) = -1 EBADF (Bad file descriptor) [pid 5575] close(29) = -1 EBADF (Bad file descriptor) [pid 5575] exit_group(0 [pid 5579] <... futex resumed>) = ? [pid 5575] <... exit_group resumed>) = ? [pid 5579] +++ exited with 0 +++ [pid 5576] <... futex resumed>) = ? [pid 5576] +++ exited with 0 +++ [pid 5575] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=308, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5046] umount2("./102", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./102", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./102/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./102/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./102/binderfs") = 0 [ 121.445262][ T5579] EXT4-fs (loop0): Free/Dirty block details [ 121.451601][ T5579] EXT4-fs (loop0): free_blocks=2415919104 [ 121.457438][ T5579] EXT4-fs (loop0): dirty_blocks=32 [ 121.462556][ T5579] EXT4-fs (loop0): Block reservation details [ 121.468616][ T5579] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 121.476557][ T5576] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 20 with max blocks 1 with error 28 [pid 5046] umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./102/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./102/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./102/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./102") = 0 [pid 5046] mkdir("./103", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5580 attached , child_tidptr=0x555555a9c690) = 311 [pid 5580] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5580] chdir("./103") = 0 [pid 5580] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5580] setpgid(0, 0) = 0 [pid 5580] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5580] write(3, "1000", 4) = 4 [pid 5580] close(3) = 0 [pid 5580] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5580] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5580] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5580] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5580] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5580] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5580] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5580] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5580] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5581 attached [pid 5581] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053 [pid 5580] <... clone3 resumed> => {parent_tid=[312]}, 88) = 312 [pid 5581] <... rseq resumed>) = 0 [pid 5580] rt_sigprocmask(SIG_SETMASK, [], [pid 5581] set_robust_list(0x7efc0265e9a0, 24 [pid 5580] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5581] <... set_robust_list resumed>) = 0 [pid 5580] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5581] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5580] <... futex resumed>) = 0 [pid 5581] memfd_create("syzkaller", 0 [pid 5580] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5581] <... memfd_create resumed>) = 3 [pid 5581] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5581] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5581] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5581] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5581] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5581] close(3) = 0 [pid 5581] mkdir("./file0", 0777) = 0 [pid 5581] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5581] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5581] chdir("./file0") = 0 [pid 5581] ioctl(4, LOOP_CLR_FD) = 0 [pid 5581] close(4) = 0 [pid 5581] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5580] <... futex resumed>) = 0 [pid 5581] <... futex resumed>) = 1 [pid 5580] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5581] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5580] <... futex resumed>) = 0 [pid 5580] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5581] <... open resumed>) = 4 [pid 5581] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5580] <... futex resumed>) = 0 [pid 5581] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5580] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5581] <... open resumed>) = 5 [pid 5580] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5581] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5580] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5581] <... futex resumed>) = 0 [pid 5580] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5581] ftruncate(5, 33587195 [pid 5580] <... futex resumed>) = 0 [pid 5581] <... ftruncate resumed>) = 0 [pid 5580] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5581] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5580] <... futex resumed>) = 0 [pid 5581] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5580] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5581] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5580] <... futex resumed>) = 0 [pid 5581] sendfile(4, 5, NULL, 4 [pid 5580] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5581] <... sendfile resumed>) = 4 [pid 5581] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5580] <... futex resumed>) = 0 [pid 5580] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5580] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5581] <... futex resumed>) = 1 [pid 5580] <... futex resumed>) = 0 [pid 5581] sendfile(4, 5, NULL, 281474978811909 [pid 5580] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5580] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5580] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5580] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0} => {parent_tid=[313]}, 88) = 313 [pid 5580] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5580] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5584 attached ) = 0 [pid 5584] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5580] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5584] <... rseq resumed>) = 0 [pid 5584] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5584] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 121.590429][ T5581] loop0: detected capacity change from 0 to 2048 [ 121.610125][ T5581] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5584] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5584] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5580] <... futex resumed>) = 0 [pid 5580] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5580] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5584] <... futex resumed>) = 1 [pid 5584] prlimit64(0, RLIMIT_CPU, NULL, [pid 5580] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 121.680053][ T5584] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 121.695951][ T5584] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 135 with error 28 [ 121.709592][ T5584] EXT4-fs (loop0): This should not happen!! Data will be lost [ 121.709592][ T5584] [ 121.719731][ T5584] EXT4-fs (loop0): Total free blocks count 0 [pid 5584] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5584] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5584] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5581] <... sendfile resumed>) = 278528 [pid 5581] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5581] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5580] close(3) = 0 [pid 5580] close(4) = 0 [pid 5580] close(5) = 0 [pid 5580] close(6) = -1 EBADF (Bad file descriptor) [pid 5580] close(7) = -1 EBADF (Bad file descriptor) [pid 5580] close(8) = -1 EBADF (Bad file descriptor) [pid 5580] close(9) = -1 EBADF (Bad file descriptor) [pid 5580] close(10) = -1 EBADF (Bad file descriptor) [pid 5580] close(11) = -1 EBADF (Bad file descriptor) [pid 5580] close(12) = -1 EBADF (Bad file descriptor) [pid 5580] close(13) = -1 EBADF (Bad file descriptor) [pid 5580] close(14) = -1 EBADF (Bad file descriptor) [pid 5580] close(15) = -1 EBADF (Bad file descriptor) [pid 5580] close(16) = -1 EBADF (Bad file descriptor) [pid 5580] close(17) = -1 EBADF (Bad file descriptor) [pid 5580] close(18) = -1 EBADF (Bad file descriptor) [pid 5580] close(19) = -1 EBADF (Bad file descriptor) [pid 5580] close(20) = -1 EBADF (Bad file descriptor) [pid 5580] close(21) = -1 EBADF (Bad file descriptor) [pid 5580] close(22) = -1 EBADF (Bad file descriptor) [pid 5580] close(23) = -1 EBADF (Bad file descriptor) [pid 5580] close(24) = -1 EBADF (Bad file descriptor) [pid 5580] close(25) = -1 EBADF (Bad file descriptor) [pid 5580] close(26) = -1 EBADF (Bad file descriptor) [pid 5580] close(27) = -1 EBADF (Bad file descriptor) [pid 5580] close(28) = -1 EBADF (Bad file descriptor) [pid 5580] close(29) = -1 EBADF (Bad file descriptor) [pid 5580] exit_group(0 [pid 5584] <... futex resumed>) = ? [pid 5581] <... futex resumed>) = ? [pid 5580] <... exit_group resumed>) = ? [pid 5584] +++ exited with 0 +++ [pid 5581] +++ exited with 0 +++ [pid 5580] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=311, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./103", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./103", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./103/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./103/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./103/binderfs") = 0 [ 121.726467][ T5584] EXT4-fs (loop0): Free/Dirty block details [ 121.732882][ T5584] EXT4-fs (loop0): free_blocks=2415919104 [ 121.738805][ T5584] EXT4-fs (loop0): dirty_blocks=144 [ 121.744035][ T5584] EXT4-fs (loop0): Block reservation details [ 121.750109][ T5584] EXT4-fs (loop0): i_reserved_data_blocks=9 [ 121.760885][ T5581] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 136 with max blocks 1 with error 28 [pid 5046] umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./103/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./103/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./103/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./103") = 0 [pid 5046] mkdir("./104", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5585 attached , child_tidptr=0x555555a9c690) = 314 [pid 5585] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5585] chdir("./104") = 0 [pid 5585] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5585] setpgid(0, 0) = 0 [pid 5585] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5585] write(3, "1000", 4) = 4 [pid 5585] close(3) = 0 [pid 5585] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5585] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5585] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5585] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5585] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5585] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5585] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5585] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5585] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0} => {parent_tid=[315]}, 88) = 315 [pid 5585] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5585] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 5586 attached [pid 5585] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5586] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5586] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5586] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5586] memfd_create("syzkaller", 0) = 3 [pid 5586] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5586] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5586] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5586] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5586] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5586] close(3) = 0 [pid 5586] mkdir("./file0", 0777) = 0 [pid 5586] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5586] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5586] chdir("./file0") = 0 [pid 5586] ioctl(4, LOOP_CLR_FD) = 0 [pid 5586] close(4) = 0 [pid 5586] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5585] <... futex resumed>) = 0 [pid 5585] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5585] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5586] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5586] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5586] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5585] <... futex resumed>) = 0 [pid 5585] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5586] <... futex resumed>) = 0 [pid 5586] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5586] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5586] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5585] <... futex resumed>) = 1 [pid 5585] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5585] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5586] <... futex resumed>) = 0 [pid 5585] <... futex resumed>) = 1 [pid 5586] ftruncate(5, 33587195 [pid 5585] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5586] <... ftruncate resumed>) = 0 [pid 5586] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5585] <... futex resumed>) = 0 [pid 5586] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5585] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5586] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5585] <... futex resumed>) = 0 [pid 5586] sendfile(4, 5, NULL, 4 [pid 5585] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5586] <... sendfile resumed>) = 4 [pid 5586] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5585] <... futex resumed>) = 0 [pid 5586] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5585] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5586] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5585] <... futex resumed>) = 0 [pid 5586] sendfile(4, 5, NULL, 281474978811909 [pid 5585] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5585] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5585] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5585] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5585] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5589 attached [pid 5589] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5585] <... clone3 resumed> => {parent_tid=[316]}, 88) = 316 [pid 5589] <... rseq resumed>) = 0 [pid 5585] rt_sigprocmask(SIG_SETMASK, [], [pid 5589] set_robust_list(0x7efbfa33d9a0, 24 [pid 5585] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5589] <... set_robust_list resumed>) = 0 [ 121.902253][ T5586] loop0: detected capacity change from 0 to 2048 [ 121.920428][ T5586] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5585] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5589] rt_sigprocmask(SIG_SETMASK, [], [pid 5585] <... futex resumed>) = 0 [pid 5585] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5589] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5589] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5589] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5589] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5585] <... futex resumed>) = 0 [pid 5585] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5589] <... futex resumed>) = 0 [pid 5589] prlimit64(0, RLIMIT_CPU, NULL, [pid 5585] <... futex resumed>) = 1 [ 122.009413][ T5586] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 122.024464][ T5586] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 170 with max blocks 1 with error 28 [ 122.042054][ T5586] EXT4-fs (loop0): This should not happen!! Data will be lost [ 122.042054][ T5586] [ 122.051842][ T5586] EXT4-fs (loop0): Total free blocks count 0 [pid 5585] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5586] <... sendfile resumed>) = 348160 [pid 5586] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5586] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5589] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5589] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5589] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5585] close(3) = 0 [pid 5585] close(4) = 0 [pid 5585] close(5) = 0 [pid 5585] close(6) = -1 EBADF (Bad file descriptor) [pid 5585] close(7) = -1 EBADF (Bad file descriptor) [pid 5585] close(8) = -1 EBADF (Bad file descriptor) [pid 5585] close(9) = -1 EBADF (Bad file descriptor) [pid 5585] close(10) = -1 EBADF (Bad file descriptor) [pid 5585] close(11) = -1 EBADF (Bad file descriptor) [pid 5585] close(12) = -1 EBADF (Bad file descriptor) [pid 5585] close(13) = -1 EBADF (Bad file descriptor) [pid 5585] close(14) = -1 EBADF (Bad file descriptor) [pid 5585] close(15) = -1 EBADF (Bad file descriptor) [pid 5585] close(16) = -1 EBADF (Bad file descriptor) [pid 5585] close(17) = -1 EBADF (Bad file descriptor) [pid 5585] close(18) = -1 EBADF (Bad file descriptor) [pid 5585] close(19) = -1 EBADF (Bad file descriptor) [pid 5585] close(20) = -1 EBADF (Bad file descriptor) [pid 5585] close(21) = -1 EBADF (Bad file descriptor) [pid 5585] close(22) = -1 EBADF (Bad file descriptor) [pid 5585] close(23) = -1 EBADF (Bad file descriptor) [pid 5585] close(24) = -1 EBADF (Bad file descriptor) [pid 5585] close(25) = -1 EBADF (Bad file descriptor) [pid 5585] close(26) = -1 EBADF (Bad file descriptor) [pid 5585] close(27) = -1 EBADF (Bad file descriptor) [pid 5585] close(28) = -1 EBADF (Bad file descriptor) [pid 5585] close(29) = -1 EBADF (Bad file descriptor) [pid 5585] exit_group(0 [pid 5589] <... futex resumed>) = ? [pid 5586] <... futex resumed>) = ? [pid 5585] <... exit_group resumed>) = ? [pid 5589] +++ exited with 0 +++ [pid 5586] +++ exited with 0 +++ [pid 5585] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=314, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./104", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./104", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./104/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./104/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./104/binderfs") = 0 [ 122.057918][ T5586] EXT4-fs (loop0): Free/Dirty block details [ 122.063822][ T5586] EXT4-fs (loop0): free_blocks=2415919104 [ 122.069639][ T5586] EXT4-fs (loop0): dirty_blocks=176 [ 122.074862][ T5586] EXT4-fs (loop0): Block reservation details [ 122.080897][ T5586] EXT4-fs (loop0): i_reserved_data_blocks=11 [ 122.087383][ T5589] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 170 with error 28 [pid 5046] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./104/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./104/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./104/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./104") = 0 [pid 5046] mkdir("./105", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5590 attached , child_tidptr=0x555555a9c690) = 317 [pid 5590] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5590] chdir("./105") = 0 [pid 5590] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5590] setpgid(0, 0) = 0 [pid 5590] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5590] write(3, "1000", 4) = 4 [pid 5590] close(3) = 0 [pid 5590] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5590] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5590] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5590] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5590] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5590] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5590] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5590] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5590] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0} => {parent_tid=[318]}, 88) = 318 [pid 5590] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5590] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5590] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5591 attached [pid 5591] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5591] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5591] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5591] memfd_create("syzkaller", 0) = 3 [pid 5591] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5591] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5591] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5591] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5591] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5591] close(3) = 0 [pid 5591] mkdir("./file0", 0777) = 0 [pid 5591] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5591] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5591] chdir("./file0") = 0 [pid 5591] ioctl(4, LOOP_CLR_FD) = 0 [pid 5591] close(4) = 0 [pid 5591] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5591] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5590] <... futex resumed>) = 0 [pid 5590] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5591] <... futex resumed>) = 0 [pid 5590] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5591] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5591] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5590] <... futex resumed>) = 0 [pid 5590] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5591] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5590] <... futex resumed>) = 0 [pid 5591] <... open resumed>) = 5 [pid 5590] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5591] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5590] <... futex resumed>) = 0 [pid 5591] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5590] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5591] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5590] <... futex resumed>) = 0 [pid 5591] ftruncate(5, 33587195 [pid 5590] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5591] <... ftruncate resumed>) = 0 [pid 5591] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5590] <... futex resumed>) = 0 [pid 5591] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5590] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5591] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5590] <... futex resumed>) = 0 [pid 5591] sendfile(4, 5, NULL, 4 [pid 5590] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5591] <... sendfile resumed>) = 4 [pid 5591] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5590] <... futex resumed>) = 0 [pid 5591] sendfile(4, 5, NULL, 281474978811909 [pid 5590] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5590] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 122.209730][ T5591] loop0: detected capacity change from 0 to 2048 [ 122.241321][ T5591] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5590] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5590] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5590] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5590] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5594 attached => {parent_tid=[319]}, 88) = 319 [pid 5590] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5590] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5590] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5594] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5594] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5594] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5594] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5594] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5590] <... futex resumed>) = 0 [pid 5594] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5590] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5594] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5590] <... futex resumed>) = 0 [pid 5594] prlimit64(0, RLIMIT_CPU, NULL, [ 122.319762][ T5594] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 122.335662][ T5594] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 169 with error 28 [ 122.348287][ T5594] EXT4-fs (loop0): This should not happen!! Data will be lost [ 122.348287][ T5594] [ 122.358589][ T5594] EXT4-fs (loop0): Total free blocks count 0 [pid 5590] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5594] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5594] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5594] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5591] <... sendfile resumed>) = 348160 [pid 5591] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5591] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5590] close(3) = 0 [pid 5590] close(4) = 0 [pid 5590] close(5) = 0 [pid 5590] close(6) = -1 EBADF (Bad file descriptor) [pid 5590] close(7) = -1 EBADF (Bad file descriptor) [pid 5590] close(8) = -1 EBADF (Bad file descriptor) [pid 5590] close(9) = -1 EBADF (Bad file descriptor) [pid 5590] close(10) = -1 EBADF (Bad file descriptor) [pid 5590] close(11) = -1 EBADF (Bad file descriptor) [pid 5590] close(12) = -1 EBADF (Bad file descriptor) [pid 5590] close(13) = -1 EBADF (Bad file descriptor) [pid 5590] close(14) = -1 EBADF (Bad file descriptor) [pid 5590] close(15) = -1 EBADF (Bad file descriptor) [pid 5590] close(16) = -1 EBADF (Bad file descriptor) [pid 5590] close(17) = -1 EBADF (Bad file descriptor) [pid 5590] close(18) = -1 EBADF (Bad file descriptor) [pid 5590] close(19) = -1 EBADF (Bad file descriptor) [pid 5590] close(20) = -1 EBADF (Bad file descriptor) [pid 5590] close(21) = -1 EBADF (Bad file descriptor) [pid 5590] close(22) = -1 EBADF (Bad file descriptor) [pid 5590] close(23) = -1 EBADF (Bad file descriptor) [pid 5590] close(24) = -1 EBADF (Bad file descriptor) [pid 5590] close(25) = -1 EBADF (Bad file descriptor) [pid 5590] close(26) = -1 EBADF (Bad file descriptor) [pid 5590] close(27) = -1 EBADF (Bad file descriptor) [pid 5590] close(28) = -1 EBADF (Bad file descriptor) [pid 5590] close(29) = -1 EBADF (Bad file descriptor) [pid 5590] exit_group(0 [pid 5594] <... futex resumed>) = ? [pid 5594] +++ exited with 0 +++ [pid 5591] <... futex resumed>) = ? [pid 5590] <... exit_group resumed>) = ? [pid 5591] +++ exited with 0 +++ [pid 5590] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=317, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./105", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./105/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./105/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./105/binderfs") = 0 [pid 5046] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 122.364594][ T5594] EXT4-fs (loop0): Free/Dirty block details [ 122.370538][ T5594] EXT4-fs (loop0): free_blocks=2415919104 [ 122.376457][ T5594] EXT4-fs (loop0): dirty_blocks=176 [ 122.381814][ T5594] EXT4-fs (loop0): Block reservation details [ 122.388070][ T5594] EXT4-fs (loop0): i_reserved_data_blocks=11 [ 122.400576][ T5591] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 170 with max blocks 1 with error 28 [pid 5046] newfstatat(AT_FDCWD, "./105/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./105/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./105/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./105") = 0 [pid 5046] mkdir("./106", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5595 attached [pid 5595] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5595] chdir("./106" [pid 5046] <... clone resumed>, child_tidptr=0x555555a9c690) = 320 [pid 5595] <... chdir resumed>) = 0 [pid 5595] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5595] setpgid(0, 0) = 0 [pid 5595] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5595] write(3, "1000", 4) = 4 [pid 5595] close(3) = 0 [pid 5595] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5595] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5595] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5595] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5595] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5595] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5595] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5595] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5595] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5596 attached [pid 5596] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053 [pid 5595] <... clone3 resumed> => {parent_tid=[321]}, 88) = 321 [pid 5595] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5595] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5595] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5596] <... rseq resumed>) = 0 [pid 5596] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5596] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5596] memfd_create("syzkaller", 0) = 3 [pid 5596] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5596] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5596] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5596] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5596] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5596] close(3) = 0 [pid 5596] mkdir("./file0", 0777) = 0 [pid 5596] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5596] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5596] chdir("./file0") = 0 [pid 5596] ioctl(4, LOOP_CLR_FD) = 0 [pid 5596] close(4) = 0 [pid 5596] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5595] <... futex resumed>) = 0 [pid 5595] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5596] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5595] <... futex resumed>) = 0 [pid 5595] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5596] <... open resumed>) = 4 [pid 5596] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5595] <... futex resumed>) = 0 [pid 5596] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5595] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5596] <... open resumed>) = 5 [pid 5595] <... futex resumed>) = 0 [pid 5595] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5596] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5595] <... futex resumed>) = 0 [pid 5595] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5596] ftruncate(5, 33587195 [pid 5595] <... futex resumed>) = 0 [pid 5596] <... ftruncate resumed>) = 0 [pid 5595] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5596] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5596] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5595] <... futex resumed>) = 0 [pid 5595] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5596] <... futex resumed>) = 0 [pid 5596] sendfile(4, 5, NULL, 4 [pid 5595] <... futex resumed>) = 1 [pid 5596] <... sendfile resumed>) = 4 [pid 5595] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5596] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5595] <... futex resumed>) = 0 [pid 5595] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5595] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5596] <... futex resumed>) = 1 [pid 5595] <... futex resumed>) = 0 [pid 5596] sendfile(4, 5, NULL, 281474978811909 [pid 5595] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5595] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5595] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5595] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5599 attached [pid 5599] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5595] <... clone3 resumed> => {parent_tid=[322]}, 88) = 322 [pid 5599] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5599] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5599] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5595] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5595] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5599] <... futex resumed>) = 0 [pid 5599] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000 [pid 5595] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5599] <... mmap resumed>) = 0x20000000 [pid 5599] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5595] <... futex resumed>) = 0 [pid 5599] prlimit64(0, RLIMIT_CPU, NULL, [pid 5595] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 122.531837][ T5596] loop0: detected capacity change from 0 to 2048 [ 122.550819][ T5596] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5595] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 122.603839][ T5599] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 122.619457][ T5599] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 65 with error 28 [ 122.632385][ T5599] EXT4-fs (loop0): This should not happen!! Data will be lost [ 122.632385][ T5599] [ 122.642381][ T5599] EXT4-fs (loop0): Total free blocks count 0 [pid 5599] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5599] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5599] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5596] <... sendfile resumed>) = 135168 [pid 5596] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5596] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5595] close(3) = 0 [pid 5595] close(4) = 0 [pid 5595] close(5) = 0 [pid 5595] close(6) = -1 EBADF (Bad file descriptor) [pid 5595] close(7) = -1 EBADF (Bad file descriptor) [pid 5595] close(8) = -1 EBADF (Bad file descriptor) [pid 5595] close(9) = -1 EBADF (Bad file descriptor) [pid 5595] close(10) = -1 EBADF (Bad file descriptor) [pid 5595] close(11) = -1 EBADF (Bad file descriptor) [pid 5595] close(12) = -1 EBADF (Bad file descriptor) [pid 5595] close(13) = -1 EBADF (Bad file descriptor) [pid 5595] close(14) = -1 EBADF (Bad file descriptor) [pid 5595] close(15) = -1 EBADF (Bad file descriptor) [pid 5595] close(16) = -1 EBADF (Bad file descriptor) [pid 5595] close(17) = -1 EBADF (Bad file descriptor) [pid 5595] close(18) = -1 EBADF (Bad file descriptor) [pid 5595] close(19) = -1 EBADF (Bad file descriptor) [pid 5595] close(20) = -1 EBADF (Bad file descriptor) [pid 5595] close(21) = -1 EBADF (Bad file descriptor) [pid 5595] close(22) = -1 EBADF (Bad file descriptor) [pid 5595] close(23) = -1 EBADF (Bad file descriptor) [pid 5595] close(24) = -1 EBADF (Bad file descriptor) [pid 5595] close(25) = -1 EBADF (Bad file descriptor) [pid 5595] close(26) = -1 EBADF (Bad file descriptor) [pid 5595] close(27) = -1 EBADF (Bad file descriptor) [pid 5595] close(28) = -1 EBADF (Bad file descriptor) [pid 5595] close(29) = -1 EBADF (Bad file descriptor) [pid 5595] exit_group(0) = ? [pid 5599] <... futex resumed>) = ? [pid 5596] <... futex resumed>) = ? [pid 5596] +++ exited with 0 +++ [pid 5599] +++ exited with 0 +++ [pid 5595] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=320, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5046] umount2("./106", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./106/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./106/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./106/binderfs") = 0 [pid 5046] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./106/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 122.648606][ T5599] EXT4-fs (loop0): Free/Dirty block details [ 122.654582][ T5599] EXT4-fs (loop0): free_blocks=2415919104 [ 122.660413][ T5599] EXT4-fs (loop0): dirty_blocks=80 [ 122.665552][ T5599] EXT4-fs (loop0): Block reservation details [ 122.672188][ T5599] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 122.681407][ T5596] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 66 with max blocks 1 with error 28 [pid 5046] openat(AT_FDCWD, "./106/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./106/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./106") = 0 [pid 5046] mkdir("./107", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9c690) = 323 ./strace-static-x86_64: Process 5600 attached [pid 5600] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5600] chdir("./107") = 0 [pid 5600] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5600] setpgid(0, 0) = 0 [pid 5600] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5600] write(3, "1000", 4) = 4 [pid 5600] close(3) = 0 [pid 5600] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5600] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5600] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5600] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5600] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5600] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5600] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5600] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5600] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0} => {parent_tid=[324]}, 88) = 324 [pid 5600] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5600] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5600] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5601 attached [pid 5601] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5601] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5601] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5601] memfd_create("syzkaller", 0) = 3 [pid 5601] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5601] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5601] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5601] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5601] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5601] close(3) = 0 [pid 5601] mkdir("./file0", 0777) = 0 [pid 5601] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5601] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5601] chdir("./file0") = 0 [pid 5601] ioctl(4, LOOP_CLR_FD) = 0 [pid 5601] close(4) = 0 [pid 5601] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5601] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5600] <... futex resumed>) = 0 [pid 5600] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5600] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5601] <... futex resumed>) = 0 [pid 5601] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5601] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5600] <... futex resumed>) = 0 [pid 5601] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5600] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5601] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5601] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5600] <... futex resumed>) = 0 [pid 5600] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5601] <... open resumed>) = 5 [pid 5601] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5600] <... futex resumed>) = 0 [pid 5601] ftruncate(5, 33587195 [pid 5600] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5601] <... ftruncate resumed>) = 0 [pid 5600] <... futex resumed>) = 0 [pid 5600] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5601] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5601] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5600] <... futex resumed>) = 0 [pid 5600] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5601] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5600] <... futex resumed>) = 0 [pid 5601] sendfile(4, 5, NULL, 4) = 4 [pid 5600] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5601] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5600] <... futex resumed>) = 0 [pid 5600] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5600] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5601] sendfile(4, 5, NULL, 281474978811909 [pid 5600] <... futex resumed>) = 0 [pid 5600] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5600] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5600] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5600] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5604 attached [pid 5604] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5600] <... clone3 resumed> => {parent_tid=[325]}, 88) = 325 [pid 5604] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5600] rt_sigprocmask(SIG_SETMASK, [], [pid 5604] rt_sigprocmask(SIG_SETMASK, [], [pid 5600] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5604] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5600] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5604] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000 [pid 5600] <... futex resumed>) = 0 [pid 5600] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5604] <... mmap resumed>) = 0x20000000 [pid 5604] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5600] <... futex resumed>) = 0 [pid 5604] <... futex resumed>) = 1 [pid 5600] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5604] prlimit64(0, RLIMIT_CPU, NULL, [pid 5600] <... futex resumed>) = 0 [ 122.809131][ T5601] loop0: detected capacity change from 0 to 2048 [ 122.830350][ T5601] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.888741][ T5604] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 122.905319][ T5604] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 56 with error 28 [ 122.906381][ T5601] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 56 with max blocks 1 with error 28 [ 122.918060][ T5604] EXT4-fs (loop0): This should not happen!! Data will be lost [pid 5600] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5601] <... sendfile resumed>) = 114688 [pid 5601] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5601] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5604] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5604] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5600] close(3) = 0 [pid 5600] close(4) = 0 [pid 5600] close(5) = 0 [pid 5600] close(6) = -1 EBADF (Bad file descriptor) [pid 5600] close(7) = -1 EBADF (Bad file descriptor) [pid 5600] close(8) = -1 EBADF (Bad file descriptor) [pid 5600] close(9) = -1 EBADF (Bad file descriptor) [pid 5600] close(10) = -1 EBADF (Bad file descriptor) [pid 5600] close(11 [pid 5604] <... futex resumed>) = 0 [pid 5600] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5604] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5600] close(12) = -1 EBADF (Bad file descriptor) [pid 5600] close(13) = -1 EBADF (Bad file descriptor) [pid 5600] close(14) = -1 EBADF (Bad file descriptor) [pid 5600] close(15) = -1 EBADF (Bad file descriptor) [pid 5600] close(16) = -1 EBADF (Bad file descriptor) [pid 5600] close(17) = -1 EBADF (Bad file descriptor) [pid 5600] close(18) = -1 EBADF (Bad file descriptor) [pid 5600] close(19) = -1 EBADF (Bad file descriptor) [pid 5600] close(20) = -1 EBADF (Bad file descriptor) [pid 5600] close(21) = -1 EBADF (Bad file descriptor) [pid 5600] close(22) = -1 EBADF (Bad file descriptor) [pid 5600] close(23) = -1 EBADF (Bad file descriptor) [pid 5600] close(24) = -1 EBADF (Bad file descriptor) [pid 5600] close(25) = -1 EBADF (Bad file descriptor) [pid 5600] close(26) = -1 EBADF (Bad file descriptor) [pid 5600] close(27) = -1 EBADF (Bad file descriptor) [pid 5600] close(28) = -1 EBADF (Bad file descriptor) [pid 5600] close(29) = -1 EBADF (Bad file descriptor) [pid 5600] exit_group(0 [pid 5604] <... futex resumed>) = ? [pid 5604] +++ exited with 0 +++ [pid 5601] <... futex resumed>) = ? [pid 5600] <... exit_group resumed>) = ? [pid 5601] +++ exited with 0 +++ [pid 5600] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=323, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./107", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./107/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./107/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./107/binderfs") = 0 [ 122.918060][ T5604] [ 122.931901][ T5601] EXT4-fs (loop0): This should not happen!! Data will be lost [ 122.931901][ T5601] [ 122.940114][ T5604] EXT4-fs (loop0): Total free blocks count 0 [ 122.951304][ T5601] EXT4-fs (loop0): Total free blocks count 0 [ 122.956472][ T5604] EXT4-fs (loop0): Free/Dirty block details [ 122.962473][ T5601] EXT4-fs (loop0): Free/Dirty block details [ 122.968992][ T5604] EXT4-fs (loop0): free_blocks=2415919104 [pid 5046] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./107/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./107/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./107/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./107") = 0 [pid 5046] mkdir("./108", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5605 attached , child_tidptr=0x555555a9c690) = 326 [pid 5605] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5605] chdir("./108") = 0 [pid 5605] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5605] setpgid(0, 0) = 0 [pid 5605] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5605] write(3, "1000", 4) = 4 [pid 5605] close(3) = 0 [pid 5605] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5605] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5605] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5605] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5605] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5605] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5605] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5605] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5605] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0} => {parent_tid=[327]}, 88) = 327 [pid 5605] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5605] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5605] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5606 attached [pid 5606] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5606] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5606] memfd_create("syzkaller", 0) = 3 [pid 5606] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5606] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5606] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5606] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5606] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5606] close(3) = 0 [pid 5606] mkdir("./file0", 0777) = 0 [pid 5606] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5606] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5606] chdir("./file0") = 0 [pid 5606] ioctl(4, LOOP_CLR_FD) = 0 [pid 5606] close(4) = 0 [pid 5606] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5606] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5605] <... futex resumed>) = 0 [pid 5605] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5606] <... futex resumed>) = 0 [pid 5605] <... futex resumed>) = 1 [pid 5606] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5605] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5606] <... open resumed>) = 4 [pid 5606] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5605] <... futex resumed>) = 0 [pid 5606] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5605] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5606] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5606] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5605] <... futex resumed>) = 0 [pid 5605] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5606] <... open resumed>) = 5 [pid 5606] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5605] <... futex resumed>) = 0 [pid 5605] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5606] <... futex resumed>) = 1 [pid 5605] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5606] ftruncate(5, 33587195) = 0 [pid 5606] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5605] <... futex resumed>) = 0 [pid 5605] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5606] <... futex resumed>) = 1 [pid 5605] <... futex resumed>) = 0 [pid 5606] sendfile(4, 5, NULL, 4) = 4 [pid 5605] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5606] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5605] <... futex resumed>) = 0 [pid 5606] sendfile(4, 5, NULL, 281474978811909 [pid 5605] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5605] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5605] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5605] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5605] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5605] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5610 attached [pid 5610] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5610] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5610] rt_sigprocmask(SIG_SETMASK, [], [pid 5605] <... clone3 resumed> => {parent_tid=[328]}, 88) = 328 [pid 5610] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5605] rt_sigprocmask(SIG_SETMASK, [], [pid 5610] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5605] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5605] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5610] <... futex resumed>) = 0 [pid 5605] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [ 123.101129][ T5606] loop0: detected capacity change from 0 to 2048 [ 123.131137][ T5606] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5610] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5605] <... futex resumed>) = 0 [pid 5605] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5605] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... futex resumed>) = 1 [ 123.184935][ T5610] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 123.201396][ T5610] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 34 with error 28 [ 123.202098][ T5606] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 34 with max blocks 1 with error 28 [ 123.214202][ T5610] EXT4-fs (loop0): This should not happen!! Data will be lost [pid 5610] prlimit64(0, RLIMIT_CPU, NULL, [pid 5606] <... sendfile resumed>) = 69632 [pid 5606] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5606] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5605] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5610] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5610] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5610] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5605] close(3) = 0 [pid 5605] close(4) = 0 [pid 5605] close(5) = 0 [pid 5605] close(6) = -1 EBADF (Bad file descriptor) [pid 5605] close(7) = -1 EBADF (Bad file descriptor) [pid 5605] close(8) = -1 EBADF (Bad file descriptor) [pid 5605] close(9) = -1 EBADF (Bad file descriptor) [pid 5605] close(10) = -1 EBADF (Bad file descriptor) [pid 5605] close(11) = -1 EBADF (Bad file descriptor) [pid 5605] close(12) = -1 EBADF (Bad file descriptor) [pid 5605] close(13) = -1 EBADF (Bad file descriptor) [pid 5605] close(14) = -1 EBADF (Bad file descriptor) [pid 5605] close(15) = -1 EBADF (Bad file descriptor) [pid 5605] close(16) = -1 EBADF (Bad file descriptor) [pid 5605] close(17) = -1 EBADF (Bad file descriptor) [pid 5605] close(18) = -1 EBADF (Bad file descriptor) [pid 5605] close(19) = -1 EBADF (Bad file descriptor) [pid 5605] close(20) = -1 EBADF (Bad file descriptor) [pid 5605] close(21) = -1 EBADF (Bad file descriptor) [pid 5605] close(22) = -1 EBADF (Bad file descriptor) [pid 5605] close(23) = -1 EBADF (Bad file descriptor) [pid 5605] close(24) = -1 EBADF (Bad file descriptor) [pid 5605] close(25) = -1 EBADF (Bad file descriptor) [pid 5605] close(26) = -1 EBADF (Bad file descriptor) [pid 5605] close(27) = -1 EBADF (Bad file descriptor) [pid 5605] close(28) = -1 EBADF (Bad file descriptor) [pid 5605] close(29) = -1 EBADF (Bad file descriptor) [pid 5605] exit_group(0 [pid 5606] <... futex resumed>) = ? [pid 5606] +++ exited with 0 +++ [pid 5610] <... futex resumed>) = ? [pid 5605] <... exit_group resumed>) = ? [pid 5610] +++ exited with 0 +++ [pid 5605] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=326, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5046] umount2("./108", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./108/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./108/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./108/binderfs") = 0 [ 123.214202][ T5610] [ 123.226182][ T5606] EXT4-fs (loop0): This should not happen!! Data will be lost [ 123.226182][ T5606] [ 123.226204][ T5606] EXT4-fs (loop0): Total free blocks count 0 [ 123.226222][ T5606] EXT4-fs (loop0): Free/Dirty block details [ 123.226241][ T5606] EXT4-fs (loop0): free_blocks=2415919104 [ 123.226262][ T5606] EXT4-fs (loop0): dirty_blocks=48 [ 123.226279][ T5606] EXT4-fs (loop0): Block reservation details [pid 5046] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./108/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./108/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./108/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./108") = 0 [pid 5046] mkdir("./109", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5611 attached , child_tidptr=0x555555a9c690) = 329 [pid 5611] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5611] chdir("./109") = 0 [pid 5611] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5611] setpgid(0, 0) = 0 [pid 5611] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5611] write(3, "1000", 4) = 4 [pid 5611] close(3) = 0 [pid 5611] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5611] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5611] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5611] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5611] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5611] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5611] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5611] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5611] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0} => {parent_tid=[330]}, 88) = 330 [pid 5611] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5611] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5611] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5612 attached [pid 5612] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5612] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5612] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5612] memfd_create("syzkaller", 0) = 3 [pid 5612] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5612] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5612] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5612] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5612] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5612] close(3) = 0 [pid 5612] mkdir("./file0", 0777) = 0 [pid 5612] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5612] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5612] chdir("./file0") = 0 [pid 5612] ioctl(4, LOOP_CLR_FD) = 0 [pid 5612] close(4) = 0 [pid 5612] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5611] <... futex resumed>) = 0 [pid 5612] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5611] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5611] <... futex resumed>) = 0 [pid 5612] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5611] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... open resumed>) = 4 [pid 5612] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5612] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5611] <... futex resumed>) = 0 [pid 5611] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... futex resumed>) = 0 [pid 5611] <... futex resumed>) = 1 [pid 5612] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5611] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... open resumed>) = 5 [pid 5612] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5611] <... futex resumed>) = 0 [pid 5612] ftruncate(5, 33587195 [pid 5611] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... ftruncate resumed>) = 0 [pid 5611] <... futex resumed>) = 0 [pid 5612] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... futex resumed>) = 0 [pid 5611] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5612] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5611] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5611] <... futex resumed>) = 0 [pid 5612] sendfile(4, 5, NULL, 4 [pid 5611] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... sendfile resumed>) = 4 [pid 5612] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5611] <... futex resumed>) = 0 [pid 5612] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5611] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5611] <... futex resumed>) = 0 [pid 5612] sendfile(4, 5, NULL, 281474978811909 [pid 5611] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5611] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5611] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5611] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5611] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0} => {parent_tid=[331]}, 88) = 331 ./strace-static-x86_64: Process 5615 attached [pid 5611] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5611] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5611] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5615] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5615] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5615] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 123.432418][ T5612] loop0: detected capacity change from 0 to 2048 [ 123.452163][ T5612] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5615] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5615] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... futex resumed>) = 0 [pid 5611] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5611] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5615] <... futex resumed>) = 1 [pid 5615] prlimit64(0, RLIMIT_CPU, NULL, [pid 5611] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 123.519978][ T5612] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 123.535591][ T5612] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 74 with max blocks 1 with error 28 [ 123.547964][ T5612] EXT4-fs (loop0): This should not happen!! Data will be lost [ 123.547964][ T5612] [ 123.559682][ T5612] EXT4-fs (loop0): Total free blocks count 0 [pid 5612] <... sendfile resumed>) = 151552 [pid 5612] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5612] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5615] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5615] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5611] close(3 [pid 5615] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5611] <... close resumed>) = 0 [pid 5611] close(4) = 0 [pid 5611] close(5) = 0 [pid 5611] close(6) = -1 EBADF (Bad file descriptor) [pid 5611] close(7) = -1 EBADF (Bad file descriptor) [pid 5611] close(8) = -1 EBADF (Bad file descriptor) [pid 5611] close(9) = -1 EBADF (Bad file descriptor) [pid 5611] close(10) = -1 EBADF (Bad file descriptor) [pid 5611] close(11) = -1 EBADF (Bad file descriptor) [pid 5611] close(12) = -1 EBADF (Bad file descriptor) [pid 5611] close(13) = -1 EBADF (Bad file descriptor) [pid 5611] close(14) = -1 EBADF (Bad file descriptor) [pid 5611] close(15) = -1 EBADF (Bad file descriptor) [pid 5611] close(16) = -1 EBADF (Bad file descriptor) [pid 5611] close(17) = -1 EBADF (Bad file descriptor) [pid 5611] close(18) = -1 EBADF (Bad file descriptor) [pid 5611] close(19) = -1 EBADF (Bad file descriptor) [pid 5611] close(20) = -1 EBADF (Bad file descriptor) [pid 5611] close(21) = -1 EBADF (Bad file descriptor) [pid 5611] close(22) = -1 EBADF (Bad file descriptor) [pid 5611] close(23) = -1 EBADF (Bad file descriptor) [pid 5611] close(24) = -1 EBADF (Bad file descriptor) [pid 5611] close(25) = -1 EBADF (Bad file descriptor) [pid 5611] close(26) = -1 EBADF (Bad file descriptor) [pid 5611] close(27) = -1 EBADF (Bad file descriptor) [pid 5611] close(28) = -1 EBADF (Bad file descriptor) [pid 5611] close(29) = -1 EBADF (Bad file descriptor) [pid 5611] exit_group(0 [pid 5615] <... futex resumed>) = ? [pid 5612] <... futex resumed>) = ? [pid 5611] <... exit_group resumed>) = ? [pid 5612] +++ exited with 0 +++ [pid 5615] +++ exited with 0 +++ [pid 5611] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=329, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./109", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./109/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./109/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./109/binderfs") = 0 [ 123.565692][ T5612] EXT4-fs (loop0): Free/Dirty block details [ 123.571655][ T5612] EXT4-fs (loop0): free_blocks=2415919104 [ 123.577445][ T5612] EXT4-fs (loop0): dirty_blocks=80 [ 123.582582][ T5612] EXT4-fs (loop0): Block reservation details [ 123.588643][ T5612] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 123.595047][ T5615] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 74 with error 28 [pid 5046] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./109/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./109/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./109/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./109") = 0 [pid 5046] mkdir("./110", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5616 attached , child_tidptr=0x555555a9c690) = 332 [pid 5616] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5616] chdir("./110") = 0 [pid 5616] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5616] setpgid(0, 0) = 0 [pid 5616] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5616] write(3, "1000", 4) = 4 [pid 5616] close(3) = 0 [pid 5616] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5616] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5616] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5616] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5616] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5616] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5616] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5616] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5616] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5617 attached [pid 5617] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5616] <... clone3 resumed> => {parent_tid=[333]}, 88) = 333 [pid 5617] set_robust_list(0x7efc0265e9a0, 24 [pid 5616] rt_sigprocmask(SIG_SETMASK, [], [pid 5617] <... set_robust_list resumed>) = 0 [pid 5616] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5617] rt_sigprocmask(SIG_SETMASK, [], [pid 5616] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5617] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5616] <... futex resumed>) = 0 [pid 5617] memfd_create("syzkaller", 0 [pid 5616] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5617] <... memfd_create resumed>) = 3 [pid 5617] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5617] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5617] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5617] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5617] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5617] close(3) = 0 [pid 5617] mkdir("./file0", 0777) = 0 [pid 5617] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5617] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5617] chdir("./file0") = 0 [pid 5617] ioctl(4, LOOP_CLR_FD) = 0 [pid 5617] close(4) = 0 [pid 5617] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5616] <... futex resumed>) = 0 [pid 5616] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5617] <... futex resumed>) = 1 [pid 5616] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5617] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5617] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5616] <... futex resumed>) = 0 [pid 5617] <... futex resumed>) = 1 [pid 5617] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5616] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5617] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5616] <... futex resumed>) = 0 [pid 5617] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5616] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5617] <... open resumed>) = 5 [pid 5617] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5616] <... futex resumed>) = 0 [pid 5617] <... futex resumed>) = 1 [pid 5616] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5617] ftruncate(5, 33587195 [pid 5616] <... futex resumed>) = 0 [pid 5617] <... ftruncate resumed>) = 0 [pid 5616] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5617] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5616] <... futex resumed>) = 0 [pid 5616] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5617] <... futex resumed>) = 1 [pid 5616] <... futex resumed>) = 0 [pid 5617] sendfile(4, 5, NULL, 4 [pid 5616] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5617] <... sendfile resumed>) = 4 [pid 5617] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5616] <... futex resumed>) = 0 [pid 5616] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5616] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5617] <... futex resumed>) = 1 [pid 5616] <... futex resumed>) = 0 [pid 5617] sendfile(4, 5, NULL, 281474978811909 [pid 5616] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5616] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5616] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5616] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0} => {parent_tid=[334]}, 88) = 334 [pid 5616] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 5620 attached [pid 5620] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5616] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5620] set_robust_list(0x7efbfa33d9a0, 24 [pid 5616] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5620] <... set_robust_list resumed>) = 0 [pid 5620] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5620] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5620] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 123.732966][ T5617] loop0: detected capacity change from 0 to 2048 [ 123.751353][ T5617] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5620] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5616] <... futex resumed>) = 0 [pid 5616] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5620] <... futex resumed>) = 0 [pid 5620] prlimit64(0, RLIMIT_CPU, NULL, [ 123.795418][ T5620] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 123.813681][ T5620] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 35 with error 28 [ 123.826141][ T5620] EXT4-fs (loop0): This should not happen!! Data will be lost [ 123.826141][ T5620] [ 123.837059][ T5620] EXT4-fs (loop0): Total free blocks count 0 [pid 5616] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5620] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5620] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5620] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5617] <... sendfile resumed>) = 73728 [pid 5617] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5617] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5616] close(3) = 0 [pid 5616] close(4) = 0 [pid 5616] close(5) = 0 [pid 5616] close(6) = -1 EBADF (Bad file descriptor) [pid 5616] close(7) = -1 EBADF (Bad file descriptor) [pid 5616] close(8) = -1 EBADF (Bad file descriptor) [pid 5616] close(9) = -1 EBADF (Bad file descriptor) [pid 5616] close(10) = -1 EBADF (Bad file descriptor) [pid 5616] close(11) = -1 EBADF (Bad file descriptor) [pid 5616] close(12) = -1 EBADF (Bad file descriptor) [pid 5616] close(13) = -1 EBADF (Bad file descriptor) [pid 5616] close(14) = -1 EBADF (Bad file descriptor) [pid 5616] close(15) = -1 EBADF (Bad file descriptor) [pid 5616] close(16) = -1 EBADF (Bad file descriptor) [pid 5616] close(17) = -1 EBADF (Bad file descriptor) [pid 5616] close(18) = -1 EBADF (Bad file descriptor) [pid 5616] close(19) = -1 EBADF (Bad file descriptor) [pid 5616] close(20) = -1 EBADF (Bad file descriptor) [pid 5616] close(21) = -1 EBADF (Bad file descriptor) [pid 5616] close(22) = -1 EBADF (Bad file descriptor) [pid 5616] close(23) = -1 EBADF (Bad file descriptor) [pid 5616] close(24) = -1 EBADF (Bad file descriptor) [pid 5616] close(25) = -1 EBADF (Bad file descriptor) [pid 5616] close(26) = -1 EBADF (Bad file descriptor) [pid 5616] close(27) = -1 EBADF (Bad file descriptor) [pid 5616] close(28) = -1 EBADF (Bad file descriptor) [pid 5616] close(29) = -1 EBADF (Bad file descriptor) [pid 5616] exit_group(0 [pid 5620] <... futex resumed>) = ? [pid 5617] <... futex resumed>) = ? [pid 5616] <... exit_group resumed>) = ? [pid 5620] +++ exited with 0 +++ [pid 5617] +++ exited with 0 +++ [pid 5616] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=332, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./110", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./110/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./110/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./110/binderfs") = 0 [ 123.843108][ T5620] EXT4-fs (loop0): Free/Dirty block details [ 123.850247][ T5620] EXT4-fs (loop0): free_blocks=2415919104 [ 123.856096][ T5620] EXT4-fs (loop0): dirty_blocks=48 [ 123.861714][ T5620] EXT4-fs (loop0): Block reservation details [ 123.868316][ T5620] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 123.876080][ T5617] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 36 with max blocks 1 with error 28 [pid 5046] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./110/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./110/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./110/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./110") = 0 [pid 5046] mkdir("./111", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9c690) = 335 ./strace-static-x86_64: Process 5621 attached [pid 5621] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5621] chdir("./111") = 0 [pid 5621] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5621] setpgid(0, 0) = 0 [pid 5621] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5621] write(3, "1000", 4) = 4 [pid 5621] close(3) = 0 [pid 5621] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5621] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5621] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5621] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5621] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5621] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5621] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5621] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5621] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5622 attached [pid 5622] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5622] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5622] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5622] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5621] <... clone3 resumed> => {parent_tid=[336]}, 88) = 336 [pid 5621] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5621] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5622] <... futex resumed>) = 0 [pid 5621] <... futex resumed>) = 1 [pid 5622] memfd_create("syzkaller", 0 [pid 5621] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5622] <... memfd_create resumed>) = 3 [pid 5622] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5622] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5622] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5622] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5622] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5622] close(3) = 0 [pid 5622] mkdir("./file0", 0777) = 0 [pid 5622] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5622] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5622] chdir("./file0") = 0 [pid 5622] ioctl(4, LOOP_CLR_FD) = 0 [pid 5622] close(4) = 0 [pid 5622] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5621] <... futex resumed>) = 0 [pid 5622] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5621] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5622] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5621] <... futex resumed>) = 0 [pid 5622] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5621] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5622] <... open resumed>) = 4 [pid 5622] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5621] <... futex resumed>) = 0 [pid 5621] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5621] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5622] <... futex resumed>) = 1 [pid 5622] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5622] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5621] <... futex resumed>) = 0 [pid 5621] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5622] <... futex resumed>) = 1 [pid 5621] <... futex resumed>) = 0 [pid 5621] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5622] ftruncate(5, 33587195) = 0 [pid 5622] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5621] <... futex resumed>) = 0 [pid 5622] <... futex resumed>) = 1 [pid 5621] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5621] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5622] sendfile(4, 5, NULL, 4) = 4 [pid 5622] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5621] <... futex resumed>) = 0 [pid 5622] sendfile(4, 5, NULL, 281474978811909 [pid 5621] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5621] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5621] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5621] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5621] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5621] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5625 attached => {parent_tid=[337]}, 88) = 337 [ 124.002489][ T5622] loop0: detected capacity change from 0 to 2048 [ 124.021138][ T5622] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5621] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5625] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5621] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5625] <... rseq resumed>) = 0 [pid 5621] <... futex resumed>) = 0 [pid 5621] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5625] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5625] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5625] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5625] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5621] <... futex resumed>) = 0 [pid 5625] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5621] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5625] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5621] <... futex resumed>) = 0 [pid 5625] prlimit64(0, RLIMIT_CPU, NULL, [ 124.102210][ T5625] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 124.118470][ T5625] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 167 with error 28 [ 124.130910][ T5625] EXT4-fs (loop0): This should not happen!! Data will be lost [ 124.130910][ T5625] [ 124.140816][ T5625] EXT4-fs (loop0): Total free blocks count 0 [pid 5621] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5625] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5625] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5625] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5622] <... sendfile resumed>) = 344064 [pid 5622] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5622] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5621] close(3) = 0 [pid 5621] close(4) = 0 [pid 5621] close(5) = 0 [pid 5621] close(6) = -1 EBADF (Bad file descriptor) [pid 5621] close(7) = -1 EBADF (Bad file descriptor) [pid 5621] close(8) = -1 EBADF (Bad file descriptor) [pid 5621] close(9) = -1 EBADF (Bad file descriptor) [pid 5621] close(10) = -1 EBADF (Bad file descriptor) [pid 5621] close(11) = -1 EBADF (Bad file descriptor) [pid 5621] close(12) = -1 EBADF (Bad file descriptor) [pid 5621] close(13) = -1 EBADF (Bad file descriptor) [pid 5621] close(14) = -1 EBADF (Bad file descriptor) [pid 5621] close(15) = -1 EBADF (Bad file descriptor) [pid 5621] close(16) = -1 EBADF (Bad file descriptor) [pid 5621] close(17) = -1 EBADF (Bad file descriptor) [pid 5621] close(18) = -1 EBADF (Bad file descriptor) [pid 5621] close(19) = -1 EBADF (Bad file descriptor) [pid 5621] close(20) = -1 EBADF (Bad file descriptor) [pid 5621] close(21) = -1 EBADF (Bad file descriptor) [pid 5621] close(22) = -1 EBADF (Bad file descriptor) [pid 5621] close(23) = -1 EBADF (Bad file descriptor) [pid 5621] close(24) = -1 EBADF (Bad file descriptor) [pid 5621] close(25) = -1 EBADF (Bad file descriptor) [pid 5621] close(26) = -1 EBADF (Bad file descriptor) [pid 5621] close(27) = -1 EBADF (Bad file descriptor) [pid 5621] close(28) = -1 EBADF (Bad file descriptor) [pid 5621] close(29) = -1 EBADF (Bad file descriptor) [pid 5621] exit_group(0 [pid 5625] <... futex resumed>) = ? [pid 5622] <... futex resumed>) = ? [pid 5621] <... exit_group resumed>) = ? [pid 5625] +++ exited with 0 +++ [pid 5622] +++ exited with 0 +++ [pid 5621] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=335, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5046] umount2("./111", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./111/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./111/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./111/binderfs") = 0 [ 124.146903][ T5625] EXT4-fs (loop0): Free/Dirty block details [ 124.152816][ T5625] EXT4-fs (loop0): free_blocks=2415919104 [ 124.158900][ T5625] EXT4-fs (loop0): dirty_blocks=176 [ 124.164126][ T5625] EXT4-fs (loop0): Block reservation details [ 124.170180][ T5625] EXT4-fs (loop0): i_reserved_data_blocks=11 [ 124.183325][ T5622] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 168 with max blocks 1 with error 28 [pid 5046] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./111/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./111/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./111/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./111") = 0 [pid 5046] mkdir("./112", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9c690) = 338 ./strace-static-x86_64: Process 5626 attached [pid 5626] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5626] chdir("./112") = 0 [pid 5626] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5626] setpgid(0, 0) = 0 [pid 5626] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5626] write(3, "1000", 4) = 4 [pid 5626] close(3) = 0 [pid 5626] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5626] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5626] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5626] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5626] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5626] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5626] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5626] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5626] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5627 attached => {parent_tid=[339]}, 88) = 339 [pid 5626] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5626] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5626] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5627] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5627] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5627] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5627] memfd_create("syzkaller", 0) = 3 [pid 5627] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5627] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5627] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5627] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5627] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5627] close(3) = 0 [pid 5627] mkdir("./file0", 0777) = 0 [pid 5627] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5627] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5627] chdir("./file0") = 0 [pid 5627] ioctl(4, LOOP_CLR_FD) = 0 [pid 5627] close(4) = 0 [pid 5627] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5626] <... futex resumed>) = 0 [pid 5627] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5626] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5626] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5627] <... open resumed>) = 4 [pid 5627] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5627] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5626] <... futex resumed>) = 0 [pid 5626] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5626] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5627] <... futex resumed>) = 0 [pid 5627] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5627] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5626] <... futex resumed>) = 0 [pid 5627] ftruncate(5, 33587195 [pid 5626] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5627] <... ftruncate resumed>) = 0 [pid 5626] <... futex resumed>) = 0 [pid 5627] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5626] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5627] <... futex resumed>) = 0 [pid 5626] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5627] sendfile(4, 5, NULL, 4 [pid 5626] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5627] <... sendfile resumed>) = 4 [pid 5626] <... futex resumed>) = 0 [pid 5626] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5627] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5626] <... futex resumed>) = 0 [pid 5626] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5626] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5626] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5626] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5626] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5626] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0} => {parent_tid=[340]}, 88) = 340 ./strace-static-x86_64: Process 5630 attached [pid 5627] <... futex resumed>) = 1 [pid 5626] rt_sigprocmask(SIG_SETMASK, [], [pid 5630] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5627] sendfile(4, 5, NULL, 281474978811909 [pid 5626] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 124.310876][ T5627] loop0: detected capacity change from 0 to 2048 [ 124.330966][ T5627] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5630] <... rseq resumed>) = 0 [pid 5626] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5630] set_robust_list(0x7efbfa33d9a0, 24 [pid 5626] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5630] <... set_robust_list resumed>) = 0 [pid 5630] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5630] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5630] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5626] <... futex resumed>) = 0 [pid 5630] <... futex resumed>) = 1 [pid 5626] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5630] prlimit64(0, RLIMIT_CPU, NULL, [pid 5626] <... futex resumed>) = 0 [ 124.416200][ T5627] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 124.431631][ T5627] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 166 with max blocks 1 with error 28 [ 124.444555][ T5627] EXT4-fs (loop0): This should not happen!! Data will be lost [ 124.444555][ T5627] [ 124.456061][ T5627] EXT4-fs (loop0): Total free blocks count 0 [pid 5626] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5627] <... sendfile resumed>) = 339968 [pid 5627] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5627] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5630] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5630] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5626] close(3 [pid 5630] <... futex resumed>) = 0 [pid 5626] <... close resumed>) = 0 [pid 5630] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5626] close(4) = 0 [pid 5626] close(5) = 0 [pid 5626] close(6) = -1 EBADF (Bad file descriptor) [pid 5626] close(7) = -1 EBADF (Bad file descriptor) [pid 5626] close(8) = -1 EBADF (Bad file descriptor) [pid 5626] close(9) = -1 EBADF (Bad file descriptor) [pid 5626] close(10) = -1 EBADF (Bad file descriptor) [pid 5626] close(11) = -1 EBADF (Bad file descriptor) [pid 5626] close(12) = -1 EBADF (Bad file descriptor) [pid 5626] close(13) = -1 EBADF (Bad file descriptor) [pid 5626] close(14) = -1 EBADF (Bad file descriptor) [pid 5626] close(15) = -1 EBADF (Bad file descriptor) [pid 5626] close(16) = -1 EBADF (Bad file descriptor) [pid 5626] close(17) = -1 EBADF (Bad file descriptor) [pid 5626] close(18) = -1 EBADF (Bad file descriptor) [pid 5626] close(19) = -1 EBADF (Bad file descriptor) [pid 5626] close(20) = -1 EBADF (Bad file descriptor) [pid 5626] close(21) = -1 EBADF (Bad file descriptor) [pid 5626] close(22) = -1 EBADF (Bad file descriptor) [pid 5626] close(23) = -1 EBADF (Bad file descriptor) [pid 5626] close(24) = -1 EBADF (Bad file descriptor) [pid 5626] close(25) = -1 EBADF (Bad file descriptor) [pid 5626] close(26) = -1 EBADF (Bad file descriptor) [pid 5626] close(27) = -1 EBADF (Bad file descriptor) [pid 5626] close(28) = -1 EBADF (Bad file descriptor) [pid 5626] close(29) = -1 EBADF (Bad file descriptor) [pid 5626] exit_group(0 [pid 5630] <... futex resumed>) = ? [pid 5627] <... futex resumed>) = ? [pid 5626] <... exit_group resumed>) = ? [pid 5630] +++ exited with 0 +++ [pid 5627] +++ exited with 0 +++ [pid 5626] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=338, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./112", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./112/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./112/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./112/binderfs") = 0 [ 124.462541][ T5627] EXT4-fs (loop0): Free/Dirty block details [ 124.468698][ T5627] EXT4-fs (loop0): free_blocks=2415919104 [ 124.474988][ T5627] EXT4-fs (loop0): dirty_blocks=176 [ 124.480735][ T5627] EXT4-fs (loop0): Block reservation details [ 124.487102][ T5627] EXT4-fs (loop0): i_reserved_data_blocks=11 [ 124.495037][ T5630] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 166 with error 28 [pid 5046] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./112/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./112/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./112/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./112") = 0 [pid 5046] mkdir("./113", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9c690) = 341 ./strace-static-x86_64: Process 5631 attached [pid 5631] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5631] chdir("./113") = 0 [pid 5631] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5631] setpgid(0, 0) = 0 [pid 5631] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5631] write(3, "1000", 4) = 4 [pid 5631] close(3) = 0 [pid 5631] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5631] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5631] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5631] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5631] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5631] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5631] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5631] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5631] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5632 attached => {parent_tid=[342]}, 88) = 342 [pid 5632] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5631] rt_sigprocmask(SIG_SETMASK, [], [pid 5632] set_robust_list(0x7efc0265e9a0, 24 [pid 5631] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5632] <... set_robust_list resumed>) = 0 [pid 5631] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5632] rt_sigprocmask(SIG_SETMASK, [], [pid 5631] <... futex resumed>) = 0 [pid 5632] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5631] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5632] memfd_create("syzkaller", 0) = 3 [pid 5632] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5632] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5632] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5632] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5632] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5632] close(3) = 0 [pid 5632] mkdir("./file0", 0777) = 0 [pid 5632] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5632] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5632] chdir("./file0") = 0 [pid 5632] ioctl(4, LOOP_CLR_FD) = 0 [pid 5632] close(4) = 0 [pid 5632] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5631] <... futex resumed>) = 0 [pid 5632] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5631] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5632] <... futex resumed>) = 0 [pid 5632] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5631] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5632] <... open resumed>) = 4 [pid 5632] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5631] <... futex resumed>) = 0 [pid 5632] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5631] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5631] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5632] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5632] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5632] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5631] <... futex resumed>) = 0 [pid 5632] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5631] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5632] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5631] <... futex resumed>) = 0 [pid 5632] ftruncate(5, 33587195 [pid 5631] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5632] <... ftruncate resumed>) = 0 [pid 5632] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5631] <... futex resumed>) = 0 [pid 5632] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5631] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5632] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5632] sendfile(4, 5, NULL, 4 [pid 5631] <... futex resumed>) = 0 [pid 5631] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5632] <... sendfile resumed>) = 4 [pid 5632] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5631] <... futex resumed>) = 0 [pid 5631] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5631] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5631] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5631] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5631] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5631] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5635 attached [pid 5635] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5631] <... clone3 resumed> => {parent_tid=[343]}, 88) = 343 [pid 5635] set_robust_list(0x7efbfa33d9a0, 24 [pid 5631] rt_sigprocmask(SIG_SETMASK, [], [pid 5635] <... set_robust_list resumed>) = 0 [pid 5635] rt_sigprocmask(SIG_SETMASK, [], [pid 5631] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5635] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5631] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5635] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000 [pid 5631] <... futex resumed>) = 0 [pid 5631] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5632] sendfile(4, 5, NULL, 281474978811909 [pid 5635] <... mmap resumed>) = 0x20000000 [pid 5635] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5631] <... futex resumed>) = 0 [pid 5631] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5635] prlimit64(0, RLIMIT_CPU, NULL, [pid 5631] <... futex resumed>) = 0 [ 124.635942][ T5632] loop0: detected capacity change from 0 to 2048 [ 124.660613][ T5632] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.709962][ T5635] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 124.725921][ T5635] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 19 with error 28 [ 124.738740][ T5635] EXT4-fs (loop0): This should not happen!! Data will be lost [ 124.738740][ T5635] [ 124.749118][ T5635] EXT4-fs (loop0): Total free blocks count 0 [pid 5631] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5635] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5635] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5635] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5632] <... sendfile resumed>) = 40960 [pid 5632] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5631] close(3 [pid 5632] <... futex resumed>) = 0 [pid 5631] <... close resumed>) = 0 [pid 5632] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5631] close(4) = 0 [pid 5631] close(5) = 0 [pid 5631] close(6) = -1 EBADF (Bad file descriptor) [pid 5631] close(7) = -1 EBADF (Bad file descriptor) [pid 5631] close(8) = -1 EBADF (Bad file descriptor) [pid 5631] close(9) = -1 EBADF (Bad file descriptor) [pid 5631] close(10) = -1 EBADF (Bad file descriptor) [pid 5631] close(11) = -1 EBADF (Bad file descriptor) [pid 5631] close(12) = -1 EBADF (Bad file descriptor) [pid 5631] close(13) = -1 EBADF (Bad file descriptor) [pid 5631] close(14) = -1 EBADF (Bad file descriptor) [pid 5631] close(15) = -1 EBADF (Bad file descriptor) [pid 5631] close(16) = -1 EBADF (Bad file descriptor) [pid 5631] close(17) = -1 EBADF (Bad file descriptor) [pid 5631] close(18) = -1 EBADF (Bad file descriptor) [pid 5631] close(19) = -1 EBADF (Bad file descriptor) [pid 5631] close(20) = -1 EBADF (Bad file descriptor) [pid 5631] close(21) = -1 EBADF (Bad file descriptor) [pid 5631] close(22) = -1 EBADF (Bad file descriptor) [pid 5631] close(23) = -1 EBADF (Bad file descriptor) [pid 5631] close(24) = -1 EBADF (Bad file descriptor) [pid 5631] close(25) = -1 EBADF (Bad file descriptor) [pid 5631] close(26) = -1 EBADF (Bad file descriptor) [pid 5631] close(27) = -1 EBADF (Bad file descriptor) [pid 5631] close(28) = -1 EBADF (Bad file descriptor) [pid 5631] close(29) = -1 EBADF (Bad file descriptor) [pid 5631] exit_group(0 [pid 5635] <... futex resumed>) = ? [pid 5635] +++ exited with 0 +++ [pid 5631] <... exit_group resumed>) = ? [pid 5632] <... futex resumed>) = ? [pid 5632] +++ exited with 0 +++ [pid 5631] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=341, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5046] umount2("./113", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./113/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./113/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./113/binderfs") = 0 [pid 5046] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [ 124.755113][ T5635] EXT4-fs (loop0): Free/Dirty block details [ 124.761526][ T5635] EXT4-fs (loop0): free_blocks=2415919104 [ 124.767764][ T5635] EXT4-fs (loop0): dirty_blocks=32 [ 124.772950][ T5635] EXT4-fs (loop0): Block reservation details [ 124.780292][ T5635] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 124.789011][ T5632] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 20 with max blocks 1 with error 28 [pid 5046] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./113/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./113/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./113/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./113") = 0 [pid 5046] mkdir("./114", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9c690) = 344 ./strace-static-x86_64: Process 5636 attached [pid 5636] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5636] chdir("./114") = 0 [pid 5636] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5636] setpgid(0, 0) = 0 [pid 5636] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5636] write(3, "1000", 4) = 4 [pid 5636] close(3) = 0 [pid 5636] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5636] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5636] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5636] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5636] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5636] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5636] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5636] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5636] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0} => {parent_tid=[345]}, 88) = 345 ./strace-static-x86_64: Process 5637 attached [pid 5637] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053 [pid 5636] rt_sigprocmask(SIG_SETMASK, [], [pid 5637] <... rseq resumed>) = 0 [pid 5637] set_robust_list(0x7efc0265e9a0, 24 [pid 5636] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5636] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5636] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5637] <... set_robust_list resumed>) = 0 [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5637] memfd_create("syzkaller", 0) = 3 [pid 5637] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5637] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5637] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5637] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5637] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5637] close(3) = 0 [pid 5637] mkdir("./file0", 0777) = 0 [pid 5637] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5637] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5637] chdir("./file0") = 0 [pid 5637] ioctl(4, LOOP_CLR_FD) = 0 [pid 5637] close(4) = 0 [pid 5637] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5637] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5636] <... futex resumed>) = 0 [pid 5636] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5636] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5637] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5637] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5637] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5636] <... futex resumed>) = 0 [pid 5637] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5636] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5636] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5637] <... futex resumed>) = 0 [pid 5637] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5637] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5636] <... futex resumed>) = 0 [pid 5636] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5636] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5637] <... futex resumed>) = 1 [pid 5637] ftruncate(5, 33587195) = 0 [pid 5637] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5636] <... futex resumed>) = 0 [pid 5637] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5636] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5637] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5636] <... futex resumed>) = 0 [pid 5637] sendfile(4, 5, NULL, 4 [pid 5636] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5637] <... sendfile resumed>) = 4 [pid 5637] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5636] <... futex resumed>) = 0 [pid 5636] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5636] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5636] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5637] sendfile(4, 5, NULL, 281474978811909 [ 124.912495][ T5637] loop0: detected capacity change from 0 to 2048 [ 124.941867][ T5637] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5636] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5636] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5636] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0} => {parent_tid=[346]}, 88) = 346 [pid 5636] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5636] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5636] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5640 attached [pid 5640] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5640] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5640] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5640] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5640] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5636] <... futex resumed>) = 0 [pid 5636] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5636] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5640] <... futex resumed>) = 1 [ 125.005134][ T5640] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 125.022770][ T5640] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 49 with error 28 [ 125.035112][ T5640] EXT4-fs (loop0): This should not happen!! Data will be lost [ 125.035112][ T5640] [ 125.045257][ T5640] EXT4-fs (loop0): Total free blocks count 0 [pid 5640] prlimit64(0, RLIMIT_CPU, NULL, [pid 5636] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5640] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5640] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5637] <... sendfile resumed>) = 102400 [pid 5640] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5637] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5637] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5636] close(3) = 0 [pid 5636] close(4) = 0 [pid 5636] close(5) = 0 [pid 5636] close(6) = -1 EBADF (Bad file descriptor) [pid 5636] close(7) = -1 EBADF (Bad file descriptor) [pid 5636] close(8) = -1 EBADF (Bad file descriptor) [pid 5636] close(9) = -1 EBADF (Bad file descriptor) [pid 5636] close(10) = -1 EBADF (Bad file descriptor) [pid 5636] close(11) = -1 EBADF (Bad file descriptor) [pid 5636] close(12) = -1 EBADF (Bad file descriptor) [pid 5636] close(13) = -1 EBADF (Bad file descriptor) [pid 5636] close(14) = -1 EBADF (Bad file descriptor) [pid 5636] close(15) = -1 EBADF (Bad file descriptor) [pid 5636] close(16) = -1 EBADF (Bad file descriptor) [pid 5636] close(17) = -1 EBADF (Bad file descriptor) [pid 5636] close(18) = -1 EBADF (Bad file descriptor) [pid 5636] close(19) = -1 EBADF (Bad file descriptor) [pid 5636] close(20) = -1 EBADF (Bad file descriptor) [pid 5636] close(21) = -1 EBADF (Bad file descriptor) [pid 5636] close(22) = -1 EBADF (Bad file descriptor) [pid 5636] close(23) = -1 EBADF (Bad file descriptor) [pid 5636] close(24) = -1 EBADF (Bad file descriptor) [pid 5636] close(25) = -1 EBADF (Bad file descriptor) [pid 5636] close(26) = -1 EBADF (Bad file descriptor) [pid 5636] close(27) = -1 EBADF (Bad file descriptor) [pid 5636] close(28) = -1 EBADF (Bad file descriptor) [pid 5636] close(29) = -1 EBADF (Bad file descriptor) [pid 5636] exit_group(0 [pid 5640] <... futex resumed>) = ? [pid 5637] <... futex resumed>) = ? [pid 5636] <... exit_group resumed>) = ? [pid 5640] +++ exited with 0 +++ [pid 5637] +++ exited with 0 +++ [pid 5636] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=344, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5046] umount2("./114", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./114/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./114/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./114/binderfs") = 0 [pid 5046] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./114/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./114/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [ 125.051296][ T5640] EXT4-fs (loop0): Free/Dirty block details [ 125.057364][ T5640] EXT4-fs (loop0): free_blocks=2415919104 [ 125.063218][ T5640] EXT4-fs (loop0): dirty_blocks=64 [ 125.068420][ T5640] EXT4-fs (loop0): Block reservation details [ 125.074558][ T5640] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 125.083075][ T5637] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 50 with max blocks 1 with error 28 [pid 5046] rmdir("./114/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./114") = 0 [pid 5046] mkdir("./115", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5641 attached , child_tidptr=0x555555a9c690) = 347 [pid 5641] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5641] chdir("./115") = 0 [pid 5641] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5641] setpgid(0, 0) = 0 [pid 5641] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5641] write(3, "1000", 4) = 4 [pid 5641] close(3) = 0 [pid 5641] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5641] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5641] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5641] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5641] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5641] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5641] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5641] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5641] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5642 attached [pid 5642] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053 [pid 5641] <... clone3 resumed> => {parent_tid=[348]}, 88) = 348 [pid 5642] <... rseq resumed>) = 0 [pid 5641] rt_sigprocmask(SIG_SETMASK, [], [pid 5642] set_robust_list(0x7efc0265e9a0, 24 [pid 5641] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5642] <... set_robust_list resumed>) = 0 [pid 5641] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5642] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5641] <... futex resumed>) = 0 [pid 5642] memfd_create("syzkaller", 0 [pid 5641] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5642] <... memfd_create resumed>) = 3 [pid 5642] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5642] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5642] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5642] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5642] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5642] close(3) = 0 [pid 5642] mkdir("./file0", 0777) = 0 [pid 5642] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5642] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5642] chdir("./file0") = 0 [pid 5642] ioctl(4, LOOP_CLR_FD) = 0 [pid 5642] close(4) = 0 [pid 5642] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5641] <... futex resumed>) = 0 [pid 5642] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5641] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5642] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5641] <... futex resumed>) = 0 [pid 5642] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5641] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5642] <... open resumed>) = 4 [pid 5642] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5641] <... futex resumed>) = 0 [pid 5642] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5641] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5642] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5641] <... futex resumed>) = 0 [pid 5642] <... open resumed>) = 5 [pid 5641] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5642] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5641] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5642] <... futex resumed>) = 0 [pid 5641] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5642] ftruncate(5, 33587195 [pid 5641] <... futex resumed>) = 0 [pid 5642] <... ftruncate resumed>) = 0 [pid 5641] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5642] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5641] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5642] <... futex resumed>) = 0 [pid 5641] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5642] sendfile(4, 5, NULL, 4 [pid 5641] <... futex resumed>) = 0 [pid 5642] <... sendfile resumed>) = 4 [pid 5641] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5642] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5641] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5642] <... futex resumed>) = 0 [pid 5641] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5642] sendfile(4, 5, NULL, 281474978811909 [pid 5641] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5641] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5641] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5641] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5641] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5645 attached [pid 5645] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5641] <... clone3 resumed> => {parent_tid=[349]}, 88) = 349 [pid 5641] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5645] <... rseq resumed>) = 0 [pid 5641] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5645] set_robust_list(0x7efbfa33d9a0, 24 [pid 5641] <... futex resumed>) = 0 [pid 5645] <... set_robust_list resumed>) = 0 [pid 5641] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5645] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5645] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [ 125.189695][ T5642] loop0: detected capacity change from 0 to 2048 [ 125.210307][ T5642] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5645] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5641] <... futex resumed>) = 0 [pid 5641] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5645] prlimit64(0, RLIMIT_CPU, NULL, [ 125.272477][ T5645] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 125.288219][ T5645] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 73 with error 28 [ 125.301387][ T5645] EXT4-fs (loop0): This should not happen!! Data will be lost [ 125.301387][ T5645] [ 125.311770][ T5645] EXT4-fs (loop0): Total free blocks count 0 [pid 5641] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5645] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5645] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5645] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5642] <... sendfile resumed>) = 151552 [pid 5642] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5642] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5641] close(3) = 0 [pid 5641] close(4) = 0 [pid 5641] close(5) = 0 [pid 5641] close(6) = -1 EBADF (Bad file descriptor) [pid 5641] close(7) = -1 EBADF (Bad file descriptor) [pid 5641] close(8) = -1 EBADF (Bad file descriptor) [pid 5641] close(9) = -1 EBADF (Bad file descriptor) [pid 5641] close(10) = -1 EBADF (Bad file descriptor) [pid 5641] close(11) = -1 EBADF (Bad file descriptor) [pid 5641] close(12) = -1 EBADF (Bad file descriptor) [pid 5641] close(13) = -1 EBADF (Bad file descriptor) [pid 5641] close(14) = -1 EBADF (Bad file descriptor) [pid 5641] close(15) = -1 EBADF (Bad file descriptor) [pid 5641] close(16) = -1 EBADF (Bad file descriptor) [pid 5641] close(17) = -1 EBADF (Bad file descriptor) [pid 5641] close(18) = -1 EBADF (Bad file descriptor) [pid 5641] close(19) = -1 EBADF (Bad file descriptor) [pid 5641] close(20) = -1 EBADF (Bad file descriptor) [pid 5641] close(21) = -1 EBADF (Bad file descriptor) [pid 5641] close(22) = -1 EBADF (Bad file descriptor) [pid 5641] close(23) = -1 EBADF (Bad file descriptor) [pid 5641] close(24) = -1 EBADF (Bad file descriptor) [pid 5641] close(25) = -1 EBADF (Bad file descriptor) [pid 5641] close(26) = -1 EBADF (Bad file descriptor) [pid 5641] close(27) = -1 EBADF (Bad file descriptor) [pid 5641] close(28) = -1 EBADF (Bad file descriptor) [pid 5641] close(29) = -1 EBADF (Bad file descriptor) [pid 5641] exit_group(0 [pid 5645] <... futex resumed>) = ? [pid 5642] <... futex resumed>) = ? [pid 5641] <... exit_group resumed>) = ? [pid 5645] +++ exited with 0 +++ [pid 5642] +++ exited with 0 +++ [pid 5641] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=347, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5046] umount2("./115", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./115/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./115/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./115/binderfs") = 0 [ 125.318790][ T5645] EXT4-fs (loop0): Free/Dirty block details [ 125.324739][ T5645] EXT4-fs (loop0): free_blocks=2415919104 [ 125.331505][ T5645] EXT4-fs (loop0): dirty_blocks=80 [ 125.337667][ T5645] EXT4-fs (loop0): Block reservation details [ 125.343683][ T5645] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 125.354637][ T5642] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 74 with max blocks 1 with error 28 [pid 5046] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./115/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./115/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./115/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./115") = 0 [pid 5046] mkdir("./116", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5646 attached , child_tidptr=0x555555a9c690) = 350 [pid 5646] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5646] chdir("./116") = 0 [pid 5646] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5646] setpgid(0, 0) = 0 [pid 5646] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5646] write(3, "1000", 4) = 4 [pid 5646] close(3) = 0 [pid 5646] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5646] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5646] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5646] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5646] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5646] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5646] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5646] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5646] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5647 attached => {parent_tid=[351]}, 88) = 351 [pid 5647] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053 [pid 5646] rt_sigprocmask(SIG_SETMASK, [], [pid 5647] <... rseq resumed>) = 0 [pid 5646] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5647] set_robust_list(0x7efc0265e9a0, 24 [pid 5646] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5647] <... set_robust_list resumed>) = 0 [pid 5647] rt_sigprocmask(SIG_SETMASK, [], [pid 5646] <... futex resumed>) = 0 [pid 5647] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5646] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5647] memfd_create("syzkaller", 0) = 3 [pid 5647] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5647] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5647] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5647] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5647] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5647] close(3) = 0 [pid 5647] mkdir("./file0", 0777) = 0 [pid 5647] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5647] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5647] chdir("./file0") = 0 [pid 5647] ioctl(4, LOOP_CLR_FD) = 0 [pid 5647] close(4) = 0 [pid 5647] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5646] <... futex resumed>) = 0 [pid 5647] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5646] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5647] <... futex resumed>) = 0 [pid 5646] <... futex resumed>) = 1 [pid 5646] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5647] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5647] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5647] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5646] <... futex resumed>) = 0 [pid 5646] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5647] <... futex resumed>) = 0 [pid 5646] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5647] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5647] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5646] <... futex resumed>) = 0 [pid 5647] <... futex resumed>) = 1 [pid 5646] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5647] ftruncate(5, 33587195) = 0 [pid 5646] <... futex resumed>) = 0 [pid 5646] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5647] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5646] <... futex resumed>) = 0 [pid 5647] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5646] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5647] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5646] <... futex resumed>) = 0 [pid 5647] sendfile(4, 5, NULL, 4 [pid 5646] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5647] <... sendfile resumed>) = 4 [pid 5647] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5646] <... futex resumed>) = 0 [pid 5647] <... futex resumed>) = 1 [pid 5647] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5646] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5647] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5646] <... futex resumed>) = 0 [pid 5647] sendfile(4, 5, NULL, 281474978811909 [pid 5646] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5646] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5646] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5646] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5646] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0} => {parent_tid=[352]}, 88) = 352 [pid 5646] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5646] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5646] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5650 attached [pid 5650] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5650] set_robust_list(0x7efbfa33d9a0, 24) = 0 [ 125.475699][ T5647] loop0: detected capacity change from 0 to 2048 [ 125.500621][ T5647] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5650] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5650] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5650] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5650] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5646] <... futex resumed>) = 0 [pid 5646] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5650] <... futex resumed>) = 0 [pid 5646] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 125.561198][ T5650] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 125.578031][ T5650] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 67 with error 28 [ 125.590454][ T5650] EXT4-fs (loop0): This should not happen!! Data will be lost [ 125.590454][ T5650] [ 125.600232][ T5650] EXT4-fs (loop0): Total free blocks count 0 [pid 5650] prlimit64(0, RLIMIT_CPU, NULL, [pid 5646] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5650] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5650] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5650] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5647] <... sendfile resumed>) = 139264 [pid 5647] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5646] close(3 [pid 5647] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5646] <... close resumed>) = 0 [pid 5646] close(4) = 0 [pid 5646] close(5) = 0 [pid 5646] close(6) = -1 EBADF (Bad file descriptor) [pid 5646] close(7) = -1 EBADF (Bad file descriptor) [pid 5646] close(8) = -1 EBADF (Bad file descriptor) [pid 5646] close(9) = -1 EBADF (Bad file descriptor) [pid 5646] close(10) = -1 EBADF (Bad file descriptor) [pid 5646] close(11) = -1 EBADF (Bad file descriptor) [pid 5646] close(12) = -1 EBADF (Bad file descriptor) [pid 5646] close(13) = -1 EBADF (Bad file descriptor) [pid 5646] close(14) = -1 EBADF (Bad file descriptor) [pid 5646] close(15) = -1 EBADF (Bad file descriptor) [pid 5646] close(16) = -1 EBADF (Bad file descriptor) [pid 5646] close(17) = -1 EBADF (Bad file descriptor) [pid 5646] close(18) = -1 EBADF (Bad file descriptor) [pid 5646] close(19) = -1 EBADF (Bad file descriptor) [pid 5646] close(20) = -1 EBADF (Bad file descriptor) [pid 5646] close(21) = -1 EBADF (Bad file descriptor) [pid 5646] close(22) = -1 EBADF (Bad file descriptor) [pid 5646] close(23) = -1 EBADF (Bad file descriptor) [pid 5646] close(24) = -1 EBADF (Bad file descriptor) [pid 5646] close(25) = -1 EBADF (Bad file descriptor) [pid 5646] close(26) = -1 EBADF (Bad file descriptor) [pid 5646] close(27) = -1 EBADF (Bad file descriptor) [pid 5646] close(28) = -1 EBADF (Bad file descriptor) [pid 5646] close(29) = -1 EBADF (Bad file descriptor) [pid 5646] exit_group(0) = ? [pid 5650] <... futex resumed>) = ? [pid 5647] <... futex resumed>) = ? [pid 5647] +++ exited with 0 +++ [pid 5650] +++ exited with 0 +++ [pid 5646] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=350, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./116", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./116/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./116/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./116/binderfs") = 0 [ 125.606232][ T5650] EXT4-fs (loop0): Free/Dirty block details [ 125.612246][ T5650] EXT4-fs (loop0): free_blocks=2415919104 [ 125.618243][ T5650] EXT4-fs (loop0): dirty_blocks=80 [ 125.623356][ T5650] EXT4-fs (loop0): Block reservation details [ 125.629417][ T5650] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 125.639137][ T5647] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 68 with max blocks 1 with error 28 [pid 5046] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./116/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./116/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./116/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./116") = 0 [pid 5046] mkdir("./117", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5651 attached , child_tidptr=0x555555a9c690) = 353 [pid 5651] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5651] chdir("./117") = 0 [pid 5651] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5651] setpgid(0, 0) = 0 [pid 5651] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5651] write(3, "1000", 4) = 4 [pid 5651] close(3) = 0 [pid 5651] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5651] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5651] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5651] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5651] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5651] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5651] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5651] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5651] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5652 attached [pid 5652] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053 [pid 5651] <... clone3 resumed> => {parent_tid=[354]}, 88) = 354 [pid 5651] rt_sigprocmask(SIG_SETMASK, [], [pid 5652] <... rseq resumed>) = 0 [pid 5651] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5651] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5652] set_robust_list(0x7efc0265e9a0, 24 [pid 5651] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5652] <... set_robust_list resumed>) = 0 [pid 5652] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5652] memfd_create("syzkaller", 0) = 3 [pid 5652] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5652] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5652] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5652] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5652] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5652] close(3) = 0 [pid 5652] mkdir("./file0", 0777) = 0 [pid 5652] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5652] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5652] chdir("./file0") = 0 [pid 5652] ioctl(4, LOOP_CLR_FD) = 0 [pid 5652] close(4) = 0 [pid 5652] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5651] <... futex resumed>) = 0 [pid 5652] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5651] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5652] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5651] <... futex resumed>) = 0 [pid 5652] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5651] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5652] <... open resumed>) = 4 [pid 5652] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5651] <... futex resumed>) = 0 [pid 5652] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5651] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5652] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5652] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5651] <... futex resumed>) = 0 [pid 5652] <... open resumed>) = 5 [pid 5651] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5652] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5651] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5652] <... futex resumed>) = 0 [pid 5651] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5652] ftruncate(5, 33587195 [pid 5651] <... futex resumed>) = 0 [pid 5652] <... ftruncate resumed>) = 0 [pid 5651] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5652] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5651] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5652] <... futex resumed>) = 0 [pid 5651] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5652] sendfile(4, 5, NULL, 4 [pid 5651] <... futex resumed>) = 0 [pid 5651] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5652] <... sendfile resumed>) = 4 [pid 5652] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5651] <... futex resumed>) = 0 [pid 5652] <... futex resumed>) = 1 [pid 5651] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5652] sendfile(4, 5, NULL, 281474978811909 [pid 5651] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5651] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5651] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5651] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5651] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0} => {parent_tid=[355]}, 88) = 355 [pid 5651] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5651] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 125.774019][ T5652] loop0: detected capacity change from 0 to 2048 [ 125.791396][ T5652] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5651] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5655 attached [pid 5655] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5655] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5655] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5655] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5655] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5651] <... futex resumed>) = 0 [pid 5655] prlimit64(0, RLIMIT_CPU, NULL, [pid 5651] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 125.867960][ T5655] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 125.883260][ T5655] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 108 with error 28 [ 125.883985][ T5652] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 108 with max blocks 1 with error 28 [ 125.909077][ T5652] EXT4-fs (loop0): This should not happen!! Data will be lost [pid 5651] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5652] <... sendfile resumed>) = 221184 [pid 5652] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5652] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5651] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5655] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5655] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5651] close(3 [pid 5655] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5651] <... close resumed>) = 0 [pid 5651] close(4) = 0 [pid 5651] close(5) = 0 [pid 5651] close(6) = -1 EBADF (Bad file descriptor) [pid 5651] close(7) = -1 EBADF (Bad file descriptor) [pid 5651] close(8) = -1 EBADF (Bad file descriptor) [pid 5651] close(9) = -1 EBADF (Bad file descriptor) [pid 5651] close(10) = -1 EBADF (Bad file descriptor) [pid 5651] close(11) = -1 EBADF (Bad file descriptor) [pid 5651] close(12) = -1 EBADF (Bad file descriptor) [pid 5651] close(13) = -1 EBADF (Bad file descriptor) [pid 5651] close(14) = -1 EBADF (Bad file descriptor) [pid 5651] close(15) = -1 EBADF (Bad file descriptor) [pid 5651] close(16) = -1 EBADF (Bad file descriptor) [pid 5651] close(17) = -1 EBADF (Bad file descriptor) [pid 5651] close(18) = -1 EBADF (Bad file descriptor) [pid 5651] close(19) = -1 EBADF (Bad file descriptor) [pid 5651] close(20) = -1 EBADF (Bad file descriptor) [pid 5651] close(21) = -1 EBADF (Bad file descriptor) [pid 5651] close(22) = -1 EBADF (Bad file descriptor) [pid 5651] close(23) = -1 EBADF (Bad file descriptor) [pid 5651] close(24) = -1 EBADF (Bad file descriptor) [pid 5651] close(25) = -1 EBADF (Bad file descriptor) [pid 5651] close(26) = -1 EBADF (Bad file descriptor) [pid 5651] close(27) = -1 EBADF (Bad file descriptor) [pid 5651] close(28) = -1 EBADF (Bad file descriptor) [pid 5651] close(29) = -1 EBADF (Bad file descriptor) [pid 5651] exit_group(0 [pid 5655] <... futex resumed>) = ? [pid 5651] <... exit_group resumed>) = ? [pid 5652] <... futex resumed>) = ? [pid 5652] +++ exited with 0 +++ [pid 5655] +++ exited with 0 +++ [pid 5651] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=353, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./117", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./117/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./117/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./117/binderfs") = 0 [ 125.909077][ T5652] [ 125.909924][ T5655] EXT4-fs (loop0): This should not happen!! Data will be lost [ 125.909924][ T5655] [ 125.918823][ T5652] EXT4-fs (loop0): Total free blocks count 0 [ 125.918842][ T5652] EXT4-fs (loop0): Free/Dirty block details [ 125.918860][ T5652] EXT4-fs (loop0): free_blocks=2415919104 [ 125.918880][ T5652] EXT4-fs (loop0): dirty_blocks=112 [ 125.918899][ T5652] EXT4-fs (loop0): Block reservation details [pid 5046] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./117/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./117/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./117/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./117") = 0 [pid 5046] mkdir("./118", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5656 attached [pid 5656] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5656] chdir("./118") = 0 [pid 5656] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5656] setpgid(0, 0) = 0 [pid 5656] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5656] write(3, "1000", 4 [pid 5046] <... clone resumed>, child_tidptr=0x555555a9c690) = 356 [pid 5656] <... write resumed>) = 4 [pid 5656] close(3) = 0 [pid 5656] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5656] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5656] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5656] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5656] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5656] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5656] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5656] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5656] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0} => {parent_tid=[357]}, 88) = 357 ./strace-static-x86_64: Process 5657 attached [pid 5657] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5657] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5657] rt_sigprocmask(SIG_SETMASK, [], [pid 5656] rt_sigprocmask(SIG_SETMASK, [], [pid 5657] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5656] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5657] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5656] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5657] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5656] <... futex resumed>) = 0 [pid 5657] memfd_create("syzkaller", 0 [pid 5656] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5657] <... memfd_create resumed>) = 3 [pid 5657] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5657] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5657] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5657] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5657] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5657] close(3) = 0 [pid 5657] mkdir("./file0", 0777) = 0 [pid 5657] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5657] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5657] chdir("./file0") = 0 [pid 5657] ioctl(4, LOOP_CLR_FD) = 0 [pid 5657] close(4) = 0 [pid 5657] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5657] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5656] <... futex resumed>) = 0 [pid 5656] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5657] <... futex resumed>) = 0 [pid 5656] <... futex resumed>) = 1 [pid 5657] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5656] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5657] <... open resumed>) = 4 [pid 5657] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5656] <... futex resumed>) = 0 [pid 5656] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5657] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5656] <... futex resumed>) = 0 [pid 5656] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5657] <... open resumed>) = 5 [pid 5657] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5656] <... futex resumed>) = 0 [pid 5657] ftruncate(5, 33587195 [pid 5656] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5657] <... ftruncate resumed>) = 0 [pid 5656] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5657] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5656] <... futex resumed>) = 0 [pid 5657] sendfile(4, 5, NULL, 4 [pid 5656] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5657] <... sendfile resumed>) = 4 [pid 5656] <... futex resumed>) = 0 [pid 5656] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5657] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5656] <... futex resumed>) = 0 [pid 5657] sendfile(4, 5, NULL, 281474978811909 [pid 5656] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5656] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5656] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5656] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5656] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5656] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5660 attached => {parent_tid=[358]}, 88) = 358 [pid 5660] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5656] rt_sigprocmask(SIG_SETMASK, [], [pid 5660] <... rseq resumed>) = 0 [pid 5656] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5660] set_robust_list(0x7efbfa33d9a0, 24 [pid 5656] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5660] <... set_robust_list resumed>) = 0 [pid 5656] <... futex resumed>) = 0 [pid 5660] rt_sigprocmask(SIG_SETMASK, [], [pid 5656] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5660] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 126.079831][ T5657] loop0: detected capacity change from 0 to 2048 [ 126.112153][ T5657] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5660] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5660] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5656] <... futex resumed>) = 0 [pid 5656] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5656] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5660] <... futex resumed>) = 1 [ 126.164825][ T5660] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 126.184960][ T5660] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 30 with error 28 [ 126.198555][ T5657] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 30 with max blocks 1 with error 28 [pid 5660] prlimit64(0, RLIMIT_CPU, NULL, [pid 5656] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 126.212155][ T5660] EXT4-fs (loop0): This should not happen!! Data will be lost [ 126.212155][ T5660] [ 126.221870][ T5657] EXT4-fs (loop0): This should not happen!! Data will be lost [ 126.221870][ T5657] [ 126.232791][ T5660] EXT4-fs (loop0): Total free blocks count 0 [ 126.239142][ T5657] EXT4-fs (loop0): Total free blocks count 0 [ 126.245287][ T5660] EXT4-fs (loop0): Free/Dirty block details [ 126.252155][ T5657] EXT4-fs (loop0): Free/Dirty block details [ 126.259672][ T5660] EXT4-fs (loop0): free_blocks=2415919104 [pid 5657] <... sendfile resumed>) = 61440 [pid 5657] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5660] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5660] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5657] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5660] <... futex resumed>) = 0 [pid 5660] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5656] close(3) = 0 [pid 5656] close(4) = 0 [pid 5656] close(5) = 0 [pid 5656] close(6) = -1 EBADF (Bad file descriptor) [pid 5656] close(7) = -1 EBADF (Bad file descriptor) [pid 5656] close(8) = -1 EBADF (Bad file descriptor) [pid 5656] close(9) = -1 EBADF (Bad file descriptor) [pid 5656] close(10) = -1 EBADF (Bad file descriptor) [pid 5656] close(11) = -1 EBADF (Bad file descriptor) [pid 5656] close(12) = -1 EBADF (Bad file descriptor) [pid 5656] close(13) = -1 EBADF (Bad file descriptor) [pid 5656] close(14) = -1 EBADF (Bad file descriptor) [pid 5656] close(15) = -1 EBADF (Bad file descriptor) [pid 5656] close(16) = -1 EBADF (Bad file descriptor) [pid 5656] close(17) = -1 EBADF (Bad file descriptor) [pid 5656] close(18) = -1 EBADF (Bad file descriptor) [pid 5656] close(19) = -1 EBADF (Bad file descriptor) [pid 5656] close(20) = -1 EBADF (Bad file descriptor) [pid 5656] close(21) = -1 EBADF (Bad file descriptor) [pid 5656] close(22) = -1 EBADF (Bad file descriptor) [pid 5656] close(23) = -1 EBADF (Bad file descriptor) [pid 5656] close(24) = -1 EBADF (Bad file descriptor) [pid 5656] close(25) = -1 EBADF (Bad file descriptor) [pid 5656] close(26) = -1 EBADF (Bad file descriptor) [pid 5656] close(27) = -1 EBADF (Bad file descriptor) [pid 5656] close(28) = -1 EBADF (Bad file descriptor) [pid 5656] close(29) = -1 EBADF (Bad file descriptor) [pid 5656] exit_group(0 [pid 5660] <... futex resumed>) = ? [pid 5657] <... futex resumed>) = ? [pid 5656] <... exit_group resumed>) = ? [pid 5660] +++ exited with 0 +++ [pid 5657] +++ exited with 0 +++ [pid 5656] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=356, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5046] umount2("./118", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./118/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./118/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./118/binderfs") = 0 [pid 5046] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./118/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./118/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./118/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./118") = 0 [pid 5046] mkdir("./119", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5661 attached [pid 5661] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5046] <... clone resumed>, child_tidptr=0x555555a9c690) = 359 [pid 5661] chdir("./119") = 0 [pid 5661] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5661] setpgid(0, 0) = 0 [pid 5661] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5661] write(3, "1000", 4) = 4 [pid 5661] close(3) = 0 [pid 5661] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5661] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5661] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5661] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5661] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5661] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5661] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5661] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5661] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0} => {parent_tid=[360]}, 88) = 360 ./strace-static-x86_64: Process 5662 attached [pid 5661] rt_sigprocmask(SIG_SETMASK, [], [pid 5662] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053 [pid 5661] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5662] <... rseq resumed>) = 0 [pid 5661] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5661] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5662] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5662] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5662] memfd_create("syzkaller", 0) = 3 [pid 5662] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5662] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5662] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5662] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5662] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5662] close(3) = 0 [pid 5662] mkdir("./file0", 0777) = 0 [pid 5662] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5662] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5662] chdir("./file0") = 0 [pid 5662] ioctl(4, LOOP_CLR_FD) = 0 [pid 5662] close(4) = 0 [pid 5662] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5661] <... futex resumed>) = 0 [pid 5662] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5661] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5662] <... futex resumed>) = 0 [pid 5662] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5661] <... futex resumed>) = 1 [pid 5661] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5662] <... open resumed>) = 4 [pid 5662] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5661] <... futex resumed>) = 0 [pid 5662] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5661] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5662] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5661] <... futex resumed>) = 0 [pid 5662] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5661] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5662] <... open resumed>) = 5 [pid 5662] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5661] <... futex resumed>) = 0 [pid 5662] ftruncate(5, 33587195 [pid 5661] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5662] <... ftruncate resumed>) = 0 [pid 5661] <... futex resumed>) = 0 [pid 5661] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5662] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5661] <... futex resumed>) = 0 [pid 5662] <... futex resumed>) = 1 [pid 5661] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5662] sendfile(4, 5, NULL, 4 [pid 5661] <... futex resumed>) = 0 [pid 5662] <... sendfile resumed>) = 4 [pid 5661] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5662] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5661] <... futex resumed>) = 0 [pid 5661] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5661] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5661] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5661] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5661] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5662] <... futex resumed>) = 1 [pid 5661] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0} [pid 5662] sendfile(4, 5, NULL, 281474978811909./strace-static-x86_64: Process 5665 attached [pid 5665] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5661] <... clone3 resumed> => {parent_tid=[361]}, 88) = 361 [pid 5665] set_robust_list(0x7efbfa33d9a0, 24 [pid 5661] rt_sigprocmask(SIG_SETMASK, [], [pid 5665] <... set_robust_list resumed>) = 0 [pid 5661] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5665] rt_sigprocmask(SIG_SETMASK, [], [pid 5661] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5665] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5665] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000 [pid 5661] <... futex resumed>) = 0 [pid 5665] <... mmap resumed>) = 0x20000000 [pid 5661] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 126.384879][ T5662] loop0: detected capacity change from 0 to 2048 [ 126.410829][ T5662] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5665] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5665] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5661] <... futex resumed>) = 0 [pid 5661] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5665] <... futex resumed>) = 0 [pid 5661] <... futex resumed>) = 1 [pid 5665] prlimit64(0, RLIMIT_CPU, NULL, [ 126.467916][ T5665] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 126.484265][ T5665] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 87 with error 28 [ 126.499156][ T5665] EXT4-fs (loop0): This should not happen!! Data will be lost [ 126.499156][ T5665] [ 126.508964][ T5665] EXT4-fs (loop0): Total free blocks count 0 [pid 5661] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5665] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5665] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5665] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5662] <... sendfile resumed>) = 180224 [pid 5662] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5661] close(3) = 0 [pid 5661] close(4) = 0 [pid 5661] close(5) = 0 [pid 5662] <... futex resumed>) = 0 [pid 5661] close(6) = -1 EBADF (Bad file descriptor) [pid 5661] close(7) = -1 EBADF (Bad file descriptor) [pid 5661] close(8) = -1 EBADF (Bad file descriptor) [pid 5661] close(9) = -1 EBADF (Bad file descriptor) [pid 5662] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5661] close(10) = -1 EBADF (Bad file descriptor) [pid 5661] close(11) = -1 EBADF (Bad file descriptor) [pid 5661] close(12) = -1 EBADF (Bad file descriptor) [pid 5661] close(13) = -1 EBADF (Bad file descriptor) [pid 5661] close(14) = -1 EBADF (Bad file descriptor) [pid 5661] close(15) = -1 EBADF (Bad file descriptor) [pid 5661] close(16) = -1 EBADF (Bad file descriptor) [pid 5661] close(17) = -1 EBADF (Bad file descriptor) [pid 5661] close(18) = -1 EBADF (Bad file descriptor) [pid 5661] close(19) = -1 EBADF (Bad file descriptor) [pid 5661] close(20) = -1 EBADF (Bad file descriptor) [pid 5661] close(21) = -1 EBADF (Bad file descriptor) [pid 5661] close(22) = -1 EBADF (Bad file descriptor) [pid 5661] close(23) = -1 EBADF (Bad file descriptor) [pid 5661] close(24) = -1 EBADF (Bad file descriptor) [pid 5661] close(25) = -1 EBADF (Bad file descriptor) [pid 5661] close(26) = -1 EBADF (Bad file descriptor) [pid 5661] close(27) = -1 EBADF (Bad file descriptor) [pid 5661] close(28) = -1 EBADF (Bad file descriptor) [pid 5661] close(29) = -1 EBADF (Bad file descriptor) [pid 5661] exit_group(0 [pid 5665] <... futex resumed>) = ? [pid 5662] <... futex resumed>) = ? [pid 5661] <... exit_group resumed>) = ? [pid 5662] +++ exited with 0 +++ [pid 5665] +++ exited with 0 +++ [pid 5661] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=359, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5046] umount2("./119", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./119/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./119/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./119/binderfs") = 0 [ 126.514979][ T5665] EXT4-fs (loop0): Free/Dirty block details [ 126.521031][ T5665] EXT4-fs (loop0): free_blocks=2415919104 [ 126.527278][ T5665] EXT4-fs (loop0): dirty_blocks=96 [ 126.532429][ T5665] EXT4-fs (loop0): Block reservation details [ 126.538509][ T5665] EXT4-fs (loop0): i_reserved_data_blocks=6 [ 126.549995][ T5662] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 88 with max blocks 1 with error 28 [pid 5046] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./119/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./119/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./119/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./119") = 0 [pid 5046] mkdir("./120", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5666 attached [pid 5666] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5666] chdir("./120") = 0 [pid 5666] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5666] setpgid(0, 0 [pid 5046] <... clone resumed>, child_tidptr=0x555555a9c690) = 362 [pid 5666] <... setpgid resumed>) = 0 [pid 5666] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5666] write(3, "1000", 4) = 4 [pid 5666] close(3) = 0 [pid 5666] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5666] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5666] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5666] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5666] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5666] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5666] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5666] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5666] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5667 attached => {parent_tid=[363]}, 88) = 363 [pid 5667] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053 [pid 5666] rt_sigprocmask(SIG_SETMASK, [], [pid 5667] <... rseq resumed>) = 0 [pid 5666] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5667] set_robust_list(0x7efc0265e9a0, 24 [pid 5666] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5667] <... set_robust_list resumed>) = 0 [pid 5666] <... futex resumed>) = 0 [pid 5667] rt_sigprocmask(SIG_SETMASK, [], [pid 5666] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5667] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5667] memfd_create("syzkaller", 0) = 3 [pid 5667] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5667] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5667] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5667] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5667] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5667] close(3) = 0 [pid 5667] mkdir("./file0", 0777) = 0 [pid 5667] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5667] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5667] chdir("./file0") = 0 [pid 5667] ioctl(4, LOOP_CLR_FD) = 0 [pid 5667] close(4) = 0 [pid 5667] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5666] <... futex resumed>) = 0 [pid 5667] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5666] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5667] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5666] <... futex resumed>) = 0 [pid 5667] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5666] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5667] <... open resumed>) = 4 [pid 5667] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5666] <... futex resumed>) = 0 [pid 5667] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5666] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5667] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5666] <... futex resumed>) = 0 [pid 5667] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5666] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5667] <... open resumed>) = 5 [pid 5667] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5666] <... futex resumed>) = 0 [pid 5667] <... futex resumed>) = 1 [pid 5666] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5667] ftruncate(5, 33587195 [pid 5666] <... futex resumed>) = 0 [pid 5667] <... ftruncate resumed>) = 0 [pid 5666] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5667] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5666] <... futex resumed>) = 0 [pid 5666] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5667] sendfile(4, 5, NULL, 4 [pid 5666] <... futex resumed>) = 0 [pid 5666] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5667] <... sendfile resumed>) = 4 [pid 5667] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5666] <... futex resumed>) = 0 [pid 5666] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5666] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5667] sendfile(4, 5, NULL, 281474978811909 [pid 5666] <... futex resumed>) = 0 [pid 5666] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5666] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5666] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5666] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0} => {parent_tid=[364]}, 88) = 364 ./strace-static-x86_64: Process 5670 attached [pid 5666] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5666] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5666] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5670] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5670] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5670] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5670] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5670] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5670] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5666] <... futex resumed>) = 0 [pid 5666] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5670] <... futex resumed>) = 0 [pid 5666] <... futex resumed>) = 1 [pid 5670] prlimit64(0, RLIMIT_CPU, NULL, [ 126.683737][ T5667] loop0: detected capacity change from 0 to 2048 [ 126.701327][ T5667] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.763255][ T5670] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 126.784064][ T5670] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 71 with error 28 [ 126.797767][ T5670] EXT4-fs (loop0): This should not happen!! Data will be lost [ 126.797767][ T5670] [ 126.807868][ T5670] EXT4-fs (loop0): Total free blocks count 0 [pid 5666] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5670] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5670] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5670] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5667] <... sendfile resumed>) = 147456 [pid 5667] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5666] close(3 [pid 5667] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5666] <... close resumed>) = 0 [pid 5666] close(4) = 0 [pid 5666] close(5) = 0 [pid 5666] close(6) = -1 EBADF (Bad file descriptor) [pid 5666] close(7) = -1 EBADF (Bad file descriptor) [pid 5666] close(8) = -1 EBADF (Bad file descriptor) [pid 5666] close(9) = -1 EBADF (Bad file descriptor) [pid 5666] close(10) = -1 EBADF (Bad file descriptor) [pid 5666] close(11) = -1 EBADF (Bad file descriptor) [pid 5666] close(12) = -1 EBADF (Bad file descriptor) [pid 5666] close(13) = -1 EBADF (Bad file descriptor) [pid 5666] close(14) = -1 EBADF (Bad file descriptor) [pid 5666] close(15) = -1 EBADF (Bad file descriptor) [pid 5666] close(16) = -1 EBADF (Bad file descriptor) [pid 5666] close(17) = -1 EBADF (Bad file descriptor) [pid 5666] close(18) = -1 EBADF (Bad file descriptor) [pid 5666] close(19) = -1 EBADF (Bad file descriptor) [pid 5666] close(20) = -1 EBADF (Bad file descriptor) [pid 5666] close(21) = -1 EBADF (Bad file descriptor) [pid 5666] close(22) = -1 EBADF (Bad file descriptor) [pid 5666] close(23) = -1 EBADF (Bad file descriptor) [pid 5666] close(24) = -1 EBADF (Bad file descriptor) [pid 5666] close(25) = -1 EBADF (Bad file descriptor) [pid 5666] close(26) = -1 EBADF (Bad file descriptor) [pid 5666] close(27) = -1 EBADF (Bad file descriptor) [pid 5666] close(28) = -1 EBADF (Bad file descriptor) [pid 5666] close(29) = -1 EBADF (Bad file descriptor) [pid 5666] exit_group(0 [pid 5670] <... futex resumed>) = ? [pid 5667] <... futex resumed>) = ? [pid 5666] <... exit_group resumed>) = ? [pid 5670] +++ exited with 0 +++ [pid 5667] +++ exited with 0 +++ [pid 5666] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=362, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5046] umount2("./120", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./120/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./120/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./120/binderfs") = 0 [ 126.813869][ T5670] EXT4-fs (loop0): Free/Dirty block details [ 126.821262][ T5670] EXT4-fs (loop0): free_blocks=2415919104 [ 126.827698][ T5670] EXT4-fs (loop0): dirty_blocks=80 [ 126.832826][ T5670] EXT4-fs (loop0): Block reservation details [ 126.841104][ T5670] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 126.849879][ T5667] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 72 with max blocks 1 with error 28 [pid 5046] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./120/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./120/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./120/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./120") = 0 [pid 5046] mkdir("./121", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9c690) = 365 ./strace-static-x86_64: Process 5671 attached [pid 5671] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5671] chdir("./121") = 0 [pid 5671] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5671] setpgid(0, 0) = 0 [pid 5671] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5671] write(3, "1000", 4) = 4 [pid 5671] close(3) = 0 [pid 5671] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5671] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5671] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5671] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5671] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5671] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5671] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5671] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5671] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0} => {parent_tid=[366]}, 88) = 366 [pid 5671] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 5672 attached [pid 5671] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5672] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053 [pid 5671] <... futex resumed>) = 0 [pid 5672] <... rseq resumed>) = 0 [pid 5671] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5672] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5672] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5672] memfd_create("syzkaller", 0) = 3 [pid 5672] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5672] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5672] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5672] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5672] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5672] close(3) = 0 [pid 5672] mkdir("./file0", 0777) = 0 [pid 5672] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5672] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5672] chdir("./file0") = 0 [pid 5672] ioctl(4, LOOP_CLR_FD) = 0 [pid 5672] close(4) = 0 [pid 5672] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5671] <... futex resumed>) = 0 [pid 5672] <... futex resumed>) = 1 [pid 5671] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5672] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5671] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5672] <... open resumed>) = 4 [pid 5672] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5671] <... futex resumed>) = 0 [pid 5672] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5671] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5672] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5671] <... futex resumed>) = 0 [pid 5672] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5671] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5672] <... open resumed>) = 5 [pid 5672] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5671] <... futex resumed>) = 0 [pid 5672] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5671] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5672] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5671] <... futex resumed>) = 0 [pid 5671] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5672] ftruncate(5, 33587195) = 0 [pid 5672] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5671] <... futex resumed>) = 0 [pid 5672] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5671] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5672] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5671] <... futex resumed>) = 0 [pid 5672] sendfile(4, 5, NULL, 4 [pid 5671] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5672] <... sendfile resumed>) = 4 [pid 5672] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5671] <... futex resumed>) = 0 [pid 5672] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5671] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5672] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5671] <... futex resumed>) = 0 [ 126.988971][ T5672] loop0: detected capacity change from 0 to 2048 [ 127.011406][ T5672] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5672] sendfile(4, 5, NULL, 281474978811909 [pid 5671] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5671] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5671] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5671] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5671] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5675 attached => {parent_tid=[367]}, 88) = 367 [pid 5671] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5671] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5671] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5675] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5675] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5675] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5675] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5675] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5671] <... futex resumed>) = 0 [pid 5671] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5675] prlimit64(0, RLIMIT_CPU, NULL, [pid 5671] <... futex resumed>) = 0 [pid 5671] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 127.083121][ T5675] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 127.098684][ T5675] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 71 with error 28 [ 127.111416][ T5675] EXT4-fs (loop0): This should not happen!! Data will be lost [ 127.111416][ T5675] [ 127.121423][ T5675] EXT4-fs (loop0): Total free blocks count 0 [ 127.127691][ T5675] EXT4-fs (loop0): Free/Dirty block details [pid 5675] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5675] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5675] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5672] <... sendfile resumed>) = 147456 [pid 5672] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5672] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5671] close(3) = 0 [pid 5671] close(4) = 0 [pid 5671] close(5) = 0 [pid 5671] close(6) = -1 EBADF (Bad file descriptor) [pid 5671] close(7) = -1 EBADF (Bad file descriptor) [pid 5671] close(8) = -1 EBADF (Bad file descriptor) [pid 5671] close(9) = -1 EBADF (Bad file descriptor) [pid 5671] close(10) = -1 EBADF (Bad file descriptor) [pid 5671] close(11) = -1 EBADF (Bad file descriptor) [pid 5671] close(12) = -1 EBADF (Bad file descriptor) [pid 5671] close(13) = -1 EBADF (Bad file descriptor) [pid 5671] close(14) = -1 EBADF (Bad file descriptor) [pid 5671] close(15) = -1 EBADF (Bad file descriptor) [pid 5671] close(16) = -1 EBADF (Bad file descriptor) [pid 5671] close(17) = -1 EBADF (Bad file descriptor) [pid 5671] close(18) = -1 EBADF (Bad file descriptor) [pid 5671] close(19) = -1 EBADF (Bad file descriptor) [pid 5671] close(20) = -1 EBADF (Bad file descriptor) [pid 5671] close(21) = -1 EBADF (Bad file descriptor) [pid 5671] close(22) = -1 EBADF (Bad file descriptor) [pid 5671] close(23) = -1 EBADF (Bad file descriptor) [pid 5671] close(24) = -1 EBADF (Bad file descriptor) [pid 5671] close(25) = -1 EBADF (Bad file descriptor) [pid 5671] close(26) = -1 EBADF (Bad file descriptor) [pid 5671] close(27) = -1 EBADF (Bad file descriptor) [pid 5671] close(28) = -1 EBADF (Bad file descriptor) [pid 5671] close(29) = -1 EBADF (Bad file descriptor) [pid 5671] exit_group(0 [pid 5675] <... futex resumed>) = ? [pid 5672] <... futex resumed>) = ? [pid 5671] <... exit_group resumed>) = ? [pid 5675] +++ exited with 0 +++ [pid 5672] +++ exited with 0 +++ [pid 5671] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=365, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./121", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./121", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./121/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./121/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./121/binderfs") = 0 [ 127.133784][ T5675] EXT4-fs (loop0): free_blocks=2415919104 [ 127.139585][ T5675] EXT4-fs (loop0): dirty_blocks=80 [ 127.144865][ T5675] EXT4-fs (loop0): Block reservation details [ 127.150954][ T5675] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 127.161216][ T5672] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 72 with max blocks 1 with error 28 [pid 5046] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./121/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./121/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./121/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./121") = 0 [pid 5046] mkdir("./122", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5676 attached , child_tidptr=0x555555a9c690) = 368 [pid 5676] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5676] chdir("./122") = 0 [pid 5676] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5676] setpgid(0, 0) = 0 [pid 5676] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5676] write(3, "1000", 4) = 4 [pid 5676] close(3) = 0 [pid 5676] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5676] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5676] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5676] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5676] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5676] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5676] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5676] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5676] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0} => {parent_tid=[369]}, 88) = 369 [pid 5676] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5676] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5676] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5677 attached [pid 5677] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5677] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5677] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5677] memfd_create("syzkaller", 0) = 3 [pid 5677] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5677] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5677] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5677] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5677] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5677] close(3) = 0 [pid 5677] mkdir("./file0", 0777) = 0 [pid 5677] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5677] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5677] chdir("./file0") = 0 [pid 5677] ioctl(4, LOOP_CLR_FD) = 0 [pid 5677] close(4) = 0 [pid 5677] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5676] <... futex resumed>) = 0 [pid 5677] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5676] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5677] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5676] <... futex resumed>) = 0 [pid 5677] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5676] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5677] <... open resumed>) = 4 [pid 5677] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5677] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5676] <... futex resumed>) = 0 [pid 5676] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5677] <... futex resumed>) = 0 [pid 5676] <... futex resumed>) = 1 [pid 5677] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5676] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5677] <... open resumed>) = 5 [pid 5677] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5676] <... futex resumed>) = 0 [pid 5676] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5677] ftruncate(5, 33587195 [pid 5676] <... futex resumed>) = 0 [pid 5676] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5677] <... ftruncate resumed>) = 0 [pid 5677] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5676] <... futex resumed>) = 0 [pid 5676] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5677] sendfile(4, 5, NULL, 4 [pid 5676] <... futex resumed>) = 0 [pid 5677] <... sendfile resumed>) = 4 [pid 5676] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5677] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5676] <... futex resumed>) = 0 [pid 5676] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5677] sendfile(4, 5, NULL, 281474978811909 [pid 5676] <... futex resumed>) = 0 [pid 5676] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5676] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5676] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5676] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5676] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5680 attached [pid 5680] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5680] set_robust_list(0x7efbfa33d9a0, 24) = 0 [ 127.294695][ T5677] loop0: detected capacity change from 0 to 2048 [ 127.320867][ T5677] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5680] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5680] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5676] <... clone3 resumed> => {parent_tid=[370]}, 88) = 370 [pid 5676] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5676] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5680] <... futex resumed>) = 0 [pid 5676] <... futex resumed>) = 1 [pid 5676] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5680] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5680] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5676] <... futex resumed>) = 0 [pid 5676] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5680] <... futex resumed>) = 1 [pid 5676] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 127.385500][ T5680] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 127.402295][ T5680] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 48 with error 28 [ 127.408501][ T5677] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 48 with max blocks 1 with error 28 [ 127.415311][ T5680] EXT4-fs (loop0): This should not happen!! Data will be lost [pid 5680] prlimit64(0, RLIMIT_CPU, NULL, [pid 5676] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5680] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5680] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5680] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5677] <... sendfile resumed>) = 98304 [pid 5677] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5677] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5676] close(3) = 0 [pid 5676] close(4) = 0 [pid 5676] close(5) = 0 [pid 5676] close(6) = -1 EBADF (Bad file descriptor) [pid 5676] close(7) = -1 EBADF (Bad file descriptor) [pid 5676] close(8) = -1 EBADF (Bad file descriptor) [pid 5676] close(9) = -1 EBADF (Bad file descriptor) [pid 5676] close(10) = -1 EBADF (Bad file descriptor) [pid 5676] close(11) = -1 EBADF (Bad file descriptor) [pid 5676] close(12) = -1 EBADF (Bad file descriptor) [pid 5676] close(13) = -1 EBADF (Bad file descriptor) [pid 5676] close(14) = -1 EBADF (Bad file descriptor) [pid 5676] close(15) = -1 EBADF (Bad file descriptor) [pid 5676] close(16) = -1 EBADF (Bad file descriptor) [pid 5676] close(17) = -1 EBADF (Bad file descriptor) [pid 5676] close(18) = -1 EBADF (Bad file descriptor) [pid 5676] close(19) = -1 EBADF (Bad file descriptor) [pid 5676] close(20) = -1 EBADF (Bad file descriptor) [pid 5676] close(21) = -1 EBADF (Bad file descriptor) [pid 5676] close(22) = -1 EBADF (Bad file descriptor) [pid 5676] close(23) = -1 EBADF (Bad file descriptor) [pid 5676] close(24) = -1 EBADF (Bad file descriptor) [pid 5676] close(25) = -1 EBADF (Bad file descriptor) [pid 5676] close(26) = -1 EBADF (Bad file descriptor) [pid 5676] close(27) = -1 EBADF (Bad file descriptor) [pid 5676] close(28) = -1 EBADF (Bad file descriptor) [pid 5676] close(29) = -1 EBADF (Bad file descriptor) [pid 5676] exit_group(0) = ? [pid 5677] <... futex resumed>) = ? [pid 5677] +++ exited with 0 +++ [pid 5680] <... futex resumed>) = ? [pid 5680] +++ exited with 0 +++ [pid 5676] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=368, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./122", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./122", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./122/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./122/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./122/binderfs") = 0 [ 127.415311][ T5680] [ 127.427070][ T5677] EXT4-fs (loop0): This should not happen!! Data will be lost [ 127.427070][ T5677] [ 127.427094][ T5677] EXT4-fs (loop0): Total free blocks count 0 [ 127.427113][ T5677] EXT4-fs (loop0): Free/Dirty block details [ 127.427132][ T5677] EXT4-fs (loop0): free_blocks=2415919104 [ 127.427154][ T5677] EXT4-fs (loop0): dirty_blocks=64 [ 127.427173][ T5677] EXT4-fs (loop0): Block reservation details [pid 5046] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./122/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./122/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./122/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./122") = 0 [pid 5046] mkdir("./123", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5681 attached , child_tidptr=0x555555a9c690) = 371 [pid 5681] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5681] chdir("./123") = 0 [pid 5681] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5681] setpgid(0, 0) = 0 [pid 5681] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5681] write(3, "1000", 4) = 4 [pid 5681] close(3) = 0 [pid 5681] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5681] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5681] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5681] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5681] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5681] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5681] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5681] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5681] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5682 attached => {parent_tid=[372]}, 88) = 372 [pid 5681] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5681] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5681] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5682] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5682] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5682] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5682] memfd_create("syzkaller", 0) = 3 [pid 5682] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5682] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5682] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5682] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5682] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5682] close(3) = 0 [pid 5682] mkdir("./file0", 0777) = 0 [pid 5682] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5682] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5682] chdir("./file0") = 0 [pid 5682] ioctl(4, LOOP_CLR_FD) = 0 [pid 5682] close(4) = 0 [pid 5682] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5681] <... futex resumed>) = 0 [pid 5681] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5682] <... futex resumed>) = 1 [pid 5681] <... futex resumed>) = 0 [pid 5682] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5681] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5682] <... open resumed>) = 4 [pid 5682] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5681] <... futex resumed>) = 0 [pid 5681] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5681] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5682] <... futex resumed>) = 1 [pid 5682] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5682] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5681] <... futex resumed>) = 0 [pid 5682] <... futex resumed>) = 1 [pid 5681] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5682] ftruncate(5, 33587195 [pid 5681] <... futex resumed>) = 0 [pid 5682] <... ftruncate resumed>) = 0 [pid 5682] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5681] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5682] <... futex resumed>) = 0 [pid 5681] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5682] sendfile(4, 5, NULL, 4 [pid 5681] <... futex resumed>) = 0 [pid 5682] <... sendfile resumed>) = 4 [pid 5681] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5682] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5681] <... futex resumed>) = 0 [pid 5681] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5681] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5682] sendfile(4, 5, NULL, 281474978811909 [pid 5681] <... futex resumed>) = 0 [pid 5681] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5681] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5681] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 127.597234][ T5682] loop0: detected capacity change from 0 to 2048 [ 127.630895][ T5682] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5681] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5685 attached => {parent_tid=[373]}, 88) = 373 [pid 5681] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5681] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5685] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5681] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5685] <... rseq resumed>) = 0 [pid 5685] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5685] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5685] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5685] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5681] <... futex resumed>) = 0 [pid 5681] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5681] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5685] prlimit64(0, RLIMIT_CPU, NULL, [pid 5681] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 127.695600][ T5685] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 127.711880][ T5685] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 103 with error 28 [ 127.725130][ T5685] EXT4-fs (loop0): This should not happen!! Data will be lost [ 127.725130][ T5685] [ 127.734821][ T5685] EXT4-fs (loop0): Total free blocks count 0 [pid 5685] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5685] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5685] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5682] <... sendfile resumed>) = 212992 [pid 5682] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5681] close(3 [pid 5682] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5681] <... close resumed>) = 0 [pid 5681] close(4) = 0 [pid 5681] close(5) = 0 [pid 5681] close(6) = -1 EBADF (Bad file descriptor) [pid 5681] close(7) = -1 EBADF (Bad file descriptor) [pid 5681] close(8) = -1 EBADF (Bad file descriptor) [pid 5681] close(9) = -1 EBADF (Bad file descriptor) [pid 5681] close(10) = -1 EBADF (Bad file descriptor) [pid 5681] close(11) = -1 EBADF (Bad file descriptor) [pid 5681] close(12) = -1 EBADF (Bad file descriptor) [pid 5681] close(13) = -1 EBADF (Bad file descriptor) [pid 5681] close(14) = -1 EBADF (Bad file descriptor) [pid 5681] close(15) = -1 EBADF (Bad file descriptor) [pid 5681] close(16) = -1 EBADF (Bad file descriptor) [pid 5681] close(17) = -1 EBADF (Bad file descriptor) [pid 5681] close(18) = -1 EBADF (Bad file descriptor) [pid 5681] close(19) = -1 EBADF (Bad file descriptor) [pid 5681] close(20) = -1 EBADF (Bad file descriptor) [pid 5681] close(21) = -1 EBADF (Bad file descriptor) [pid 5681] close(22) = -1 EBADF (Bad file descriptor) [pid 5681] close(23) = -1 EBADF (Bad file descriptor) [pid 5681] close(24) = -1 EBADF (Bad file descriptor) [pid 5681] close(25) = -1 EBADF (Bad file descriptor) [pid 5681] close(26) = -1 EBADF (Bad file descriptor) [pid 5681] close(27) = -1 EBADF (Bad file descriptor) [pid 5681] close(28) = -1 EBADF (Bad file descriptor) [pid 5681] close(29) = -1 EBADF (Bad file descriptor) [pid 5681] exit_group(0 [pid 5685] <... futex resumed>) = ? [pid 5682] <... futex resumed>) = ? [pid 5685] +++ exited with 0 +++ [pid 5682] +++ exited with 0 +++ [pid 5681] <... exit_group resumed>) = ? [pid 5681] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=371, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5046] umount2("./123", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./123", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./123/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./123/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./123/binderfs") = 0 [ 127.740855][ T5685] EXT4-fs (loop0): Free/Dirty block details [ 127.747158][ T5685] EXT4-fs (loop0): free_blocks=2415919104 [ 127.752912][ T5685] EXT4-fs (loop0): dirty_blocks=112 [ 127.758171][ T5685] EXT4-fs (loop0): Block reservation details [ 127.764184][ T5685] EXT4-fs (loop0): i_reserved_data_blocks=7 [ 127.774211][ T5682] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 104 with max blocks 1 with error 28 [pid 5046] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./123/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./123/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./123/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./123") = 0 [pid 5046] mkdir("./124", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5686 attached , child_tidptr=0x555555a9c690) = 374 [pid 5686] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5686] chdir("./124") = 0 [pid 5686] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5686] setpgid(0, 0) = 0 [pid 5686] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5686] write(3, "1000", 4) = 4 [pid 5686] close(3) = 0 [pid 5686] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5686] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5686] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5686] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5686] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5686] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5686] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5686] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5686] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5687 attached => {parent_tid=[375]}, 88) = 375 [pid 5686] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5686] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5686] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5687] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5687] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5687] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5687] memfd_create("syzkaller", 0) = 3 [pid 5687] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5687] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5687] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5687] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5687] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5687] close(3) = 0 [pid 5687] mkdir("./file0", 0777) = 0 [pid 5687] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5687] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5687] chdir("./file0") = 0 [pid 5687] ioctl(4, LOOP_CLR_FD) = 0 [pid 5687] close(4) = 0 [pid 5687] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5686] <... futex resumed>) = 0 [pid 5686] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5687] <... futex resumed>) = 1 [pid 5686] <... futex resumed>) = 0 [pid 5687] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5686] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5687] <... open resumed>) = 4 [pid 5687] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5686] <... futex resumed>) = 0 [pid 5687] <... futex resumed>) = 1 [pid 5686] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5686] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5687] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5687] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5686] <... futex resumed>) = 0 [pid 5687] <... futex resumed>) = 1 [pid 5687] ftruncate(5, 33587195 [pid 5686] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5687] <... ftruncate resumed>) = 0 [pid 5686] <... futex resumed>) = 0 [pid 5686] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5687] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5687] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5686] <... futex resumed>) = 0 [pid 5686] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5687] <... futex resumed>) = 0 [pid 5687] sendfile(4, 5, NULL, 4 [pid 5686] <... futex resumed>) = 1 [pid 5687] <... sendfile resumed>) = 4 [pid 5686] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5687] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5686] <... futex resumed>) = 0 [pid 5686] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5686] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5687] <... futex resumed>) = 1 [pid 5687] sendfile(4, 5, NULL, 281474978811909 [pid 5686] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5686] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5686] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5686] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5690 attached [pid 5690] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5686] <... clone3 resumed> => {parent_tid=[376]}, 88) = 376 [pid 5690] <... rseq resumed>) = 0 [pid 5690] set_robust_list(0x7efbfa33d9a0, 24 [pid 5686] rt_sigprocmask(SIG_SETMASK, [], [pid 5690] <... set_robust_list resumed>) = 0 [pid 5690] rt_sigprocmask(SIG_SETMASK, [], [pid 5686] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5690] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5686] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5690] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000 [pid 5686] <... futex resumed>) = 0 [pid 5686] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5690] <... mmap resumed>) = 0x20000000 [pid 5690] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5686] <... futex resumed>) = 0 [pid 5686] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5690] <... futex resumed>) = 1 [pid 5686] <... futex resumed>) = 0 [pid 5690] prlimit64(0, RLIMIT_CPU, NULL, [ 127.888815][ T5687] loop0: detected capacity change from 0 to 2048 [ 127.910208][ T5687] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5686] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 127.955037][ T5690] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 127.971044][ T5690] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 23 with error 28 [ 127.985220][ T5690] EXT4-fs (loop0): This should not happen!! Data will be lost [ 127.985220][ T5690] [ 127.995206][ T5690] EXT4-fs (loop0): Total free blocks count 0 [pid 5690] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5690] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5690] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5687] <... sendfile resumed>) = 49152 [pid 5687] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5687] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5686] close(3) = 0 [pid 5686] close(4) = 0 [pid 5686] close(5) = 0 [pid 5686] close(6) = -1 EBADF (Bad file descriptor) [pid 5686] close(7) = -1 EBADF (Bad file descriptor) [pid 5686] close(8) = -1 EBADF (Bad file descriptor) [pid 5686] close(9) = -1 EBADF (Bad file descriptor) [pid 5686] close(10) = -1 EBADF (Bad file descriptor) [pid 5686] close(11) = -1 EBADF (Bad file descriptor) [pid 5686] close(12) = -1 EBADF (Bad file descriptor) [pid 5686] close(13) = -1 EBADF (Bad file descriptor) [pid 5686] close(14) = -1 EBADF (Bad file descriptor) [pid 5686] close(15) = -1 EBADF (Bad file descriptor) [pid 5686] close(16) = -1 EBADF (Bad file descriptor) [pid 5686] close(17) = -1 EBADF (Bad file descriptor) [pid 5686] close(18) = -1 EBADF (Bad file descriptor) [pid 5686] close(19) = -1 EBADF (Bad file descriptor) [pid 5686] close(20) = -1 EBADF (Bad file descriptor) [pid 5686] close(21) = -1 EBADF (Bad file descriptor) [pid 5686] close(22) = -1 EBADF (Bad file descriptor) [pid 5686] close(23) = -1 EBADF (Bad file descriptor) [pid 5686] close(24) = -1 EBADF (Bad file descriptor) [pid 5686] close(25) = -1 EBADF (Bad file descriptor) [pid 5686] close(26) = -1 EBADF (Bad file descriptor) [pid 5686] close(27) = -1 EBADF (Bad file descriptor) [pid 5686] close(28) = -1 EBADF (Bad file descriptor) [pid 5686] close(29) = -1 EBADF (Bad file descriptor) [pid 5686] exit_group(0 [pid 5690] <... futex resumed>) = ? [pid 5690] +++ exited with 0 +++ [pid 5687] <... futex resumed>) = ? [pid 5686] <... exit_group resumed>) = ? [pid 5687] +++ exited with 0 +++ [pid 5686] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=374, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./124", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./124", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./124/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./124/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./124/binderfs") = 0 [pid 5046] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./124/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 128.002651][ T5690] EXT4-fs (loop0): Free/Dirty block details [ 128.008631][ T5690] EXT4-fs (loop0): free_blocks=2415919104 [ 128.014374][ T5690] EXT4-fs (loop0): dirty_blocks=32 [ 128.020780][ T5690] EXT4-fs (loop0): Block reservation details [ 128.026840][ T5690] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 128.034171][ T5687] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 1 with error 28 [pid 5046] openat(AT_FDCWD, "./124/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./124/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./124") = 0 [pid 5046] mkdir("./125", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9c690) = 377 ./strace-static-x86_64: Process 5691 attached [pid 5691] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5691] chdir("./125") = 0 [pid 5691] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5691] setpgid(0, 0) = 0 [pid 5691] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5691] write(3, "1000", 4) = 4 [pid 5691] close(3) = 0 [pid 5691] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5691] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5691] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5691] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5691] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5691] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5691] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5691] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5691] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0} => {parent_tid=[378]}, 88) = 378 ./strace-static-x86_64: Process 5692 attached [pid 5691] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5691] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5691] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5692] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5692] set_robust_list(0x7efc0265e9a0, 24) = 0 [pid 5692] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5692] memfd_create("syzkaller", 0) = 3 [pid 5692] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5692] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5692] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5692] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5692] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5692] close(3) = 0 [pid 5692] mkdir("./file0", 0777) = 0 [pid 5692] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5692] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5692] chdir("./file0") = 0 [pid 5692] ioctl(4, LOOP_CLR_FD) = 0 [pid 5692] close(4) = 0 [pid 5692] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5692] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5691] <... futex resumed>) = 0 [pid 5691] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5692] <... futex resumed>) = 0 [pid 5691] <... futex resumed>) = 1 [pid 5692] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5691] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5692] <... open resumed>) = 4 [pid 5692] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5692] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5691] <... futex resumed>) = 0 [pid 5691] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5692] <... futex resumed>) = 0 [pid 5692] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5691] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5692] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5691] <... futex resumed>) = 0 [pid 5692] <... futex resumed>) = 1 [pid 5691] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5692] ftruncate(5, 33587195 [pid 5691] <... futex resumed>) = 0 [pid 5692] <... ftruncate resumed>) = 0 [pid 5691] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5692] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5691] <... futex resumed>) = 0 [pid 5692] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5691] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5692] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5691] <... futex resumed>) = 0 [pid 5692] sendfile(4, 5, NULL, 4 [pid 5691] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5692] <... sendfile resumed>) = 4 [pid 5692] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5691] <... futex resumed>) = 0 [pid 5691] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5692] <... futex resumed>) = 1 [pid 5692] sendfile(4, 5, NULL, 281474978811909 [pid 5691] <... futex resumed>) = 0 [pid 5691] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5691] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [ 128.148182][ T5692] loop0: detected capacity change from 0 to 2048 [ 128.170896][ T5692] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5691] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5691] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5691] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5695 attached [pid 5695] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053 [pid 5691] <... clone3 resumed> => {parent_tid=[379]}, 88) = 379 [pid 5695] <... rseq resumed>) = 0 [pid 5691] rt_sigprocmask(SIG_SETMASK, [], [pid 5695] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5691] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5695] rt_sigprocmask(SIG_SETMASK, [], [pid 5691] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5695] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5691] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5695] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000) = 0x20000000 [pid 5695] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5691] <... futex resumed>) = 0 [pid 5691] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5691] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5695] <... futex resumed>) = 1 [pid 5695] prlimit64(0, RLIMIT_CPU, NULL, [pid 5691] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 128.221351][ T5692] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 128.236482][ T5692] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 30 with max blocks 1 with error 28 [ 128.249941][ T5692] EXT4-fs (loop0): This should not happen!! Data will be lost [ 128.249941][ T5692] [ 128.264674][ T5692] EXT4-fs (loop0): Total free blocks count 0 [pid 5692] <... sendfile resumed>) = 61440 [pid 5692] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5692] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5695] <... prlimit64 resumed>{rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [pid 5695] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5695] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5691] close(3) = 0 [pid 5691] close(4) = 0 [pid 5691] close(5) = 0 [pid 5691] close(6) = -1 EBADF (Bad file descriptor) [pid 5691] close(7) = -1 EBADF (Bad file descriptor) [pid 5691] close(8) = -1 EBADF (Bad file descriptor) [pid 5691] close(9) = -1 EBADF (Bad file descriptor) [pid 5691] close(10) = -1 EBADF (Bad file descriptor) [pid 5691] close(11) = -1 EBADF (Bad file descriptor) [pid 5691] close(12) = -1 EBADF (Bad file descriptor) [pid 5691] close(13) = -1 EBADF (Bad file descriptor) [pid 5691] close(14) = -1 EBADF (Bad file descriptor) [pid 5691] close(15) = -1 EBADF (Bad file descriptor) [pid 5691] close(16) = -1 EBADF (Bad file descriptor) [pid 5691] close(17) = -1 EBADF (Bad file descriptor) [pid 5691] close(18) = -1 EBADF (Bad file descriptor) [pid 5691] close(19) = -1 EBADF (Bad file descriptor) [pid 5691] close(20) = -1 EBADF (Bad file descriptor) [pid 5691] close(21) = -1 EBADF (Bad file descriptor) [pid 5691] close(22) = -1 EBADF (Bad file descriptor) [pid 5691] close(23) = -1 EBADF (Bad file descriptor) [pid 5691] close(24) = -1 EBADF (Bad file descriptor) [pid 5691] close(25) = -1 EBADF (Bad file descriptor) [pid 5691] close(26) = -1 EBADF (Bad file descriptor) [pid 5691] close(27) = -1 EBADF (Bad file descriptor) [pid 5691] close(28) = -1 EBADF (Bad file descriptor) [pid 5691] close(29) = -1 EBADF (Bad file descriptor) [pid 5691] exit_group(0 [pid 5695] <... futex resumed>) = ? [pid 5692] <... futex resumed>) = ? [pid 5695] +++ exited with 0 +++ [pid 5692] +++ exited with 0 +++ [pid 5691] <... exit_group resumed>) = ? [pid 5691] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=377, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5046] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5046] umount2("./125", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./125", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./125/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./125/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./125/binderfs") = 0 [ 128.272516][ T5692] EXT4-fs (loop0): Free/Dirty block details [ 128.278522][ T5692] EXT4-fs (loop0): free_blocks=2415919104 [ 128.284272][ T5692] EXT4-fs (loop0): dirty_blocks=32 [ 128.289534][ T5692] EXT4-fs (loop0): Block reservation details [ 128.295545][ T5692] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 128.302236][ T5695] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 30 with error 28 [pid 5046] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5046] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./125/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./125/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5046] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(4, 0x555555aa5770 /* 2 entries */, 32768) = 48 [pid 5046] getdents64(4, 0x555555aa5770 /* 0 entries */, 32768) = 0 [pid 5046] close(4) = 0 [pid 5046] rmdir("./125/file0") = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 0 entries */, 32768) = 0 [pid 5046] close(3) = 0 [pid 5046] rmdir("./125") = 0 [pid 5046] mkdir("./126", 0777) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5046] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5046] close(3) = 0 [pid 5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5696 attached , child_tidptr=0x555555a9c690) = 380 [pid 5696] set_robust_list(0x555555a9c6a0, 24) = 0 [pid 5696] chdir("./126") = 0 [pid 5696] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5696] setpgid(0, 0) = 0 [pid 5696] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5696] write(3, "1000", 4) = 4 [pid 5696] close(3) = 0 [pid 5696] read(200, 0x7ffe60a17820, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5696] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5696] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5696] rt_sigaction(SIGRT_1, {sa_handler=0x7efc026ce010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efc026bf1c0}, NULL, 8) = 0 [pid 5696] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5696] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efc0263e000 [pid 5696] mprotect(0x7efc0263f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5696] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5696] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efc0265e990, parent_tid=0x7efc0265e990, exit_signal=0, stack=0x7efc0263e000, stack_size=0x20300, tls=0x7efc0265e6c0}./strace-static-x86_64: Process 5697 attached [pid 5697] rseq(0x7efc0265efe0, 0x20, 0, 0x53053053) = 0 [pid 5696] <... clone3 resumed> => {parent_tid=[381]}, 88) = 381 [pid 5697] set_robust_list(0x7efc0265e9a0, 24 [pid 5696] rt_sigprocmask(SIG_SETMASK, [], [pid 5697] <... set_robust_list resumed>) = 0 [pid 5697] rt_sigprocmask(SIG_SETMASK, [], [pid 5696] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5696] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5697] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5696] <... futex resumed>) = 0 [pid 5696] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5697] memfd_create("syzkaller", 0) = 3 [pid 5697] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efbfa23e000 [pid 5697] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5697] munmap(0x7efbfa23e000, 1048576) = 0 [pid 5697] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5697] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5697] close(3) = 0 [pid 5697] mkdir("./file0", 0777) = 0 [pid 5697] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 5697] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5697] chdir("./file0") = 0 [pid 5697] ioctl(4, LOOP_CLR_FD) = 0 [pid 5697] close(4) = 0 [pid 5697] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5696] <... futex resumed>) = 0 [pid 5696] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5697] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5696] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5697] <... open resumed>) = 4 [pid 5697] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5697] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5696] <... futex resumed>) = 0 [pid 5696] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5697] <... futex resumed>) = 0 [pid 5696] <... futex resumed>) = 1 [pid 5697] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5696] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5697] <... open resumed>) = 5 [pid 5697] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5696] <... futex resumed>) = 0 [pid 5697] <... futex resumed>) = 1 [pid 5696] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5697] ftruncate(5, 33587195 [pid 5696] <... futex resumed>) = 0 [pid 5697] <... ftruncate resumed>) = 0 [pid 5696] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5697] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5696] <... futex resumed>) = 0 [pid 5697] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5696] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5697] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5696] <... futex resumed>) = 0 [pid 5697] sendfile(4, 5, NULL, 4 [pid 5696] futex(0x7efc0272e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5697] <... sendfile resumed>) = 4 [pid 5697] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5696] <... futex resumed>) = 0 [pid 5697] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5696] futex(0x7efc0272e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5696] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5696] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efbfa31d000 [pid 5696] mprotect(0x7efbfa31e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5696] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5696] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efbfa33d990, parent_tid=0x7efbfa33d990, exit_signal=0, stack=0x7efbfa31d000, stack_size=0x20300, tls=0x7efbfa33d6c0}./strace-static-x86_64: Process 5700 attached [pid 5700] rseq(0x7efbfa33dfe0, 0x20, 0, 0x53053053) = 0 [pid 5700] set_robust_list(0x7efbfa33d9a0, 24) = 0 [pid 5696] <... clone3 resumed> => {parent_tid=[382]}, 88) = 382 [pid 5700] rt_sigprocmask(SIG_SETMASK, [], [pid 5697] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5696] rt_sigprocmask(SIG_SETMASK, [], [pid 5700] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5700] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5696] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5696] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5700] <... futex resumed>) = 0 [pid 5696] <... futex resumed>) = 1 [pid 5700] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2004000 [pid 5696] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5700] <... mmap resumed>) = 0x20000000 [pid 5697] sendfile(4, 5, NULL, 281474978811909 [pid 5700] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5696] <... futex resumed>) = 0 [ 128.449736][ T5697] loop0: detected capacity change from 0 to 2048 [ 128.470564][ T5697] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5700] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5696] futex(0x7efc0272e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5700] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5696] <... futex resumed>) = 0 [pid 5700] prlimit64(0, RLIMIT_CPU, NULL, [pid 5696] futex(0x7efc0272e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5700] <... prlimit64 resumed>0x20000080) = -1 EFAULT (Bad address) [pid 5700] futex(0x7efc0272e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5700] futex(0x7efc0272e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5696] <... futex resumed>) = 0 [ 128.531668][ T5700] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 128.549767][ T5697] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2 with max blocks 1 with error 28 [ 128.563219][ T5697] EXT4-fs (loop0): This should not happen!! Data will be lost [ 128.563219][ T5697] [ 128.572919][ T5697] EXT4-fs (loop0): Total free blocks count 0 [pid 5697] <... sendfile resumed>) = 4096 [pid 5697] futex(0x7efc0272e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5697] futex(0x7efc0272e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5696] close(3) = 0 [pid 5696] close(4) = 0 [pid 5696] close(5) = 0 [pid 5696] close(6) = -1 EBADF (Bad file descriptor) [pid 5696] close(7) = -1 EBADF (Bad file descriptor) [pid 5696] close(8) = -1 EBADF (Bad file descriptor) [pid 5696] close(9) = -1 EBADF (Bad file descriptor) [pid 5696] close(10) = -1 EBADF (Bad file descriptor) [pid 5696] close(11) = -1 EBADF (Bad file descriptor) [pid 5696] close(12) = -1 EBADF (Bad file descriptor) [pid 5696] close(13) = -1 EBADF (Bad file descriptor) [pid 5696] close(14) = -1 EBADF (Bad file descriptor) [pid 5696] close(15) = -1 EBADF (Bad file descriptor) [pid 5696] close(16) = -1 EBADF (Bad file descriptor) [pid 5696] close(17) = -1 EBADF (Bad file descriptor) [pid 5696] close(18) = -1 EBADF (Bad file descriptor) [pid 5696] close(19) = -1 EBADF (Bad file descriptor) [pid 5696] close(20) = -1 EBADF (Bad file descriptor) [pid 5696] close(21) = -1 EBADF (Bad file descriptor) [pid 5696] close(22) = -1 EBADF (Bad file descriptor) [pid 5696] close(23) = -1 EBADF (Bad file descriptor) [pid 5696] close(24) = -1 EBADF (Bad file descriptor) [pid 5696] close(25) = -1 EBADF (Bad file descriptor) [pid 5696] close(26) = -1 EBADF (Bad file descriptor) [pid 5696] close(27) = -1 EBADF (Bad file descriptor) [pid 5696] close(28) = -1 EBADF (Bad file descriptor) [pid 5696] close(29) = -1 EBADF (Bad file descriptor) [pid 5696] exit_group(0 [pid 5700] <... futex resumed>) = ? [pid 5697] <... futex resumed>) = ? [pid 5696] <... exit_group resumed>) = ? [pid 5700] +++ exited with 0 +++ [pid 5697] +++ exited with 0 +++ [pid 5696] +++ exited with 0 +++ [pid 5046] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=380, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5046] umount2("./126", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "./126", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5046] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5046] getdents64(3, 0x555555a9d730 /* 4 entries */, 32768) = 112 [pid 5046] umount2("./126/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5046] newfstatat(AT_FDCWD, "./126/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5046] unlink("./126/binderfs") = 0 [ 128.578963][ T5697] EXT4-fs (loop0): Free/Dirty block details [ 128.584872][ T5697] EXT4-fs (loop0): free_blocks=2415919104 [ 128.590654][ T5697] EXT4-fs (loop0): dirty_blocks=16 [ 128.595798][ T5697] EXT4-fs (loop0): Block reservation details [ 128.601834][ T5697] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 128.626757][ T3731] ------------[ cut here ]------------ [ 128.632484][ T3731] kernel BUG at fs/ext4/inode.c:2559! [ 128.639134][ T3731] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 128.645222][ T3731] CPU: 0 PID: 3731 Comm: kworker/u4:11 Not tainted 6.6.0-rc2-next-20230919-syzkaller #0 [ 128.654925][ T3731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 128.664971][ T3731] Workqueue: writeback wb_workfn (flush-7:0) [ 128.676883][ T3731] RIP: 0010:ext4_do_writepages+0x2653/0x3340 [ 128.682860][ T3731] Code: fc ff df 44 89 64 24 18 48 c1 ea 03 80 3c 02 00 0f 84 09 ee ff ff 48 8b 7c 24 08 e8 f7 0c a8 ff e9 fa ed ff ff e8 1d ca 51 ff <0f> 0b e8 16 ca 51 ff 48 8b 4c 24 60 41 89 dd 48 b8 00 00 00 00 00 [ 128.702471][ T3731] RSP: 0018:ffffc9000d40f3c8 EFLAGS: 00010293 [ 128.708533][ T3731] RAX: 0000000000000000 RBX: ffff888073d11450 RCX: 0000000000000000 [ 128.716490][ T3731] RDX: ffff888029181dc0 RSI: ffffffff82366903 RDI: 0000000000000007 [ 128.724483][ T3731] RBP: ffffc9000d40f5d0 R08: 0000000000000007 R09: 0000000000000000 [ 128.732440][ T3731] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 128.740406][ T3731] R13: ffff88807343a628 R14: ffff888073d116b0 R15: 7fffffffffffffff [ 128.748450][ T3731] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 128.757385][ T3731] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.763956][ T3731] CR2: 0000555555aa5738 CR3: 000000000c976000 CR4: 00000000003506f0 [ 128.771913][ T3731] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 128.779883][ T3731] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 128.787853][ T3731] Call Trace: [ 128.791144][ T3731] [ 128.794067][ T3731] ? show_regs+0x8f/0xa0 [ 128.798303][ T3731] ? die+0x36/0xa0 [ 128.802019][ T3731] ? do_trap+0x22b/0x420 [ 128.806254][ T3731] ? ext4_do_writepages+0x2653/0x3340 [ 128.811627][ T3731] ? ext4_do_writepages+0x2653/0x3340 [ 128.816991][ T3731] ? do_error_trap+0xf4/0x230 [ 128.821664][ T3731] ? ext4_do_writepages+0x2653/0x3340 [ 128.827033][ T3731] ? handle_invalid_op+0x34/0x40 [ 128.831961][ T3731] ? ext4_do_writepages+0x2653/0x3340 [ 128.837342][ T3731] ? exc_invalid_op+0x2d/0x40 [ 128.842029][ T3731] ? asm_exc_invalid_op+0x1a/0x20 [ 128.847049][ T3731] ? ext4_do_writepages+0x2653/0x3340 [ 128.852418][ T3731] ? ext4_do_writepages+0x2653/0x3340 [ 128.857821][ T3731] ? ext4_do_writepages+0x2653/0x3340 [ 128.863188][ T3731] ? mark_lock+0x105/0x1950 [ 128.867690][ T3731] ? __ext4_mark_inode_dirty+0x800/0x800 [ 128.873316][ T3731] ? mark_lock+0x105/0x1950 [ 128.877901][ T3731] ext4_writepages+0x30c/0x780 [ 128.882656][ T3731] ? ext4_normal_submit_inode_data_buffers+0x1a0/0x1a0 [ 128.889503][ T3731] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 128.895496][ T3731] ? ext4_normal_submit_inode_data_buffers+0x1a0/0x1a0 [ 128.902383][ T3731] do_writepages+0x1b4/0x690 [ 128.907003][ T3731] ? writeback_set_ratelimit+0x140/0x140 [ 128.912653][ T3731] ? writeback_sb_inodes+0x344/0x1010 [ 128.918039][ T3731] ? find_held_lock+0x2d/0x110 [ 128.922798][ T3731] ? wbc_attach_and_unlock_inode+0x446/0x910 [ 128.928773][ T3731] ? reacquire_held_locks+0x4b0/0x4b0 [ 128.934150][ T3731] __writeback_single_inode+0x158/0xe70 [ 128.939691][ T3731] ? __mark_inode_dirty+0xd50/0xd50 [ 128.944877][ T3731] ? _raw_spin_unlock+0x28/0x40 [ 128.949724][ T3731] ? wbc_attach_and_unlock_inode+0x49c/0x910 [ 128.955697][ T3731] writeback_sb_inodes+0x599/0x1010 [ 128.960903][ T3731] ? _raw_spin_unlock+0x28/0x40 [ 128.965762][ T3731] ? sync_inode_metadata+0xe0/0xe0 [ 128.970880][ T3731] ? rcu_is_watching+0x12/0xb0 [ 128.975641][ T3731] ? queue_io+0x3ed/0x4e0 [ 128.979998][ T3731] wb_writeback+0x2a5/0xa90 [ 128.984511][ T3731] ? __writeback_inodes_wb+0x2d0/0x2d0 [ 128.990002][ T3731] ? reacquire_held_locks+0x4b0/0x4b0 [ 128.995399][ T3731] ? mark_held_locks+0x9f/0xe0 [ 129.000170][ T3731] wb_workfn+0x29c/0xfd0 [ 129.004418][ T3731] ? inode_wait_for_writeback+0x30/0x30 [ 129.009965][ T3731] ? lock_sync+0x190/0x190 [ 129.014376][ T3731] ? lock_sync+0x190/0x190 [ 129.019065][ T3731] ? reacquire_held_locks+0x4b0/0x4b0 [ 129.024447][ T3731] process_one_work+0x884/0x15c0 [ 129.029392][ T3731] ? lock_sync+0x190/0x190 [ 129.033810][ T3731] ? init_worker_pool+0x770/0x770 [ 129.038838][ T3731] ? assign_work+0x1a0/0x240 [ 129.043424][ T3731] worker_thread+0x8b9/0x1290 [ 129.048098][ T3731] ? __kthread_parkme+0x14b/0x220 [ 129.053119][ T3731] ? process_one_work+0x15c0/0x15c0 [ 129.058316][ T3731] kthread+0x33c/0x440 [ 129.062377][ T3731] ? _raw_spin_unlock_irq+0x23/0x50 [ 129.067571][ T3731] ? kthread_complete_and_exit+0x40/0x40 [ 129.073196][ T3731] ret_from_fork+0x45/0x80 [ 129.077613][ T3731] ? kthread_complete_and_exit+0x40/0x40 [ 129.083236][ T3731] ret_from_fork_asm+0x11/0x20 [ 129.087995][ T3731] [ 129.090996][ T3731] Modules linked in: [ 129.096167][ T3731] ---[ end trace 0000000000000000 ]--- [ 129.101678][ T3731] RIP: 0010:ext4_do_writepages+0x2653/0x3340 [ 129.107797][ T3731] Code: fc ff df 44 89 64 24 18 48 c1 ea 03 80 3c 02 00 0f 84 09 ee ff ff 48 8b 7c 24 08 e8 f7 0c a8 ff e9 fa ed ff ff e8 1d ca 51 ff <0f> 0b e8 16 ca 51 ff 48 8b 4c 24 60 41 89 dd 48 b8 00 00 00 00 00 [ 129.127445][ T3731] RSP: 0018:ffffc9000d40f3c8 EFLAGS: 00010293 [ 129.133498][ T3731] RAX: 0000000000000000 RBX: ffff888073d11450 RCX: 0000000000000000 [ 129.141494][ T3731] RDX: ffff888029181dc0 RSI: ffffffff82366903 RDI: 0000000000000007 [ 129.149598][ T3731] RBP: ffffc9000d40f5d0 R08: 0000000000000007 R09: 0000000000000000 [ 129.157641][ T3731] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 129.165615][ T3731] R13: ffff88807343a628 R14: ffff888073d116b0 R15: 7fffffffffffffff [ 129.173614][ T3731] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 129.182592][ T3731] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.189206][ T3731] CR2: 00007efc026e3250 CR3: 000000000c976000 CR4: 00000000003506e0 [ 129.197223][ T3731] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 129.205193][ T3731] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 129.213205][ T3731] Kernel panic - not syncing: Fatal exception [ 129.219501][ T3731] Kernel Offset: disabled [ 129.223812][ T3731] Rebooting in 86400 seconds..