./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2599549883 <...> forked to background, child pid 4639 no interfaces have a carrier [ 29.101471][ T4640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.117908][ T4640] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.10.31' (ECDSA) to the list of known hosts. execve("./syz-executor2599549883", ["./syz-executor2599549883"], 0x7ffd7c3ab4e0 /* 10 vars */) = 0 brk(NULL) = 0x555556f75000 brk(0x555556f75c40) = 0x555556f75c40 arch_prctl(ARCH_SET_FS, 0x555556f75300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 set_tid_address(0x555556f755d0) = 5064 set_robust_list(0x555556f755e0, 24) = 0 rt_sigaction(SIGRTMIN, {sa_handler=0x7f45152ef550, sa_mask=[], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7f45152efc20}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=0x7f45152ef5f0, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f45152efc20}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2599549883", 4096) = 28 brk(0x555556f96c40) = 0x555556f96c40 brk(0x555556f97000) = 0x555556f97000 mprotect(0x7f45153b1000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5065 attached [pid 5065] set_robust_list(0x555556f755e0, 24 [pid 5064] <... clone resumed>, child_tidptr=0x555556f755d0) = 5065 [pid 5065] <... set_robust_list resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] getpid() = 5065 [pid 5065] mkdir("./syzkaller.LpWJ6a", 0700./strace-static-x86_64: Process 5066 attached [pid 5064] <... clone resumed>, child_tidptr=0x555556f755d0) = 5066 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] set_robust_list(0x555556f755e0, 24 [pid 5065] <... mkdir resumed>) = 0 [pid 5064] <... clone resumed>, child_tidptr=0x555556f755d0) = 5067 [pid 5065] chmod("./syzkaller.LpWJ6a", 0777 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 5067 attached [pid 5065] <... chmod resumed>) = 0 [pid 5065] chdir("./syzkaller.LpWJ6a") = 0 [pid 5065] mkdir("./0", 0777 [pid 5064] <... clone resumed>, child_tidptr=0x555556f755d0) = 5068 [pid 5066] getpid( [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5064] <... clone resumed>, child_tidptr=0x555556f755d0) = 5069 [pid 5067] set_robust_list(0x555556f755e0, 24 [pid 5066] <... getpid resumed>) = 5066 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] mkdir("./syzkaller.5dlojf", 0700 [pid 5067] <... set_robust_list resumed>) = 0 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] close(3./strace-static-x86_64: Process 5070 attached [pid 5067] getpid( [pid 5066] <... mkdir resumed>) = 0 [pid 5064] <... clone resumed>, child_tidptr=0x555556f755d0) = 5070 [pid 5067] <... getpid resumed>) = 5067 [pid 5066] chmod("./syzkaller.5dlojf", 0777) = 0 [pid 5066] chdir("./syzkaller.5dlojf" [pid 5070] set_robust_list(0x555556f755e0, 24 [pid 5067] mkdir("./syzkaller.ruCmtn", 0700 [pid 5066] <... chdir resumed>) = 0 [pid 5066] mkdir("./0", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5067] <... mkdir resumed>) = 0 [pid 5066] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5068 attached [pid 5070] <... set_robust_list resumed>) = 0 [pid 5067] chmod("./syzkaller.ruCmtn", 0777 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3 [pid 5065] <... close resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... close resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] set_robust_list(0x555556f755e0, 24) = 0 [pid 5068] getpid( [pid 5067] <... chmod resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x555556f755d0) = 5071 [pid 5067] chdir("./syzkaller.ruCmtn" [pid 5070] getpid( [pid 5067] <... chdir resumed>) = 0 [pid 5067] mkdir("./0", 0777 [pid 5068] <... getpid resumed>) = 5068 [pid 5068] mkdir("./syzkaller.SZgq5q", 0700 [pid 5067] <... mkdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 5069 attached [pid 5065] <... clone resumed>, child_tidptr=0x555556f755d0) = 5072 [pid 5067] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5071 attached [pid 5070] <... getpid resumed>) = 5070 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5069] set_robust_list(0x555556f755e0, 24 [pid 5070] mkdir("./syzkaller.w1gMZx", 0700 [pid 5069] <... set_robust_list resumed>) = 0 [pid 5069] getpid( [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5071] set_robust_list(0x555556f755e0, 24 [pid 5068] <... mkdir resumed>) = 0 [pid 5067] close(3 [pid 5071] <... set_robust_list resumed>) = 0 [pid 5070] <... mkdir resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5071] chdir("./0" [pid 5070] chmod("./syzkaller.w1gMZx", 0777 [pid 5069] <... getpid resumed>) = 5069 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] mkdir("./syzkaller.rfbWou", 0700 [pid 5071] <... chdir resumed>) = 0 [pid 5068] chmod("./syzkaller.SZgq5q", 0777 [pid 5070] <... chmod resumed>) = 0 [pid 5069] <... mkdir resumed>) = 0 [pid 5071] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] <... chmod resumed>) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x555556f755d0) = 5074 [pid 5071] <... prctl resumed>) = 0 [pid 5070] chdir("./syzkaller.w1gMZx" [pid 5068] chdir("./syzkaller.SZgq5q" [pid 5071] setpgid(0, 0 [pid 5068] <... chdir resumed>) = 0 [pid 5071] <... setpgid resumed>) = 0 [pid 5070] <... chdir resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] chmod("./syzkaller.rfbWou", 0777 [pid 5068] mkdir("./0", 0777 [pid 5070] mkdir("./0", 0777./strace-static-x86_64: Process 5072 attached [pid 5071] <... openat resumed>) = 3 [pid 5070] <... mkdir resumed>) = 0 [pid 5069] <... chmod resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5072] set_robust_list(0x555556f755e0, 24 [pid 5071] write(3, "1000", 4 [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5069] chdir("./syzkaller.rfbWou" [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] <... set_robust_list resumed>) = 0 [pid 5071] <... write resumed>) = 4 [pid 5072] chdir("./0" [pid 5071] close(3 [pid 5070] <... openat resumed>) = 3 [pid 5069] <... chdir resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5072] <... chdir resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5070] ioctl(3, LOOP_CLR_FD [pid 5069] mkdir("./0", 0777 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5072] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] symlink("/dev/binderfs", "./binderfs" [pid 5070] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5069] <... mkdir resumed>) = 0 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5072] <... prctl resumed>) = 0 [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5068] close(3./strace-static-x86_64: Process 5074 attached [pid 5072] setpgid(0, 0 [pid 5071] <... symlink resumed>) = 0 [pid 5070] close(3 [pid 5069] <... openat resumed>) = 3 [pid 5068] <... close resumed>) = 0 [pid 5072] <... setpgid resumed>) = 0 [pid 5071] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... close resumed>) = 0 [pid 5069] ioctl(3, LOOP_CLR_FD [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] set_robust_list(0x555556f755e0, 24 [pid 5072] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... futex resumed>) = 0 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 5075 attached [pid 5074] <... set_robust_list resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 5071] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5069] close(3 [pid 5068] <... clone resumed>, child_tidptr=0x555556f755d0) = 5075 [pid 5072] write(3, "1000", 4 [pid 5069] <... close resumed>) = 0 [pid 5072] <... write resumed>) = 4 [pid 5071] <... mmap resumed>) = 0x7f45152be000 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] chdir("./0" [pid 5075] set_robust_list(0x555556f755e0, 24 [pid 5072] close(3 [pid 5071] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE [pid 5070] <... clone resumed>, child_tidptr=0x555556f755d0) = 5076 ./strace-static-x86_64: Process 5077 attached ./strace-static-x86_64: Process 5076 attached [pid 5075] <... set_robust_list resumed>) = 0 [pid 5074] <... chdir resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 5069] <... clone resumed>, child_tidptr=0x555556f755d0) = 5077 [pid 5074] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5072] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... mprotect resumed>) = 0 [pid 5077] set_robust_list(0x555556f755e0, 24 [pid 5076] set_robust_list(0x555556f755e0, 24 [pid 5075] chdir("./0" [pid 5074] <... prctl resumed>) = 0 [pid 5072] <... symlink resumed>) = 0 [pid 5071] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5074] setpgid(0, 0 [pid 5072] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... setpgid resumed>) = 0 [pid 5072] <... futex resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5072] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5071] <... clone resumed>, parent_tid=[5078], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5078 [pid 5074] <... openat resumed>) = 3 [pid 5072] <... mmap resumed>) = 0x7f45152be000 [pid 5074] write(3, "1000", 4 [pid 5072] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE [pid 5071] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5078 attached [pid 5077] <... set_robust_list resumed>) = 0 [pid 5076] <... set_robust_list resumed>) = 0 [pid 5075] <... chdir resumed>) = 0 [pid 5074] <... write resumed>) = 4 [pid 5072] <... mprotect resumed>) = 0 [pid 5071] <... futex resumed>) = 0 [pid 5078] set_robust_list(0x7f45152de9e0, 24 [pid 5075] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] close(3 [pid 5072] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5071] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5078] <... set_robust_list resumed>) = 0 [pid 5077] chdir("./0" [pid 5076] chdir("./0" [pid 5075] <... prctl resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5078] memfd_create("syzkaller", 0 [pid 5072] <... clone resumed>, parent_tid=[5079], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5079 [pid 5078] <... memfd_create resumed>) = 3 [pid 5072] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] <... futex resumed>) = 0 [pid 5078] <... mmap resumed>) = 0x7f450cebe000 [pid 5075] setpgid(0, 0 [pid 5074] symlink("/dev/binderfs", "./binderfs" [pid 5072] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5079 attached [pid 5078] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5077] <... chdir resumed>) = 0 [pid 5076] <... chdir resumed>) = 0 [pid 5075] <... setpgid resumed>) = 0 [pid 5079] set_robust_list(0x7f45152de9e0, 24 [pid 5077] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] <... symlink resumed>) = 0 [pid 5077] <... prctl resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5079] <... set_robust_list resumed>) = 0 [pid 5077] setpgid(0, 0 [pid 5075] <... openat resumed>) = 3 [pid 5074] <... futex resumed>) = 0 [pid 5076] <... prctl resumed>) = 0 [pid 5079] memfd_create("syzkaller", 0 [pid 5077] <... setpgid resumed>) = 0 [pid 5075] write(3, "1000", 4 [pid 5074] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5079] <... memfd_create resumed>) = 3 [pid 5076] setpgid(0, 0 [pid 5075] <... write resumed>) = 4 [pid 5079] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... mmap resumed>) = 0x7f45152be000 [pid 5079] <... mmap resumed>) = 0x7f450cebe000 [pid 5078] <... write resumed>) = 1048576 [pid 5077] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... setpgid resumed>) = 0 [pid 5075] close(3 [pid 5074] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE [pid 5079] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5075] <... close resumed>) = 0 [pid 5074] <... mprotect resumed>) = 0 [pid 5075] symlink("/dev/binderfs", "./binderfs" [pid 5074] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5079] <... write resumed>) = 1048576 [pid 5077] <... openat resumed>) = 3 [pid 5076] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] <... symlink resumed>) = 0 [pid 5078] munmap(0x7f450cebe000, 1048576) = 0 [pid 5077] write(3, "1000", 4 [pid 5076] <... openat resumed>) = 3 [pid 5075] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... clone resumed>, parent_tid=[5080], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5080 [pid 5078] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5077] <... write resumed>) = 4 [pid 5076] write(3, "1000", 4 [pid 5075] <... futex resumed>) = 0 [pid 5074] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5080 attached [pid 5078] <... openat resumed>) = 4 [pid 5077] close(3 [pid 5076] <... write resumed>) = 4 [pid 5075] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5074] <... futex resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5076] close(3 [pid 5075] <... mmap resumed>) = 0x7f45152be000 [pid 5074] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5077] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... close resumed>) = 0 [pid 5075] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE [pid 5080] set_robust_list(0x7f45152de9e0, 24 [pid 5078] ioctl(4, LOOP_SET_FD, 3 [pid 5080] <... set_robust_list resumed>) = 0 [pid 5077] <... symlink resumed>) = 0 [pid 5076] symlink("/dev/binderfs", "./binderfs" [pid 5075] <... mprotect resumed>) = 0 [pid 5080] memfd_create("syzkaller", 0) = 3 [pid 5080] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f450cebe000 [pid 5077] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... symlink resumed>) = 0 [pid 5075] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5077] <... futex resumed>) = 0 [pid 5076] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5077] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] <... futex resumed>) = 0 [pid 5079] munmap(0x7f450cebe000, 1048576 [pid 5077] <... mmap resumed>) = 0x7f45152be000 [pid 5076] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5075] <... clone resumed>, parent_tid=[5081], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5081 [pid 5079] <... munmap resumed>) = 0 [pid 5077] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE [pid 5076] <... mmap resumed>) = 0x7f45152be000 [pid 5075] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ./strace-static-x86_64: Process 5081 attached [pid 5079] ioctl(4, LOOP_SET_FD, 3 [pid 5077] <... mprotect resumed>) = 0 [pid 5076] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE [pid 5075] <... futex resumed>) = 0 [pid 5081] set_robust_list(0x7f45152de9e0, 24 [pid 5077] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5076] <... mprotect resumed>) = 0 [pid 5075] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] <... set_robust_list resumed>) = 0 [pid 5081] memfd_create("syzkaller", 0 [pid 5078] <... ioctl resumed>) = 0 [pid 5076] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5077] <... clone resumed>, parent_tid=[5082], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5082 [pid 5081] <... memfd_create resumed>) = 3 [pid 5078] close(3 [pid 5081] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... close resumed>) = 0 [pid 5081] <... mmap resumed>) = 0x7f450cebe000 [pid 5078] mkdir("./file0", 0777 [pid 5077] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 5083 attached ./strace-static-x86_64: Process 5082 attached [pid 5078] <... mkdir resumed>) = 0 [pid 5077] <... futex resumed>) = 0 [pid 5076] <... clone resumed>, parent_tid=[5083], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5083 [pid 5077] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5076] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] set_robust_list(0x7f45152de9e0, 24 [pid 5082] set_robust_list(0x7f45152de9e0, 24 [pid 5083] <... set_robust_list resumed>) = 0 [pid 5082] <... set_robust_list resumed>) = 0 [pid 5080] <... write resumed>) = 1048576 [pid 5078] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5076] <... futex resumed>) = 0 [pid 5083] memfd_create("syzkaller", 0 [pid 5082] memfd_create("syzkaller", 0 [pid 5076] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5079] <... ioctl resumed>) = 0 [pid 5079] close(3) = 0 [pid 5079] mkdir("./file0", 0777 [pid 5082] <... memfd_create resumed>) = 3 [pid 5083] <... memfd_create resumed>) = 3 syzkaller login: [ 52.783210][ T5078] loop1: detected capacity change from 0 to 2048 [ 52.804719][ T5079] loop0: detected capacity change from 0 to 2048 [pid 5083] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5082] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5079] <... mkdir resumed>) = 0 [pid 5083] <... mmap resumed>) = 0x7f450cebe000 [pid 5080] munmap(0x7f450cebe000, 1048576 [pid 5082] <... mmap resumed>) = 0x7f450cebe000 [pid 5080] <... munmap resumed>) = 0 [pid 5079] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5080] ioctl(4, LOOP_SET_FD, 3 [pid 5083] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5082] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5081] <... write resumed>) = 1048576 [pid 5081] munmap(0x7f450cebe000, 1048576) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5081] ioctl(4, LOOP_SET_FD, 3 [pid 5082] <... write resumed>) = 1048576 [pid 5081] <... ioctl resumed>) = 0 [pid 5080] <... ioctl resumed>) = 0 [pid 5080] close(3 [pid 5082] munmap(0x7f450cebe000, 1048576 [pid 5080] <... close resumed>) = 0 [pid 5083] <... write resumed>) = 1048576 [pid 5082] <... munmap resumed>) = 0 [pid 5080] mkdir("./file0", 0777 [pid 5083] munmap(0x7f450cebe000, 1048576 [pid 5082] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5080] <... mkdir resumed>) = 0 [pid 5081] close(3 [pid 5083] <... munmap resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5082] <... openat resumed>) = 4 [pid 5080] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5081] mkdir("./file0", 0777) = 0 [ 52.850490][ T5080] loop2: detected capacity change from 0 to 2048 [ 52.868670][ T5081] loop3: detected capacity change from 0 to 2048 [pid 5081] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5083] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5082] ioctl(4, LOOP_SET_FD, 3 [pid 5083] <... openat resumed>) = 4 [pid 5083] ioctl(4, LOOP_SET_FD, 3 [pid 5082] <... ioctl resumed>) = 0 [pid 5079] <... mount resumed>) = 0 [pid 5082] close(3 [pid 5079] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5082] <... close resumed>) = 0 [pid 5079] <... openat resumed>) = 3 [pid 5082] mkdir("./file0", 0777 [pid 5079] chdir("./file0" [pid 5082] <... mkdir resumed>) = 0 [pid 5079] <... chdir resumed>) = 0 [pid 5082] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5079] ioctl(4, LOOP_CLR_FD) = 0 [pid 5079] close(4) = 0 [pid 5079] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5072] <... futex resumed>) = 0 [pid 5079] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5072] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5072] <... futex resumed>) = 0 [pid 5079] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5072] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... mount resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5078] chdir("./file0") = 0 [pid 5078] ioctl(4, LOOP_CLR_FD) = 0 [pid 5078] close(4) = 0 [pid 5078] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5071] <... futex resumed>) = 0 [pid 5071] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5071] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... open resumed>) = 4 [pid 5079] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5072] <... futex resumed>) = 0 [pid 5079] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 52.893910][ T5078] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 52.897487][ T5082] loop4: detected capacity change from 0 to 2048 [ 52.906918][ T5079] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 52.914710][ T5083] loop5: detected capacity change from 0 to 2048 [pid 5072] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5072] <... futex resumed>) = 0 [pid 5079] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5072] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... ioctl resumed>) = 0 [pid 5083] close(3) = 0 [pid 5083] mkdir("./file0", 0777) = 0 [pid 5083] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5079] <... write resumed>) = 9 [pid 5079] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5072] <... futex resumed>) = 0 [pid 5079] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5072] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... openat resumed>) = 5 [pid 5072] <... futex resumed>) = 0 [pid 5079] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... futex resumed>) = 0 [pid 5072] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5079] open("./bus", O_RDWR [pid 5072] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... open resumed>) = 6 [pid 5072] <... futex resumed>) = 0 [pid 5079] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... futex resumed>) = 0 [pid 5072] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5079] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5072] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... mmap resumed>) = 0x20000000 [pid 5072] <... futex resumed>) = 0 [pid 5079] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... futex resumed>) = 0 [pid 5072] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5079] sendfile(4, 5, NULL, 2147483713 [pid 5072] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5072] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... mount resumed>) = 0 [pid 5080] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5080] chdir("./file0") = 0 [pid 5080] ioctl(4, LOOP_CLR_FD) = 0 [pid 5080] close(4) = 0 [pid 5080] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5080] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5078] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5074] <... futex resumed>) = 0 [pid 5071] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5074] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... futex resumed>) = 0 [pid 5074] <... futex resumed>) = 1 [pid 5071] <... futex resumed>) = 0 [pid 5080] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5074] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5071] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f450cf9d000 [pid 5071] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5080] <... open resumed>) = 4 [pid 5071] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [ 52.946995][ T5080] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 52.967573][ T26] audit: type=1804 audit(1672294486.202:2): pid=5079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor259" name="/root/syzkaller.LpWJ6a/0/file0/bus" dev="loop0" ino=18 res=1 errno=0 [pid 5080] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... mount resumed>) = 0 [pid 5080] <... futex resumed>) = 1 [pid 5074] <... futex resumed>) = 0 [pid 5072] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5071] <... clone resumed>, parent_tid=[5096], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5096 [pid 5080] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5074] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5080] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5072] <... futex resumed>) = 0 [pid 5074] <... futex resumed>) = 0 [pid 5080] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5082] <... openat resumed>) = 3 [pid 5074] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5072] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5071] <... futex resumed>) = 0 [pid 5082] chdir("./file0" [pid 5080] <... write resumed>) = 9 [pid 5078] <... open resumed>) = 4 [pid 5072] <... mmap resumed>) = 0x7f450cf9d000 [pid 5071] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5082] <... chdir resumed>) = 0 [pid 5080] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... futex resumed>) = 0 [pid 5072] <... mprotect resumed>) = 0 [pid 5080] <... futex resumed>) = 1 [pid 5078] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5074] <... futex resumed>) = 0 [pid 5072] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5099 attached [pid 5082] ioctl(4, LOOP_CLR_FD [pid 5080] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 53.005456][ T5079] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 53.011967][ T26] audit: type=1804 audit(1672294486.202:3): pid=5079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor259" name="/root/syzkaller.LpWJ6a/0/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 53.024460][ T5082] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [pid 5074] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5096 attached [pid 5099] set_robust_list(0x7f450cfbd9e0, 24 [pid 5082] <... ioctl resumed>) = 0 [pid 5080] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5074] <... futex resumed>) = 0 [pid 5072] <... clone resumed>, parent_tid=[5099], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5099 [pid 5096] set_robust_list(0x7f450cfbd9e0, 24 [pid 5072] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5096] <... set_robust_list resumed>) = 0 [pid 5072] <... futex resumed>) = 0 [pid 5096] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5072] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... mount resumed>) = 0 [pid 5083] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5083] chdir("./file0") = 0 [pid 5083] ioctl(4, LOOP_CLR_FD) = 0 [ 53.067930][ T5083] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 53.076548][ T5079] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 53.093541][ T26] audit: type=1804 audit(1672294486.202:4): pid=5079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor259" name="/root/syzkaller.LpWJ6a/0/file0/bus" dev="loop0" ino=18 res=1 errno=0 [pid 5083] close(4 [pid 5099] <... set_robust_list resumed>) = 0 [pid 5096] <... write resumed>) = 9 [pid 5083] <... close resumed>) = 0 [pid 5082] close(4 [pid 5080] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5074] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5099] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5096] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... close resumed>) = 0 [pid 5080] <... openat resumed>) = 5 [pid 5072] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5071] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5083] <... futex resumed>) = 1 [pid 5082] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... futex resumed>) = 0 [pid 5083] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5082] <... futex resumed>) = 1 [pid 5080] <... futex resumed>) = 1 [pid 5077] <... futex resumed>) = 0 [pid 5076] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... futex resumed>) = 0 [pid 5083] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5082] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... futex resumed>) = 0 [pid 5074] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5082] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5080] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5077] <... futex resumed>) = 0 [pid 5076] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] <... futex resumed>) = 0 [pid 5096] <... futex resumed>) = 0 [pid 5083] <... open resumed>) = 4 [pid 5082] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5080] open("./bus", O_RDWR [pid 5077] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5071] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5096] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... open resumed>) = 4 [pid 5080] <... open resumed>) = 6 [pid 5078] <... futex resumed>) = 0 [pid 5071] <... futex resumed>) = 1 [pid 5083] <... futex resumed>) = 1 [pid 5082] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5076] <... futex resumed>) = 0 [pid 5071] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5082] <... futex resumed>) = 1 [pid 5080] <... futex resumed>) = 1 [pid 5078] <... openat resumed>) = 5 [pid 5077] <... futex resumed>) = 0 [pid 5076] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... futex resumed>) = 0 [pid 5083] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5082] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] <... mount resumed>) = 0 [pid 5080] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5078] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... futex resumed>) = 0 [pid 5074] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [ 53.094622][ T5081] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 53.123683][ T26] audit: type=1804 audit(1672294486.352:5): pid=5080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor259" name="/root/syzkaller.ruCmtn/0/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 53.139099][ T5079] EXT4-fs (loop0): This should not happen!! Data will be lost [ 53.139099][ T5079] [pid 5083] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5082] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5080] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5078] <... futex resumed>) = 1 [pid 5077] <... futex resumed>) = 0 [pid 5076] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] <... futex resumed>) = 0 [pid 5071] <... futex resumed>) = 0 [pid 5082] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5080] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5077] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... mmap resumed>) = 0x20000000 [pid 5080] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5074] <... futex resumed>) = 0 [pid 5080] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5074] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5078] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5074] <... futex resumed>) = 0 [pid 5071] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... write resumed>) = 9 [pid 5082] <... write resumed>) = 9 [pid 5081] <... openat resumed>) = 3 [pid 5080] sendfile(4, 5, NULL, 2147483713 [pid 5078] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5074] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5071] <... futex resumed>) = 0 [pid 5083] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... futex resumed>) = 1 [pid 5082] <... futex resumed>) = 1 [pid 5077] <... futex resumed>) = 0 [pid 5076] <... futex resumed>) = 0 [pid 5083] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5082] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5082] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] chdir("./file0" [pid 5078] open("./bus", O_RDWR [pid 5077] <... futex resumed>) = 0 [pid 5076] <... futex resumed>) = 0 [pid 5071] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5082] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5081] <... chdir resumed>) = 0 [pid 5078] <... open resumed>) = 6 [pid 5077] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... openat resumed>) = 5 [pid 5082] <... openat resumed>) = 5 [pid 5083] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... futex resumed>) = 1 [pid 5082] <... futex resumed>) = 1 [pid 5077] <... futex resumed>) = 0 [pid 5076] <... futex resumed>) = 0 [pid 5083] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5082] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5082] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5077] <... futex resumed>) = 0 [pid 5076] <... futex resumed>) = 0 [pid 5083] open("./bus", O_RDWR [pid 5082] open("./bus", O_RDWR [pid 5081] ioctl(4, LOOP_CLR_FD [pid 5078] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... open resumed>) = 6 [pid 5082] <... open resumed>) = 6 [pid 5083] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... futex resumed>) = 1 [pid 5082] <... futex resumed>) = 1 [pid 5077] <... futex resumed>) = 0 [pid 5076] <... futex resumed>) = 0 [pid 5083] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5082] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5082] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5077] <... futex resumed>) = 0 [pid 5076] <... futex resumed>) = 0 [ 53.176700][ T5079] EXT4-fs (loop0): Total free blocks count 0 [ 53.196939][ T5080] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 53.202947][ T5079] EXT4-fs (loop0): Free/Dirty block details [ 53.219474][ T5079] EXT4-fs (loop0): free_blocks=2415919104 [pid 5083] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5082] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5077] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... mmap resumed>) = 0x20000000 [pid 5082] <... mmap resumed>) = 0x20000000 [pid 5081] <... ioctl resumed>) = 0 [pid 5078] <... futex resumed>) = 1 [pid 5071] <... futex resumed>) = 0 [pid 5083] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... futex resumed>) = 1 [pid 5082] <... futex resumed>) = 1 [pid 5077] <... futex resumed>) = 0 [pid 5076] <... futex resumed>) = 0 [pid 5083] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5082] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5082] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] close(4 [pid 5078] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] <... futex resumed>) = 0 [pid 5076] <... futex resumed>) = 0 [pid 5071] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] sendfile(4, 5, NULL, 2147483713 [pid 5082] sendfile(4, 5, NULL, 2147483713 [pid 5077] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... close resumed>) = 0 [pid 5078] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5074] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5071] <... futex resumed>) = 0 [pid 5074] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5074] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f450cf9d000 [pid 5074] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5074] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5101], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5101 [pid 5081] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5074] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5101 attached [pid 5099] <... ioctl resumed>) = 0 [pid 5081] <... futex resumed>) = 1 [pid 5079] <... sendfile resumed>) = 117 [pid 5078] <... mmap resumed>) = 0x20000000 [pid 5075] <... futex resumed>) = 0 [pid 5074] <... futex resumed>) = 0 [pid 5099] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5099] <... futex resumed>) = 0 [pid 5075] <... futex resumed>) = 0 [ 53.226689][ T5079] EXT4-fs (loop0): dirty_blocks=16 [ 53.232795][ T5079] EXT4-fs (loop0): Block reservation details [ 53.236101][ T26] audit: type=1804 audit(1672294486.402:6): pid=5080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor259" name="/root/syzkaller.ruCmtn/0/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 53.260041][ T5079] EXT4-fs (loop0): i_reserved_data_blocks=1 [pid 5099] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5075] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5079] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5077] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5101] set_robust_list(0x7f450cfbd9e0, 24 [pid 5077] <... futex resumed>) = 0 [pid 5076] <... futex resumed>) = 0 [ 53.271390][ T5080] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 53.275826][ T26] audit: type=1804 audit(1672294486.402:7): pid=5078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor259" name="/root/syzkaller.5dlojf/0/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 53.284916][ T5080] EXT4-fs (loop2): This should not happen!! Data will be lost [ 53.284916][ T5080] [pid 5101] <... set_robust_list resumed>) = 0 [pid 5081] <... open resumed>) = 4 [pid 5079] <... futex resumed>) = 0 [pid 5078] <... futex resumed>) = 1 [pid 5077] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5075] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5074] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5071] <... futex resumed>) = 0 [pid 5101] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5077] <... mmap resumed>) = 0x7f450cf9d000 [pid 5076] <... mmap resumed>) = 0x7f450cf9d000 [pid 5075] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5076] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5075] <... futex resumed>) = 0 [pid 5077] <... mprotect resumed>) = 0 [pid 5076] <... mprotect resumed>) = 0 [pid 5075] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5101] <... ioctl resumed>) = 0 [pid 5081] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... sendfile resumed>) = 117 [pid 5079] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5078] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5076] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5075] <... mmap resumed>) = 0x7f450cf9d000 [pid 5071] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5101] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5101] <... futex resumed>) = 0 [pid 5077] <... clone resumed>, parent_tid=[5102], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5102 [pid 5076] <... clone resumed>, parent_tid=[5103], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5103 [pid 5075] <... mprotect resumed>) = 0 [pid 5101] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5077] <... futex resumed>) = 0 [pid 5076] <... futex resumed>) = 0 [pid 5077] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] <... clone resumed>, parent_tid=[5104], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5104 [pid 5075] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5075] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5104 attached [ 53.315382][ T5082] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 53.317889][ T5080] EXT4-fs (loop2): Total free blocks count 0 [ 53.338975][ T5080] EXT4-fs (loop2): Free/Dirty block details [ 53.338997][ T5083] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1095: group 0, [ 53.344881][ T5080] EXT4-fs (loop2): free_blocks=2415919104 [ 53.344903][ T5080] EXT4-fs (loop2): dirty_blocks=16 [ 53.344920][ T5080] EXT4-fs (loop2): Block reservation details [ 53.344937][ T5080] EXT4-fs (loop2): i_reserved_data_blocks=1 [pid 5104] set_robust_list(0x7f450cfbd9e0, 24) = 0 [pid 5104] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9./strace-static-x86_64: Process 5103 attached ./strace-static-x86_64: Process 5102 attached [pid 5081] <... futex resumed>) = 0 [pid 5080] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5072] exit_group(0 [pid 5071] <... futex resumed>) = 0 [ 53.345252][ T5082] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 53.354039][ T5083] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 53.359807][ T5082] EXT4-fs (loop4): This should not happen!! Data will be lost [ 53.359807][ T5082] [ 53.378310][ T5083] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 53.419849][ T5082] EXT4-fs (loop4): Total free blocks count 0 [pid 5104] <... write resumed>) = 9 [pid 5077] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5075] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5074] exit_group(0 [pid 5104] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5101] <... futex resumed>) = ? [pid 5075] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... exit_group resumed>) = ? [pid 5104] <... futex resumed>) = 0 [pid 5101] +++ exited with 0 +++ [pid 5075] <... futex resumed>) = 0 [pid 5104] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5075] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5103] set_robust_list(0x7f450cfbd9e0, 24 [pid 5102] set_robust_list(0x7f450cfbd9e0, 24 [pid 5081] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5072] <... exit_group resumed>) = ? [pid 5071] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5099] <... futex resumed>) = ? [pid 5079] <... futex resumed>) = ? [pid 5103] <... set_robust_list resumed>) = 0 [pid 5102] <... set_robust_list resumed>) = 0 [pid 5099] +++ exited with 0 +++ [pid 5081] <... openat resumed>) = 5 [pid 5080] <... futex resumed>) = ? [pid 5079] +++ exited with 0 +++ [pid 5078] sendfile(4, 5, NULL, 2147483713 [pid 5103] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5102] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5081] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] +++ exited with 0 +++ [pid 5074] +++ exited with 0 +++ [pid 5072] +++ exited with 0 +++ [pid 5081] <... futex resumed>) = 1 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5072, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5075] <... futex resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5074, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5067] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, [pid 5065] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5075] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 53.419875][ T5082] EXT4-fs (loop4): Free/Dirty block details [ 53.419896][ T5082] EXT4-fs (loop4): free_blocks=2415919104 [ 53.431733][ T26] audit: type=1804 audit(1672294486.412:8): pid=5080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor259" name="/root/syzkaller.ruCmtn/0/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 53.464435][ T5082] EXT4-fs (loop4): dirty_blocks=16 [ 53.470459][ T5082] EXT4-fs (loop4): Block reservation details [pid 5075] <... futex resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... openat resumed>) = 3 [pid 5067] lstat("./0/binderfs", [pid 5065] fstat(3, [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] unlink("./0/binderfs" [pid 5065] getdents64(3, [pid 5067] <... unlink resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./0/binderfs") = 0 [pid 5065] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] open("./bus", O_RDWR [ 53.478209][ T5078] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 53.487939][ T26] audit: type=1804 audit(1672294486.422:9): pid=5078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor259" name="/root/syzkaller.5dlojf/0/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 53.495480][ T5082] EXT4-fs (loop4): i_reserved_data_blocks=1 [pid 5075] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... open resumed>) = 6 [pid 5071] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5102] <... ioctl resumed>) = 0 [pid 5082] <... sendfile resumed>) = 117 [pid 5081] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [ 53.518796][ T9] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 53.522788][ T5078] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 53.541433][ T5083] EXT4-fs (loop5): This should not happen!! Data will be lost [ 53.541433][ T5083] [ 53.548588][ T5078] EXT4-fs (loop1): This should not happen!! Data will be lost [ 53.548588][ T5078] [pid 5071] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... futex resumed>) = 1 [pid 5071] <... futex resumed>) = 1 [pid 5077] exit_group(0) = ? [pid 5102] <... futex resumed>) = ? [pid 5096] <... futex resumed>) = 0 [pid 5082] <... futex resumed>) = ? [pid 5081] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5075] <... futex resumed>) = 0 [pid 5071] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5102] +++ exited with 0 +++ [pid 5096] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5082] +++ exited with 0 +++ [pid 5077] +++ exited with 0 +++ [pid 5075] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... umount2 resumed>) = 0 [pid 5067] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] <... futex resumed>) = 1 [pid 5081] <... futex resumed>) = 0 [pid 5075] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5077, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [ 53.561556][ T26] audit: type=1804 audit(1672294486.452:10): pid=5083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor259" name="/root/syzkaller.w1gMZx/0/file0/bus" dev="loop5" ino=18 res=1 errno=0 [ 53.567003][ T41] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 53.591445][ T5083] EXT4-fs (loop5): Total free blocks count 0 [ 53.602343][ T5078] EXT4-fs (loop1): Total free blocks count 0 [pid 5067] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5081] <... mmap resumed>) = 0x20000000 [pid 5069] restart_syscall(<... resuming interrupted clone ...> [pid 5067] fstat(4, [pid 5081] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5069] <... restart_syscall resumed>) = 0 [pid 5081] <... futex resumed>) = 1 [pid 5075] <... futex resumed>) = 0 [pid 5081] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5075] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5075] <... futex resumed>) = 0 [pid 5081] sendfile(4, 5, NULL, 2147483713 [pid 5075] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] getdents64(4, [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, [pid 5069] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5067] rmdir("./0/file0") = 0 [pid 5067] getdents64(3, 0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5071] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5067] close(3) = 0 [pid 5067] rmdir("./0" [pid 5069] <... openat resumed>) = 3 [pid 5067] <... rmdir resumed>) = 0 [pid 5069] fstat(3, [pid 5067] mkdir("./1", 0777) = 0 [ 53.627317][ T5078] EXT4-fs (loop1): Free/Dirty block details [ 53.629007][ T5083] EXT4-fs (loop5): Free/Dirty block details [ 53.648272][ T5078] EXT4-fs (loop1): free_blocks=2415919104 [ 53.650324][ T5081] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 53.654534][ T5078] EXT4-fs (loop1): dirty_blocks=16 [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5075] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] getdents64(3, [pid 5067] <... clone resumed>, child_tidptr=0x555556f755d0) = 5105 [pid 5104] <... futex resumed>) = 0 [pid 5075] <... futex resumed>) = 1 [ 53.678416][ T5078] EXT4-fs (loop1): Block reservation details [ 53.682307][ T26] audit: type=1804 audit(1672294486.452:11): pid=5082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor259" name="/root/syzkaller.rfbWou/0/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 53.696650][ T5078] EXT4-fs (loop1): i_reserved_data_blocks=1 [pid 5069] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5104] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5075] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5069] unlink("./0/binderfs") = 0 [pid 5069] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5105 attached [pid 5065] <... umount2 resumed>) = 0 [pid 5105] set_robust_list(0x555556f755e0, 24 [pid 5065] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5105] <... set_robust_list resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5105] chdir("./1" [pid 5065] lstat("./0/file0", [pid 5078] <... sendfile resumed>) = 117 [pid 5096] <... ioctl resumed>) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5105] <... chdir resumed>) = 0 [pid 5096] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5105] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5096] <... futex resumed>) = 0 [pid 5065] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5096] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5105] <... prctl resumed>) = 0 [pid 5105] setpgid(0, 0 [pid 5065] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, [pid 5105] <... setpgid resumed>) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5105] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] getdents64(4, [pid 5105] <... openat resumed>) = 3 [pid 5105] write(3, "1000", 4 [pid 5065] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [ 53.730424][ T5083] EXT4-fs (loop5): free_blocks=2415919104 [ 53.741537][ T5083] EXT4-fs (loop5): dirty_blocks=16 [ 53.748245][ T5081] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 53.750664][ T41] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 53.761559][ T5083] EXT4-fs (loop5): Block reservation details [pid 5105] <... write resumed>) = 4 [pid 5075] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5065] getdents64(4, [pid 5078] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5071] exit_group(0 [pid 5096] <... futex resumed>) = ? [pid 5071] <... exit_group resumed>) = ? [pid 5096] +++ exited with 0 +++ [pid 5078] +++ exited with 0 +++ [pid 5105] close(3 [pid 5071] +++ exited with 0 +++ [pid 5065] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5105] <... close resumed>) = 0 [pid 5065] close(4 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5071, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5105] symlink("/dev/binderfs", "./binderfs" [pid 5066] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... close resumed>) = 0 [pid 5105] <... symlink resumed>) = 0 [pid 5069] <... umount2 resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] rmdir("./0/file0" [pid 5105] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5105] <... futex resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5065] <... rmdir resumed>) = 0 [pid 5105] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] fstat(3, [pid 5065] getdents64(3, [pid 5105] <... mmap resumed>) = 0x7f45152be000 [pid 5069] lstat("./0/file0", [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5105] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE [pid 5069] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5105] <... mprotect resumed>) = 0 [pid 5069] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] getdents64(3, [pid 5065] close(3 [pid 5105] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5069] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... close resumed>) = 0 [pid 5105] <... clone resumed>, parent_tid=[5107], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5107 [pid 5105] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... openat resumed>) = 4 [pid 5066] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] rmdir("./0" [pid 5105] <... futex resumed>) = 0 [pid 5069] fstat(4, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5105] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5069] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5069] getdents64(4, [pid 5066] lstat("./0/binderfs", [pid 5065] mkdir("./1", 0777 [pid 5069] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5069] getdents64(4, [pid 5065] <... mkdir resumed>) = 0 [pid 5069] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5066] unlink("./0/binderfs" [pid 5083] <... sendfile resumed>) = 117 [pid 5083] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 53.787203][ T5081] EXT4-fs (loop3): This should not happen!! Data will be lost [ 53.787203][ T5081] [ 53.789673][ T5083] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 53.805561][ T5081] EXT4-fs (loop3): Total free blocks count 0 [ 53.813543][ T5081] EXT4-fs (loop3): Free/Dirty block details [pid 5083] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5107 attached [pid 5107] set_robust_list(0x7f45152de9e0, 24) = 0 [pid 5107] memfd_create("syzkaller", 0) = 3 [pid 5107] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f450cebe000 [pid 5103] <... ioctl resumed>) = 0 [pid 5069] close(4 [pid 5066] <... unlink resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5107] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5103] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... close resumed>) = 0 [pid 5066] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... openat resumed>) = 3 [pid 5103] <... futex resumed>) = 0 [pid 5069] rmdir("./0/file0" [pid 5076] exit_group(0 [pid 5083] <... futex resumed>) = ? [pid 5076] <... exit_group resumed>) = ? [pid 5083] +++ exited with 0 +++ [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5069] <... rmdir resumed>) = 0 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] close(3 [pid 5103] +++ exited with 0 +++ [pid 5076] +++ exited with 0 +++ [pid 5065] <... close resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f755d0) = 5108 [pid 5107] <... write resumed>) = 1048576 ./strace-static-x86_64: Process 5108 attached [pid 5108] set_robust_list(0x555556f755e0, 24 [pid 5107] munmap(0x7f450cebe000, 1048576) = 0 [pid 5108] <... set_robust_list resumed>) = 0 [pid 5108] chdir("./1") = 0 [pid 5108] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5108] setpgid(0, 0) = 0 [pid 5108] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5107] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 53.833395][ T5081] EXT4-fs (loop3): free_blocks=2415919104 [ 53.841378][ T5081] EXT4-fs (loop3): dirty_blocks=16 [ 53.847506][ T5081] EXT4-fs (loop3): Block reservation details [ 53.872902][ T9] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5107] ioctl(4, LOOP_SET_FD, 3 [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5076, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5069] getdents64(3, [pid 5070] restart_syscall(<... resuming interrupted clone ...> [pid 5069] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5108] <... openat resumed>) = 3 [pid 5108] write(3, "1000", 4 [pid 5069] close(3 [pid 5108] <... write resumed>) = 4 [pid 5108] close(3) = 0 [pid 5108] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5108] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5108] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f45152be000 [pid 5108] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5108] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5109], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5109 [pid 5108] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... restart_syscall resumed>) = 0 [pid 5108] <... futex resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 5108] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5069] rmdir("./0" [pid 5070] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] <... rmdir resumed>) = 0 [pid 5070] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] mkdir("./1", 0777 [pid 5070] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5109 attached [pid 5109] set_robust_list(0x7f45152de9e0, 24 [pid 5070] fstat(3, [pid 5069] <... mkdir resumed>) = 0 [pid 5109] <... set_robust_list resumed>) = 0 [pid 5070] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5109] memfd_create("syzkaller", 0 [pid 5070] getdents64(3, [pid 5069] <... openat resumed>) = 3 [pid 5109] <... memfd_create resumed>) = 3 [pid 5070] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5069] ioctl(3, LOOP_CLR_FD [pid 5109] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f450cebe000 [pid 5109] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5070] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] close(3 [pid 5070] lstat("./0/binderfs", [pid 5069] <... close resumed>) = 0 [pid 5066] <... umount2 resumed>) = 0 [pid 5070] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5070] unlink("./0/binderfs" [ 53.877571][ T5107] loop2: detected capacity change from 0 to 2048 [pid 5066] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] <... unlink resumed>) = 0 [pid 5070] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... clone resumed>, child_tidptr=0x555556f755d0) = 5110 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./0/file0", ./strace-static-x86_64: Process 5110 attached [pid 5110] set_robust_list(0x555556f755e0, 24) = 0 [pid 5107] <... ioctl resumed>) = 0 [pid 5110] chdir("./1" [pid 5107] close(3 [pid 5110] <... chdir resumed>) = 0 [pid 5107] <... close resumed>) = 0 [pid 5110] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5107] mkdir("./file0", 0777 [pid 5110] <... prctl resumed>) = 0 [pid 5107] <... mkdir resumed>) = 0 [pid 5110] setpgid(0, 0 [pid 5109] <... write resumed>) = 1048576 [pid 5107] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5110] <... setpgid resumed>) = 0 [pid 5110] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5104] <... ioctl resumed>) = 0 [pid 5081] <... sendfile resumed>) = 117 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5110] <... openat resumed>) = 3 [pid 5109] munmap(0x7f450cebe000, 1048576 [pid 5104] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5110] write(3, "1000", 4 [pid 5109] <... munmap resumed>) = 0 [pid 5104] <... futex resumed>) = 0 [pid 5110] <... write resumed>) = 4 [pid 5109] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5104] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5110] close(3 [pid 5109] <... openat resumed>) = 4 [pid 5110] <... close resumed>) = 0 [pid 5109] ioctl(4, LOOP_SET_FD, 3 [pid 5110] symlink("/dev/binderfs", "./binderfs" [pid 5081] <... futex resumed>) = 0 [pid 5075] exit_group(0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5110] <... symlink resumed>) = 0 [pid 5104] <... futex resumed>) = ? [pid 5075] <... exit_group resumed>) = ? [pid 5110] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5104] +++ exited with 0 +++ [pid 5110] <... futex resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5110] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f45152be000 [pid 5110] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE [pid 5081] +++ exited with 0 +++ [pid 5075] +++ exited with 0 +++ [ 53.894136][ T5081] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 53.932027][ T9] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 53.964258][ T5109] loop0: detected capacity change from 0 to 2048 [pid 5110] <... mprotect resumed>) = 0 [pid 5109] <... ioctl resumed>) = 0 [pid 5070] <... umount2 resumed>) = 0 [pid 5066] <... openat resumed>) = 4 [pid 5109] close(3 [pid 5070] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5075, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5066] fstat(4, [pid 5109] <... close resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5109] mkdir("./file0", 0777 [pid 5070] lstat("./0/file0", [pid 5066] getdents64(4, [pid 5109] <... mkdir resumed>) = 0 [pid 5070] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5109] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5070] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] getdents64(4, [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5070] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... openat resumed>) = 3 [pid 5066] close(4 [pid 5070] <... openat resumed>) = 4 [pid 5068] fstat(3, [pid 5066] <... close resumed>) = 0 [pid 5070] fstat(4, [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] rmdir("./0/file0" [pid 5110] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5107] <... mount resumed>) = 0 [pid 5070] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, [pid 5066] <... rmdir resumed>) = 0 [pid 5107] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5070] getdents64(4, [pid 5068] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5066] getdents64(3, [pid 5110] <... clone resumed>, parent_tid=[5114], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5114 [pid 5107] <... openat resumed>) = 3 [pid 5070] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5068] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5110] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5107] chdir("./file0" [pid 5070] getdents64(4, [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] close(3 [pid 5110] <... futex resumed>) = 0 [pid 5107] <... chdir resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5068] lstat("./0/binderfs", [pid 5066] <... close resumed>) = 0 ./strace-static-x86_64: Process 5114 attached [pid 5110] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5107] ioctl(4, LOOP_CLR_FD [pid 5070] close(4 [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] rmdir("./0" [pid 5114] set_robust_list(0x7f45152de9e0, 24 [pid 5107] <... ioctl resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 5068] unlink("./0/binderfs" [pid 5066] <... rmdir resumed>) = 0 [pid 5114] <... set_robust_list resumed>) = 0 [pid 5107] close(4 [pid 5070] rmdir("./0/file0" [pid 5068] <... unlink resumed>) = 0 [pid 5066] mkdir("./1", 0777 [pid 5114] memfd_create("syzkaller", 0) = 3 [pid 5114] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f450cebe000 [pid 5114] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5070] <... rmdir resumed>) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5070] getdents64(3, [pid 5068] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5107] <... close resumed>) = 0 [pid 5107] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [ 53.981595][ T5107] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 54.013285][ T5109] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [pid 5066] <... openat resumed>) = 3 [pid 5114] <... write resumed>) = 1048576 [pid 5114] munmap(0x7f450cebe000, 1048576) = 0 [pid 5114] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5114] ioctl(4, LOOP_SET_FD, 3 [pid 5107] <... futex resumed>) = 1 [pid 5105] <... futex resumed>) = 0 [pid 5070] close(3 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5107] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5105] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... close resumed>) = 0 [pid 5107] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5105] <... futex resumed>) = 0 [pid 5070] rmdir("./0" [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5107] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5105] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... rmdir resumed>) = 0 [pid 5066] close(3 [pid 5114] <... ioctl resumed>) = 0 [pid 5114] close(3 [pid 5066] <... close resumed>) = 0 [pid 5107] <... open resumed>) = 4 [pid 5070] mkdir("./1", 0777 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5107] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... mkdir resumed>) = 0 [pid 5114] <... close resumed>) = 0 [pid 5114] mkdir("./file0", 0777 [pid 5107] <... futex resumed>) = 1 [pid 5105] <... futex resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x555556f755d0) = 5116 [pid 5107] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5105] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5107] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5105] <... futex resumed>) = 0 [pid 5107] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5105] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... openat resumed>) = 3 [pid 5107] <... write resumed>) = 9 [pid 5070] ioctl(3, LOOP_CLR_FD [pid 5107] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5107] <... futex resumed>) = 1 [pid 5105] <... futex resumed>) = 0 [pid 5070] close(3 [pid 5105] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5107] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5105] <... futex resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 5107] <... openat resumed>) = 5 [pid 5105] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5107] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5105] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5105] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5107] <... futex resumed>) = 0 [pid 5105] <... futex resumed>) = 0 [pid 5107] open("./bus", O_RDWR [pid 5105] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... clone resumed>, child_tidptr=0x555556f755d0) = 5117 [pid 5114] <... mkdir resumed>) = 0 [pid 5107] <... open resumed>) = 6 [pid 5114] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5107] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5116 attached ) = 1 [pid 5105] <... futex resumed>) = 0 [pid 5107] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5105] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5107] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5105] <... futex resumed>) = 0 [pid 5107] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5105] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5107] <... mmap resumed>) = 0x20000000 [pid 5116] set_robust_list(0x555556f755e0, 24 [pid 5107] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5117 attached [pid 5116] <... set_robust_list resumed>) = 0 [pid 5107] <... futex resumed>) = 1 [pid 5105] <... futex resumed>) = 0 [pid 5116] chdir("./1" [pid 5107] sendfile(4, 5, NULL, 2147483713 [pid 5105] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5117] set_robust_list(0x555556f755e0, 24 [pid 5105] <... futex resumed>) = 0 [pid 5105] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5109] <... mount resumed>) = 0 [pid 5109] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5109] chdir("./file0") = 0 [pid 5109] ioctl(4, LOOP_CLR_FD) = 0 [ 54.037575][ T9] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 54.046034][ T5114] loop4: detected capacity change from 0 to 2048 [pid 5109] close(4) = 0 [pid 5109] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5108] <... futex resumed>) = 0 [pid 5109] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5108] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5109] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5108] <... futex resumed>) = 0 [pid 5109] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5108] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5109] <... open resumed>) = 4 [pid 5109] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5108] <... futex resumed>) = 0 [pid 5109] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5108] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5109] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5108] <... futex resumed>) = 0 [pid 5109] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5108] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5109] <... write resumed>) = 9 [pid 5109] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5108] <... futex resumed>) = 0 [pid 5109] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5108] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5109] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5108] <... futex resumed>) = 0 [pid 5109] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5108] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5109] <... openat resumed>) = 5 [pid 5109] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5108] <... futex resumed>) = 0 [pid 5109] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5108] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5117] <... set_robust_list resumed>) = 0 [pid 5116] <... chdir resumed>) = 0 [pid 5109] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5108] <... futex resumed>) = 0 [pid 5117] chdir("./1" [pid 5116] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5109] open("./bus", O_RDWR [pid 5108] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5117] <... chdir resumed>) = 0 [pid 5116] <... prctl resumed>) = 0 [pid 5109] <... open resumed>) = 6 [pid 5109] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5108] <... futex resumed>) = 0 [pid 5109] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5108] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5117] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5116] setpgid(0, 0 [pid 5109] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5108] <... futex resumed>) = 0 [pid 5117] <... prctl resumed>) = 0 [pid 5116] <... setpgid resumed>) = 0 [pid 5109] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5108] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5109] <... mmap resumed>) = 0x20000000 [pid 5109] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5108] <... futex resumed>) = 0 [pid 5109] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5108] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5109] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5108] <... futex resumed>) = 0 [pid 5116] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5109] sendfile(4, 5, NULL, 2147483713 [pid 5108] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... umount2 resumed>) = 0 [pid 5117] setpgid(0, 0 [pid 5116] <... openat resumed>) = 3 [pid 5117] <... setpgid resumed>) = 0 [pid 5117] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [ 54.092482][ T5107] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5116] write(3, "1000", 4 [pid 5117] <... openat resumed>) = 3 [pid 5116] <... write resumed>) = 4 [pid 5105] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5117] write(3, "1000", 4 [pid 5116] close(3 [pid 5117] <... write resumed>) = 4 [pid 5116] <... close resumed>) = 0 [pid 5117] close(3 [pid 5116] symlink("/dev/binderfs", "./binderfs" [pid 5117] <... close resumed>) = 0 [pid 5117] symlink("/dev/binderfs", "./binderfs" [pid 5116] <... symlink resumed>) = 0 [pid 5105] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5117] <... symlink resumed>) = 0 [pid 5116] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5105] <... futex resumed>) = 0 [pid 5117] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5116] <... futex resumed>) = 0 [pid 5117] <... futex resumed>) = 0 [pid 5116] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5117] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f45152be000 [pid 5116] <... mmap resumed>) = 0x7f45152be000 [pid 5105] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5117] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE [pid 5116] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE [pid 5105] <... mmap resumed>) = 0x7f450cf9d000 [pid 5117] <... mprotect resumed>) = 0 [pid 5116] <... mprotect resumed>) = 0 [pid 5105] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5117] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5105] <... mprotect resumed>) = 0 [pid 5116] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5108] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5105] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5119 attached [pid 5117] <... clone resumed>, parent_tid=[5119], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5119 [pid 5108] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5119] set_robust_list(0x7f45152de9e0, 24 [pid 5117] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5116] <... clone resumed>, parent_tid=[5120], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5120 [pid 5108] <... futex resumed>) = 0 [pid 5105] <... clone resumed>, parent_tid=[5121], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5121 [pid 5119] <... set_robust_list resumed>) = 0 [pid 5117] <... futex resumed>) = 0 [pid 5116] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5108] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5105] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5108] <... mmap resumed>) = 0x7f450cf9d000 [pid 5105] <... futex resumed>) = 0 [pid 5108] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5105] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5117] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5116] <... futex resumed>) = 0 [pid 5108] <... mprotect resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5121 attached [pid 5116] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5108] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5068] lstat("./0/file0", [pid 5121] set_robust_list(0x7f450cfbd9e0, 24 [pid 5119] memfd_create("syzkaller", 0 [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5121] <... set_robust_list resumed>) = 0 [pid 5119] <... memfd_create resumed>) = 3 [pid 5108] <... clone resumed>, parent_tid=[5123], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5123 [pid 5068] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5120 attached [pid 5121] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5119] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5108] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5123 attached [pid 5120] set_robust_list(0x7f45152de9e0, 24 [pid 5119] <... mmap resumed>) = 0x7f450cebe000 [pid 5108] <... futex resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5123] set_robust_list(0x7f450cfbd9e0, 24 [pid 5108] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... openat resumed>) = 4 [pid 5123] <... set_robust_list resumed>) = 0 [pid 5120] <... set_robust_list resumed>) = 0 [pid 5068] fstat(4, [pid 5123] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5120] memfd_create("syzkaller", 0 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, 0x555556f7e660 /* 2 entries */, 32768) = 48 [ 54.132129][ T5107] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 54.136690][ T5109] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 54.146397][ T5107] EXT4-fs (loop2): This should not happen!! Data will be lost [ 54.146397][ T5107] [pid 5068] getdents64(4, 0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5068] close(4) = 0 [pid 5068] rmdir("./0/file0") = 0 [pid 5068] getdents64(3, 0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 5068] rmdir("./0") = 0 [pid 5068] mkdir("./1", 0777) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5120] <... memfd_create resumed>) = 3 [pid 5068] <... openat resumed>) = 3 [pid 5120] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5120] <... mmap resumed>) = 0x7f450cebe000 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] close(3) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f755d0) = 5124 ./strace-static-x86_64: Process 5124 attached [pid 5124] set_robust_list(0x555556f755e0, 24) = 0 [pid 5124] chdir("./1") = 0 [pid 5124] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5124] setpgid(0, 0) = 0 [pid 5124] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5124] write(3, "1000", 4) = 4 [pid 5124] close(3) = 0 [pid 5105] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5124] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5124] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5124] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f45152be000 [pid 5124] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5124] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5125], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5125 [pid 5124] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5124] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5119] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5120] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5119] <... write resumed>) = 1048576 [pid 5108] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 5125 attached [pid 5125] set_robust_list(0x7f45152de9e0, 24) = 0 [pid 5114] <... mount resumed>) = 0 [pid 5125] memfd_create("syzkaller", 0 [pid 5114] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5125] <... memfd_create resumed>) = 3 [pid 5114] <... openat resumed>) = 3 [pid 5125] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5114] chdir("./file0" [pid 5125] <... mmap resumed>) = 0x7f450cebe000 [pid 5114] <... chdir resumed>) = 0 [pid 5125] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5114] ioctl(4, LOOP_CLR_FD) = 0 [pid 5114] close(4) = 0 [ 54.202160][ T5114] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 54.209881][ T5107] EXT4-fs (loop2): Total free blocks count 0 [ 54.230784][ T5109] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 54.245726][ T5107] EXT4-fs (loop2): Free/Dirty block details [pid 5114] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5110] <... futex resumed>) = 0 [pid 5114] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5110] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5114] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5110] <... futex resumed>) = 0 [pid 5119] munmap(0x7f450cebe000, 1048576 [pid 5114] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5110] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5114] <... open resumed>) = 4 [pid 5114] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5110] <... futex resumed>) = 0 [pid 5120] <... write resumed>) = 1048576 [pid 5119] <... munmap resumed>) = 0 [pid 5114] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5110] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5119] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5114] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5110] <... futex resumed>) = 0 [pid 5119] <... openat resumed>) = 4 [pid 5114] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [ 54.274806][ T5107] EXT4-fs (loop2): free_blocks=2415919104 [ 54.280869][ T5109] EXT4-fs (loop0): This should not happen!! Data will be lost [ 54.280869][ T5109] [ 54.291971][ T5109] EXT4-fs (loop0): Total free blocks count 0 [ 54.298395][ T5109] EXT4-fs (loop0): Free/Dirty block details [ 54.304776][ T5109] EXT4-fs (loop0): free_blocks=2415919104 [ 54.311149][ T5109] EXT4-fs (loop0): dirty_blocks=16 [ 54.316653][ T5109] EXT4-fs (loop0): Block reservation details [pid 5110] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5119] ioctl(4, LOOP_SET_FD, 3 [pid 5114] <... write resumed>) = 9 [pid 5120] munmap(0x7f450cebe000, 1048576 [pid 5114] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5120] <... munmap resumed>) = 0 [pid 5114] <... futex resumed>) = 1 [pid 5110] <... futex resumed>) = 0 [pid 5123] <... ioctl resumed>) = 0 [pid 5120] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5114] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5110] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5109] <... sendfile resumed>) = 117 [pid 5125] <... write resumed>) = 1048576 [pid 5123] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5120] <... openat resumed>) = 4 [pid 5114] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5110] <... futex resumed>) = 0 [pid 5125] munmap(0x7f450cebe000, 1048576 [pid 5123] <... futex resumed>) = 0 [pid 5120] ioctl(4, LOOP_SET_FD, 3 [pid 5114] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5110] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5125] <... munmap resumed>) = 0 [pid 5123] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5121] <... ioctl resumed>) = 0 [pid 5120] <... ioctl resumed>) = 0 [pid 5119] <... ioctl resumed>) = 0 [pid 5114] <... openat resumed>) = 5 [pid 5109] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5108] exit_group(0 [pid 5107] <... sendfile resumed>) = 117 [pid 5125] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5123] <... futex resumed>) = ? [pid 5121] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5120] close(3 [pid 5119] close(3 [pid 5114] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5109] <... futex resumed>) = ? [pid 5108] <... exit_group resumed>) = ? [pid 5107] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5105] exit_group(0 [pid 5125] <... openat resumed>) = 4 [pid 5123] +++ exited with 0 +++ [pid 5121] <... futex resumed>) = 0 [pid 5120] <... close resumed>) = 0 [pid 5119] <... close resumed>) = 0 [pid 5114] <... futex resumed>) = 1 [pid 5110] <... futex resumed>) = 0 [pid 5109] +++ exited with 0 +++ [pid 5107] <... futex resumed>) = 0 [pid 5119] mkdir("./file0", 0777 [pid 5107] mkdir(0x20000240, 0777 [pid 5125] ioctl(4, LOOP_SET_FD, 3 [pid 5120] mkdir("./file0", 0777 [pid 5119] <... mkdir resumed>) = 0 [pid 5114] open("./bus", O_RDWR [pid 5110] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5108] +++ exited with 0 +++ [pid 5107] +++ exited with 0 +++ [pid 5105] <... exit_group resumed>) = ? [pid 5121] +++ exited with 0 +++ [pid 5119] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5114] <... open resumed>) = 6 [pid 5110] <... futex resumed>) = 0 [pid 5125] <... ioctl resumed>) = 0 [pid 5110] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5105] +++ exited with 0 +++ [pid 5114] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5110] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5108, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5120] <... mkdir resumed>) = 0 [pid 5114] <... futex resumed>) = 0 [pid 5110] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5105, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5065] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5120] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5114] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5110] <... futex resumed>) = 0 [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5125] close(3) = 0 [pid 5114] <... mmap resumed>) = 0x20000000 [pid 5110] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] <... restart_syscall resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5114] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5110] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5114] <... futex resumed>) = 0 [pid 5110] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... openat resumed>) = 3 [pid 5114] sendfile(4, 5, NULL, 2147483713 [pid 5110] <... futex resumed>) = 0 [pid 5065] fstat(3, [pid 5110] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] getdents64(3, [pid 5067] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5125] mkdir("./file0", 0777 [pid 5067] <... openat resumed>) = 3 [pid 5065] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5125] <... mkdir resumed>) = 0 [pid 5067] fstat(3, [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] lstat("./1/binderfs", [pid 5067] getdents64(3, [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5065] unlink("./1/binderfs" [ 54.318313][ T5119] loop5: detected capacity change from 0 to 2048 [ 54.322939][ T5109] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 54.335875][ T5107] EXT4-fs (loop2): dirty_blocks=16 [ 54.341747][ T5107] EXT4-fs (loop2): Block reservation details [ 54.347394][ T5120] loop1: detected capacity change from 0 to 2048 [ 54.347993][ T5107] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 54.368754][ T5125] loop3: detected capacity change from 0 to 2048 [pid 5067] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5125] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5065] <... unlink resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./1/binderfs", [pid 5065] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./1/binderfs") = 0 [ 54.391152][ T5114] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 54.407571][ T5114] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 54.420425][ T5114] EXT4-fs (loop4): This should not happen!! Data will be lost [ 54.420425][ T5114] [pid 5067] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5110] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 54.420627][ T11] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 54.431974][ T5125] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 54.452838][ T5120] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 54.455031][ T5114] EXT4-fs (loop4): Total free blocks count 0 [ 54.472029][ T41] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5110] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5110] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f450cf9d000 [pid 5110] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5110] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5132], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5132 [pid 5110] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5132 attached [pid 5065] <... umount2 resumed>) = 0 [pid 5110] <... futex resumed>) = 0 [pid 5132] set_robust_list(0x7f450cfbd9e0, 24 [pid 5125] <... mount resumed>) = 0 [pid 5110] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = 0 [pid 5132] <... set_robust_list resumed>) = 0 [pid 5125] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5120] <... mount resumed>) = 0 [pid 5132] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5125] <... openat resumed>) = 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5125] chdir("./file0" [ 54.472500][ T5119] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 54.484672][ T5114] EXT4-fs (loop4): Free/Dirty block details [ 54.514555][ T5114] EXT4-fs (loop4): free_blocks=2415919104 [ 54.525652][ T5114] EXT4-fs (loop4): dirty_blocks=16 [ 54.531579][ T5114] EXT4-fs (loop4): Block reservation details [pid 5120] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5132] <... ioctl resumed>) = 0 [pid 5125] <... chdir resumed>) = 0 [pid 5120] <... openat resumed>) = 3 [pid 5114] <... sendfile resumed>) = 117 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./1/file0", [pid 5132] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5125] ioctl(4, LOOP_CLR_FD [pid 5120] chdir("./file0" [pid 5114] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] lstat("./1/file0", [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5132] <... futex resumed>) = 1 [pid 5125] <... ioctl resumed>) = 0 [pid 5120] <... chdir resumed>) = 0 [pid 5114] <... futex resumed>) = 0 [pid 5110] <... futex resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5132] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5125] close(4 [pid 5120] ioctl(4, LOOP_CLR_FD [pid 5110] exit_group(0 [pid 5067] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5125] <... close resumed>) = 0 [pid 5120] <... ioctl resumed>) = 0 [pid 5110] <... exit_group resumed>) = ? [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5132] <... futex resumed>) = ? [pid 5125] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5125] <... futex resumed>) = 1 [pid 5124] <... futex resumed>) = 0 [pid 5132] +++ exited with 0 +++ [pid 5065] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5125] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5124] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5120] close(4 [pid 5067] <... openat resumed>) = 4 [pid 5124] <... futex resumed>) = 0 [pid 5065] <... openat resumed>) = 4 [pid 5124] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] fstat(4, [pid 5065] fstat(4, [pid 5120] <... close resumed>) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5120] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] getdents64(4, [pid 5065] getdents64(4, [pid 5120] <... futex resumed>) = 1 [pid 5116] <... futex resumed>) = 0 [pid 5067] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5065] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5120] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5116] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] getdents64(4, [pid 5065] getdents64(4, [pid 5116] <... futex resumed>) = 0 [pid 5116] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5065] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5125] <... open resumed>) = 4 [pid 5067] close(4 [pid 5065] close(4 [pid 5125] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... close resumed>) = 0 [pid 5125] <... futex resumed>) = 1 [pid 5124] <... futex resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5125] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5124] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] rmdir("./1/file0" [pid 5125] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5124] <... futex resumed>) = 0 [pid 5120] <... open resumed>) = 4 [pid 5065] rmdir("./1/file0" [pid 5067] <... rmdir resumed>) = 0 [pid 5124] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5119] <... mount resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5125] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5067] getdents64(3, [pid 5065] getdents64(3, [pid 5120] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5119] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5125] <... write resumed>) = 9 [pid 5120] <... futex resumed>) = 1 [pid 5116] <... futex resumed>) = 0 [pid 5067] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5065] close(3 [pid 5125] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5120] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5119] <... openat resumed>) = 3 [pid 5116] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] close(3 [pid 5065] <... close resumed>) = 0 [pid 5125] <... futex resumed>) = 1 [pid 5124] <... futex resumed>) = 0 [pid 5119] chdir("./file0" [pid 5116] <... futex resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5065] rmdir("./1" [pid 5120] <... write resumed>) = 9 [pid 5125] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5124] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5119] <... chdir resumed>) = 0 [pid 5116] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] rmdir("./1" [pid 5125] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5124] <... futex resumed>) = 0 [pid 5119] ioctl(4, LOOP_CLR_FD [pid 5065] <... rmdir resumed>) = 0 [pid 5119] <... ioctl resumed>) = 0 [pid 5124] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5119] close(4 [pid 5067] <... rmdir resumed>) = 0 [pid 5125] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5120] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5119] <... close resumed>) = 0 [pid 5067] mkdir("./2", 0777 [pid 5065] mkdir("./2", 0777 [pid 5119] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5117] <... futex resumed>) = 0 [pid 5119] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5117] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... mkdir resumed>) = 0 [pid 5125] <... openat resumed>) = 5 [pid 5119] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5117] <... futex resumed>) = 0 [pid 5125] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5120] <... futex resumed>) = 1 [pid 5119] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5117] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5116] <... futex resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] <... mkdir resumed>) = 0 [pid 5125] <... futex resumed>) = 1 [pid 5124] <... futex resumed>) = 0 [pid 5120] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5119] <... open resumed>) = 4 [pid 5116] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5114] +++ exited with 0 +++ [pid 5110] +++ exited with 0 +++ [pid 5067] <... openat resumed>) = 3 [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5125] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5124] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5120] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5119] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5116] <... futex resumed>) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5110, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5065] <... openat resumed>) = 3 [pid 5125] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5124] <... futex resumed>) = 0 [pid 5120] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5119] <... futex resumed>) = 1 [pid 5117] <... futex resumed>) = 0 [pid 5116] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5125] open("./bus", O_RDWR [pid 5124] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5120] <... openat resumed>) = 5 [pid 5119] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5117] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] close(3 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5125] <... open resumed>) = 6 [pid 5120] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5119] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5117] <... futex resumed>) = 0 [pid 5069] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... close resumed>) = 0 [pid 5065] close(3 [pid 5125] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5120] <... futex resumed>) = 1 [ 54.539173][ T5114] EXT4-fs (loop4): i_reserved_data_blocks=1 [pid 5119] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5117] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5116] <... futex resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... close resumed>) = 0 [pid 5125] <... futex resumed>) = 1 [pid 5124] <... futex resumed>) = 0 [pid 5120] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5119] <... write resumed>) = 9 [pid 5116] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5124] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5119] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... openat resumed>) = 3 [pid 5116] <... futex resumed>) = 0 [pid 5125] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5124] <... futex resumed>) = 0 [pid 5120] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5119] <... futex resumed>) = 1 [pid 5117] <... futex resumed>) = 0 [pid 5116] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] fstat(3, [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5119] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5117] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5119] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5117] <... futex resumed>) = 0 [pid 5069] getdents64(3, ./strace-static-x86_64: Process 5133 attached [pid 5125] <... mmap resumed>) = 0x20000000 [pid 5124] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5119] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5117] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5133] set_robust_list(0x555556f755e0, 24 [pid 5125] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5120] open("./bus", O_RDWR [pid 5119] <... openat resumed>) = 5 [pid 5069] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... clone resumed>, child_tidptr=0x555556f755d0) = 5133 [pid 5133] <... set_robust_list resumed>) = 0 [pid 5125] <... futex resumed>) = 1 [pid 5124] <... futex resumed>) = 0 [pid 5120] <... open resumed>) = 6 [pid 5119] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... clone resumed>, child_tidptr=0x555556f755d0) = 5134 [pid 5133] chdir("./2" [pid 5125] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5124] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5120] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5119] <... futex resumed>) = 1 [pid 5117] <... futex resumed>) = 0 [pid 5069] lstat("./1/binderfs", ./strace-static-x86_64: Process 5134 attached [pid 5133] <... chdir resumed>) = 0 [pid 5125] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5124] <... futex resumed>) = 0 [pid 5120] <... futex resumed>) = 1 [pid 5119] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5117] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5116] <... futex resumed>) = 0 [pid 5069] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5134] set_robust_list(0x555556f755e0, 24 [pid 5133] prctl(PR_SET_PDEATHSIG, SIGKILL [ 54.600236][ T11] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 54.624670][ T5125] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5125] sendfile(4, 5, NULL, 2147483713 [pid 5124] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5120] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5119] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5117] <... futex resumed>) = 0 [pid 5116] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] unlink("./1/binderfs" [pid 5134] <... set_robust_list resumed>) = 0 [pid 5133] <... prctl resumed>) = 0 [pid 5120] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5119] open("./bus", O_RDWR [pid 5117] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5116] <... futex resumed>) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 5134] chdir("./2" [pid 5133] setpgid(0, 0 [pid 5120] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5119] <... open resumed>) = 6 [pid 5116] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5134] <... chdir resumed>) = 0 [pid 5133] <... setpgid resumed>) = 0 [pid 5119] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5133] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5119] <... futex resumed>) = 1 [pid 5117] <... futex resumed>) = 0 [pid 5134] <... prctl resumed>) = 0 [pid 5133] <... openat resumed>) = 3 [pid 5120] <... mmap resumed>) = 0x20000000 [pid 5119] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5117] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] setpgid(0, 0 [pid 5133] write(3, "1000", 4 [pid 5119] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5117] <... futex resumed>) = 0 [pid 5134] <... setpgid resumed>) = 0 [pid 5133] <... write resumed>) = 4 [pid 5119] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5117] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5134] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5133] close(3 [pid 5119] <... mmap resumed>) = 0x20000000 [pid 5134] <... openat resumed>) = 3 [pid 5133] <... close resumed>) = 0 [pid 5119] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] write(3, "1000", 4 [pid 5133] symlink("/dev/binderfs", "./binderfs" [pid 5119] <... futex resumed>) = 1 [pid 5117] <... futex resumed>) = 0 [pid 5134] <... write resumed>) = 4 [pid 5133] <... symlink resumed>) = 0 [pid 5119] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5117] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] close(3 [pid 5133] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5119] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5117] <... futex resumed>) = 0 [pid 5134] <... close resumed>) = 0 [pid 5133] <... futex resumed>) = 0 [pid 5119] sendfile(4, 5, NULL, 2147483713 [pid 5117] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5134] symlink("/dev/binderfs", "./binderfs" [pid 5133] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5134] <... symlink resumed>) = 0 [pid 5133] <... mmap resumed>) = 0x7f45152be000 [pid 5134] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE [pid 5134] <... futex resumed>) = 0 [pid 5133] <... mprotect resumed>) = 0 [pid 5134] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5133] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5134] <... mmap resumed>) = 0x7f45152be000 [pid 5134] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE [pid 5133] <... clone resumed>, parent_tid=[5135], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5135 [pid 5134] <... mprotect resumed>) = 0 [pid 5133] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5133] <... futex resumed>) = 0 [pid 5133] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5134] <... clone resumed>, parent_tid=[5136], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5136 [pid 5134] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5134] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5136 attached [pid 5136] set_robust_list(0x7f45152de9e0, 24) = 0 [pid 5136] memfd_create("syzkaller", 0./strace-static-x86_64: Process 5135 attached [pid 5135] set_robust_list(0x7f45152de9e0, 24) = 0 [pid 5136] <... memfd_create resumed>) = 3 [pid 5135] memfd_create("syzkaller", 0 [pid 5136] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f450cebe000 [pid 5135] <... memfd_create resumed>) = 3 [pid 5135] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f450cebe000 [pid 5120] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5135] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5120] <... futex resumed>) = 1 [pid 5116] <... futex resumed>) = 0 [pid 5136] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5116] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5116] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5120] sendfile(4, 5, NULL, 2147483713 [pid 5124] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5136] <... write resumed>) = 1048576 [pid 5136] munmap(0x7f450cebe000, 1048576 [pid 5135] <... write resumed>) = 1048576 [pid 5136] <... munmap resumed>) = 0 [pid 5136] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5136] ioctl(4, LOOP_SET_FD, 3 [pid 5135] munmap(0x7f450cebe000, 1048576 [pid 5124] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5117] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5124] <... futex resumed>) = 0 [pid 5117] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5117] <... futex resumed>) = 0 [pid 5124] <... mmap resumed>) = 0x7f450cf9d000 [pid 5124] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5124] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5137], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5137 [pid 5124] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5124] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5137 attached [pid 5137] set_robust_list(0x7f450cfbd9e0, 24) = 0 [pid 5137] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5117] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5116] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5117] <... mmap resumed>) = 0x7f450cf9d000 [pid 5116] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5117] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5116] <... futex resumed>) = 0 [pid 5117] <... mprotect resumed>) = 0 [pid 5116] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f450cf9d000 [pid 5116] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5117] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5116] <... mprotect resumed>) = 0 [ 54.645488][ T5119] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 54.650184][ T5136] loop0: detected capacity change from 0 to 2048 [ 54.660980][ T5125] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 54.680214][ T5119] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 ./strace-static-x86_64: Process 5138 attached [pid 5116] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5135] <... munmap resumed>) = 0 [pid 5117] <... clone resumed>, parent_tid=[5138], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5138 [pid 5138] set_robust_list(0x7f450cfbd9e0, 24 [pid 5135] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5138] <... set_robust_list resumed>) = 0 [pid 5124] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5117] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5138] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5135] <... openat resumed>) = 4 [pid 5124] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 5116] <... clone resumed>, parent_tid=[5139], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5139 [pid 5124] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5117] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5139 attached [pid 5135] ioctl(4, LOOP_SET_FD, 3 [pid 5116] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [ 54.697813][ T5119] EXT4-fs (loop5): This should not happen!! Data will be lost [ 54.697813][ T5119] [ 54.698098][ T5120] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 54.707961][ T5125] EXT4-fs (loop3): This should not happen!! Data will be lost [ 54.707961][ T5125] [ 54.733523][ T5119] EXT4-fs (loop5): Total free blocks count 0 [ 54.740289][ T5119] EXT4-fs (loop5): Free/Dirty block details [pid 5117] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5116] <... futex resumed>) = 0 [pid 5139] set_robust_list(0x7f450cfbd9e0, 24 [pid 5135] <... ioctl resumed>) = 0 [pid 5069] <... umount2 resumed>) = 0 [pid 5139] <... set_robust_list resumed>) = 0 [pid 5116] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5139] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5135] close(3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5135] <... close resumed>) = 0 [pid 5135] mkdir("./file0", 0777 [pid 5069] lstat("./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5069] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5069] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5135] <... mkdir resumed>) = 0 [pid 5069] getdents64(4, [pid 5138] <... ioctl resumed>) = 0 [pid 5119] <... sendfile resumed>) = 117 [pid 5069] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5138] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5135] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5069] getdents64(4, 0x555556f7e660 /* 0 entries */, 32768) = 0 [ 54.746648][ T5135] loop2: detected capacity change from 0 to 2048 [ 54.754460][ T5119] EXT4-fs (loop5): free_blocks=2415919104 [ 54.760483][ T5119] EXT4-fs (loop5): dirty_blocks=16 [ 54.765693][ T5119] EXT4-fs (loop5): Block reservation details [ 54.772275][ T5125] EXT4-fs (loop3): Total free blocks count 0 [ 54.778493][ T5119] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 54.784733][ T5125] EXT4-fs (loop3): Free/Dirty block details [ 54.792192][ T5125] EXT4-fs (loop3): free_blocks=2415919104 [pid 5069] close(4) = 0 [pid 5069] rmdir("./1/file0") = 0 [pid 5138] <... futex resumed>) = 1 [pid 5119] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] getdents64(3, [pid 5138] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5117] <... futex resumed>) = 0 [pid 5069] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5069] close(3) = 0 [pid 5069] rmdir("./1") = 0 [pid 5069] mkdir("./2", 0777) = 0 [pid 5119] <... futex resumed>) = 0 [pid 5117] exit_group(0 [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5069] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5136] <... ioctl resumed>) = 0 [pid 5117] <... exit_group resumed>) = ? [pid 5069] close(3 [pid 5138] <... futex resumed>) = ? [pid 5137] <... ioctl resumed>) = 0 [pid 5136] close(3 [pid 5125] <... sendfile resumed>) = 117 [pid 5069] <... close resumed>) = 0 [pid 5138] +++ exited with 0 +++ [pid 5137] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] <... close resumed>) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5137] <... futex resumed>) = 0 [pid 5136] mkdir("./file0", 0777 [pid 5119] +++ exited with 0 +++ [pid 5117] +++ exited with 0 +++ [pid 5125] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5137] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5136] <... mkdir resumed>) = 0 [pid 5124] exit_group(0 [pid 5125] <... futex resumed>) = ? [pid 5116] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] <... clone resumed>, child_tidptr=0x555556f755d0) = 5140 [pid 5137] <... futex resumed>) = ? [pid 5136] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5124] <... exit_group resumed>) = ? [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5117, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- ./strace-static-x86_64: Process 5140 attached [pid 5137] +++ exited with 0 +++ [pid 5125] +++ exited with 0 +++ [pid 5124] +++ exited with 0 +++ [pid 5070] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5140] set_robust_list(0x555556f755e0, 24 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5124, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5070] <... openat resumed>) = 3 [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5070] fstat(3, [pid 5068] <... restart_syscall resumed>) = 0 [pid 5070] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] getdents64(3, 0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5140] <... set_robust_list resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 54.798859][ T5125] EXT4-fs (loop3): dirty_blocks=16 [ 54.805158][ T5125] EXT4-fs (loop3): Block reservation details [ 54.812126][ T5125] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 54.831940][ T5135] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [pid 5068] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5140] chdir("./2" [pid 5135] <... mount resumed>) = 0 [pid 5070] lstat("./1/binderfs", [pid 5068] <... openat resumed>) = 3 [pid 5140] <... chdir resumed>) = 0 [pid 5135] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5070] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] fstat(3, [pid 5140] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5135] <... openat resumed>) = 3 [pid 5070] unlink("./1/binderfs" [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5140] <... prctl resumed>) = 0 [pid 5135] chdir("./file0" [pid 5070] <... unlink resumed>) = 0 [pid 5068] getdents64(3, [pid 5140] setpgid(0, 0 [pid 5135] <... chdir resumed>) = 0 [ 54.848324][ T5120] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 54.862455][ T5136] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [pid 5070] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5140] <... setpgid resumed>) = 0 [pid 5135] ioctl(4, LOOP_CLR_FD [pid 5068] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] unlink("./1/binderfs") = 0 [pid 5140] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5135] <... ioctl resumed>) = 0 [pid 5068] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5136] <... mount resumed>) = 0 [pid 5136] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 54.902260][ T61] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 54.904678][ T5120] EXT4-fs (loop1): This should not happen!! Data will be lost [ 54.904678][ T5120] [ 54.925994][ T5120] EXT4-fs (loop1): Total free blocks count 0 [ 54.932866][ T5120] EXT4-fs (loop1): Free/Dirty block details [ 54.939687][ T41] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5140] <... openat resumed>) = 3 [pid 5136] chdir("./file0" [pid 5135] close(4 [pid 5136] <... chdir resumed>) = 0 [pid 5136] ioctl(4, LOOP_CLR_FD) = 0 [pid 5140] write(3, "1000", 4 [pid 5136] close(4 [pid 5140] <... write resumed>) = 4 [pid 5136] <... close resumed>) = 0 [pid 5135] <... close resumed>) = 0 [pid 5136] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] close(3 [pid 5136] <... futex resumed>) = 1 [pid 5135] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] <... futex resumed>) = 0 [pid 5136] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5140] <... close resumed>) = 0 [pid 5135] <... futex resumed>) = 1 [pid 5134] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] symlink("/dev/binderfs", "./binderfs" [pid 5136] <... futex resumed>) = 0 [pid 5135] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5134] <... futex resumed>) = 1 [pid 5133] <... futex resumed>) = 0 [pid 5140] <... symlink resumed>) = 0 [pid 5136] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5134] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5133] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] <... open resumed>) = 4 [pid 5135] <... futex resumed>) = 0 [pid 5133] <... futex resumed>) = 1 [pid 5140] <... futex resumed>) = 0 [pid 5136] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5135] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5133] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5140] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5136] <... futex resumed>) = 1 [pid 5135] <... open resumed>) = 4 [ 54.940039][ T5120] EXT4-fs (loop1): free_blocks=2415919104 [ 54.958714][ T5120] EXT4-fs (loop1): dirty_blocks=16 [ 54.964057][ T5120] EXT4-fs (loop1): Block reservation details [ 54.970716][ T5120] EXT4-fs (loop1): i_reserved_data_blocks=1 [pid 5134] <... futex resumed>) = 0 [pid 5140] <... mmap resumed>) = 0x7f45152be000 [pid 5136] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5135] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... umount2 resumed>) = 0 [pid 5068] <... umount2 resumed>) = 0 [pid 5140] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE [pid 5136] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5135] <... futex resumed>) = 1 [pid 5134] <... futex resumed>) = 0 [pid 5133] <... futex resumed>) = 0 [pid 5070] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5140] <... mprotect resumed>) = 0 [pid 5136] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5135] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5134] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5133] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5140] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5139] <... ioctl resumed>) = 0 [pid 5136] <... write resumed>) = 9 [pid 5135] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5133] <... futex resumed>) = 0 [pid 5120] <... sendfile resumed>) = 117 [pid 5070] lstat("./1/file0", [pid 5068] lstat("./1/file0", [pid 5139] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5135] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5133] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5120] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5140] <... clone resumed>, parent_tid=[5147], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5147 [pid 5139] <... futex resumed>) = 0 [pid 5136] <... futex resumed>) = 1 [pid 5135] <... write resumed>) = 9 [pid 5134] <... futex resumed>) = 0 [pid 5120] <... futex resumed>) = 0 [pid 5116] exit_group(0./strace-static-x86_64: Process 5147 attached [pid 5140] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5116] <... exit_group resumed>) = ? [pid 5070] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5147] set_robust_list(0x7f45152de9e0, 24 [pid 5140] <... futex resumed>) = 0 [pid 5139] +++ exited with 0 +++ [pid 5136] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5135] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5120] +++ exited with 0 +++ [pid 5116] +++ exited with 0 +++ [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5147] <... set_robust_list resumed>) = 0 [pid 5140] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5136] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5135] <... futex resumed>) = 1 [pid 5134] <... futex resumed>) = 0 [pid 5133] <... futex resumed>) = 0 [pid 5070] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5116, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5147] memfd_create("syzkaller", 0 [pid 5136] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5135] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5134] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5133] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... openat resumed>) = 4 [pid 5068] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 5147] <... memfd_create resumed>) = 3 [pid 5136] <... openat resumed>) = 5 [pid 5135] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5133] <... futex resumed>) = 0 [pid 5070] fstat(4, [pid 5068] <... openat resumed>) = 4 [pid 5066] <... restart_syscall resumed>) = 0 [pid 5136] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5135] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5070] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] fstat(4, [pid 5147] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5136] <... futex resumed>) = 1 [pid 5135] <... openat resumed>) = 5 [pid 5134] <... futex resumed>) = 0 [pid 5133] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] getdents64(4, [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5147] <... mmap resumed>) = 0x7f450cebe000 [pid 5136] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5135] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5070] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, [pid 5136] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5135] <... futex resumed>) = 0 [pid 5134] <... futex resumed>) = 0 [pid 5133] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] getdents64(4, [pid 5068] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5136] open("./bus", O_RDWR [pid 5135] open("./bus", O_RDWR [pid 5134] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5133] <... futex resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5068] getdents64(4, [pid 5066] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5136] <... open resumed>) = 6 [pid 5135] <... open resumed>) = 6 [pid 5133] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] close(4 [pid 5068] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5136] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5135] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5070] <... close resumed>) = 0 [pid 5068] close(4 [pid 5066] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5136] <... futex resumed>) = 1 [pid 5135] <... futex resumed>) = 0 [pid 5134] <... futex resumed>) = 0 [pid 5133] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] rmdir("./1/file0" [pid 5068] <... close resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5136] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5135] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5134] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] <... futex resumed>) = 0 [pid 5070] <... rmdir resumed>) = 0 [pid 5068] rmdir("./1/file0" [pid 5066] fstat(3, [pid 5136] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5135] <... mmap resumed>) = 0x20000000 [pid 5134] <... futex resumed>) = 0 [pid 5133] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] getdents64(3, [pid 5068] <... rmdir resumed>) = 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5136] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5135] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5133] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5070] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5068] getdents64(3, [pid 5066] getdents64(3, [pid 5136] <... mmap resumed>) = 0x20000000 [pid 5135] <... futex resumed>) = 0 [pid 5133] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] close(3 [pid 5068] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5136] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5135] sendfile(4, 5, NULL, 2147483713 [pid 5133] <... futex resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 5068] close(3 [pid 5066] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5147] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5136] <... futex resumed>) = 1 [pid 5134] <... futex resumed>) = 0 [pid 5133] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] rmdir("./1" [pid 5068] <... close resumed>) = 0 [pid 5066] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5136] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5134] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... rmdir resumed>) = 0 [pid 5068] rmdir("./1" [pid 5136] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5134] <... futex resumed>) = 0 [pid 5070] mkdir("./2", 0777 [pid 5068] <... rmdir resumed>) = 0 [pid 5136] sendfile(4, 5, NULL, 2147483713 [pid 5134] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... mkdir resumed>) = 0 [pid 5068] mkdir("./2", 0777 [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5068] <... mkdir resumed>) = 0 [pid 5070] <... openat resumed>) = 3 [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5070] ioctl(3, LOOP_CLR_FD [pid 5068] <... openat resumed>) = 3 [pid 5070] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5070] close(3 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5070] <... close resumed>) = 0 [pid 5068] close(3 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... close resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5070] <... clone resumed>, child_tidptr=0x555556f755d0) = 5148 [pid 5068] <... clone resumed>, child_tidptr=0x555556f755d0) = 5149 ./strace-static-x86_64: Process 5149 attached [pid 5149] set_robust_list(0x555556f755e0, 24) = 0 [pid 5149] chdir("./2") = 0 ./strace-static-x86_64: Process 5148 attached [pid 5149] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5148] set_robust_list(0x555556f755e0, 24 [pid 5149] setpgid(0, 0 [pid 5148] <... set_robust_list resumed>) = 0 [pid 5149] <... setpgid resumed>) = 0 [pid 5148] chdir("./2" [pid 5149] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5148] <... chdir resumed>) = 0 [pid 5149] <... openat resumed>) = 3 [pid 5148] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5149] write(3, "1000", 4 [pid 5148] <... prctl resumed>) = 0 [pid 5149] <... write resumed>) = 4 [pid 5148] setpgid(0, 0 [pid 5149] close(3 [pid 5148] <... setpgid resumed>) = 0 [pid 5149] <... close resumed>) = 0 [pid 5148] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5149] symlink("/dev/binderfs", "./binderfs" [pid 5148] <... openat resumed>) = 3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5149] <... symlink resumed>) = 0 [pid 5148] write(3, "1000", 4 [pid 5147] <... write resumed>) = 1048576 [pid 5149] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5148] <... write resumed>) = 4 [pid 5147] munmap(0x7f450cebe000, 1048576 [pid 5066] lstat("./1/binderfs", [pid 5149] <... futex resumed>) = 0 [pid 5148] close(3 [pid 5149] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5148] <... close resumed>) = 0 [pid 5147] <... munmap resumed>) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5149] <... mmap resumed>) = 0x7f45152be000 [pid 5148] symlink("/dev/binderfs", "./binderfs" [pid 5149] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE [pid 5148] <... symlink resumed>) = 0 [pid 5147] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5133] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5066] unlink("./1/binderfs" [pid 5149] <... mprotect resumed>) = 0 [pid 5148] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5147] <... openat resumed>) = 4 [pid 5133] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [ 55.065774][ T5135] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 55.092767][ T5136] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5149] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5148] <... futex resumed>) = 0 [pid 5147] ioctl(4, LOOP_SET_FD, 3 [pid 5133] <... futex resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 5148] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5134] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5149] <... clone resumed>, parent_tid=[5150], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5150 [pid 5148] <... mmap resumed>) = 0x7f45152be000 [pid 5134] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5149] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5148] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE [pid 5134] <... futex resumed>) = 0 [pid 5149] <... futex resumed>) = 0 [pid 5148] <... mprotect resumed>) = 0 [pid 5134] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5149] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5148] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5134] <... mmap resumed>) = 0x7f450cf9d000 [pid 5134] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 5150 attached [pid 5148] <... clone resumed>, parent_tid=[5151], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5151 [pid 5134] <... mprotect resumed>) = 0 [pid 5150] set_robust_list(0x7f45152de9e0, 24 [pid 5148] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5150] <... set_robust_list resumed>) = 0 [pid 5148] <... futex resumed>) = 0 [pid 5150] memfd_create("syzkaller", 0 [pid 5148] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5134] <... clone resumed>, parent_tid=[5152], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5152 [pid 5150] <... memfd_create resumed>) = 3 [pid 5134] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5066] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5150] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5134] <... futex resumed>) = 0 [pid 5133] <... mmap resumed>) = 0x7f450cf9d000 [pid 5150] <... mmap resumed>) = 0x7f450cebe000 [pid 5134] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5133] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 5152 attached [pid 5150] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5152] set_robust_list(0x7f450cfbd9e0, 24 [pid 5133] <... mprotect resumed>) = 0 [pid 5152] <... set_robust_list resumed>) = 0 [ 55.119803][ T5147] loop4: detected capacity change from 0 to 2048 [ 55.135502][ T61] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 55.137413][ T5136] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5152] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5133] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5151 attached [pid 5147] <... ioctl resumed>) = 0 [pid 5133] <... clone resumed>, parent_tid=[5153], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5153 [pid 5133] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5147] close(3 [pid 5151] set_robust_list(0x7f45152de9e0, 24 [pid 5133] <... futex resumed>) = 0 [pid 5151] <... set_robust_list resumed>) = 0 [pid 5147] <... close resumed>) = 0 [pid 5133] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5147] mkdir("./file0", 0777 [pid 5151] memfd_create("syzkaller", 0) = 3 [pid 5150] <... write resumed>) = 1048576 [pid 5147] <... mkdir resumed>) = 0 [pid 5134] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 5153 attached [pid 5151] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5150] munmap(0x7f450cebe000, 1048576 [pid 5147] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5153] set_robust_list(0x7f450cfbd9e0, 24 [pid 5151] <... mmap resumed>) = 0x7f450cebe000 [pid 5150] <... munmap resumed>) = 0 [pid 5153] <... set_robust_list resumed>) = 0 [pid 5150] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5153] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5150] <... openat resumed>) = 4 [pid 5150] ioctl(4, LOOP_SET_FD, 3 [pid 5151] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5066] <... umount2 resumed>) = 0 [pid 5066] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./1/file0") = 0 [pid 5066] getdents64(3, 0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./1") = 0 [pid 5066] mkdir("./2", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5133] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5150] <... ioctl resumed>) = 0 [pid 5066] close(3 [pid 5150] close(3 [pid 5066] <... close resumed>) = 0 [pid 5150] <... close resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5150] mkdir("./file0", 0777) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x555556f755d0) = 5156 [pid 5150] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue"./strace-static-x86_64: Process 5156 attached [ 55.149146][ T5135] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 55.183338][ T5135] EXT4-fs (loop2): This should not happen!! Data will be lost [ 55.183338][ T5135] [ 55.193719][ T5135] EXT4-fs (loop2): Total free blocks count 0 [ 55.196548][ T5150] loop3: detected capacity change from 0 to 2048 [ 55.206437][ T5135] EXT4-fs (loop2): Free/Dirty block details [pid 5156] set_robust_list(0x555556f755e0, 24) = 0 [pid 5156] chdir("./2") = 0 [pid 5156] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5156] setpgid(0, 0) = 0 [pid 5156] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5156] write(3, "1000", 4) = 4 [pid 5156] close(3) = 0 [pid 5156] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5156] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5151] <... write resumed>) = 1048576 [pid 5156] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f45152be000 [pid 5151] munmap(0x7f450cebe000, 1048576 [pid 5156] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5156] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5159], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5159 [pid 5156] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5156] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5151] <... munmap resumed>) = 0 [ 55.241365][ T5136] EXT4-fs (loop0): This should not happen!! Data will be lost [ 55.241365][ T5136] [ 55.242548][ T5147] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 55.268360][ T5150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 55.271187][ T5136] EXT4-fs (loop0): Total free blocks count 0 [pid 5151] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5151] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5159 attached [pid 5159] set_robust_list(0x7f45152de9e0, 24) = 0 [pid 5159] memfd_create("syzkaller", 0) = 3 [pid 5159] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f450cebe000 [pid 5152] <... ioctl resumed>) = 0 [pid 5151] <... ioctl resumed>) = 0 [pid 5150] <... mount resumed>) = 0 [pid 5147] <... mount resumed>) = 0 [pid 5136] <... sendfile resumed>) = 117 [ 55.286626][ T5136] EXT4-fs (loop0): Free/Dirty block details [ 55.292782][ T5136] EXT4-fs (loop0): free_blocks=2415919104 [ 55.298903][ T5136] EXT4-fs (loop0): dirty_blocks=16 [ 55.303045][ T5151] loop5: detected capacity change from 0 to 2048 [ 55.304201][ T5136] EXT4-fs (loop0): Block reservation details [ 55.311539][ T5135] EXT4-fs (loop2): free_blocks=2415919104 [ 55.317286][ T5136] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 55.330772][ T5135] EXT4-fs (loop2): dirty_blocks=16 [ 55.336121][ T5135] EXT4-fs (loop2): Block reservation details [pid 5159] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5152] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5151] close(3 [pid 5150] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5147] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5136] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] exit_group(0 [pid 5152] <... futex resumed>) = ? [pid 5151] <... close resumed>) = 0 [pid 5150] <... openat resumed>) = 3 [pid 5134] <... exit_group resumed>) = ? [pid 5147] <... openat resumed>) = 3 [pid 5136] <... futex resumed>) = ? [pid 5153] <... ioctl resumed>) = 0 [pid 5152] +++ exited with 0 +++ [pid 5151] mkdir("./file0", 0777 [pid 5150] chdir("./file0" [pid 5147] chdir("./file0" [pid 5135] <... sendfile resumed>) = 117 [pid 5153] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5151] <... mkdir resumed>) = 0 [pid 5150] <... chdir resumed>) = 0 [pid 5147] <... chdir resumed>) = 0 [pid 5136] +++ exited with 0 +++ [pid 5135] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] +++ exited with 0 +++ [pid 5153] <... futex resumed>) = 0 [pid 5151] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5159] <... write resumed>) = 1048576 [pid 5150] ioctl(4, LOOP_CLR_FD [pid 5147] ioctl(4, LOOP_CLR_FD [pid 5135] <... futex resumed>) = 0 [pid 5153] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5159] munmap(0x7f450cebe000, 1048576 [pid 5150] <... ioctl resumed>) = 0 [pid 5147] <... ioctl resumed>) = 0 [pid 5135] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5134, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 5159] <... munmap resumed>) = 0 [pid 5150] close(4 [pid 5147] close(4 [pid 5133] exit_group(0 [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5159] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5150] <... close resumed>) = 0 [pid 5147] <... close resumed>) = 0 [pid 5159] <... openat resumed>) = 4 [pid 5150] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5147] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5159] ioctl(4, LOOP_SET_FD, 3 [pid 5150] <... futex resumed>) = 1 [pid 5149] <... futex resumed>) = 0 [pid 5147] <... futex resumed>) = 1 [pid 5153] <... futex resumed>) = ? [pid 5150] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5149] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5147] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5140] <... futex resumed>) = 0 [pid 5135] <... futex resumed>) = ? [pid 5133] <... exit_group resumed>) = ? [pid 5065] <... restart_syscall resumed>) = 0 [pid 5150] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5149] <... futex resumed>) = 0 [pid 5150] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5149] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5159] <... ioctl resumed>) = 0 [pid 5159] close(3) = 0 [pid 5159] mkdir("./file0", 0777 [pid 5140] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5135] +++ exited with 0 +++ [pid 5159] <... mkdir resumed>) = 0 [pid 5153] +++ exited with 0 +++ [pid 5140] <... futex resumed>) = 1 [pid 5147] <... futex resumed>) = 0 [pid 5159] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5133] +++ exited with 0 +++ [pid 5147] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5140] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5133, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 5150] <... open resumed>) = 4 [pid 5067] <... restart_syscall resumed>) = 0 [pid 5065] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... openat resumed>) = 3 [pid 5067] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5150] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5147] <... open resumed>) = 4 [pid 5150] <... futex resumed>) = 1 [pid 5149] <... futex resumed>) = 0 [pid 5150] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5149] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5147] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... openat resumed>) = 3 [pid 5065] fstat(3, [pid 5150] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5149] <... futex resumed>) = 0 [pid 5067] fstat(3, [pid 5150] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5149] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5147] <... futex resumed>) = 1 [pid 5140] <... futex resumed>) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5140] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, [pid 5140] <... futex resumed>) = 0 [pid 5067] getdents64(3, [pid 5140] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5150] <... write resumed>) = 9 [pid 5067] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5150] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5147] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5067] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5150] <... futex resumed>) = 1 [pid 5149] <... futex resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5150] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5149] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5147] <... write resumed>) = 9 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./2/binderfs", [pid 5150] <... openat resumed>) = 5 [pid 5149] <... futex resumed>) = 0 [pid 5150] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5149] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5147] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] lstat("./2/binderfs", [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5150] <... futex resumed>) = 0 [pid 5149] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5147] <... futex resumed>) = 1 [pid 5140] <... futex resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./2/binderfs" [pid 5149] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 55.342867][ T5135] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 55.365098][ T5159] loop1: detected capacity change from 0 to 2048 [pid 5149] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5150] open("./bus", O_RDWR) = 6 [pid 5150] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5149] <... futex resumed>) = 0 [pid 5149] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5149] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5150] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 5149] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5149] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5150] sendfile(4, 5, NULL, 2147483713 [pid 5147] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5140] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5147] <... futex resumed>) = 0 [pid 5140] <... futex resumed>) = 1 [pid 5147] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5140] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5147] <... openat resumed>) = 5 [pid 5067] unlink("./2/binderfs" [pid 5065] <... unlink resumed>) = 0 [pid 5147] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... unlink resumed>) = 0 [pid 5065] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5147] <... futex resumed>) = 1 [pid 5140] <... futex resumed>) = 0 [pid 5067] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5147] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5140] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5147] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5140] <... futex resumed>) = 0 [pid 5147] open("./bus", O_RDWR [pid 5140] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5147] <... open resumed>) = 6 [pid 5147] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5140] <... futex resumed>) = 0 [pid 5147] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5140] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5147] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5140] <... futex resumed>) = 0 [pid 5147] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5140] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5147] <... mmap resumed>) = 0x20000000 [pid 5147] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5140] <... futex resumed>) = 0 [pid 5147] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5140] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5147] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5140] <... futex resumed>) = 0 [pid 5147] sendfile(4, 5, NULL, 2147483713 [pid 5140] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5151] <... mount resumed>) = 0 [pid 5151] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5151] chdir("./file0") = 0 [pid 5151] ioctl(4, LOOP_CLR_FD) = 0 [pid 5151] close(4) = 0 [pid 5151] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5148] <... futex resumed>) = 0 [pid 5148] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5148] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5151] <... futex resumed>) = 1 [pid 5151] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000) = 4 [pid 5151] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5148] <... futex resumed>) = 0 [pid 5148] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5148] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5151] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9) = 9 [pid 5151] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5148] <... futex resumed>) = 0 [ 55.399699][ T5151] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 55.416686][ T61] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 55.430759][ T11] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5151] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5148] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5151] <... openat resumed>) = 5 [pid 5148] <... futex resumed>) = 0 [pid 5151] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5148] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5151] <... futex resumed>) = 0 [pid 5148] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5151] open("./bus", O_RDWR [pid 5148] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5151] <... open resumed>) = 6 [pid 5148] <... futex resumed>) = 0 [pid 5151] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5148] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5151] <... futex resumed>) = 0 [pid 5148] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5151] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5148] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5151] <... mmap resumed>) = 0x20000000 [pid 5148] <... futex resumed>) = 0 [pid 5151] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5148] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5151] <... futex resumed>) = 0 [pid 5148] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5151] sendfile(4, 5, NULL, 2147483713 [pid 5148] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5149] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5148] <... futex resumed>) = 0 [pid 5149] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5148] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5149] <... futex resumed>) = 0 [pid 5149] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f450cf9d000 [pid 5149] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5149] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5164], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5164 [pid 5149] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5149] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5140] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5140] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5140] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f450cf9d000 [pid 5140] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5140] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5165], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5165 [pid 5140] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 55.451664][ T5159] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 55.470671][ T5151] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 55.482819][ T5150] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5140] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5148] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5148] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5148] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f450cf9d000 [pid 5148] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5148] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5167], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5167 [pid 5148] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5148] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5149] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5140] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 5167 attached [pid 5167] set_robust_list(0x7f450cfbd9e0, 24./strace-static-x86_64: Process 5165 attached [pid 5165] set_robust_list(0x7f450cfbd9e0, 24) = 0 [pid 5165] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5167] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 5164 attached [pid 5164] set_robust_list(0x7f450cfbd9e0, 24) = 0 [pid 5164] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [ 55.492466][ T5151] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 55.512743][ T5151] EXT4-fs (loop5): This should not happen!! Data will be lost [ 55.512743][ T5151] [ 55.518587][ T5147] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5167] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5159] <... mount resumed>) = 0 [pid 5067] <... umount2 resumed>) = 0 [pid 5067] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5067] rmdir("./2/file0" [pid 5148] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5159] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] <... rmdir resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5067] getdents64(3, [pid 5159] <... openat resumed>) = 3 [pid 5067] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5065] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5159] chdir("./file0" [pid 5067] close(3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 55.555534][ T5151] EXT4-fs (loop5): Total free blocks count 0 [ 55.572174][ T5150] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 55.588755][ T5147] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5067] <... close resumed>) = 0 [pid 5065] lstat("./2/file0", [pid 5159] <... chdir resumed>) = 0 [pid 5067] rmdir("./2" [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5065] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] mkdir("./3", 0777 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] <... openat resumed>) = 4 [pid 5067] <... openat resumed>) = 3 [pid 5065] fstat(4, [pid 5159] ioctl(4, LOOP_CLR_FD [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5159] <... ioctl resumed>) = 0 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] getdents64(4, [pid 5067] close(3 [pid 5065] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5067] <... close resumed>) = 0 [pid 5065] getdents64(4, [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5159] close(4 [pid 5065] close(4 [pid 5159] <... close resumed>) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x555556f755d0) = 5168 [pid 5065] <... close resumed>) = 0 [pid 5159] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] rmdir("./2/file0" [pid 5159] <... futex resumed>) = 1 [pid 5156] <... futex resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5159] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5156] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] getdents64(3, ./strace-static-x86_64: Process 5168 attached [pid 5159] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5156] <... futex resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5168] set_robust_list(0x555556f755e0, 24 [pid 5159] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5156] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] close(3 [pid 5168] <... set_robust_list resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5168] chdir("./3" [pid 5159] <... open resumed>) = 4 [pid 5065] rmdir("./2" [pid 5168] <... chdir resumed>) = 0 [pid 5159] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... rmdir resumed>) = 0 [pid 5168] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5159] <... futex resumed>) = 1 [pid 5156] <... futex resumed>) = 0 [pid 5065] mkdir("./3", 0777 [pid 5168] <... prctl resumed>) = 0 [pid 5159] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5156] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... mkdir resumed>) = 0 [pid 5168] setpgid(0, 0 [pid 5159] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5156] <... futex resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5168] <... setpgid resumed>) = 0 [pid 5159] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5156] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] <... openat resumed>) = 3 [pid 5168] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5168] <... openat resumed>) = 3 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5168] write(3, "1000", 4 [pid 5065] close(3 [pid 5168] <... write resumed>) = 4 [pid 5065] <... close resumed>) = 0 [pid 5168] close(3 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5168] <... close resumed>) = 0 [pid 5168] symlink("/dev/binderfs", "./binderfs" [pid 5065] <... clone resumed>, child_tidptr=0x555556f755d0) = 5169 [pid 5168] <... symlink resumed>) = 0 [pid 5168] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5159] <... write resumed>) = 9 [pid 5168] <... futex resumed>) = 0 [pid 5159] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5168] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5159] <... futex resumed>) = 1 [pid 5156] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5169 attached [pid 5168] <... mmap resumed>) = 0x7f45152be000 [pid 5159] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5156] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5169] set_robust_list(0x555556f755e0, 24 [pid 5168] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE [pid 5169] <... set_robust_list resumed>) = 0 [pid 5168] <... mprotect resumed>) = 0 [pid 5159] <... openat resumed>) = 5 [pid 5156] <... futex resumed>) = 0 [ 55.600496][ T5151] EXT4-fs (loop5): Free/Dirty block details [ 55.620349][ T5150] EXT4-fs (loop3): This should not happen!! Data will be lost [ 55.620349][ T5150] [ 55.635895][ T5147] EXT4-fs (loop4): This should not happen!! Data will be lost [ 55.635895][ T5147] [ 55.647254][ T5151] EXT4-fs (loop5): free_blocks=2415919104 [pid 5169] chdir("./3" [pid 5168] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5159] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5156] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5169] <... chdir resumed>) = 0 [pid 5169] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5168] <... clone resumed>, parent_tid=[5170], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5170 [pid 5169] <... prctl resumed>) = 0 [pid 5168] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5169] setpgid(0, 0 [pid 5168] <... futex resumed>) = 0 [pid 5159] <... futex resumed>) = 0 [pid 5156] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5169] <... setpgid resumed>) = 0 [pid 5168] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5170 attached [pid 5169] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5170] set_robust_list(0x7f45152de9e0, 24 [pid 5169] <... openat resumed>) = 3 [pid 5170] <... set_robust_list resumed>) = 0 [pid 5169] write(3, "1000", 4 [pid 5170] memfd_create("syzkaller", 0 [pid 5169] <... write resumed>) = 4 [pid 5170] <... memfd_create resumed>) = 3 [pid 5169] close(3 [pid 5170] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5169] <... close resumed>) = 0 [pid 5170] <... mmap resumed>) = 0x7f450cebe000 [pid 5169] symlink("/dev/binderfs", "./binderfs" [pid 5170] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5169] <... symlink resumed>) = 0 [pid 5167] <... ioctl resumed>) = 0 [pid 5159] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5156] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5151] <... sendfile resumed>) = 117 [pid 5169] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5159] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5169] <... futex resumed>) = 0 [pid 5169] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f45152be000 [pid 5169] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5169] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5171], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5171 [ 55.660787][ T5150] EXT4-fs (loop3): Total free blocks count 0 [ 55.660992][ T5151] EXT4-fs (loop5): dirty_blocks=16 [ 55.670344][ T5147] EXT4-fs (loop4): Total free blocks count 0 [ 55.679223][ T5151] EXT4-fs (loop5): Block reservation details [ 55.687020][ T5151] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 55.692136][ T5150] EXT4-fs (loop3): Free/Dirty block details [pid 5167] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5159] open("./bus", O_RDWR [pid 5156] <... futex resumed>) = 0 [pid 5170] <... write resumed>) = 1048576 [pid 5169] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5151] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5169] <... futex resumed>) = 0 [pid 5148] exit_group(0./strace-static-x86_64: Process 5171 attached [pid 5169] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5167] <... futex resumed>) = ? [pid 5148] <... exit_group resumed>) = ? [pid 5171] set_robust_list(0x7f45152de9e0, 24 [pid 5159] <... open resumed>) = 6 [pid 5156] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5151] <... futex resumed>) = ? [pid 5171] <... set_robust_list resumed>) = 0 [pid 5167] +++ exited with 0 +++ [pid 5171] memfd_create("syzkaller", 0) = 3 [pid 5151] +++ exited with 0 +++ [pid 5148] +++ exited with 0 +++ [pid 5159] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5171] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f450cebe000 [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5148, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5171] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5170] munmap(0x7f450cebe000, 1048576 [pid 5159] <... futex resumed>) = 1 [pid 5156] <... futex resumed>) = 0 [pid 5070] restart_syscall(<... resuming interrupted clone ...> [pid 5170] <... munmap resumed>) = 0 [pid 5159] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5156] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... restart_syscall resumed>) = 0 [pid 5170] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5159] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5156] <... futex resumed>) = 0 [pid 5170] <... openat resumed>) = 4 [ 55.708300][ T5147] EXT4-fs (loop4): Free/Dirty block details [ 55.712992][ T5150] EXT4-fs (loop3): free_blocks=2415919104 [ 55.726654][ T5150] EXT4-fs (loop3): dirty_blocks=16 [ 55.733022][ T5150] EXT4-fs (loop3): Block reservation details [ 55.733733][ T5147] EXT4-fs (loop4): free_blocks=2415919104 [ 55.740505][ T5150] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 55.748545][ T5170] loop2: detected capacity change from 0 to 2048 [pid 5170] ioctl(4, LOOP_SET_FD, 3 [pid 5070] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5164] <... ioctl resumed>) = 0 [pid 5159] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5156] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5150] <... sendfile resumed>) = 117 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5171] <... write resumed>) = 1048576 [pid 5164] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5159] <... mmap resumed>) = 0x20000000 [pid 5150] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5164] <... futex resumed>) = 0 [pid 5159] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5150] <... futex resumed>) = 0 [pid 5070] <... openat resumed>) = 3 [pid 5164] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5159] <... futex resumed>) = 1 [pid 5156] <... futex resumed>) = 0 [pid 5150] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5070] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] getdents64(3, 0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5070] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5070] unlink("./2/binderfs") = 0 [pid 5070] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5171] munmap(0x7f450cebe000, 1048576) = 0 [pid 5171] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5170] <... ioctl resumed>) = 0 [pid 5159] sendfile(4, 5, NULL, 2147483713 [pid 5156] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5149] exit_group(0 [pid 5147] <... sendfile resumed>) = 117 [pid 5171] <... openat resumed>) = 4 [pid 5170] close(3 [pid 5156] <... futex resumed>) = 0 [pid 5150] <... futex resumed>) = ? [pid 5149] <... exit_group resumed>) = ? [pid 5147] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5171] ioctl(4, LOOP_SET_FD, 3 [pid 5170] <... close resumed>) = 0 [pid 5156] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5150] +++ exited with 0 +++ [pid 5147] <... futex resumed>) = 0 [pid 5171] <... ioctl resumed>) = 0 [pid 5165] <... ioctl resumed>) = 0 [pid 5164] <... futex resumed>) = ? [ 55.752571][ T5147] EXT4-fs (loop4): dirty_blocks=16 [ 55.766014][ T5147] EXT4-fs (loop4): Block reservation details [ 55.772796][ T5147] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 55.772931][ T11] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 55.789110][ T5171] loop0: detected capacity change from 0 to 2048 [pid 5171] close(3 [pid 5170] mkdir("./file0", 0777 [pid 5165] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5164] +++ exited with 0 +++ [pid 5149] +++ exited with 0 +++ [pid 5147] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5140] exit_group(0 [pid 5165] <... futex resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5149, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5165] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5068] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5068] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, 0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] unlink("./2/binderfs") = 0 [pid 5068] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5171] <... close resumed>) = 0 [pid 5170] <... mkdir resumed>) = 0 [pid 5140] <... exit_group resumed>) = ? [pid 5165] <... futex resumed>) = ? [pid 5165] +++ exited with 0 +++ [pid 5070] <... umount2 resumed>) = 0 [pid 5070] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5070] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] getdents64(4, 0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5070] getdents64(4, [pid 5171] mkdir("./file0", 0777 [pid 5156] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5147] <... futex resumed>) = ? [pid 5171] <... mkdir resumed>) = 0 [pid 5170] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5156] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5147] +++ exited with 0 +++ [pid 5140] +++ exited with 0 +++ [pid 5070] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5171] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5070] close(4 [pid 5156] <... futex resumed>) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5140, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5156] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5070] <... close resumed>) = 0 [pid 5156] <... mmap resumed>) = 0x7f450cf9d000 [pid 5070] rmdir("./2/file0") = 0 [pid 5069] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5156] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5070] getdents64(3, [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5156] <... mprotect resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5069] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5156] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [ 55.806156][ T5159] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 55.821850][ T5159] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 55.836533][ T11] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5070] close(3 [pid 5069] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5174 attached [pid 5070] <... close resumed>) = 0 [pid 5069] fstat(3, [pid 5070] rmdir("./2" [pid 5069] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] <... rmdir resumed>) = 0 [pid 5069] getdents64(3, [pid 5070] mkdir("./3", 0777 [pid 5069] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5070] <... mkdir resumed>) = 0 [pid 5069] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5174] set_robust_list(0x7f450cfbd9e0, 24 [pid 5156] <... clone resumed>, parent_tid=[5174], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5174 [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5174] <... set_robust_list resumed>) = 0 [pid 5156] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... openat resumed>) = 3 [pid 5069] lstat("./2/binderfs", [pid 5070] ioctl(3, LOOP_CLR_FD [pid 5069] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5070] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5069] unlink("./2/binderfs" [pid 5070] close(3 [pid 5069] <... unlink resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 5069] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f755d0) = 5177 [pid 5174] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5156] <... futex resumed>) = 0 [ 55.875769][ T5159] EXT4-fs (loop1): This should not happen!! Data will be lost [ 55.875769][ T5159] [ 55.885744][ T5159] EXT4-fs (loop1): Total free blocks count 0 [ 55.895749][ T5171] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [pid 5156] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... umount2 resumed>) = 0 [pid 5068] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5177 attached [pid 5177] set_robust_list(0x555556f755e0, 24 [pid 5068] lstat("./2/file0", [pid 5177] <... set_robust_list resumed>) = 0 [pid 5177] chdir("./3" [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5177] <... chdir resumed>) = 0 [pid 5177] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5177] setpgid(0, 0 [pid 5068] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5177] <... setpgid resumed>) = 0 [pid 5068] <... openat resumed>) = 4 [pid 5177] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, 0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, 0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5177] <... openat resumed>) = 3 [pid 5068] close(4) = 0 [pid 5068] rmdir("./2/file0" [pid 5177] write(3, "1000", 4) = 4 [pid 5068] <... rmdir resumed>) = 0 [pid 5177] close(3 [pid 5170] <... mount resumed>) = 0 [ 55.917608][ T41] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 55.931987][ T5170] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 55.949285][ T5159] EXT4-fs (loop1): Free/Dirty block details [ 55.955444][ T5159] EXT4-fs (loop1): free_blocks=2415919104 [pid 5068] getdents64(3, [pid 5177] <... close resumed>) = 0 [pid 5171] <... mount resumed>) = 0 [pid 5170] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5156] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] <... umount2 resumed>) = 0 [pid 5068] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5177] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5068] close(3 [pid 5177] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5177] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f45152be000 [pid 5177] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5170] <... openat resumed>) = 3 [pid 5069] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5177] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5171] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5170] chdir("./file0" [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... close resumed>) = 0 [pid 5171] <... openat resumed>) = 3 [pid 5170] <... chdir resumed>) = 0 [pid 5069] lstat("./2/file0", [pid 5177] <... clone resumed>, parent_tid=[5178], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5178 [pid 5171] chdir("./file0" [pid 5170] ioctl(4, LOOP_CLR_FD [pid 5069] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5177] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5171] <... chdir resumed>) = 0 [pid 5170] <... ioctl resumed>) = 0 [pid 5069] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5177] <... futex resumed>) = 0 [pid 5171] ioctl(4, LOOP_CLR_FD [pid 5170] close(4 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] rmdir("./2"./strace-static-x86_64: Process 5178 attached [pid 5177] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5174] <... ioctl resumed>) = 0 [pid 5171] <... ioctl resumed>) = 0 [pid 5170] <... close resumed>) = 0 [pid 5159] <... sendfile resumed>) = 117 [pid 5068] <... rmdir resumed>) = 0 [pid 5178] set_robust_list(0x7f45152de9e0, 24 [pid 5174] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5171] close(4 [pid 5170] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5159] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5156] exit_group(0 [pid 5069] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] mkdir("./3", 0777 [pid 5178] <... set_robust_list resumed>) = 0 [pid 5174] <... futex resumed>) = ? [pid 5171] <... close resumed>) = 0 [pid 5170] <... futex resumed>) = 1 [pid 5168] <... futex resumed>) = 0 [pid 5159] <... futex resumed>) = ? [pid 5156] <... exit_group resumed>) = ? [pid 5069] <... openat resumed>) = 4 [pid 5068] <... mkdir resumed>) = 0 [pid 5178] memfd_create("syzkaller", 0 [pid 5159] +++ exited with 0 +++ [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5178] <... memfd_create resumed>) = 3 [pid 5174] +++ exited with 0 +++ [pid 5171] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5170] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5168] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5156] +++ exited with 0 +++ [pid 5069] fstat(4, [pid 5068] <... openat resumed>) = 3 [pid 5178] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5171] <... futex resumed>) = 1 [pid 5170] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5169] <... futex resumed>) = 0 [pid 5168] <... futex resumed>) = 0 [pid 5069] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5156, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5178] <... mmap resumed>) = 0x7f450cebe000 [pid 5171] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5170] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5169] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5168] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] getdents64(4, [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 5178] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5171] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5170] <... open resumed>) = 4 [pid 5169] <... futex resumed>) = 0 [pid 5069] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [ 55.997120][ T5159] EXT4-fs (loop1): dirty_blocks=16 [ 56.003733][ T5159] EXT4-fs (loop1): Block reservation details [ 56.011514][ T5159] EXT4-fs (loop1): i_reserved_data_blocks=1 [pid 5068] close(3 [pid 5066] <... restart_syscall resumed>) = 0 [pid 5178] <... write resumed>) = 1048576 [pid 5171] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5170] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5169] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] getdents64(4, [pid 5068] <... close resumed>) = 0 [pid 5178] munmap(0x7f450cebe000, 1048576 [pid 5171] <... open resumed>) = 4 [pid 5170] <... futex resumed>) = 1 [pid 5168] <... futex resumed>) = 0 [pid 5069] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5178] <... munmap resumed>) = 0 [pid 5171] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5170] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5168] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] close(4 [pid 5066] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5178] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5171] <... futex resumed>) = 1 [pid 5170] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5169] <... futex resumed>) = 0 [pid 5168] <... futex resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x555556f755d0) = 5179 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5178] <... openat resumed>) = 4 [pid 5171] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5170] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5169] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5168] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] rmdir("./2/file0" [pid 5066] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5178] ioctl(4, LOOP_SET_FD, 3 [pid 5171] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5170] <... write resumed>) = 9 [pid 5169] <... futex resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5066] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5179 attached [pid 5171] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5170] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5169] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] getdents64(3, [pid 5066] fstat(3, [pid 5179] set_robust_list(0x555556f755e0, 24 [pid 5171] <... write resumed>) = 9 [pid 5170] <... futex resumed>) = 1 [pid 5168] <... futex resumed>) = 0 [pid 5069] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5179] <... set_robust_list resumed>) = 0 [pid 5171] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5170] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5168] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] close(3 [pid 5066] getdents64(3, [pid 5179] chdir("./3" [pid 5178] <... ioctl resumed>) = 0 [pid 5171] <... futex resumed>) = 1 [pid 5170] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5169] <... futex resumed>) = 0 [pid 5168] <... futex resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 5066] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5179] <... chdir resumed>) = 0 [pid 5178] close(3 [pid 5171] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5170] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5169] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5168] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] rmdir("./2" [pid 5066] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5179] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5178] <... close resumed>) = 0 [pid 5171] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5170] <... openat resumed>) = 5 [pid 5169] <... futex resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5179] <... prctl resumed>) = 0 [pid 5178] mkdir("./file0", 0777 [pid 5171] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5170] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5169] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] mkdir("./3", 0777 [pid 5066] lstat("./2/binderfs", [pid 5179] setpgid(0, 0 [pid 5178] <... mkdir resumed>) = 0 [pid 5171] <... openat resumed>) = 5 [pid 5170] <... futex resumed>) = 1 [pid 5168] <... futex resumed>) = 0 [pid 5069] <... mkdir resumed>) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5179] <... setpgid resumed>) = 0 [pid 5178] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5171] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5170] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5168] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5066] unlink("./2/binderfs" [pid 5179] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5171] <... futex resumed>) = 1 [pid 5170] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5169] <... futex resumed>) = 0 [pid 5168] <... futex resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5066] <... unlink resumed>) = 0 [pid 5179] <... openat resumed>) = 3 [pid 5171] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5170] open("./bus", O_RDWR [pid 5169] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5168] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] ioctl(3, LOOP_CLR_FD [pid 5066] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5179] write(3, "1000", 4 [pid 5171] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5170] <... open resumed>) = 6 [pid 5169] <... futex resumed>) = 0 [pid 5069] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5179] <... write resumed>) = 4 [pid 5179] close(3) = 0 [pid 5179] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5179] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5179] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f45152be000 [pid 5179] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5179] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5180], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5180 [pid 5179] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5179] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5171] open("./bus", O_RDWR) = 6 [pid 5171] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5170] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5169] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] close(3 [pid 5171] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5170] <... futex resumed>) = 1 [pid 5169] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5168] <... futex resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 5170] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5169] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5168] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5171] <... futex resumed>) = 0 [pid 5170] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5169] <... futex resumed>) = 1 [pid 5168] <... futex resumed>) = 0 [pid 5171] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5170] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5169] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5168] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5171] <... mmap resumed>) = 0x20000000 [pid 5170] <... mmap resumed>) = 0x20000000 [pid 5069] <... clone resumed>, child_tidptr=0x555556f755d0) = 5181 [pid 5171] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5170] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5181 attached [pid 5171] <... futex resumed>) = 1 [pid 5170] <... futex resumed>) = 1 [pid 5169] <... futex resumed>) = 0 [pid 5168] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5180 attached [pid 5181] set_robust_list(0x555556f755e0, 24 [pid 5171] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5170] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5169] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5168] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5181] <... set_robust_list resumed>) = 0 [pid 5180] set_robust_list(0x7f45152de9e0, 24 [pid 5171] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5170] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5169] <... futex resumed>) = 0 [pid 5168] <... futex resumed>) = 0 [pid 5181] chdir("./3" [pid 5180] <... set_robust_list resumed>) = 0 [pid 5171] sendfile(4, 5, NULL, 2147483713 [pid 5170] sendfile(4, 5, NULL, 2147483713 [pid 5169] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5168] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5181] <... chdir resumed>) = 0 [pid 5180] memfd_create("syzkaller", 0 [pid 5181] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5181] setpgid(0, 0) = 0 [pid 5181] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 56.082689][ T5178] loop5: detected capacity change from 0 to 2048 [ 56.115397][ T9] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 56.159211][ T5171] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 56.177893][ T5178] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 56.187034][ T5180] loop3: detected capacity change from 0 to 2048 [pid 5181] write(3, "1000", 4) = 4 [pid 5180] <... memfd_create resumed>) = 3 [pid 5181] close(3 [pid 5180] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5181] <... close resumed>) = 0 [pid 5180] <... mmap resumed>) = 0x7f450cebe000 [pid 5181] symlink("/dev/binderfs", "./binderfs" [pid 5180] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5181] <... symlink resumed>) = 0 [pid 5180] <... write resumed>) = 1048576 [pid 5181] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5181] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f45152be000 [pid 5181] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5181] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5184], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5184 [pid 5181] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5181] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5184 attached [pid 5184] set_robust_list(0x7f45152de9e0, 24) = 0 [pid 5184] memfd_create("syzkaller", 0) = 3 [pid 5180] munmap(0x7f450cebe000, 1048576 [pid 5184] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5180] <... munmap resumed>) = 0 [pid 5184] <... mmap resumed>) = 0x7f450cebe000 [pid 5184] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5180] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5180] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5180] close(3) = 0 [pid 5180] mkdir("./file0", 0777 [pid 5168] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5168] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5168] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f450cf9d000 [pid 5168] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5168] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5185], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5185 [pid 5168] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5168] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5180] <... mkdir resumed>) = 0 [pid 5180] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5169] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5169] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5169] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f450cf9d000 [pid 5169] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5169] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5186], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5186 [pid 5169] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5169] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5184] <... write resumed>) = 1048576 [pid 5184] munmap(0x7f450cebe000, 1048576./strace-static-x86_64: Process 5186 attached ./strace-static-x86_64: Process 5185 attached ) = 0 [pid 5184] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5184] ioctl(4, LOOP_SET_FD, 3 [pid 5186] set_robust_list(0x7f450cfbd9e0, 24 [pid 5185] set_robust_list(0x7f450cfbd9e0, 24 [pid 5184] <... ioctl resumed>) = 0 [pid 5066] <... umount2 resumed>) = 0 [pid 5186] <... set_robust_list resumed>) = 0 [pid 5185] <... set_robust_list resumed>) = 0 [pid 5066] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5186] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5066] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5185] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5066] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 56.191825][ T5170] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 56.226509][ T5184] loop4: detected capacity change from 0 to 2048 [ 56.233089][ T5171] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 56.245396][ T5171] EXT4-fs (loop0): This should not happen!! Data will be lost [ 56.245396][ T5171] [pid 5066] fstat(4, [pid 5184] close(3) = 0 [pid 5169] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5168] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5184] mkdir("./file0", 0777) = 0 [pid 5184] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5066] getdents64(4, [pid 5178] <... mount resumed>) = 0 [pid 5178] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5178] chdir("./file0") = 0 [pid 5178] ioctl(4, LOOP_CLR_FD) = 0 [pid 5178] close(4) = 0 [pid 5066] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5178] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] getdents64(4, [pid 5178] <... futex resumed>) = 1 [pid 5177] <... futex resumed>) = 0 [pid 5066] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5177] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] close(4 [pid 5178] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5177] <... futex resumed>) = 0 [pid 5066] <... close resumed>) = 0 [ 56.256815][ T5171] EXT4-fs (loop0): Total free blocks count 0 [ 56.257820][ T5180] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 56.271578][ T5171] EXT4-fs (loop0): Free/Dirty block details [ 56.281998][ T5171] EXT4-fs (loop0): free_blocks=2415919104 [ 56.288471][ T5171] EXT4-fs (loop0): dirty_blocks=16 [ 56.293639][ T5171] EXT4-fs (loop0): Block reservation details [ 56.300760][ T5171] EXT4-fs (loop0): i_reserved_data_blocks=1 [pid 5186] <... ioctl resumed>) = 0 [pid 5178] <... open resumed>) = 4 [pid 5177] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5171] <... sendfile resumed>) = 117 [pid 5066] rmdir("./2/file0" [pid 5186] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5177] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5066] <... rmdir resumed>) = 0 [pid 5186] <... futex resumed>) = 0 [pid 5178] <... futex resumed>) = 0 [pid 5177] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5171] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] getdents64(3, [pid 5186] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5178] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5177] <... futex resumed>) = 0 [pid 5171] <... futex resumed>) = 0 [pid 5169] exit_group(0 [pid 5066] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5178] <... write resumed>) = 9 [pid 5177] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] close(3 [pid 5178] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5177] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5066] <... close resumed>) = 0 [pid 5186] <... futex resumed>) = ? [pid 5178] <... futex resumed>) = 0 [pid 5177] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5169] <... exit_group resumed>) = ? [pid 5066] rmdir("./2" [pid 5186] +++ exited with 0 +++ [pid 5178] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5177] <... futex resumed>) = 0 [pid 5171] +++ exited with 0 +++ [ 56.307592][ T5170] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 56.320331][ T5170] EXT4-fs (loop2): This should not happen!! Data will be lost [ 56.320331][ T5170] [ 56.321888][ T5184] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 56.330640][ T5170] EXT4-fs (loop2): Total free blocks count 0 [ 56.348313][ T5170] EXT4-fs (loop2): Free/Dirty block details [ 56.354456][ T5170] EXT4-fs (loop2): free_blocks=2415919104 [pid 5066] <... rmdir resumed>) = 0 [pid 5178] <... openat resumed>) = 5 [pid 5177] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5169] +++ exited with 0 +++ [pid 5066] mkdir("./3", 0777 [pid 5180] <... mount resumed>) = 0 [pid 5178] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5177] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5066] <... mkdir resumed>) = 0 [pid 5180] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5178] <... futex resumed>) = 0 [pid 5177] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5169, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5180] <... openat resumed>) = 3 [pid 5178] open("./bus", O_RDWR [pid 5177] <... futex resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5180] chdir("./file0" [pid 5178] <... open resumed>) = 6 [pid 5177] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5065] <... restart_syscall resumed>) = 0 [pid 5180] <... chdir resumed>) = 0 [pid 5178] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5177] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5180] ioctl(4, LOOP_CLR_FD [pid 5178] <... futex resumed>) = 0 [pid 5177] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] close(3 [pid 5185] <... ioctl resumed>) = 0 [pid 5184] <... mount resumed>) = 0 [pid 5180] <... ioctl resumed>) = 0 [pid 5178] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5177] <... futex resumed>) = 0 [pid 5170] <... sendfile resumed>) = 117 [pid 5066] <... close resumed>) = 0 [pid 5065] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5185] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5184] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5170] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5185] <... futex resumed>) = 0 [pid 5184] <... openat resumed>) = 3 [pid 5180] close(4 [pid 5178] <... mmap resumed>) = 0x20000000 [pid 5177] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5170] <... futex resumed>) = 0 [pid 5168] exit_group(0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5184] chdir("./file0" [pid 5180] <... close resumed>) = 0 [pid 5178] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5177] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5168] <... exit_group resumed>) = ? [pid 5184] <... chdir resumed>) = 0 [pid 5185] +++ exited with 0 +++ [pid 5184] ioctl(4, LOOP_CLR_FD [pid 5170] +++ exited with 0 +++ [pid 5184] <... ioctl resumed>) = 0 [pid 5184] close(4) = 0 [pid 5184] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5168] +++ exited with 0 +++ [pid 5184] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5181] <... futex resumed>) = 0 [pid 5177] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5181] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5180] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] <... futex resumed>) = 0 [pid 5177] <... futex resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5168, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5066] <... clone resumed>, child_tidptr=0x555556f755d0) = 5191 [pid 5184] <... futex resumed>) = 0 [pid 5181] <... futex resumed>) = 1 [pid 5179] <... futex resumed>) = 0 [pid 5178] sendfile(4, 5, NULL, 2147483713 [pid 5177] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5180] <... futex resumed>) = 1 [pid 5065] <... openat resumed>) = 3 [pid 5184] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5181] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5179] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5065] fstat(3, [pid 5179] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] getdents64(3, [pid 5067] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5067] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5191 attached [pid 5067] fstat(3, [pid 5065] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5191] set_robust_list(0x555556f755e0, 24 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] getdents64(3, 0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5065] lstat("./3/binderfs", [pid 5191] <... set_robust_list resumed>) = 0 [pid 5180] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5067] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./3/binderfs", [pid 5065] unlink("./3/binderfs" [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5191] chdir("./3" [pid 5067] unlink("./3/binderfs" [pid 5065] <... unlink resumed>) = 0 [pid 5191] <... chdir resumed>) = 0 [pid 5184] <... open resumed>) = 4 [ 56.362177][ T5170] EXT4-fs (loop2): dirty_blocks=16 [ 56.367619][ T5170] EXT4-fs (loop2): Block reservation details [ 56.373711][ T5170] EXT4-fs (loop2): i_reserved_data_blocks=1 [pid 5067] <... unlink resumed>) = 0 [pid 5065] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5191] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5191] setpgid(0, 0 [pid 5067] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5191] <... setpgid resumed>) = 0 [pid 5191] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5191] write(3, "1000", 4) = 4 [pid 5191] close(3) = 0 [pid 5191] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5191] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5191] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f45152be000 [pid 5191] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5191] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5192], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5192 [pid 5191] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5191] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5180] <... open resumed>) = 4 [pid 5184] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5177] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5181] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5177] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5181] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5177] <... futex resumed>) = 0 [pid 5181] <... futex resumed>) = 0 [pid 5179] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5177] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5181] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5179] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5177] <... mmap resumed>) = 0x7f450cf9d000 [pid 5179] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5177] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5179] <... mmap resumed>) = 0x7f450cf9d000 [pid 5177] <... mprotect resumed>) = 0 [pid 5179] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5177] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5184] <... futex resumed>) = 1 [pid 5181] <... futex resumed>) = 0 [pid 5180] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5179] <... mprotect resumed>) = 0 [pid 5181] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=48000000} [pid 5179] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5177] <... clone resumed>, parent_tid=[5193], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5193 [pid 5177] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5179] <... clone resumed>, parent_tid=[5194], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5194 [pid 5177] <... futex resumed>) = 0 [pid 5179] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5177] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5179] <... futex resumed>) = 0 [ 56.407164][ T9] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 56.423280][ T41] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 ./strace-static-x86_64: Process 5194 attached ./strace-static-x86_64: Process 5193 attached ./strace-static-x86_64: Process 5192 attached [pid 5184] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5180] <... futex resumed>) = 0 [pid 5179] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] <... umount2 resumed>) = 0 [pid 5067] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5194] set_robust_list(0x7f450cfbd9e0, 24 [pid 5193] set_robust_list(0x7f450cfbd9e0, 24 [pid 5067] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5180] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5194] <... set_robust_list resumed>) = 0 [pid 5193] <... set_robust_list resumed>) = 0 [pid 5194] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5193] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] fstat(4, [pid 5194] <... write resumed>) = 9 [pid 5184] <... write resumed>) = 9 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5067] rmdir("./3/file0") = 0 [pid 5067] getdents64(3, 0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./3") = 0 [pid 5067] mkdir("./4", 0777) = 0 [ 56.447524][ T5178] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5184] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5194] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5192] set_robust_list(0x7f45152de9e0, 24 [pid 5184] <... futex resumed>) = 1 [pid 5181] <... futex resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5194] <... futex resumed>) = 1 [pid 5192] <... set_robust_list resumed>) = 0 [pid 5184] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5181] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5179] <... futex resumed>) = 0 [pid 5194] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5184] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5181] <... futex resumed>) = 0 [pid 5179] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5184] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5181] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5179] <... futex resumed>) = 1 [pid 5180] <... futex resumed>) = 0 [pid 5184] <... openat resumed>) = 5 [pid 5177] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5067] <... openat resumed>) = 3 [pid 5180] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5179] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5184] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5180] <... openat resumed>) = 5 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5184] <... futex resumed>) = 1 [pid 5181] <... futex resumed>) = 0 [pid 5067] close(3 [pid 5192] memfd_create("syzkaller", 0 [pid 5184] open("./bus", O_RDWR [pid 5181] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5180] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5192] <... memfd_create resumed>) = 3 [pid 5067] <... close resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... umount2 resumed>) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x555556f755d0) = 5195 [pid 5184] <... open resumed>) = 6 [pid 5181] <... futex resumed>) = 0 [pid 5180] <... futex resumed>) = 1 [pid 5192] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5181] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5179] <... futex resumed>) = 0 [pid 5180] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5184] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5192] <... mmap resumed>) = 0x7f450cebe000 [pid 5184] <... futex resumed>) = 0 [pid 5181] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5180] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5179] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5184] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5181] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5180] open("./bus", O_RDWR [pid 5179] <... futex resumed>) = 0 [pid 5184] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5181] <... futex resumed>) = 0 [pid 5180] <... open resumed>) = 6 [pid 5179] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5195 attached [pid 5195] set_robust_list(0x555556f755e0, 24) = 0 [pid 5195] chdir("./4") = 0 [pid 5195] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5181] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5195] setpgid(0, 0 [pid 5184] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5180] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] lstat("./3/file0", [pid 5195] <... setpgid resumed>) = 0 [pid 5195] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5184] <... mmap resumed>) = 0x20000000 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5195] write(3, "1000", 4 [pid 5180] <... futex resumed>) = 1 [pid 5179] <... futex resumed>) = 0 [pid 5184] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5195] <... write resumed>) = 4 [pid 5184] <... futex resumed>) = 1 [pid 5181] <... futex resumed>) = 0 [pid 5180] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5179] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] close(3 [pid 5184] sendfile(4, 5, NULL, 2147483713 [pid 5181] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5180] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5179] <... futex resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5195] <... close resumed>) = 0 [pid 5181] <... futex resumed>) = 0 [pid 5179] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5195] symlink("/dev/binderfs", "./binderfs" [pid 5181] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5180] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5065] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5195] <... symlink resumed>) = 0 [pid 5180] <... mmap resumed>) = 0x20000000 [pid 5065] <... openat resumed>) = 4 [pid 5195] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5195] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f45152be000 [pid 5195] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5195] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5196], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5196 [pid 5195] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5195] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5196 attached [pid 5196] set_robust_list(0x7f45152de9e0, 24) = 0 [pid 5196] memfd_create("syzkaller", 0) = 3 [pid 5196] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f450cebe000 [pid 5196] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5180] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] getdents64(4, [pid 5180] <... futex resumed>) = 1 [pid 5179] <... futex resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5180] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5065] getdents64(4, 0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5179] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] close(4 [pid 5180] <... futex resumed>) = 0 [pid 5179] <... futex resumed>) = 1 [pid 5180] sendfile(4, 5, NULL, 2147483713 [pid 5179] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] <... close resumed>) = 0 [ 56.532873][ T5178] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 56.537514][ T5184] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 56.568781][ T5184] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5065] rmdir("./3/file0" [pid 5192] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5181] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5065] <... rmdir resumed>) = 0 [pid 5192] munmap(0x7f450cebe000, 1048576 [pid 5181] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5179] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5065] getdents64(3, [pid 5192] <... munmap resumed>) = 0 [pid 5181] <... futex resumed>) = 0 [pid 5179] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5194] <... futex resumed>) = 0 [pid 5192] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5181] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5179] <... futex resumed>) = 1 [pid 5065] close(3 [pid 5194] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5192] <... openat resumed>) = 4 [pid 5181] <... mmap resumed>) = 0x7f450cf9d000 [pid 5179] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] <... close resumed>) = 0 [ 56.578772][ T5178] EXT4-fs (loop5): This should not happen!! Data will be lost [ 56.578772][ T5178] [ 56.592645][ T5184] EXT4-fs (loop4): This should not happen!! Data will be lost [ 56.592645][ T5184] [ 56.594606][ T5180] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 56.603062][ T5184] EXT4-fs (loop4): Total free blocks count 0 [pid 5192] ioctl(4, LOOP_SET_FD, 3 [pid 5181] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5065] rmdir("./3" [pid 5196] <... write resumed>) = 1048576 [pid 5065] <... rmdir resumed>) = 0 [pid 5065] mkdir("./4", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5192] <... ioctl resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5192] close(3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5192] <... close resumed>) = 0 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5192] mkdir("./file0", 0777 [pid 5065] close(3 [pid 5192] <... mkdir resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5192] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f755d0) = 5197 ./strace-static-x86_64: Process 5197 attached [pid 5196] munmap(0x7f450cebe000, 1048576 [pid 5181] <... mprotect resumed>) = 0 [pid 5197] set_robust_list(0x555556f755e0, 24 [pid 5196] <... munmap resumed>) = 0 [pid 5181] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5197] <... set_robust_list resumed>) = 0 [pid 5197] chdir("./4" [pid 5196] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5181] <... clone resumed>, parent_tid=[5198], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5198 [pid 5197] <... chdir resumed>) = 0 [pid 5196] <... openat resumed>) = 4 [pid 5181] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5197] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5196] ioctl(4, LOOP_SET_FD, 3 [pid 5181] <... futex resumed>) = 0 [pid 5197] <... prctl resumed>) = 0 [pid 5197] setpgid(0, 0) = 0 [pid 5197] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5197] write(3, "1000", 4) = 4 [pid 5197] close(3) = 0 [pid 5197] symlink("/dev/binderfs", "./binderfs") = 0 [ 56.633168][ T5192] loop1: detected capacity change from 0 to 2048 [ 56.634076][ T5178] EXT4-fs (loop5): Total free blocks count 0 [ 56.639664][ T5184] EXT4-fs (loop4): Free/Dirty block details [ 56.639690][ T5184] EXT4-fs (loop4): free_blocks=2415919104 [ 56.645812][ T5178] EXT4-fs (loop5): Free/Dirty block details [ 56.672171][ T5196] loop2: detected capacity change from 0 to 2048 [ 56.677398][ T5184] EXT4-fs (loop4): dirty_blocks=16 [pid 5197] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5181] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5179] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5197] <... futex resumed>) = 0 [pid 5197] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f45152be000 [pid 5197] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5197] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5201], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5201 [pid 5197] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5198 attached ) = 0 [pid 5196] <... ioctl resumed>) = 0 [pid 5197] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5201 attached [pid 5201] set_robust_list(0x7f45152de9e0, 24) = 0 [pid 5201] memfd_create("syzkaller", 0) = 3 [ 56.690694][ T5180] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 56.694688][ T5192] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 56.704462][ T5178] EXT4-fs (loop5): free_blocks=2415919104 [ 56.719882][ T5184] EXT4-fs (loop4): Block reservation details [ 56.721207][ T5180] EXT4-fs (loop3): This should not happen!! Data will be lost [ 56.721207][ T5180] [pid 5201] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5198] set_robust_list(0x7f450cfbd9e0, 24 [pid 5196] close(3 [pid 5181] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5201] <... mmap resumed>) = 0x7f450cebe000 [pid 5201] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5198] <... set_robust_list resumed>) = 0 [pid 5196] <... close resumed>) = 0 [pid 5198] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5196] mkdir("./file0", 0777 [pid 5194] <... ioctl resumed>) = 0 [pid 5180] <... sendfile resumed>) = 117 [pid 5196] <... mkdir resumed>) = 0 [pid 5194] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5196] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5194] <... futex resumed>) = 0 [pid 5194] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5180] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5180] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5179] exit_group(0 [pid 5194] <... futex resumed>) = ? [pid 5180] <... futex resumed>) = ? [pid 5179] <... exit_group resumed>) = ? [pid 5194] +++ exited with 0 +++ [pid 5180] +++ exited with 0 +++ [pid 5179] +++ exited with 0 +++ [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5179, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5068] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, 0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] unlink("./3/binderfs") = 0 [ 56.737298][ T5180] EXT4-fs (loop3): Total free blocks count 0 [ 56.743876][ T5178] EXT4-fs (loop5): dirty_blocks=16 [ 56.749224][ T5180] EXT4-fs (loop3): Free/Dirty block details [ 56.749247][ T5180] EXT4-fs (loop3): free_blocks=2415919104 [ 56.749270][ T5180] EXT4-fs (loop3): dirty_blocks=16 [ 56.749288][ T5180] EXT4-fs (loop3): Block reservation details [ 56.749305][ T5180] EXT4-fs (loop3): i_reserved_data_blocks=1 [pid 5068] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5201] <... write resumed>) = 1048576 [pid 5192] <... mount resumed>) = 0 [pid 5192] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5192] chdir("./file0" [pid 5198] <... ioctl resumed>) = 0 [pid 5192] <... chdir resumed>) = 0 [pid 5201] munmap(0x7f450cebe000, 1048576 [pid 5192] ioctl(4, LOOP_CLR_FD [pid 5184] <... sendfile resumed>) = 117 [pid 5192] <... ioctl resumed>) = 0 [pid 5201] <... munmap resumed>) = 0 [pid 5198] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5196] <... mount resumed>) = 0 [pid 5193] <... ioctl resumed>) = 0 [pid 5192] close(4 [pid 5184] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] <... sendfile resumed>) = 117 [pid 5201] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5198] <... futex resumed>) = 0 [pid 5196] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5193] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5184] <... futex resumed>) = 0 [pid 5178] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5201] <... openat resumed>) = 4 [pid 5198] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5196] <... openat resumed>) = 3 [pid 5193] <... futex resumed>) = 0 [pid 5192] <... close resumed>) = 0 [pid 5184] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5181] exit_group(0 [pid 5177] exit_group(0 [pid 5068] <... umount2 resumed>) = 0 [ 56.786300][ T5184] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 56.793356][ T41] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 56.807119][ T5178] EXT4-fs (loop5): Block reservation details [ 56.808870][ T5196] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 56.813138][ T5178] EXT4-fs (loop5): i_reserved_data_blocks=1 [pid 5201] ioctl(4, LOOP_SET_FD, 3 [pid 5198] <... futex resumed>) = ? [pid 5196] chdir("./file0" [pid 5192] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5184] <... futex resumed>) = ? [pid 5181] <... exit_group resumed>) = ? [pid 5178] <... futex resumed>) = ? [pid 5177] <... exit_group resumed>) = ? [pid 5068] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5201] <... ioctl resumed>) = 0 [pid 5198] +++ exited with 0 +++ [pid 5196] <... chdir resumed>) = 0 [pid 5193] +++ exited with 0 +++ [pid 5192] <... futex resumed>) = 1 [pid 5191] <... futex resumed>) = 0 [pid 5184] +++ exited with 0 +++ [pid 5181] +++ exited with 0 +++ [pid 5178] +++ exited with 0 +++ [pid 5177] +++ exited with 0 +++ [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5201] close(3 [pid 5196] ioctl(4, LOOP_CLR_FD [pid 5192] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5191] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5177, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5181, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5068] lstat("./3/file0", [pid 5201] <... close resumed>) = 0 [pid 5196] <... ioctl resumed>) = 0 [pid 5192] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5191] <... futex resumed>) = 0 [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5201] mkdir("./file0", 0777 [pid 5196] close(4 [pid 5192] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5191] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5201] <... mkdir resumed>) = 0 [pid 5196] <... close resumed>) = 0 [pid 5192] <... open resumed>) = 4 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5201] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5196] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5192] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5196] <... futex resumed>) = 1 [pid 5195] <... futex resumed>) = 0 [pid 5192] <... futex resumed>) = 1 [pid 5191] <... futex resumed>) = 0 [pid 5068] <... openat resumed>) = 4 [pid 5196] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5195] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5192] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5191] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] fstat(4, [pid 5196] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5195] <... futex resumed>) = 0 [pid 5192] <... write resumed>) = 9 [pid 5191] <... futex resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5196] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5195] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5192] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5191] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] getdents64(4, [pid 5192] <... futex resumed>) = 0 [pid 5191] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5070] <... openat resumed>) = 3 [pid 5069] <... openat resumed>) = 3 [pid 5068] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5196] <... open resumed>) = 4 [pid 5070] fstat(3, [pid 5069] fstat(3, [pid 5068] getdents64(4, [pid 5196] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5192] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5191] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5069] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5196] <... futex resumed>) = 1 [pid 5195] <... futex resumed>) = 0 [pid 5192] <... openat resumed>) = 5 [pid 5191] <... futex resumed>) = 0 [pid 5070] getdents64(3, [pid 5069] getdents64(3, [pid 5068] close(4 [pid 5196] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5195] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5192] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5191] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5069] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5068] <... close resumed>) = 0 [pid 5196] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5195] <... futex resumed>) = 0 [pid 5192] <... futex resumed>) = 0 [pid 5191] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5070] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] rmdir("./3/file0" [pid 5196] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5195] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5192] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5191] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... rmdir resumed>) = 0 [pid 5196] <... write resumed>) = 9 [pid 5192] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5191] <... futex resumed>) = 0 [pid 5070] lstat("./3/binderfs", [pid 5069] lstat("./3/binderfs", [pid 5068] getdents64(3, [pid 5196] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5192] open("./bus", O_RDWR [pid 5191] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5069] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5070] unlink("./3/binderfs" [pid 5069] unlink("./3/binderfs" [pid 5068] close(3 [pid 5070] <... unlink resumed>) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5070] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] rmdir("./3" [pid 5196] <... futex resumed>) = 1 [pid 5195] <... futex resumed>) = 0 [pid 5192] <... open resumed>) = 6 [pid 5068] <... rmdir resumed>) = 0 [pid 5196] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5195] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5192] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] mkdir("./4", 0777 [pid 5196] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5195] <... futex resumed>) = 0 [pid 5192] <... futex resumed>) = 1 [pid 5191] <... futex resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5196] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5195] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5192] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5191] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5196] <... openat resumed>) = 5 [pid 5192] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5191] <... futex resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5196] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5192] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5191] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5196] <... futex resumed>) = 1 [pid 5195] <... futex resumed>) = 0 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] close(3 [pid 5195] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [ 56.850111][ T5201] loop0: detected capacity change from 0 to 2048 [pid 5196] open("./bus", O_RDWR [pid 5192] <... mmap resumed>) = 0x20000000 [pid 5068] <... close resumed>) = 0 [pid 5195] <... futex resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5196] <... open resumed>) = 6 [pid 5195] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5192] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5196] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5192] <... futex resumed>) = 1 [pid 5191] <... futex resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x555556f755d0) = 5205 [pid 5196] <... futex resumed>) = 0 [pid 5195] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5192] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5191] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5196] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5195] <... futex resumed>) = 0 [pid 5192] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5191] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5205 attached [pid 5205] set_robust_list(0x555556f755e0, 24 [pid 5196] <... mmap resumed>) = 0x20000000 [pid 5195] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5192] sendfile(4, 5, NULL, 2147483713 [pid 5191] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5205] <... set_robust_list resumed>) = 0 [pid 5196] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5205] chdir("./4" [pid 5195] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5205] <... chdir resumed>) = 0 [pid 5196] <... futex resumed>) = 0 [pid 5195] <... futex resumed>) = 0 [pid 5205] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5196] sendfile(4, 5, NULL, 2147483713 [pid 5195] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5205] <... prctl resumed>) = 0 [pid 5205] setpgid(0, 0) = 0 [pid 5205] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5205] write(3, "1000", 4) = 4 [pid 5205] close(3) = 0 [pid 5205] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5205] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5205] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f45152be000 [pid 5205] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5205] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5207], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5207 [pid 5205] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5205] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5207 attached [pid 5207] set_robust_list(0x7f45152de9e0, 24) = 0 [pid 5207] memfd_create("syzkaller", 0) = 3 [pid 5207] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f450cebe000 [ 56.927998][ T5192] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 56.943115][ T41] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 56.955764][ T61] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5207] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5195] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5191] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5207] <... write resumed>) = 1048576 [pid 5207] munmap(0x7f450cebe000, 1048576) = 0 [pid 5207] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5195] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5191] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5207] <... openat resumed>) = 4 [ 56.971294][ T5201] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 56.972053][ T5196] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 56.986102][ T5192] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 57.014132][ T5207] loop3: detected capacity change from 0 to 2048 [pid 5207] ioctl(4, LOOP_SET_FD, 3 [pid 5195] <... futex resumed>) = 0 [pid 5191] <... futex resumed>) = 0 [pid 5201] <... mount resumed>) = 0 [pid 5070] <... umount2 resumed>) = 0 [pid 5069] <... umount2 resumed>) = 0 [pid 5201] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5195] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5191] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5070] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] lstat("./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5069] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5069] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5069] getdents64(4, 0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5069] getdents64(4, 0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5069] close(4 [pid 5201] <... openat resumed>) = 3 [pid 5195] <... mmap resumed>) = 0x7f450cf9d000 [pid 5191] <... mmap resumed>) = 0x7f450cf9d000 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... close resumed>) = 0 [pid 5069] rmdir("./3/file0") = 0 [pid 5069] getdents64(3, 0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5069] close(3) = 0 [pid 5069] rmdir("./3") = 0 [pid 5069] mkdir("./4", 0777 [pid 5201] chdir("./file0" [pid 5195] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5191] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5070] lstat("./3/file0", [pid 5069] <... mkdir resumed>) = 0 [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5069] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 57.028028][ T5196] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 57.041315][ T5192] EXT4-fs (loop1): This should not happen!! Data will be lost [ 57.041315][ T5192] [ 57.052961][ T5196] EXT4-fs (loop2): This should not happen!! Data will be lost [ 57.052961][ T5196] [ 57.063141][ T5192] EXT4-fs (loop1): Total free blocks count 0 [ 57.070233][ T5196] EXT4-fs (loop2): Total free blocks count 0 [pid 5069] close(3 [pid 5201] <... chdir resumed>) = 0 [pid 5195] <... mprotect resumed>) = 0 [pid 5191] <... mprotect resumed>) = 0 [pid 5070] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5069] <... close resumed>) = 0 [pid 5207] <... ioctl resumed>) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5207] close(3 [pid 5201] ioctl(4, LOOP_CLR_FD [pid 5195] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5191] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5070] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5207] <... close resumed>) = 0 [pid 5069] <... clone resumed>, child_tidptr=0x555556f755d0) = 5208 [pid 5207] mkdir("./file0", 0777) = 0 [pid 5207] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue"./strace-static-x86_64: Process 5210 attached ./strace-static-x86_64: Process 5208 attached [pid 5201] <... ioctl resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5209 attached [pid 5209] set_robust_list(0x7f450cfbd9e0, 24) = 0 [pid 5209] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5210] set_robust_list(0x7f450cfbd9e0, 24 [pid 5208] set_robust_list(0x555556f755e0, 24 [pid 5201] close(4 [pid 5195] <... clone resumed>, parent_tid=[5209], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5209 [pid 5191] <... clone resumed>, parent_tid=[5210], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5210 [pid 5070] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5210] <... set_robust_list resumed>) = 0 [pid 5208] <... set_robust_list resumed>) = 0 [pid 5201] <... close resumed>) = 0 [pid 5195] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5191] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... openat resumed>) = 4 [pid 5210] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5208] chdir("./4" [pid 5201] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] <... futex resumed>) = 1 [pid 5191] <... futex resumed>) = 0 [pid 5201] <... futex resumed>) = 1 [pid 5070] fstat(4, [pid 5201] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5195] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5191] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5208] <... chdir resumed>) = 0 [pid 5070] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5209] <... futex resumed>) = 0 [pid 5197] <... futex resumed>) = 0 [pid 5070] getdents64(4, [pid 5208] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5210] <... ioctl resumed>) = 0 [pid 5209] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [ 57.076389][ T5192] EXT4-fs (loop1): Free/Dirty block details [ 57.086909][ T5192] EXT4-fs (loop1): free_blocks=2415919104 [ 57.091834][ T5196] EXT4-fs (loop2): Free/Dirty block details [ 57.093361][ T5192] EXT4-fs (loop1): dirty_blocks=16 [ 57.102363][ T5196] EXT4-fs (loop2): free_blocks=2415919104 [ 57.104769][ T5192] EXT4-fs (loop1): Block reservation details [ 57.112314][ T5196] EXT4-fs (loop2): dirty_blocks=16 [ 57.116557][ T5192] EXT4-fs (loop1): i_reserved_data_blocks=1 [pid 5197] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5208] <... prctl resumed>) = 0 [pid 5210] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5201] <... futex resumed>) = 0 [pid 5197] <... futex resumed>) = 1 [pid 5192] <... sendfile resumed>) = 117 [pid 5197] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5210] <... futex resumed>) = 1 [pid 5208] setpgid(0, 0 [pid 5201] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5070] getdents64(4, [pid 5210] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5208] <... setpgid resumed>) = 0 [pid 5192] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5191] <... futex resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5209] <... ioctl resumed>) = 0 [pid 5201] <... open resumed>) = 4 [pid 5196] <... sendfile resumed>) = 117 [pid 5209] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5201] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5196] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5192] <... futex resumed>) = 0 [pid 5191] exit_group(0 [pid 5070] close(4 [pid 5210] <... futex resumed>) = ? [pid 5209] <... futex resumed>) = 1 [pid 5208] <... openat resumed>) = 3 [pid 5201] <... futex resumed>) = 1 [pid 5197] <... futex resumed>) = 0 [pid 5196] <... futex resumed>) = 0 [pid 5195] <... futex resumed>) = 0 [pid 5191] <... exit_group resumed>) = ? [pid 5070] <... close resumed>) = 0 [pid 5210] +++ exited with 0 +++ [pid 5209] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5208] write(3, "1000", 4 [pid 5201] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5197] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5196] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5192] +++ exited with 0 +++ [pid 5191] +++ exited with 0 +++ [pid 5070] rmdir("./3/file0" [pid 5208] <... write resumed>) = 4 [pid 5201] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5070] <... rmdir resumed>) = 0 [pid 5208] close(3 [pid 5201] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5070] getdents64(3, [pid 5208] <... close resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5208] symlink("/dev/binderfs", "./binderfs" [pid 5070] close(3 [pid 5208] <... symlink resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 5208] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] rmdir("./3" [pid 5208] <... futex resumed>) = 0 [pid 5070] <... rmdir resumed>) = 0 [pid 5208] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5070] mkdir("./4", 0777 [pid 5208] <... mmap resumed>) = 0x7f45152be000 [pid 5070] <... mkdir resumed>) = 0 [pid 5208] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5208] <... mprotect resumed>) = 0 [pid 5070] <... openat resumed>) = 3 [pid 5208] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5070] ioctl(3, LOOP_CLR_FD [pid 5197] <... futex resumed>) = 0 [pid 5195] exit_group(0 [pid 5070] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5209] <... futex resumed>) = ? [pid 5208] <... clone resumed>, parent_tid=[5213], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5213 [pid 5201] <... write resumed>) = 9 [pid 5197] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5196] <... futex resumed>) = ? [pid 5195] <... exit_group resumed>) = ? [pid 5070] close(3 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5191, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5209] +++ exited with 0 +++ [pid 5208] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5201] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5197] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5196] +++ exited with 0 +++ [pid 5070] <... close resumed>) = 0 [pid 5208] <... futex resumed>) = 0 [pid 5201] <... futex resumed>) = 0 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5208] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5201] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5195] +++ exited with 0 +++ [pid 5070] <... clone resumed>, child_tidptr=0x555556f755d0) = 5214 ./strace-static-x86_64: Process 5213 attached [pid 5213] set_robust_list(0x7f45152de9e0, 24) = 0 [pid 5213] memfd_create("syzkaller", 0) = 3 [pid 5213] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f450cebe000 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5195, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 5197] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5201] <... futex resumed>) = 0 [pid 5197] <... futex resumed>) = 1 [pid 5066] <... restart_syscall resumed>) = 0 [pid 5201] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5197] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5201] <... openat resumed>) = 5 [pid 5201] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5197] <... futex resumed>) = 0 [pid 5067] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5201] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5197] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5201] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5197] <... futex resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5214 attached [pid 5207] <... mount resumed>) = 0 [pid 5201] open("./bus", O_RDWR [pid 5197] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] <... openat resumed>) = 3 [pid 5066] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5214] set_robust_list(0x555556f755e0, 24 [pid 5207] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5201] <... open resumed>) = 6 [pid 5067] fstat(3, [pid 5066] <... openat resumed>) = 3 [pid 5214] <... set_robust_list resumed>) = 0 [pid 5213] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5207] <... openat resumed>) = 3 [pid 5201] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] fstat(3, [pid 5214] chdir("./4" [pid 5207] chdir("./file0" [pid 5201] <... futex resumed>) = 1 [pid 5197] <... futex resumed>) = 0 [pid 5067] getdents64(3, [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5214] <... chdir resumed>) = 0 [pid 5207] <... chdir resumed>) = 0 [pid 5201] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5197] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5066] getdents64(3, [pid 5214] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5207] ioctl(4, LOOP_CLR_FD [pid 5201] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5197] <... futex resumed>) = 0 [pid 5067] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5214] <... prctl resumed>) = 0 [pid 5207] <... ioctl resumed>) = 0 [pid 5201] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5197] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5214] setpgid(0, 0 [ 57.131564][ T5196] EXT4-fs (loop2): Block reservation details [ 57.139533][ T5196] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 57.158727][ T5207] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [pid 5207] close(4 [pid 5067] lstat("./4/binderfs", [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5214] <... setpgid resumed>) = 0 [pid 5213] <... write resumed>) = 1048576 [pid 5207] <... close resumed>) = 0 [pid 5201] <... mmap resumed>) = 0x20000000 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] lstat("./3/binderfs", [pid 5214] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5207] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] unlink("./4/binderfs" [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5214] <... openat resumed>) = 3 [pid 5207] <... futex resumed>) = 1 [pid 5205] <... futex resumed>) = 0 [pid 5201] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... unlink resumed>) = 0 [pid 5213] munmap(0x7f450cebe000, 1048576 [pid 5066] unlink("./3/binderfs" [pid 5214] write(3, "1000", 4 [pid 5207] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5205] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5201] <... futex resumed>) = 1 [pid 5197] <... futex resumed>) = 0 [pid 5067] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... unlink resumed>) = 0 [pid 5214] <... write resumed>) = 4 [pid 5207] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5205] <... futex resumed>) = 0 [pid 5201] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5197] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5214] close(3 [pid 5207] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5205] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5201] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5197] <... futex resumed>) = 0 [pid 5214] <... close resumed>) = 0 [pid 5207] <... open resumed>) = 4 [pid 5201] sendfile(4, 5, NULL, 2147483713 [pid 5197] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5214] symlink("/dev/binderfs", "./binderfs" [pid 5213] <... munmap resumed>) = 0 [pid 5207] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5213] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5213] ioctl(4, LOOP_SET_FD, 3 [pid 5214] <... symlink resumed>) = 0 [pid 5207] <... futex resumed>) = 1 [pid 5205] <... futex resumed>) = 0 [pid 5213] <... ioctl resumed>) = 0 [pid 5213] close(3) = 0 [pid 5213] mkdir("./file0", 0777) = 0 [pid 5213] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5205] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5207] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5205] <... futex resumed>) = 0 [pid 5214] <... futex resumed>) = 0 [pid 5207] <... write resumed>) = 9 [pid 5205] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5207] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5207] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5214] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5205] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5205] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] <... mmap resumed>) = 0x7f45152be000 [pid 5205] <... futex resumed>) = 1 [pid 5214] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE [pid 5207] <... futex resumed>) = 0 [pid 5205] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5214] <... mprotect resumed>) = 0 [pid 5207] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5214] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5207] <... openat resumed>) = 5 [pid 5207] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] <... clone resumed>, parent_tid=[5215], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5215 [pid 5207] <... futex resumed>) = 1 [pid 5205] <... futex resumed>) = 0 [pid 5207] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5205] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5207] <... futex resumed>) = 0 [pid 5205] <... futex resumed>) = 1 [pid 5214] <... futex resumed>) = 0 [pid 5207] open("./bus", O_RDWR) = 6 [pid 5207] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5207] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5197] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5197] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5205] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5197] <... futex resumed>) = 0 [pid 5205] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5197] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5205] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5197] <... mmap resumed>) = 0x7f450cf9d000 [pid 5207] <... futex resumed>) = 0 [pid 5205] <... futex resumed>) = 1 [pid 5197] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5067] <... umount2 resumed>) = 0 [pid 5207] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5205] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5197] <... mprotect resumed>) = 0 [pid 5207] <... mmap resumed>) = 0x20000000 [pid 5197] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5207] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5205] <... futex resumed>) = 0 [pid 5197] <... clone resumed>, parent_tid=[5216], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5216 [ 57.227122][ T41] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 57.239286][ T5213] loop4: detected capacity change from 0 to 2048 [ 57.244267][ T5201] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 57.262861][ T61] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5207] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5205] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5197] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5207] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5205] <... futex resumed>) = 0 [pid 5197] <... futex resumed>) = 0 [pid 5067] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5207] sendfile(4, 5, NULL, 2147483713 [pid 5197] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5216 attached ./strace-static-x86_64: Process 5215 attached [pid 5205] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = 0 [pid 5216] set_robust_list(0x7f450cfbd9e0, 24) = 0 [ 57.316086][ T5207] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 57.327017][ T5201] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 57.343072][ T5207] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 57.343101][ T5207] EXT4-fs (loop3): This should not happen!! Data will be lost [ 57.343101][ T5207] [pid 5216] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5215] set_robust_list(0x7f45152de9e0, 24 [pid 5067] lstat("./4/file0", [pid 5066] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5215] <... set_robust_list resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5207] <... sendfile resumed>) = 117 [pid 5207] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5207] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5197] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5215] memfd_create("syzkaller", 0) = 3 [pid 5215] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f450cebe000 [pid 5215] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5067] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5205] <... futex resumed>) = 0 [pid 5066] lstat("./3/file0", [pid 5205] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 57.343114][ T5207] EXT4-fs (loop3): Total free blocks count 0 [ 57.343127][ T5207] EXT4-fs (loop3): Free/Dirty block details [ 57.343139][ T5207] EXT4-fs (loop3): free_blocks=2415919104 [ 57.343154][ T5207] EXT4-fs (loop3): dirty_blocks=16 [ 57.343167][ T5207] EXT4-fs (loop3): Block reservation details [ 57.358156][ T5201] EXT4-fs (loop0): This should not happen!! Data will be lost [ 57.358156][ T5201] [ 57.372478][ T5207] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 57.379237][ T5201] EXT4-fs (loop0): Total free blocks count 0 [pid 5207] <... futex resumed>) = 0 [pid 5207] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040) = 0 [pid 5207] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5207] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5205] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5215] <... write resumed>) = 1048576 [pid 5215] munmap(0x7f450cebe000, 1048576) = 0 [pid 5215] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5205] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5067] <... openat resumed>) = 4 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5205] exit_group(0 [pid 5067] fstat(4, [pid 5066] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5207] <... futex resumed>) = ? [pid 5205] <... exit_group resumed>) = ? [pid 5207] +++ exited with 0 +++ [pid 5215] <... openat resumed>) = 4 [pid 5215] ioctl(4, LOOP_SET_FD, 3 [pid 5205] +++ exited with 0 +++ [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... openat resumed>) = 4 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5205, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5067] getdents64(4, [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, [pid 5213] <... mount resumed>) = 0 [pid 5068] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] getdents64(4, [pid 5066] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5215] <... ioctl resumed>) = 0 [pid 5215] close(3) = 0 [pid 5215] mkdir("./file0", 0777) = 0 [pid 5215] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5213] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5066] getdents64(4, [pid 5213] <... openat resumed>) = 3 [pid 5067] close(4 [pid 5066] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5213] chdir("./file0" [pid 5068] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... close resumed>) = 0 [ 57.418402][ T5201] EXT4-fs (loop0): Free/Dirty block details [ 57.425222][ T5201] EXT4-fs (loop0): free_blocks=2415919104 [ 57.434957][ T5213] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 57.437217][ T5215] loop5: detected capacity change from 0 to 2048 [ 57.448850][ T5201] EXT4-fs (loop0): dirty_blocks=16 [ 57.461225][ T5201] EXT4-fs (loop0): Block reservation details [pid 5066] close(4 [pid 5213] <... chdir resumed>) = 0 [pid 5213] ioctl(4, LOOP_CLR_FD [pid 5216] <... ioctl resumed>) = 0 [pid 5201] <... sendfile resumed>) = 117 [pid 5068] <... openat resumed>) = 3 [pid 5067] rmdir("./4/file0" [pid 5066] <... close resumed>) = 0 [pid 5216] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5213] <... ioctl resumed>) = 0 [pid 5201] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] fstat(3, [pid 5216] <... futex resumed>) = 0 [pid 5213] close(4 [pid 5067] <... rmdir resumed>) = 0 [pid 5066] rmdir("./3/file0" [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5216] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5213] <... close resumed>) = 0 [pid 5201] <... futex resumed>) = 0 [pid 5197] exit_group(0 [pid 5216] <... futex resumed>) = ? [pid 5197] <... exit_group resumed>) = ? [pid 5216] +++ exited with 0 +++ [pid 5067] getdents64(3, 0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./4") = 0 [pid 5067] mkdir("./5", 0777 [pid 5066] <... rmdir resumed>) = 0 [pid 5213] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] getdents64(3, [pid 5067] <... mkdir resumed>) = 0 [pid 5066] getdents64(3, [pid 5213] <... futex resumed>) = 1 [pid 5208] <... futex resumed>) = 0 [pid 5068] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5213] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5208] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... openat resumed>) = 3 [pid 5066] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5213] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5208] <... futex resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5066] close(3 [pid 5213] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5208] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] lstat("./4/binderfs", [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5201] +++ exited with 0 +++ [pid 5197] +++ exited with 0 +++ [pid 5067] close(3 [pid 5066] <... close resumed>) = 0 [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] <... close resumed>) = 0 [pid 5066] rmdir("./3" [pid 5213] <... open resumed>) = 4 [pid 5068] unlink("./4/binderfs" [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5213] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... unlink resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5197, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5213] <... futex resumed>) = 1 [pid 5208] <... futex resumed>) = 0 [pid 5068] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... clone resumed>, child_tidptr=0x555556f755d0) = 5219 [pid 5066] mkdir("./4", 0777 [pid 5213] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5208] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5219 attached [pid 5219] set_robust_list(0x555556f755e0, 24) = 0 [pid 5219] chdir("./5") = 0 [pid 5219] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5219] setpgid(0, 0) = 0 [pid 5219] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5219] write(3, "1000", 4) = 4 [pid 5219] close(3) = 0 [pid 5219] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5219] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5219] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f45152be000 [pid 5213] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5208] <... futex resumed>) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5213] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5208] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5219] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE [pid 5213] <... write resumed>) = 9 [pid 5066] <... openat resumed>) = 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5219] <... mprotect resumed>) = 0 [pid 5213] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [ 57.468854][ T5201] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 57.501410][ T61] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5065] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5219] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5213] <... futex resumed>) = 1 [pid 5208] <... futex resumed>) = 0 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5219] <... clone resumed>, parent_tid=[5222], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5222 [pid 5219] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5219] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5222 attached [pid 5215] <... mount resumed>) = 0 [pid 5213] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5208] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] close(3 [pid 5065] <... openat resumed>) = 3 [pid 5222] set_robust_list(0x7f45152de9e0, 24 [pid 5215] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5213] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5208] <... futex resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5065] fstat(3, [pid 5222] <... set_robust_list resumed>) = 0 [pid 5215] <... openat resumed>) = 3 [pid 5213] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5208] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5222] memfd_create("syzkaller", 0 [pid 5215] chdir("./file0" [pid 5213] <... openat resumed>) = 5 [pid 5065] getdents64(3, [pid 5222] <... memfd_create resumed>) = 3 [pid 5215] <... chdir resumed>) = 0 [pid 5213] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... clone resumed>, child_tidptr=0x555556f755d0) = 5223 [pid 5065] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5222] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5215] ioctl(4, LOOP_CLR_FD [pid 5213] <... futex resumed>) = 1 [pid 5208] <... futex resumed>) = 0 [pid 5065] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5222] <... mmap resumed>) = 0x7f450cebe000 [pid 5215] <... ioctl resumed>) = 0 [pid 5213] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5208] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5223 attached [pid 5222] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5215] close(4 [pid 5213] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5208] <... futex resumed>) = 0 [pid 5068] <... umount2 resumed>) = 0 [pid 5065] lstat("./4/binderfs", [pid 5223] set_robust_list(0x555556f755e0, 24 [pid 5215] <... close resumed>) = 0 [pid 5213] open("./bus", O_RDWR [pid 5208] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5223] <... set_robust_list resumed>) = 0 [pid 5215] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5213] <... open resumed>) = 6 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5223] chdir("./4" [pid 5215] <... futex resumed>) = 1 [pid 5214] <... futex resumed>) = 0 [pid 5213] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] lstat("./4/file0", [pid 5065] unlink("./4/binderfs" [pid 5223] <... chdir resumed>) = 0 [ 57.530140][ T5215] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [pid 5215] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5214] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5213] <... futex resumed>) = 1 [pid 5208] <... futex resumed>) = 0 [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5223] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5215] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5214] <... futex resumed>) = 0 [pid 5213] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5208] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... unlink resumed>) = 0 [pid 5223] <... prctl resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5223] setpgid(0, 0 [pid 5215] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5214] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5213] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5208] <... futex resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5223] <... setpgid resumed>) = 0 [pid 5215] <... open resumed>) = 4 [pid 5213] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5208] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... openat resumed>) = 4 [pid 5223] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5222] <... write resumed>) = 1048576 [pid 5215] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5213] <... mmap resumed>) = 0x20000000 [pid 5222] munmap(0x7f450cebe000, 1048576 [pid 5215] <... futex resumed>) = 1 [pid 5214] <... futex resumed>) = 0 [pid 5213] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5222] <... munmap resumed>) = 0 [pid 5215] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5214] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5213] <... futex resumed>) = 1 [pid 5208] <... futex resumed>) = 0 [pid 5222] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5215] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5214] <... futex resumed>) = 0 [pid 5213] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5208] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5222] <... openat resumed>) = 4 [pid 5215] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5214] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5213] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5208] <... futex resumed>) = 0 [pid 5223] <... openat resumed>) = 3 [pid 5222] ioctl(4, LOOP_SET_FD, 3 [pid 5215] <... write resumed>) = 9 [pid 5213] sendfile(4, 5, NULL, 2147483713 [pid 5208] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] fstat(4, [pid 5223] write(3, "1000", 4 [pid 5222] <... ioctl resumed>) = 0 [pid 5215] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] <... write resumed>) = 4 [pid 5215] <... futex resumed>) = 1 [pid 5214] <... futex resumed>) = 0 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5223] close(3 [pid 5215] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5214] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] <... close resumed>) = 0 [pid 5222] close(3 [pid 5215] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5214] <... futex resumed>) = 0 [pid 5068] getdents64(4, [pid 5223] symlink("/dev/binderfs", "./binderfs" [pid 5222] <... close resumed>) = 0 [pid 5215] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5214] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5223] <... symlink resumed>) = 0 [pid 5222] mkdir("./file0", 0777 [pid 5215] <... openat resumed>) = 5 [pid 5068] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5223] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5222] <... mkdir resumed>) = 0 [pid 5215] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [ 57.598670][ T61] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 57.626833][ T5222] loop2: detected capacity change from 0 to 2048 [pid 5068] getdents64(4, [pid 5223] <... futex resumed>) = 0 [pid 5222] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5215] <... futex resumed>) = 1 [pid 5214] <... futex resumed>) = 0 [pid 5068] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5223] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5215] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5214] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5214] <... futex resumed>) = 0 [pid 5215] open("./bus", O_RDWR [pid 5214] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5215] <... open resumed>) = 6 [pid 5215] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5214] <... futex resumed>) = 0 [pid 5215] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5214] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5214] <... futex resumed>) = 0 [pid 5215] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5214] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5215] <... mmap resumed>) = 0x20000000 [pid 5215] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5214] <... futex resumed>) = 0 [pid 5215] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5214] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5214] <... futex resumed>) = 0 [pid 5215] sendfile(4, 5, NULL, 2147483713 [pid 5214] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5223] <... mmap resumed>) = 0x7f45152be000 [pid 5213] <... sendfile resumed>) = 117 [pid 5208] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5068] close(4 [pid 5065] <... umount2 resumed>) = 0 [pid 5223] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE [pid 5213] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [ 57.647196][ T5213] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 57.659090][ T5215] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 57.676903][ T5213] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 57.676939][ T5213] EXT4-fs (loop4): This should not happen!! Data will be lost [ 57.676939][ T5213] [pid 5208] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... close resumed>) = 0 [pid 5223] <... mprotect resumed>) = 0 [pid 5213] <... futex resumed>) = 0 [pid 5208] <... futex resumed>) = 0 [pid 5068] rmdir("./4/file0" [pid 5065] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5223] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5213] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5208] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... rmdir resumed>) = 0 [pid 5213] <... ioctl resumed>) = 0 [pid 5068] getdents64(3, [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5223] <... clone resumed>, parent_tid=[5225], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5225 [pid 5213] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5065] lstat("./4/file0", [pid 5223] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5213] <... futex resumed>) = 1 [pid 5208] <... futex resumed>) = 0 [pid 5068] close(3 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5223] <... futex resumed>) = 0 [pid 5213] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5208] exit_group(0 [pid 5068] <... close resumed>) = 0 [pid 5065] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5225 attached [pid 5223] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5213] <... futex resumed>) = ? [pid 5208] <... exit_group resumed>) = ? [pid 5068] rmdir("./4" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5225] set_robust_list(0x7f45152de9e0, 24 [pid 5213] +++ exited with 0 +++ [pid 5208] +++ exited with 0 +++ [pid 5068] <... rmdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5225] <... set_robust_list resumed>) = 0 [pid 5068] mkdir("./5", 0777 [pid 5065] <... openat resumed>) = 4 [pid 5225] memfd_create("syzkaller", 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5065] fstat(4, [pid 5225] <... memfd_create resumed>) = 3 [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5225] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5068] <... openat resumed>) = 3 [ 57.676958][ T5213] EXT4-fs (loop4): Total free blocks count 0 [ 57.676975][ T5213] EXT4-fs (loop4): Free/Dirty block details [ 57.676995][ T5213] EXT4-fs (loop4): free_blocks=2415919104 [ 57.677020][ T5213] EXT4-fs (loop4): dirty_blocks=16 [ 57.677043][ T5213] EXT4-fs (loop4): Block reservation details [ 57.677065][ T5213] EXT4-fs (loop4): i_reserved_data_blocks=1 [pid 5065] getdents64(4, [pid 5225] <... mmap resumed>) = 0x7f450cebe000 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5065] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5225] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5208, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] getdents64(4, [pid 5068] close(3 [pid 5065] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5068] <... close resumed>) = 0 [pid 5065] close(4 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./4/file0" [pid 5068] <... clone resumed>, child_tidptr=0x555556f755d0) = 5227 [pid 5065] <... rmdir resumed>) = 0 [pid 5065] getdents64(3, 0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./4") = 0 [pid 5065] mkdir("./5", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5069] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... openat resumed>) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f755d0) = 5228 ./strace-static-x86_64: Process 5228 attached ./strace-static-x86_64: Process 5227 attached [pid 5225] <... write resumed>) = 1048576 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5227] set_robust_list(0x555556f755e0, 24) = 0 [pid 5227] chdir("./5") = 0 [pid 5227] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5214] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5227] <... prctl resumed>) = 0 [pid 5214] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5227] setpgid(0, 0) = 0 [pid 5227] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5227] write(3, "1000", 4) = 4 [pid 5227] close(3) = 0 [pid 5227] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5227] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5227] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f45152be000 [ 57.739837][ T5215] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 57.752213][ T5215] EXT4-fs (loop5): This should not happen!! Data will be lost [ 57.752213][ T5215] [ 57.762570][ T5215] EXT4-fs (loop5): Total free blocks count 0 [ 57.769495][ T5215] EXT4-fs (loop5): Free/Dirty block details [ 57.775985][ T5215] EXT4-fs (loop5): free_blocks=2415919104 [pid 5227] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5225] munmap(0x7f450cebe000, 1048576 [pid 5227] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5225] <... munmap resumed>) = 0 [pid 5227] <... clone resumed>, parent_tid=[5229], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5229 [pid 5225] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5227] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5225] <... openat resumed>) = 4 [pid 5214] <... futex resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5228] set_robust_list(0x555556f755e0, 24 [pid 5227] <... futex resumed>) = 0 [pid 5225] ioctl(4, LOOP_SET_FD, 3 [pid 5214] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5069] fstat(3, ./strace-static-x86_64: Process 5229 attached [pid 5228] <... set_robust_list resumed>) = 0 [pid 5227] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5225] <... ioctl resumed>) = 0 [pid 5214] <... mmap resumed>) = 0x7f450cf9d000 [pid 5225] close(3) = 0 [pid 5225] mkdir("./file0", 0777) = 0 [pid 5225] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5069] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5229] set_robust_list(0x7f45152de9e0, 24 [pid 5228] chdir("./5" [pid 5222] <... mount resumed>) = 0 [pid 5214] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5069] getdents64(3, [pid 5229] <... set_robust_list resumed>) = 0 [pid 5229] memfd_create("syzkaller", 0) = 3 [pid 5229] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f450cebe000 [pid 5229] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5228] <... chdir resumed>) = 0 [pid 5222] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5214] <... mprotect resumed>) = 0 [pid 5069] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5228] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5222] <... openat resumed>) = 3 [pid 5214] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5069] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5215] <... sendfile resumed>) = 117 [pid 5228] setpgid(0, 0 [pid 5222] chdir("./file0" [pid 5215] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5230 attached [pid 5228] <... setpgid resumed>) = 0 [pid 5222] <... chdir resumed>) = 0 [pid 5215] <... futex resumed>) = 0 [pid 5214] <... clone resumed>, parent_tid=[5230], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5230 [pid 5069] lstat("./4/binderfs", [pid 5230] set_robust_list(0x7f450cfbd9e0, 24 [pid 5228] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5222] ioctl(4, LOOP_CLR_FD [pid 5215] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5214] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5230] <... set_robust_list resumed>) = 0 [pid 5228] <... openat resumed>) = 3 [pid 5222] <... ioctl resumed>) = 0 [pid 5214] <... futex resumed>) = 0 [pid 5069] unlink("./4/binderfs" [pid 5228] write(3, "1000", 4 [pid 5222] close(4 [pid 5214] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5230] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5069] <... unlink resumed>) = 0 [pid 5230] <... ioctl resumed>) = 0 [pid 5229] <... write resumed>) = 1048576 [pid 5228] <... write resumed>) = 4 [pid 5222] <... close resumed>) = 0 [pid 5230] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5229] munmap(0x7f450cebe000, 1048576 [pid 5228] close(3 [pid 5222] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5230] <... futex resumed>) = 1 [pid 5229] <... munmap resumed>) = 0 [pid 5214] <... futex resumed>) = 0 [pid 5230] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5229] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5228] <... close resumed>) = 0 [pid 5222] <... futex resumed>) = 1 [pid 5214] exit_group(0 [pid 5230] <... futex resumed>) = ? [pid 5229] <... openat resumed>) = 4 [ 57.790772][ T5222] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 57.806511][ T5225] loop1: detected capacity change from 0 to 2048 [ 57.807772][ T5215] EXT4-fs (loop5): dirty_blocks=16 [ 57.819356][ T5215] EXT4-fs (loop5): Block reservation details [ 57.827121][ T5215] EXT4-fs (loop5): i_reserved_data_blocks=1 [pid 5228] symlink("/dev/binderfs", "./binderfs" [pid 5222] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5219] <... futex resumed>) = 0 [pid 5215] <... futex resumed>) = ? [pid 5214] <... exit_group resumed>) = ? [pid 5230] +++ exited with 0 +++ [pid 5229] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5228] <... symlink resumed>) = 0 [pid 5222] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5219] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] +++ exited with 0 +++ [pid 5214] +++ exited with 0 +++ [pid 5229] close(3) = 0 [pid 5229] mkdir("./file0", 0777) = 0 [pid 5229] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5228] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5222] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5219] <... futex resumed>) = 0 [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5214, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5225] <... mount resumed>) = 0 [pid 5225] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5225] chdir("./file0" [pid 5228] <... futex resumed>) = 0 [pid 5219] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5228] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5222] <... open resumed>) = 4 [pid 5228] <... mmap resumed>) = 0x7f45152be000 [pid 5070] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5228] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE [pid 5225] <... chdir resumed>) = 0 [pid 5222] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5228] <... mprotect resumed>) = 0 [pid 5225] ioctl(4, LOOP_CLR_FD [pid 5222] <... futex resumed>) = 1 [pid 5219] <... futex resumed>) = 0 [pid 5070] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] <... umount2 resumed>) = 0 [pid 5228] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5225] <... ioctl resumed>) = 0 [pid 5222] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5219] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... openat resumed>) = 3 [pid 5069] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5225] close(4 [pid 5222] <... write resumed>) = 9 [pid 5219] <... futex resumed>) = 0 [pid 5070] fstat(3, [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5228] <... clone resumed>, parent_tid=[5235], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5235 [ 57.863273][ T5229] loop3: detected capacity change from 0 to 2048 [ 57.870497][ T41] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 57.879195][ T5225] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [pid 5228] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5225] <... close resumed>) = 0 [pid 5222] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5219] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5069] lstat("./4/file0", ./strace-static-x86_64: Process 5235 attached [pid 5222] <... futex resumed>) = 0 [pid 5219] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5228] <... futex resumed>) = 0 [pid 5235] set_robust_list(0x7f45152de9e0, 24 [pid 5225] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5222] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5219] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] getdents64(3, [pid 5069] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5228] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5235] <... set_robust_list resumed>) = 0 [pid 5235] memfd_create("syzkaller", 0) = 3 [pid 5235] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f450cebe000 [pid 5229] <... mount resumed>) = 0 [pid 5225] <... futex resumed>) = 1 [pid 5223] <... futex resumed>) = 0 [pid 5222] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5219] <... futex resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5069] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5229] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5225] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5223] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5222] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5219] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5229] <... openat resumed>) = 3 [pid 5225] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5223] <... futex resumed>) = 0 [pid 5222] <... openat resumed>) = 5 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5229] chdir("./file0" [pid 5225] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5223] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5222] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] lstat("./4/binderfs", [pid 5069] <... openat resumed>) = 4 [pid 5235] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5229] <... chdir resumed>) = 0 [pid 5225] <... open resumed>) = 4 [pid 5222] <... futex resumed>) = 1 [pid 5219] <... futex resumed>) = 0 [pid 5070] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5069] fstat(4, [pid 5229] ioctl(4, LOOP_CLR_FD [pid 5225] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5222] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5219] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] unlink("./4/binderfs" [pid 5069] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5229] <... ioctl resumed>) = 0 [pid 5225] <... futex resumed>) = 1 [pid 5223] <... futex resumed>) = 0 [pid 5222] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5219] <... futex resumed>) = 0 [pid 5070] <... unlink resumed>) = 0 [ 57.917919][ T5229] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 57.963228][ T61] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 57.983409][ T5222] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 57.987267][ T5235] loop0: detected capacity change from 0 to 2048 [ 58.005679][ T26] kauditd_printk_skb: 80 callbacks suppressed [pid 5069] getdents64(4, [pid 5229] close(4 [pid 5225] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5223] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5222] open("./bus", O_RDWR [pid 5219] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5229] <... close resumed>) = 0 [pid 5225] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5223] <... futex resumed>) = 0 [pid 5222] <... open resumed>) = 6 [pid 5069] getdents64(4, [pid 5229] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5225] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5222] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5229] <... futex resumed>) = 1 [pid 5222] <... futex resumed>) = 1 [pid 5219] <... futex resumed>) = 0 [pid 5069] close(4 [pid 5229] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5222] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5219] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... close resumed>) = 0 [pid 5222] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5219] <... futex resumed>) = 0 [pid 5069] rmdir("./4/file0" [pid 5222] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5219] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] <... rmdir resumed>) = 0 [pid 5222] <... mmap resumed>) = 0x20000000 [pid 5069] getdents64(3, [pid 5222] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5222] <... futex resumed>) = 1 [pid 5219] <... futex resumed>) = 0 [pid 5069] close(3 [pid 5222] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5219] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... close resumed>) = 0 [pid 5222] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5219] <... futex resumed>) = 0 [pid 5069] rmdir("./4" [pid 5222] sendfile(4, 5, NULL, 2147483713 [pid 5219] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] <... rmdir resumed>) = 0 [pid 5069] mkdir("./5", 0777) = 0 [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5069] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5069] close(3) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f755d0) = 5236 [pid 5227] <... futex resumed>) = 0 [pid 5225] <... write resumed>) = 9 [pid 5223] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5227] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5229] <... futex resumed>) = 0 [pid 5227] <... futex resumed>) = 1 [pid 5235] <... write resumed>) = 1048576 [pid 5229] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5227] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5225] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5229] <... open resumed>) = 4 [pid 5225] <... futex resumed>) = 1 [pid 5223] <... futex resumed>) = 0 [pid 5229] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5229] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5235] munmap(0x7f450cebe000, 1048576) = 0 [pid 5235] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5235] ioctl(4, LOOP_SET_FD, 3 [pid 5227] <... futex resumed>) = 0 [pid 5225] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5223] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5227] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5235] <... ioctl resumed>) = 0 [pid 5225] <... openat resumed>) = 5 [pid 5235] close(3) = 0 [pid 5235] mkdir("./file0", 0777) = 0 [pid 5235] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue"./strace-static-x86_64: Process 5236 attached [pid 5236] set_robust_list(0x555556f755e0, 24) = 0 [pid 5236] chdir("./5") = 0 [pid 5236] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5236] setpgid(0, 0) = 0 [pid 5236] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5236] write(3, "1000", 4) = 4 [pid 5236] close(3) = 0 [pid 5236] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5236] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5236] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f45152be000 [pid 5236] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5236] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5238], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5238 [pid 5236] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5236] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5238 attached [pid 5238] set_robust_list(0x7f45152de9e0, 24) = 0 [pid 5238] memfd_create("syzkaller", 0 [pid 5219] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5219] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5219] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f450cf9d000 [pid 5219] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5219] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5239], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5239 [pid 5219] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5219] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5238] <... memfd_create resumed>) = 3 [pid 5238] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f450cebe000 [pid 5238] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5238] munmap(0x7f450cebe000, 1048576 [pid 5229] <... futex resumed>) = 0 [pid 5227] <... futex resumed>) = 1 [pid 5223] <... futex resumed>) = 0 [pid 5229] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5227] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5223] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5229] <... write resumed>) = 9 [pid 5225] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5229] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5225] <... futex resumed>) = 1 [pid 5223] <... futex resumed>) = 0 [pid 5229] <... futex resumed>) = 1 [pid 5227] <... futex resumed>) = 0 [pid 5225] open("./bus", O_RDWR [pid 5223] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5229] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5227] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] <... futex resumed>) = 0 [pid 5229] <... openat resumed>) = 5 [pid 5227] <... futex resumed>) = 0 [pid 5225] <... open resumed>) = 6 [pid 5223] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5229] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5227] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5225] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5229] <... futex resumed>) = 0 [pid 5227] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5225] <... futex resumed>) = 0 [pid 5223] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5229] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5227] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5225] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5223] <... futex resumed>) = 0 [pid 5229] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5227] <... futex resumed>) = 0 [pid 5225] <... mmap resumed>) = 0x20000000 [pid 5223] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5229] open("./bus", O_RDWR [pid 5227] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5225] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5229] <... open resumed>) = 6 [pid 5225] <... futex resumed>) = 0 [pid 5223] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5229] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5225] sendfile(4, 5, NULL, 2147483713 [pid 5223] <... futex resumed>) = 0 [pid 5238] <... munmap resumed>) = 0 [pid 5229] <... futex resumed>) = 1 [pid 5227] <... futex resumed>) = 0 [pid 5223] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5219] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5229] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5227] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5238] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5229] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5227] <... futex resumed>) = 0 [ 58.005695][ T26] audit: type=1804 audit(1672294491.232:92): pid=5225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor259" name="/root/syzkaller.5dlojf/4/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 58.038401][ T5222] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 58.050807][ T5222] EXT4-fs (loop2): This should not happen!! Data will be lost [ 58.050807][ T5222] [pid 5238] ioctl(4, LOOP_SET_FD, 3 [pid 5229] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5227] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5239 attached [pid 5238] <... ioctl resumed>) = 0 [pid 5229] <... mmap resumed>) = 0x20000000 [pid 5070] <... umount2 resumed>) = 0 [pid 5239] set_robust_list(0x7f450cfbd9e0, 24 [pid 5229] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5229] <... futex resumed>) = 1 [pid 5227] <... futex resumed>) = 0 [pid 5239] <... set_robust_list resumed>) = 0 [pid 5229] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5227] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5239] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5229] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5227] <... futex resumed>) = 0 [ 58.081127][ T5222] EXT4-fs (loop2): Total free blocks count 0 [ 58.082212][ T5235] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 58.093530][ T5222] EXT4-fs (loop2): Free/Dirty block details [ 58.106557][ T5238] loop4: detected capacity change from 0 to 2048 [pid 5229] sendfile(4, 5, NULL, 2147483713 [pid 5227] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5223] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5223] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5223] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5238] close(3 [pid 5223] <... mmap resumed>) = 0x7f450cf9d000 [pid 5238] <... close resumed>) = 0 [pid 5223] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5238] mkdir("./file0", 0777 [pid 5223] <... mprotect resumed>) = 0 [pid 5070] lstat("./4/file0", [pid 5238] <... mkdir resumed>) = 0 [pid 5223] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5238] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5223] <... clone resumed>, parent_tid=[5241], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5241 [pid 5070] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5223] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5223] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5241 attached [pid 5070] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5241] set_robust_list(0x7f450cfbd9e0, 24 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5241] <... set_robust_list resumed>) = 0 [pid 5241] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5070] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5070] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] getdents64(4, 0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5070] getdents64(4, 0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5070] close(4) = 0 [pid 5070] rmdir("./4/file0" [ 58.117424][ T5225] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 58.126514][ T5229] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 58.135082][ T5222] EXT4-fs (loop2): free_blocks=2415919104 [ 58.153652][ T5225] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5235] <... mount resumed>) = 0 [pid 5070] <... rmdir resumed>) = 0 [pid 5235] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5227] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5070] getdents64(3, [pid 5227] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5227] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f450cf9d000 [pid 5227] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5227] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5242], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5242 [pid 5070] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5235] <... openat resumed>) = 3 [pid 5227] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5227] <... futex resumed>) = 0 [pid 5227] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5242 attached [pid 5242] set_robust_list(0x7f450cfbd9e0, 24) = 0 [ 58.184862][ T5222] EXT4-fs (loop2): dirty_blocks=16 [ 58.189892][ T5229] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 58.190494][ T5225] EXT4-fs (loop1): This should not happen!! Data will be lost [ 58.190494][ T5225] [ 58.212149][ T5222] EXT4-fs (loop2): Block reservation details [pid 5242] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5070] close(3 [pid 5235] chdir("./file0" [pid 5239] <... ioctl resumed>) = 0 [pid 5235] <... chdir resumed>) = 0 [pid 5222] <... sendfile resumed>) = 117 [pid 5070] <... close resumed>) = 0 [pid 5239] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5239] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5235] ioctl(4, LOOP_CLR_FD [pid 5222] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [ 58.219721][ T26] audit: type=1804 audit(1672294491.292:93): pid=5229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor259" name="/root/syzkaller.SZgq5q/5/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 58.244430][ T5222] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 58.247770][ T5238] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 58.251759][ T5225] EXT4-fs (loop1): Total free blocks count 0 [pid 5070] rmdir("./4" [pid 5235] <... ioctl resumed>) = 0 [pid 5227] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5222] <... futex resumed>) = 0 [pid 5070] <... rmdir resumed>) = 0 [pid 5238] <... mount resumed>) = 0 [pid 5235] close(4 [pid 5222] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5219] exit_group(0 [pid 5070] mkdir("./5", 0777 [pid 5238] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5235] <... close resumed>) = 0 [pid 5219] <... exit_group resumed>) = ? [pid 5070] <... mkdir resumed>) = 0 [pid 5239] <... futex resumed>) = ? [pid 5238] <... openat resumed>) = 3 [pid 5222] <... futex resumed>) = ? [pid 5239] +++ exited with 0 +++ [pid 5238] chdir("./file0" [pid 5235] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5222] +++ exited with 0 +++ [pid 5219] +++ exited with 0 +++ [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5238] <... chdir resumed>) = 0 [pid 5235] <... futex resumed>) = 1 [pid 5228] <... futex resumed>) = 0 [pid 5070] <... openat resumed>) = 3 [pid 5238] ioctl(4, LOOP_CLR_FD [pid 5235] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5228] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] ioctl(3, LOOP_CLR_FD [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5219, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5238] <... ioctl resumed>) = 0 [pid 5228] <... futex resumed>) = 0 [pid 5070] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 5238] close(4 [pid 5228] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] close(3 [pid 5067] <... restart_syscall resumed>) = 0 [pid 5238] <... close resumed>) = 0 [pid 5238] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... close resumed>) = 0 [pid 5238] <... futex resumed>) = 1 [pid 5236] <... futex resumed>) = 0 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5238] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5236] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5238] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5236] <... futex resumed>) = 0 [pid 5070] <... clone resumed>, child_tidptr=0x555556f755d0) = 5245 [ 58.269851][ T26] audit: type=1804 audit(1672294491.292:94): pid=5225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor259" name="/root/syzkaller.5dlojf/4/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 58.293648][ T5225] EXT4-fs (loop1): Free/Dirty block details [ 58.296798][ T5229] EXT4-fs (loop3): This should not happen!! Data will be lost [ 58.296798][ T5229] [ 58.300765][ T5225] EXT4-fs (loop1): free_blocks=2415919104 [ 58.310790][ T5229] EXT4-fs (loop3): Total free blocks count 0 [ 58.323104][ T5229] EXT4-fs (loop3): Free/Dirty block details [ 58.329833][ T5229] EXT4-fs (loop3): free_blocks=2415919104 [pid 5067] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5238] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5236] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5235] <... open resumed>) = 4 [pid 5067] <... openat resumed>) = 3 [pid 5235] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] fstat(3, [pid 5235] <... futex resumed>) = 1 [pid 5228] <... futex resumed>) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5235] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5228] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] getdents64(3, [pid 5235] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5228] <... futex resumed>) = 0 [pid 5067] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5242] <... ioctl resumed>) = 0 [pid 5238] <... open resumed>) = 4 [pid 5235] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5229] <... sendfile resumed>) = 117 [pid 5228] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5245 attached [pid 5238] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5245] set_robust_list(0x555556f755e0, 24 [pid 5238] <... futex resumed>) = 1 [pid 5236] <... futex resumed>) = 0 [pid 5067] lstat("./5/binderfs", [pid 5245] <... set_robust_list resumed>) = 0 [ 58.336214][ T5229] EXT4-fs (loop3): dirty_blocks=16 [ 58.341844][ T5229] EXT4-fs (loop3): Block reservation details [ 58.348096][ T5229] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 58.354450][ T26] audit: type=1804 audit(1672294491.302:95): pid=5225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor259" name="/root/syzkaller.5dlojf/4/file0/bus" dev="loop1" ino=18 res=1 errno=0 [pid 5238] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5236] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5245] chdir("./5" [pid 5242] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5238] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5236] <... futex resumed>) = 0 [pid 5235] <... write resumed>) = 9 [pid 5229] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] unlink("./5/binderfs" [pid 5245] <... chdir resumed>) = 0 [pid 5238] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5236] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5235] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5227] exit_group(0 [pid 5067] <... unlink resumed>) = 0 [pid 5245] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5238] <... write resumed>) = 9 [pid 5235] <... futex resumed>) = 1 [pid 5228] <... futex resumed>) = 0 [pid 5227] <... exit_group resumed>) = ? [pid 5067] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5245] <... prctl resumed>) = 0 [pid 5242] <... futex resumed>) = ? [pid 5238] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5235] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5229] <... futex resumed>) = ? [pid 5228] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] setpgid(0, 0 [pid 5238] <... futex resumed>) = 1 [pid 5236] <... futex resumed>) = 0 [pid 5235] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5228] <... futex resumed>) = 0 [pid 5245] <... setpgid resumed>) = 0 [pid 5238] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5236] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5235] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5228] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5245] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5238] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5236] <... futex resumed>) = 0 [pid 5235] <... openat resumed>) = 5 [pid 5245] <... openat resumed>) = 3 [pid 5238] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5236] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5235] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] write(3, "1000", 4 [pid 5238] <... openat resumed>) = 5 [pid 5235] <... futex resumed>) = 1 [pid 5228] <... futex resumed>) = 0 [pid 5245] <... write resumed>) = 4 [pid 5238] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5235] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5228] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] close(3 [pid 5238] <... futex resumed>) = 1 [pid 5236] <... futex resumed>) = 0 [pid 5235] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5228] <... futex resumed>) = 0 [pid 5245] <... close resumed>) = 0 [pid 5238] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5236] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5235] open("./bus", O_RDWR [ 58.377757][ T26] audit: type=1804 audit(1672294491.302:96): pid=5229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor259" name="/root/syzkaller.SZgq5q/5/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 58.382182][ T5225] EXT4-fs (loop1): dirty_blocks=16 [ 58.400821][ T26] audit: type=1804 audit(1672294491.342:97): pid=5229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor259" name="/root/syzkaller.SZgq5q/5/file0/bus" dev="loop3" ino=18 res=1 errno=0 [pid 5228] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5245] symlink("/dev/binderfs", "./binderfs" [pid 5242] +++ exited with 0 +++ [pid 5238] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5236] <... futex resumed>) = 0 [pid 5235] <... open resumed>) = 6 [pid 5229] +++ exited with 0 +++ [pid 5227] +++ exited with 0 +++ [pid 5245] <... symlink resumed>) = 0 [pid 5238] open("./bus", O_RDWR [pid 5236] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5235] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5245] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5238] <... open resumed>) = 6 [pid 5235] <... futex resumed>) = 0 [pid 5228] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5227, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [ 58.428558][ T61] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 58.429378][ T26] audit: type=1804 audit(1672294491.642:98): pid=5235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor259" name="/root/syzkaller.LpWJ6a/5/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 58.465217][ T5225] EXT4-fs (loop1): Block reservation details [ 58.472191][ T5225] EXT4-fs (loop1): i_reserved_data_blocks=1 [pid 5245] <... futex resumed>) = 0 [pid 5238] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5235] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5228] <... futex resumed>) = 0 [pid 5068] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5241] <... ioctl resumed>) = 0 [pid 5241] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5241] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5225] <... sendfile resumed>) = 117 [pid 5225] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5225] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5245] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5238] <... futex resumed>) = 1 [pid 5236] <... futex resumed>) = 0 [pid 5235] <... mmap resumed>) = 0x20000000 [pid 5228] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5245] <... mmap resumed>) = 0x7f45152be000 [pid 5238] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5236] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE [pid 5238] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5236] <... futex resumed>) = 0 [pid 5223] exit_group(0 [pid 5068] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5235] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5238] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5236] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5245] <... mprotect resumed>) = 0 [pid 5223] <... exit_group resumed>) = ? [pid 5068] <... openat resumed>) = 3 [pid 5241] <... futex resumed>) = ? [pid 5225] <... futex resumed>) = ? [pid 5241] +++ exited with 0 +++ [pid 5225] +++ exited with 0 +++ [ 58.479036][ T26] audit: type=1804 audit(1672294491.642:99): pid=5238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor259" name="/root/syzkaller.rfbWou/5/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 58.504919][ T26] audit: type=1804 audit(1672294491.652:100): pid=5235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor259" name="/root/syzkaller.LpWJ6a/5/file0/bus" dev="loop0" ino=18 res=1 errno=0 [pid 5245] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5238] <... mmap resumed>) = 0x20000000 [pid 5235] <... futex resumed>) = 1 [pid 5228] <... futex resumed>) = 0 [pid 5223] +++ exited with 0 +++ [ 58.530739][ T26] audit: type=1804 audit(1672294491.702:101): pid=5238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor259" name="/root/syzkaller.rfbWou/5/file0/bus" dev="loop4" ino=18 res=1 errno=0 [pid 5068] fstat(3, [pid 5245] <... clone resumed>, parent_tid=[5246], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5246 [pid 5238] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5235] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5228] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5223, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5245] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5245] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5228] <... futex resumed>) = 0 [pid 5238] <... futex resumed>) = 1 [pid 5236] <... futex resumed>) = 0 [pid 5235] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5238] sendfile(4, 5, NULL, 2147483713 [pid 5236] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5235] sendfile(4, 5, NULL, 2147483713 [pid 5228] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5246 attached [pid 5236] <... futex resumed>) = 0 [pid 5246] set_robust_list(0x7f45152de9e0, 24 [pid 5236] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5246] <... set_robust_list resumed>) = 0 [pid 5068] getdents64(3, [pid 5066] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5246] memfd_create("syzkaller", 0) = 3 [pid 5068] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5246] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5246] <... mmap resumed>) = 0x7f450cebe000 [pid 5067] <... umount2 resumed>) = 0 [pid 5246] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5246] munmap(0x7f450cebe000, 1048576) = 0 [pid 5246] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5068] lstat("./5/binderfs", [pid 5066] <... openat resumed>) = 3 [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5246] <... openat resumed>) = 4 [pid 5246] ioctl(4, LOOP_SET_FD, 3 [pid 5066] fstat(3, [pid 5068] unlink("./5/binderfs" [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5246] <... ioctl resumed>) = 0 [pid 5246] close(3) = 0 [pid 5246] mkdir("./file0", 0777) = 0 [pid 5246] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5068] <... unlink resumed>) = 0 [pid 5066] getdents64(3, [pid 5067] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5067] rmdir("./5/file0") = 0 [pid 5067] getdents64(3, 0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./5") = 0 [pid 5067] mkdir("./6", 0777) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f755d0) = 5247 ./strace-static-x86_64: Process 5247 attached [pid 5247] set_robust_list(0x555556f755e0, 24) = 0 [pid 5247] chdir("./6") = 0 [pid 5247] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5247] setpgid(0, 0) = 0 [pid 5247] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5247] write(3, "1000", 4) = 4 [pid 5247] close(3) = 0 [pid 5247] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5247] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5247] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f45152be000 [pid 5247] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5066] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5228] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5066] unlink("./4/binderfs" [pid 5236] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5228] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... unlink resumed>) = 0 [pid 5247] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5249], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5249 [pid 5247] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5247] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5249 attached [pid 5249] set_robust_list(0x7f45152de9e0, 24) = 0 [pid 5249] memfd_create("syzkaller", 0) = 3 [pid 5249] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f450cebe000 [pid 5236] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5228] <... futex resumed>) = 0 [pid 5236] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5228] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5236] <... mmap resumed>) = 0x7f450cf9d000 [pid 5236] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5228] <... mmap resumed>) = 0x7f450cf9d000 [ 58.578526][ T5246] loop5: detected capacity change from 0 to 2048 [ 58.588758][ T5238] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 58.609182][ T5235] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5236] <... mprotect resumed>) = 0 [pid 5228] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5066] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5246] <... mount resumed>) = 0 [pid 5246] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5246] chdir("./file0") = 0 [pid 5246] ioctl(4, LOOP_CLR_FD) = 0 [pid 5246] close(4) = 0 [pid 5236] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5228] <... mprotect resumed>) = 0 [pid 5246] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5245] <... futex resumed>) = 0 [pid 5246] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5245] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5245] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 58.626867][ T11] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 58.627503][ T5238] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 58.652535][ T5235] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5249] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5228] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5249] <... write resumed>) = 1048576 [pid 5249] munmap(0x7f450cebe000, 1048576) = 0 [pid 5249] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5249] ioctl(4, LOOP_SET_FD, 3 [pid 5236] <... clone resumed>, parent_tid=[5251], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5251 [pid 5246] <... open resumed>) = 4 [pid 5236] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5246] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5236] <... futex resumed>) = 0 [pid 5228] <... clone resumed>, parent_tid=[5253], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5253 [pid 5236] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5228] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5246] <... futex resumed>) = 1 [pid 5245] <... futex resumed>) = 0 [pid 5245] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5245] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5246] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5228] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5251 attached [pid 5246] <... write resumed>) = 9 [pid 5228] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5246] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5245] <... futex resumed>) = 0 [pid 5245] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5246] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5245] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5253 attached [pid 5251] set_robust_list(0x7f450cfbd9e0, 24 [pid 5249] <... ioctl resumed>) = 0 [pid 5246] <... openat resumed>) = 5 [pid 5245] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... umount2 resumed>) = 0 [pid 5246] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5068] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5246] <... futex resumed>) = 0 [pid 5253] set_robust_list(0x7f450cfbd9e0, 24 [pid 5251] <... set_robust_list resumed>) = 0 [pid 5249] close(3 [pid 5246] open("./bus", O_RDWR [pid 5245] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 58.667506][ T41] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 58.670468][ T5249] loop2: detected capacity change from 0 to 2048 [ 58.687728][ T5238] EXT4-fs (loop4): This should not happen!! Data will be lost [ 58.687728][ T5238] [ 58.700554][ T5238] EXT4-fs (loop4): Total free blocks count 0 [ 58.709173][ T5238] EXT4-fs (loop4): Free/Dirty block details [ 58.717799][ T5235] EXT4-fs (loop0): This should not happen!! Data will be lost [ 58.717799][ T5235] [pid 5253] <... set_robust_list resumed>) = 0 [pid 5253] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5251] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5249] <... close resumed>) = 0 [pid 5246] <... open resumed>) = 6 [pid 5245] <... futex resumed>) = 0 [pid 5068] lstat("./5/file0", [pid 5249] mkdir("./file0", 0777 [pid 5246] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5249] <... mkdir resumed>) = 0 [pid 5246] <... futex resumed>) = 0 [pid 5245] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5068] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5249] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5246] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5245] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5236] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5228] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = 0 [pid 5246] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5245] <... futex resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5246] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5245] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... openat resumed>) = 4 [pid 5246] <... mmap resumed>) = 0x20000000 [pid 5068] fstat(4, [pid 5066] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5246] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5235] <... sendfile resumed>) = 117 [pid 5253] <... ioctl resumed>) = 0 [pid 5235] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5246] <... futex resumed>) = 1 [pid 5245] <... futex resumed>) = 0 [pid 5068] getdents64(4, [pid 5246] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5066] lstat("./4/file0", [pid 5253] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5246] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5245] <... futex resumed>) = 0 [pid 5228] exit_group(0 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5246] sendfile(4, 5, NULL, 2147483713 [pid 5245] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5228] <... exit_group resumed>) = ? [pid 5068] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5253] <... futex resumed>) = ? [pid 5066] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5253] +++ exited with 0 +++ [pid 5068] getdents64(4, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5066] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5235] <... futex resumed>) = ? [pid 5068] close(4 [pid 5066] <... openat resumed>) = 4 [pid 5068] <... close resumed>) = 0 [pid 5068] rmdir("./5/file0" [pid 5066] fstat(4, [pid 5235] +++ exited with 0 +++ [pid 5228] +++ exited with 0 +++ [pid 5068] <... rmdir resumed>) = 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 58.728472][ T5235] EXT4-fs (loop0): Total free blocks count 0 [ 58.735662][ T5235] EXT4-fs (loop0): Free/Dirty block details [ 58.742564][ T5235] EXT4-fs (loop0): free_blocks=2415919104 [ 58.743725][ T5238] EXT4-fs (loop4): free_blocks=2415919104 [ 58.752887][ T5235] EXT4-fs (loop0): dirty_blocks=16 [ 58.760918][ T5235] EXT4-fs (loop0): Block reservation details [ 58.769153][ T5235] EXT4-fs (loop0): i_reserved_data_blocks=1 [pid 5068] getdents64(3, [pid 5066] getdents64(4, [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5228, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5066] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5068] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5068] close(3 [pid 5066] getdents64(4, 0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5068] <... close resumed>) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./4/file0" [pid 5065] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... rmdir resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] rmdir("./5" [pid 5066] getdents64(3, [pid 5065] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... rmdir resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5065] fstat(3, [pid 5066] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] mkdir("./6", 0777 [pid 5066] close(3 [pid 5065] getdents64(3, [pid 5068] <... mkdir resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5066] rmdir("./4" [pid 5065] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... openat resumed>) = 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5066] <... rmdir resumed>) = 0 [pid 5065] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] mkdir("./5", 0777 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] unlink("./5/binderfs" [pid 5066] <... mkdir resumed>) = 0 [pid 5068] close(3 [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] <... unlink resumed>) = 0 [pid 5065] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... openat resumed>) = 3 [pid 5245] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5245] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 58.785410][ T5238] EXT4-fs (loop4): dirty_blocks=16 [ 58.789134][ T5246] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 58.792026][ T5238] EXT4-fs (loop4): Block reservation details [pid 5245] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f450cf9d000 [pid 5068] <... close resumed>) = 0 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5245] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5245] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5251] <... ioctl resumed>) = 0 [pid 5238] <... sendfile resumed>) = 117 [pid 5251] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] <... clone resumed>, parent_tid=[5256], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5256 [pid 5238] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5238] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5249] <... mount resumed>) = 0 [pid 5251] <... futex resumed>) = 0 [pid 5245] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5236] exit_group(0) = ? [pid 5245] <... futex resumed>) = 0 [pid 5251] +++ exited with 0 +++ [pid 5245] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5238] <... futex resumed>) = ? [pid 5238] +++ exited with 0 +++ [pid 5236] +++ exited with 0 +++ [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5236, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5249] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5066] close(3 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5249] <... openat resumed>) = 3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... close resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5249] chdir("./file0" [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5249] <... chdir resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5249] ioctl(4, LOOP_CLR_FD [pid 5069] fstat(3, [pid 5068] <... clone resumed>, child_tidptr=0x555556f755d0) = 5257 [pid 5249] <... ioctl resumed>) = 0 [pid 5069] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5249] close(4 [pid 5069] getdents64(3, [pid 5066] <... clone resumed>, child_tidptr=0x555556f755d0) = 5258 [pid 5069] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5249] <... close resumed>) = 0 [pid 5069] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5249] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5247] <... futex resumed>) = 0 [pid 5249] <... futex resumed>) = 1 [pid 5247] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] lstat("./5/binderfs", [pid 5249] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5247] <... futex resumed>) = 0 [pid 5069] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5247] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5249] <... open resumed>) = 4 [pid 5069] unlink("./5/binderfs" [pid 5065] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5256 attached [pid 5249] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5256] set_robust_list(0x7f450cfbd9e0, 24 [pid 5249] <... futex resumed>) = 1 [pid 5247] <... futex resumed>) = 0 [pid 5249] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5247] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5249] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5247] <... futex resumed>) = 0 [ 58.830565][ T5238] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 58.837074][ T5252] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 58.868695][ T5246] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5249] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5247] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5258 attached ./strace-static-x86_64: Process 5257 attached [pid 5256] <... set_robust_list resumed>) = 0 [pid 5249] <... write resumed>) = 9 [pid 5069] <... unlink resumed>) = 0 [pid 5065] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5258] set_robust_list(0x555556f755e0, 24 [pid 5257] set_robust_list(0x555556f755e0, 24 [pid 5256] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5249] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5258] <... set_robust_list resumed>) = 0 [pid 5257] <... set_robust_list resumed>) = 0 [pid 5249] <... futex resumed>) = 1 [pid 5247] <... futex resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5258] chdir("./5" [pid 5257] chdir("./6" [pid 5249] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5247] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5258] <... chdir resumed>) = 0 [pid 5257] <... chdir resumed>) = 0 [pid 5249] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5247] <... futex resumed>) = 0 [pid 5065] lstat("./5/file0", [pid 5258] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5257] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5249] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5247] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5258] <... prctl resumed>) = 0 [pid 5257] <... prctl resumed>) = 0 [pid 5249] <... openat resumed>) = 5 [pid 5065] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5258] setpgid(0, 0 [pid 5257] setpgid(0, 0 [pid 5249] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5258] <... setpgid resumed>) = 0 [pid 5257] <... setpgid resumed>) = 0 [pid 5249] <... futex resumed>) = 1 [pid 5247] <... futex resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5258] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5257] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5249] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5247] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... openat resumed>) = 4 [pid 5258] <... openat resumed>) = 3 [pid 5257] <... openat resumed>) = 3 [pid 5249] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5247] <... futex resumed>) = 0 [pid 5065] fstat(4, [pid 5258] write(3, "1000", 4 [pid 5257] write(3, "1000", 4 [pid 5249] open("./bus", O_RDWR [pid 5247] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5258] <... write resumed>) = 4 [pid 5257] <... write resumed>) = 4 [pid 5249] <... open resumed>) = 6 [pid 5065] getdents64(4, [pid 5258] close(3 [pid 5257] close(3 [pid 5249] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5065] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5258] <... close resumed>) = 0 [pid 5257] <... close resumed>) = 0 [pid 5249] <... futex resumed>) = 1 [pid 5247] <... futex resumed>) = 0 [pid 5065] getdents64(4, [pid 5258] symlink("/dev/binderfs", "./binderfs" [pid 5257] symlink("/dev/binderfs", "./binderfs" [pid 5249] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5247] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5258] <... symlink resumed>) = 0 [pid 5257] <... symlink resumed>) = 0 [pid 5249] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5247] <... futex resumed>) = 0 [pid 5065] close(4 [pid 5258] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5257] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5249] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5247] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] <... close resumed>) = 0 [pid 5258] <... futex resumed>) = 0 [pid 5257] <... futex resumed>) = 0 [pid 5249] <... mmap resumed>) = 0x20000000 [ 58.883673][ T5246] EXT4-fs (loop5): This should not happen!! Data will be lost [ 58.883673][ T5246] [ 58.901284][ T5252] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 58.927049][ T5246] EXT4-fs (loop5): Total free blocks count 0 [pid 5065] rmdir("./5/file0" [pid 5258] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5257] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5249] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... rmdir resumed>) = 0 [pid 5258] <... mmap resumed>) = 0x7f45152be000 [pid 5257] <... mmap resumed>) = 0x7f45152be000 [pid 5249] <... futex resumed>) = 1 [pid 5247] <... futex resumed>) = 0 [pid 5065] getdents64(3, [pid 5258] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE [pid 5257] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE [pid 5249] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5247] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5258] <... mprotect resumed>) = 0 [pid 5257] <... mprotect resumed>) = 0 [pid 5249] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5247] <... futex resumed>) = 0 [pid 5065] close(3 [pid 5258] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5257] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5249] sendfile(4, 5, NULL, 2147483713 [pid 5247] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./5" [pid 5258] <... clone resumed>, parent_tid=[5259], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5259 [pid 5257] <... clone resumed>, parent_tid=[5260], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5260 [pid 5065] <... rmdir resumed>) = 0 [pid 5258] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5257] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] mkdir("./6", 0777 [pid 5258] <... futex resumed>) = 0 [pid 5257] <... futex resumed>) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5258] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5257] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ./strace-static-x86_64: Process 5260 attached [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5260] set_robust_list(0x7f45152de9e0, 24 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 5259 attached [pid 5260] <... set_robust_list resumed>) = 0 [ 58.933503][ T5246] EXT4-fs (loop5): Free/Dirty block details [ 58.940471][ T5246] EXT4-fs (loop5): free_blocks=2415919104 [ 58.945400][ T5249] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 58.947006][ T5246] EXT4-fs (loop5): dirty_blocks=16 [ 58.968785][ T5246] EXT4-fs (loop5): Block reservation details [ 58.974942][ T5246] EXT4-fs (loop5): i_reserved_data_blocks=1 [pid 5065] close(3 [pid 5260] memfd_create("syzkaller", 0 [pid 5259] set_robust_list(0x7f45152de9e0, 24 [pid 5256] <... ioctl resumed>) = 0 [pid 5246] <... sendfile resumed>) = 117 [pid 5065] <... close resumed>) = 0 [pid 5260] <... memfd_create resumed>) = 3 [pid 5259] <... set_robust_list resumed>) = 0 [pid 5256] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5260] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5259] memfd_create("syzkaller", 0 [pid 5256] <... futex resumed>) = 0 [pid 5260] <... mmap resumed>) = 0x7f450cebe000 [pid 5259] <... memfd_create resumed>) = 3 [pid 5256] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5065] <... clone resumed>, child_tidptr=0x555556f755d0) = 5261 [pid 5260] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5259] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f450cebe000 [pid 5259] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5246] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5247] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5246] <... futex resumed>) = 0 [pid 5247] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5247] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f450cf9d000 [pid 5247] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5246] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5261 attached [pid 5247] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5261] set_robust_list(0x555556f755e0, 24 [pid 5247] <... clone resumed>, parent_tid=[5262], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5262 [pid 5245] exit_group(0 [pid 5247] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 58.981874][ T5249] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 58.994366][ T5249] EXT4-fs (loop2): This should not happen!! Data will be lost [ 58.994366][ T5249] [ 59.006031][ T5249] EXT4-fs (loop2): Total free blocks count 0 [ 59.015112][ T5249] EXT4-fs (loop2): Free/Dirty block details [ 59.021315][ T5249] EXT4-fs (loop2): free_blocks=2415919104 [ 59.029433][ T5249] EXT4-fs (loop2): dirty_blocks=16 [pid 5247] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5261] <... set_robust_list resumed>) = 0 [pid 5259] <... write resumed>) = 1048576 [pid 5256] <... futex resumed>) = ? [pid 5246] <... futex resumed>) = ? [pid 5245] <... exit_group resumed>) = ? [pid 5069] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5262 attached [pid 5261] chdir("./6" [pid 5262] set_robust_list(0x7f450cfbd9e0, 24 [pid 5261] <... chdir resumed>) = 0 [pid 5262] <... set_robust_list resumed>) = 0 [pid 5261] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5262] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5261] <... prctl resumed>) = 0 [pid 5261] setpgid(0, 0 [pid 5256] +++ exited with 0 +++ [pid 5246] +++ exited with 0 +++ [pid 5261] <... setpgid resumed>) = 0 [pid 5262] <... ioctl resumed>) = 0 [pid 5261] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5259] munmap(0x7f450cebe000, 1048576 [pid 5249] <... sendfile resumed>) = 117 [pid 5245] +++ exited with 0 +++ [pid 5069] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5262] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5261] <... openat resumed>) = 3 [pid 5262] <... futex resumed>) = 1 [pid 5261] write(3, "1000", 4 [pid 5247] <... futex resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5262] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5261] <... write resumed>) = 4 [pid 5249] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5247] exit_group(0 [pid 5262] <... futex resumed>) = ? [pid 5261] close(3 [pid 5247] <... exit_group resumed>) = ? [pid 5262] +++ exited with 0 +++ [pid 5261] <... close resumed>) = 0 [pid 5260] <... write resumed>) = 1048576 [pid 5259] <... munmap resumed>) = 0 [pid 5249] <... futex resumed>) = ? [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5245, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5069] lstat("./5/file0", [pid 5261] symlink("/dev/binderfs", "./binderfs" [pid 5260] munmap(0x7f450cebe000, 1048576 [pid 5259] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5249] +++ exited with 0 +++ [pid 5247] +++ exited with 0 +++ [pid 5070] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5261] <... symlink resumed>) = 0 [pid 5259] <... openat resumed>) = 4 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5247, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5261] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5259] ioctl(4, LOOP_SET_FD, 3 [pid 5070] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5261] <... futex resumed>) = 0 [pid 5260] <... munmap resumed>) = 0 [pid 5070] <... openat resumed>) = 3 [pid 5069] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5261] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5260] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5070] fstat(3, [pid 5069] <... openat resumed>) = 4 [pid 5261] <... mmap resumed>) = 0x7f45152be000 [pid 5070] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5069] fstat(4, [pid 5260] <... openat resumed>) = 4 [pid 5261] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE [pid 5260] ioctl(4, LOOP_SET_FD, 3 [pid 5259] <... ioctl resumed>) = 0 [pid 5070] getdents64(3, [pid 5069] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5261] <... mprotect resumed>) = 0 [pid 5259] close(3 [pid 5070] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5069] getdents64(4, [pid 5259] <... close resumed>) = 0 [pid 5070] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5259] mkdir("./file0", 0777 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] getdents64(4, [pid 5259] <... mkdir resumed>) = 0 [pid 5070] lstat("./5/binderfs", [pid 5069] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5259] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5070] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5069] close(4 [pid 5070] unlink("./5/binderfs" [pid 5069] <... close resumed>) = 0 [pid 5261] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5070] <... unlink resumed>) = 0 [pid 5069] rmdir("./5/file0"./strace-static-x86_64: Process 5263 attached [pid 5260] <... ioctl resumed>) = 0 [pid 5070] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... rmdir resumed>) = 0 [ 59.034861][ T5249] EXT4-fs (loop2): Block reservation details [ 59.041158][ T5249] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 59.061613][ T5259] loop1: detected capacity change from 0 to 2048 [ 59.072600][ T5260] loop3: detected capacity change from 0 to 2048 [pid 5067] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5263] set_robust_list(0x7f45152de9e0, 24 [pid 5261] <... clone resumed>, parent_tid=[5263], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5263 [pid 5260] close(3 [pid 5069] getdents64(3, [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5069] close(3) = 0 [pid 5261] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] rmdir("./5" [pid 5067] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5263] <... set_robust_list resumed>) = 0 [pid 5261] <... futex resumed>) = 0 [pid 5260] <... close resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5069] mkdir("./6", 0777) = 0 [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5069] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5069] close(3 [pid 5263] memfd_create("syzkaller", 0 [pid 5261] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5260] mkdir("./file0", 0777 [pid 5069] <... close resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5263] <... memfd_create resumed>) = 3 [pid 5260] <... mkdir resumed>) = 0 [pid 5069] <... clone resumed>, child_tidptr=0x555556f755d0) = 5265 [pid 5067] fstat(3, [pid 5263] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5263] <... mmap resumed>) = 0x7f450cebe000 [pid 5067] getdents64(3, 0x555556f76620 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 5265 attached [pid 5265] set_robust_list(0x555556f755e0, 24) = 0 [pid 5265] chdir("./6") = 0 [pid 5265] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5265] setpgid(0, 0) = 0 [pid 5265] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5265] write(3, "1000", 4 [pid 5263] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5260] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5067] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5265] <... write resumed>) = 4 [pid 5265] close(3) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5265] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5067] lstat("./6/binderfs", [pid 5265] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5265] <... futex resumed>) = 0 [pid 5265] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f45152be000 [pid 5265] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5265] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5067] unlink("./6/binderfs" [pid 5265] <... clone resumed>, parent_tid=[5267], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5267 [pid 5067] <... unlink resumed>) = 0 [pid 5265] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5265] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5259] <... mount resumed>) = 0 [pid 5067] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5259] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 59.083637][ T11] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 59.099541][ T11] EXT4-fs (loop5): This should not happen!! Data will be lost [ 59.099541][ T11] [pid 5259] chdir("./file0"./strace-static-x86_64: Process 5267 attached [pid 5263] <... write resumed>) = 1048576 [pid 5259] <... chdir resumed>) = 0 [pid 5070] <... umount2 resumed>) = 0 [pid 5267] set_robust_list(0x7f45152de9e0, 24 [pid 5259] ioctl(4, LOOP_CLR_FD [pid 5070] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5267] <... set_robust_list resumed>) = 0 [pid 5263] munmap(0x7f450cebe000, 1048576 [pid 5259] <... ioctl resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5267] memfd_create("syzkaller", 0 [pid 5263] <... munmap resumed>) = 0 [pid 5259] close(4 [pid 5070] lstat("./5/file0", [pid 5267] <... memfd_create resumed>) = 3 [pid 5263] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5259] <... close resumed>) = 0 [pid 5070] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5267] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5263] <... openat resumed>) = 4 [pid 5259] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5267] <... mmap resumed>) = 0x7f450cebe000 [pid 5263] ioctl(4, LOOP_SET_FD, 3 [pid 5259] <... futex resumed>) = 1 [pid 5258] <... futex resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5267] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5259] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5258] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5259] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5258] <... futex resumed>) = 0 [pid 5070] <... openat resumed>) = 4 [pid 5259] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5258] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] fstat(4, [pid 5267] <... write resumed>) = 1048576 [pid 5263] <... ioctl resumed>) = 0 [pid 5259] <... open resumed>) = 4 [pid 5070] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5267] munmap(0x7f450cebe000, 1048576 [pid 5263] close(3 [pid 5267] <... munmap resumed>) = 0 [pid 5263] <... close resumed>) = 0 [pid 5267] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5263] mkdir("./file0", 0777 [pid 5267] <... openat resumed>) = 4 [pid 5263] <... mkdir resumed>) = 0 [ 59.140493][ T11] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 59.169834][ T5263] loop0: detected capacity change from 0 to 2048 [ 59.178886][ T11] EXT4-fs (loop2): This should not happen!! Data will be lost [ 59.178886][ T11] [pid 5259] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] getdents64(4, [pid 5267] ioctl(4, LOOP_SET_FD, 3 [pid 5263] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5267] <... ioctl resumed>) = 0 [pid 5260] <... mount resumed>) = 0 [pid 5259] <... futex resumed>) = 1 [pid 5258] <... futex resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5260] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5259] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5258] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] getdents64(4, [pid 5067] <... umount2 resumed>) = 0 [pid 5260] <... openat resumed>) = 3 [pid 5259] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5258] <... futex resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5260] chdir("./file0" [pid 5259] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5258] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] close(4 [pid 5067] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] <... close resumed>) = 0 [pid 5260] <... chdir resumed>) = 0 [pid 5259] <... write resumed>) = 9 [pid 5070] rmdir("./5/file0" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5267] close(3 [pid 5260] ioctl(4, LOOP_CLR_FD [pid 5259] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5267] <... close resumed>) = 0 [pid 5259] <... futex resumed>) = 1 [pid 5258] <... futex resumed>) = 0 [pid 5070] <... rmdir resumed>) = 0 [pid 5260] <... ioctl resumed>) = 0 [pid 5067] lstat("./6/file0", [pid 5267] mkdir("./file0", 0777) = 0 [pid 5260] close(4 [pid 5259] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5258] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] getdents64(3, [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5267] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5260] <... close resumed>) = 0 [pid 5260] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5259] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5258] <... futex resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5260] <... futex resumed>) = 1 [pid 5259] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5258] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5257] <... futex resumed>) = 0 [pid 5070] close(3 [pid 5260] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5259] <... openat resumed>) = 5 [pid 5257] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... close resumed>) = 0 [pid 5260] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5260] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5259] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5257] <... futex resumed>) = 0 [pid 5070] rmdir("./5" [pid 5067] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5259] <... futex resumed>) = 1 [pid 5258] <... futex resumed>) = 0 [pid 5257] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... rmdir resumed>) = 0 [pid 5259] open("./bus", O_RDWR [pid 5258] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5260] <... open resumed>) = 4 [pid 5070] mkdir("./6", 0777 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5259] <... open resumed>) = 6 [pid 5258] <... futex resumed>) = 0 [pid 5070] <... mkdir resumed>) = 0 [pid 5260] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5259] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5258] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5067] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5260] <... futex resumed>) = 1 [pid 5259] <... futex resumed>) = 0 [pid 5258] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5257] <... futex resumed>) = 0 [pid 5070] <... openat resumed>) = 3 [pid 5260] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5259] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5258] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5257] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] ioctl(3, LOOP_CLR_FD [pid 5067] <... openat resumed>) = 4 [pid 5260] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5259] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5258] <... futex resumed>) = 0 [pid 5257] <... futex resumed>) = 0 [pid 5070] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] fstat(4, [pid 5260] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5259] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5258] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5257] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] close(3 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5260] <... write resumed>) = 9 [pid 5259] <... mmap resumed>) = 0x20000000 [pid 5070] <... close resumed>) = 0 [pid 5067] getdents64(4, [pid 5260] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5259] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5260] <... futex resumed>) = 1 [pid 5257] <... futex resumed>) = 0 [pid 5067] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5263] <... mount resumed>) = 0 [pid 5260] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5259] <... futex resumed>) = 1 [pid 5258] <... futex resumed>) = 0 [pid 5257] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [ 59.197330][ T5267] loop4: detected capacity change from 0 to 2048 [pid 5067] getdents64(4, ./strace-static-x86_64: Process 5272 attached [pid 5263] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5260] <... openat resumed>) = 5 [pid 5259] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5258] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5257] <... futex resumed>) = 0 [pid 5070] <... clone resumed>, child_tidptr=0x555556f755d0) = 5272 [pid 5067] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5263] <... openat resumed>) = 3 [pid 5260] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5259] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5258] <... futex resumed>) = 0 [pid 5257] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] close(4 [pid 5272] set_robust_list(0x555556f755e0, 24 [pid 5263] chdir("./file0" [pid 5260] <... futex resumed>) = 0 [pid 5259] sendfile(4, 5, NULL, 2147483713 [pid 5258] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5257] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5067] <... close resumed>) = 0 [pid 5272] <... set_robust_list resumed>) = 0 [pid 5263] <... chdir resumed>) = 0 [pid 5260] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5257] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5260] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5067] rmdir("./6/file0" [pid 5263] ioctl(4, LOOP_CLR_FD [pid 5260] open("./bus", O_RDWR [pid 5257] <... futex resumed>) = 0 [pid 5263] <... ioctl resumed>) = 0 [pid 5257] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] <... rmdir resumed>) = 0 [pid 5263] close(4 [pid 5260] <... open resumed>) = 6 [pid 5272] chdir("./6" [pid 5263] <... close resumed>) = 0 [pid 5067] getdents64(3, [pid 5267] <... mount resumed>) = 0 [pid 5263] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5260] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5267] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5263] <... futex resumed>) = 1 [pid 5261] <... futex resumed>) = 0 [pid 5260] <... futex resumed>) = 1 [pid 5257] <... futex resumed>) = 0 [pid 5067] close(3 [pid 5263] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5261] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5260] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5257] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5272] <... chdir resumed>) = 0 [pid 5267] <... openat resumed>) = 3 [pid 5263] <... open resumed>) = 4 [pid 5261] <... futex resumed>) = 0 [pid 5260] <... mmap resumed>) = 0x20000000 [pid 5257] <... futex resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5272] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5267] chdir("./file0" [pid 5263] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5261] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5260] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5257] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] rmdir("./6" [pid 5272] <... prctl resumed>) = 0 [pid 5267] <... chdir resumed>) = 0 [pid 5263] <... futex resumed>) = 0 [pid 5261] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5260] <... futex resumed>) = 0 [pid 5257] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5067] <... rmdir resumed>) = 0 [pid 5272] setpgid(0, 0 [pid 5267] ioctl(4, LOOP_CLR_FD [pid 5263] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5261] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5260] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5257] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] mkdir("./7", 0777 [pid 5272] <... setpgid resumed>) = 0 [pid 5267] <... ioctl resumed>) = 0 [pid 5263] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5261] <... futex resumed>) = 0 [pid 5260] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5257] <... futex resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5272] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5267] close(4 [pid 5263] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5261] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5260] sendfile(4, 5, NULL, 2147483713 [pid 5257] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5272] <... openat resumed>) = 3 [pid 5267] <... close resumed>) = 0 [pid 5263] <... write resumed>) = 9 [pid 5067] <... openat resumed>) = 3 [pid 5272] write(3, "1000", 4 [pid 5267] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5263] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5272] <... write resumed>) = 4 [pid 5267] <... futex resumed>) = 1 [pid 5265] <... futex resumed>) = 0 [pid 5263] <... futex resumed>) = 1 [pid 5261] <... futex resumed>) = 0 [pid 5258] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5272] close(3 [pid 5267] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5265] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5263] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5261] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5258] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [ 59.265786][ T5259] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 59.282294][ T5259] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5067] close(3 [pid 5272] <... close resumed>) = 0 [pid 5267] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5265] <... futex resumed>) = 0 [pid 5263] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5261] <... futex resumed>) = 0 [pid 5258] <... futex resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5272] symlink("/dev/binderfs", "./binderfs" [pid 5267] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5265] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5272] <... symlink resumed>) = 0 [pid 5272] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... clone resumed>, child_tidptr=0x555556f755d0) = 5275 [pid 5272] <... futex resumed>) = 0 [pid 5272] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f45152be000 [pid 5272] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5272] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5276], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5276 [pid 5272] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5272] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5276 attached ./strace-static-x86_64: Process 5275 attached [pid 5267] <... open resumed>) = 4 [pid 5263] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5261] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5258] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5276] set_robust_list(0x7f45152de9e0, 24 [pid 5267] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5265] <... futex resumed>) = 0 [pid 5263] <... openat resumed>) = 5 [pid 5258] <... mmap resumed>) = 0x7f450cf9d000 [pid 5276] <... set_robust_list resumed>) = 0 [pid 5275] set_robust_list(0x555556f755e0, 24 [pid 5267] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5265] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5263] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5258] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5257] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5265] <... futex resumed>) = 0 [pid 5258] <... mprotect resumed>) = 0 [pid 5257] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5265] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5263] <... futex resumed>) = 1 [pid 5257] <... futex resumed>) = 0 [pid 5261] <... futex resumed>) = 0 [pid 5267] <... write resumed>) = 9 [pid 5263] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5261] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5258] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5257] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5267] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5263] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5261] <... futex resumed>) = 0 [pid 5257] <... mmap resumed>) = 0x7f450cf9d000 [pid 5267] <... futex resumed>) = 1 [pid 5265] <... futex resumed>) = 0 [pid 5263] open("./bus", O_RDWR [pid 5257] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5261] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5258] <... clone resumed>, parent_tid=[5277], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5277 [pid 5267] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5265] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5263] <... open resumed>) = 6 [pid 5257] <... mprotect resumed>) = 0 [pid 5258] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5267] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5265] <... futex resumed>) = 0 [pid 5263] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5258] <... futex resumed>) = 0 [pid 5257] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5276] memfd_create("syzkaller", 0 [pid 5267] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5265] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5263] <... futex resumed>) = 1 [pid 5261] <... futex resumed>) = 0 [pid 5258] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5275] <... set_robust_list resumed>) = 0 [pid 5267] <... openat resumed>) = 5 [pid 5261] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5257] <... clone resumed>, parent_tid=[5278], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5278 [pid 5267] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5263] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5261] <... futex resumed>) = 0 [pid 5257] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5267] <... futex resumed>) = 1 [pid 5265] <... futex resumed>) = 0 [pid 5257] <... futex resumed>) = 0 [ 59.311223][ T5260] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 59.322378][ T5259] EXT4-fs (loop1): This should not happen!! Data will be lost [ 59.322378][ T5259] [ 59.338223][ T5259] EXT4-fs (loop1): Total free blocks count 0 [ 59.345143][ T5259] EXT4-fs (loop1): Free/Dirty block details [ 59.351683][ T5259] EXT4-fs (loop1): free_blocks=2415919104 [pid 5257] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5278 attached ./strace-static-x86_64: Process 5277 attached [pid 5276] <... memfd_create resumed>) = 3 [pid 5275] chdir("./7" [pid 5267] open("./bus", O_RDWR [pid 5265] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5263] <... mmap resumed>) = 0x20000000 [pid 5261] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5278] set_robust_list(0x7f450cfbd9e0, 24 [pid 5277] set_robust_list(0x7f450cfbd9e0, 24 [pid 5276] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5275] <... chdir resumed>) = 0 [pid 5267] <... open resumed>) = 6 [pid 5265] <... futex resumed>) = 0 [pid 5263] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5261] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5278] <... set_robust_list resumed>) = 0 [pid 5277] <... set_robust_list resumed>) = 0 [pid 5276] <... mmap resumed>) = 0x7f450cebe000 [pid 5275] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5267] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5265] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5263] <... futex resumed>) = 0 [pid 5261] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5278] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5277] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5276] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5275] <... prctl resumed>) = 0 [pid 5267] <... futex resumed>) = 0 [pid 5265] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5263] sendfile(4, 5, NULL, 2147483713 [pid 5261] <... futex resumed>) = 0 [ 59.366676][ T5260] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 59.379045][ T5259] EXT4-fs (loop1): dirty_blocks=16 [ 59.380260][ T5260] EXT4-fs (loop3): This should not happen!! Data will be lost [ 59.380260][ T5260] [ 59.385647][ T5259] EXT4-fs (loop1): Block reservation details [ 59.395794][ T5260] EXT4-fs (loop3): Total free blocks count 0 [ 59.407672][ T5260] EXT4-fs (loop3): Free/Dirty block details [pid 5275] setpgid(0, 0 [pid 5267] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5265] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5261] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5258] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5257] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5275] <... setpgid resumed>) = 0 [pid 5267] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5265] <... futex resumed>) = 0 [pid 5275] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5267] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5265] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5275] <... openat resumed>) = 3 [pid 5267] <... mmap resumed>) = 0x20000000 [pid 5275] write(3, "1000", 4 [pid 5267] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5275] <... write resumed>) = 4 [pid 5267] <... futex resumed>) = 1 [pid 5265] <... futex resumed>) = 0 [pid 5276] <... write resumed>) = 1048576 [pid 5275] close(3 [pid 5267] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5265] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5275] <... close resumed>) = 0 [pid 5267] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5265] <... futex resumed>) = 0 [pid 5267] sendfile(4, 5, NULL, 2147483713 [pid 5265] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 59.414954][ T5260] EXT4-fs (loop3): free_blocks=2415919104 [ 59.420032][ T5263] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 59.422147][ T5260] EXT4-fs (loop3): dirty_blocks=16 [ 59.449850][ T5260] EXT4-fs (loop3): Block reservation details [ 59.458498][ T5259] EXT4-fs (loop1): i_reserved_data_blocks=1 [pid 5275] symlink("/dev/binderfs", "./binderfs" [pid 5276] munmap(0x7f450cebe000, 1048576 [pid 5275] <... symlink resumed>) = 0 [pid 5275] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5276] <... munmap resumed>) = 0 [pid 5276] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5276] ioctl(4, LOOP_SET_FD, 3 [pid 5275] <... futex resumed>) = 0 [pid 5261] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5265] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5259] <... sendfile resumed>) = 117 [pid 5259] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 59.462930][ T5267] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 59.465476][ T5263] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 59.480659][ T5267] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 59.497031][ T5276] loop5: detected capacity change from 0 to 2048 [pid 5259] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5275] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5265] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5261] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5277] <... ioctl resumed>) = 0 [pid 5277] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5275] <... mmap resumed>) = 0x7f45152be000 [pid 5265] <... futex resumed>) = 0 [pid 5261] <... futex resumed>) = 0 [pid 5258] exit_group(0 [pid 5259] <... futex resumed>) = ? [pid 5258] <... exit_group resumed>) = ? [pid 5259] +++ exited with 0 +++ [pid 5276] <... ioctl resumed>) = 0 [pid 5276] close(3) = 0 [pid 5276] mkdir("./file0", 0777) = 0 [pid 5276] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5277] <... futex resumed>) = ? [pid 5275] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE [pid 5265] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5261] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5275] <... mprotect resumed>) = 0 [pid 5277] +++ exited with 0 +++ [pid 5260] <... sendfile resumed>) = 117 [pid 5258] +++ exited with 0 +++ [pid 5278] <... ioctl resumed>) = 0 [pid 5265] <... mmap resumed>) = 0x7f450cf9d000 [pid 5261] <... mmap resumed>) = 0x7f450cf9d000 [pid 5278] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5258, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5275] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5265] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5261] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5260] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5260] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5257] exit_group(0) = ? [pid 5260] <... futex resumed>) = ? [pid 5260] +++ exited with 0 +++ [pid 5278] <... futex resumed>) = ? [pid 5265] <... mprotect resumed>) = 0 [pid 5261] <... mprotect resumed>) = 0 [pid 5066] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5280 attached [pid 5280] set_robust_list(0x7f45152de9e0, 24) = 0 [pid 5280] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5276] <... mount resumed>) = 0 [pid 5276] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5276] chdir("./file0" [pid 5278] +++ exited with 0 +++ [pid 5257] +++ exited with 0 +++ [pid 5275] <... clone resumed>, parent_tid=[5280], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5280 [pid 5265] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5261] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5283 attached [pid 5275] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5257, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [ 59.510873][ T5267] EXT4-fs (loop4): This should not happen!! Data will be lost [ 59.510873][ T5267] [ 59.514169][ T5260] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 59.528650][ T5267] EXT4-fs (loop4): Total free blocks count 0 [ 59.539616][ T5267] EXT4-fs (loop4): Free/Dirty block details [ 59.545780][ T5267] EXT4-fs (loop4): free_blocks=2415919104 [ 59.550796][ T5263] EXT4-fs (loop0): This should not happen!! Data will be lost [ 59.550796][ T5263] [ 59.552866][ T5267] EXT4-fs (loop4): dirty_blocks=16 [pid 5066] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5276] <... chdir resumed>) = 0 [pid 5276] ioctl(4, LOOP_CLR_FD) = 0 [pid 5276] close(4) = 0 [pid 5275] <... futex resumed>) = 1 [pid 5265] <... clone resumed>, parent_tid=[5283], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5283 [pid 5261] <... clone resumed>, parent_tid=[5282], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5282 [pid 5068] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... openat resumed>) = 3 [pid 5283] set_robust_list(0x7f450cfbd9e0, 24 [pid 5276] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5272] <... futex resumed>) = 0 [pid 5272] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5272] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5276] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000) = 4 [pid 5276] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5272] <... futex resumed>) = 0 [pid 5272] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5272] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5276] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5283] <... set_robust_list resumed>) = 0 [pid 5276] <... write resumed>) = 9 [pid 5275] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5267] <... sendfile resumed>) = 117 [pid 5265] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5261] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] fstat(3, [pid 5280] <... futex resumed>) = 0 [pid 5276] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5280] memfd_create("syzkaller", 0 [pid 5276] <... futex resumed>) = 1 [pid 5272] <... futex resumed>) = 0 [pid 5280] <... memfd_create resumed>) = 3 [pid 5276] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5272] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5283] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5280] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5276] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5272] <... futex resumed>) = 0 [pid 5267] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5265] <... futex resumed>) = 0 [pid 5261] <... futex resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5283] <... ioctl resumed>) = 0 [pid 5280] <... mmap resumed>) = 0x7f450cebe000 [pid 5276] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5272] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5276] <... openat resumed>) = 5 ./strace-static-x86_64: Process 5282 attached [pid 5276] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5283] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5282] set_robust_list(0x7f450cfbd9e0, 24 [pid 5276] <... futex resumed>) = 1 [pid 5272] <... futex resumed>) = 0 [pid 5267] <... futex resumed>) = 0 [pid 5265] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5261] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... openat resumed>) = 3 [pid 5066] getdents64(3, [pid 5283] <... futex resumed>) = 0 [pid 5282] <... set_robust_list resumed>) = 0 [pid 5276] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5272] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5267] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5265] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5283] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5282] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5280] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5276] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5272] <... futex resumed>) = 0 [pid 5068] fstat(3, [pid 5066] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5276] open("./bus", O_RDWR [pid 5272] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5265] exit_group(0 [pid 5276] <... open resumed>) = 6 [pid 5276] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5272] <... futex resumed>) = 0 [ 59.569872][ T5267] EXT4-fs (loop4): Block reservation details [ 59.576910][ T5267] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 59.583646][ T5263] EXT4-fs (loop0): Total free blocks count 0 [ 59.591442][ T5263] EXT4-fs (loop0): Free/Dirty block details [ 59.598923][ T5263] EXT4-fs (loop0): free_blocks=2415919104 [ 59.610580][ T5263] EXT4-fs (loop0): dirty_blocks=16 [pid 5276] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5272] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5276] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5272] <... futex resumed>) = 0 [pid 5276] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5272] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5265] <... exit_group resumed>) = ? [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5283] <... futex resumed>) = ? [pid 5276] <... mmap resumed>) = 0x20000000 [pid 5267] <... futex resumed>) = ? [pid 5276] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5283] +++ exited with 0 +++ [pid 5276] <... futex resumed>) = 1 [pid 5272] <... futex resumed>) = 0 [pid 5068] getdents64(3, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5276] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5272] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5276] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5272] <... futex resumed>) = 0 [pid 5267] +++ exited with 0 +++ [pid 5265] +++ exited with 0 +++ [pid 5066] lstat("./5/binderfs", [pid 5282] <... ioctl resumed>) = 0 [pid 5276] sendfile(4, 5, NULL, 2147483713 [pid 5272] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5263] <... sendfile resumed>) = 117 [pid 5068] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5282] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5280] <... write resumed>) = 1048576 [pid 5263] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5265, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5068] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5282] <... futex resumed>) = 1 [pid 5280] munmap(0x7f450cebe000, 1048576 [pid 5263] <... futex resumed>) = 0 [pid 5261] <... futex resumed>) = 0 [pid 5069] restart_syscall(<... resuming interrupted clone ...> [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] unlink("./5/binderfs" [pid 5282] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5280] <... munmap resumed>) = 0 [pid 5263] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5261] exit_group(0 [pid 5069] <... restart_syscall resumed>) = 0 [pid 5068] lstat("./6/binderfs", [pid 5066] <... unlink resumed>) = 0 [pid 5282] <... futex resumed>) = ? [pid 5280] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5263] <... futex resumed>) = ? [pid 5261] <... exit_group resumed>) = ? [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5280] <... openat resumed>) = 4 [pid 5263] +++ exited with 0 +++ [pid 5068] unlink("./6/binderfs" [ 59.615991][ T5263] EXT4-fs (loop0): Block reservation details [ 59.622848][ T5263] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 59.644782][ T5276] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 59.647405][ T5280] loop2: detected capacity change from 0 to 2048 [pid 5280] ioctl(4, LOOP_SET_FD, 3 [pid 5069] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... unlink resumed>) = 0 [pid 5282] +++ exited with 0 +++ [pid 5261] +++ exited with 0 +++ [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5261, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5069] <... openat resumed>) = 3 [pid 5069] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] getdents64(3, [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5065] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... openat resumed>) = 3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] fstat(3, [pid 5069] lstat("./6/binderfs", [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5069] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] getdents64(3, [pid 5069] unlink("./6/binderfs" [pid 5065] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5069] <... unlink resumed>) = 0 [pid 5065] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./6/binderfs") = 0 [pid 5065] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5280] <... ioctl resumed>) = 0 [pid 5280] close(3) = 0 [pid 5280] mkdir("./file0", 0777) = 0 [pid 5272] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 59.662728][ T5276] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 59.679109][ T61] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 59.679302][ T5252] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 59.692328][ T61] EXT4-fs (loop1): This should not happen!! Data will be lost [ 59.692328][ T61] [pid 5280] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5272] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5272] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f450cf9d000 [pid 5272] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5272] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5284], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5284 [pid 5272] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 59.714541][ T11] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 59.714637][ T5276] EXT4-fs (loop5): This should not happen!! Data will be lost [ 59.714637][ T5276] [ 59.727630][ T11] EXT4-fs (loop4): This should not happen!! Data will be lost [ 59.727630][ T11] [ 59.737470][ T51] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 59.761428][ T5252] EXT4-fs (loop3): This should not happen!! Data will be lost [ 59.761428][ T5252] [pid 5272] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5284 attached [pid 5284] set_robust_list(0x7f450cfbd9e0, 24) = 0 [pid 5284] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5066] <... umount2 resumed>) = 0 [pid 5066] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] <... umount2 resumed>) = 0 [pid 5066] lstat("./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./5/file0") = 0 [pid 5066] getdents64(3, 0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./5" [pid 5069] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] lstat("./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5066] mkdir("./6", 0777 [pid 5069] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5272] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5066] <... mkdir resumed>) = 0 [pid 5272] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5069] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5069] getdents64(4, 0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5069] getdents64(4, [pid 5066] <... openat resumed>) = 3 [pid 5069] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5069] close(4 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5069] <... close resumed>) = 0 [pid 5066] close(3 [pid 5069] rmdir("./6/file0" [pid 5066] <... close resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5068] <... umount2 resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] getdents64(3, [pid 5068] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [ 59.762314][ T5276] EXT4-fs (loop5): Total free blocks count 0 [ 59.779550][ T51] EXT4-fs (loop0): This should not happen!! Data will be lost [ 59.779550][ T51] [pid 5066] <... clone resumed>, child_tidptr=0x555556f755d0) = 5288 [pid 5069] close(3) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] rmdir("./6" [pid 5068] lstat("./6/file0", ./strace-static-x86_64: Process 5288 attached [pid 5069] <... rmdir resumed>) = 0 [pid 5288] set_robust_list(0x555556f755e0, 24 [pid 5069] mkdir("./7", 0777 [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5288] <... set_robust_list resumed>) = 0 [pid 5069] <... mkdir resumed>) = 0 [pid 5068] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5288] chdir("./6" [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5288] <... chdir resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5068] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5288] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] ioctl(3, LOOP_CLR_FD [pid 5288] <... prctl resumed>) = 0 [pid 5069] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5288] setpgid(0, 0 [pid 5069] close(3 [pid 5288] <... setpgid resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 5288] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5288] <... openat resumed>) = 3 [pid 5068] <... openat resumed>) = 4 [pid 5288] write(3, "1000", 4 [pid 5069] <... clone resumed>, child_tidptr=0x555556f755d0) = 5289 [pid 5068] fstat(4, [pid 5288] <... write resumed>) = 4 [pid 5288] close(3 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5289 attached [pid 5288] <... close resumed>) = 0 [pid 5280] <... mount resumed>) = 0 [pid 5068] getdents64(4, [pid 5289] set_robust_list(0x555556f755e0, 24 [pid 5068] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5289] <... set_robust_list resumed>) = 0 [pid 5068] getdents64(4, [pid 5289] chdir("./7" [pid 5288] symlink("/dev/binderfs", "./binderfs" [pid 5280] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5068] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5289] <... chdir resumed>) = 0 [pid 5068] close(4 [pid 5289] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] <... close resumed>) = 0 [pid 5289] <... prctl resumed>) = 0 [pid 5288] <... symlink resumed>) = 0 [pid 5280] <... openat resumed>) = 3 [pid 5068] rmdir("./6/file0" [pid 5289] setpgid(0, 0 [pid 5288] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5284] <... ioctl resumed>) = 0 [pid 5280] chdir("./file0" [pid 5276] <... sendfile resumed>) = 117 [pid 5288] <... futex resumed>) = 0 [pid 5284] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5280] <... chdir resumed>) = 0 [pid 5276] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5288] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5284] <... futex resumed>) = 0 [pid 5280] ioctl(4, LOOP_CLR_FD [pid 5276] <... futex resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5289] <... setpgid resumed>) = 0 [pid 5288] <... mmap resumed>) = 0x7f45152be000 [pid 5284] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5280] <... ioctl resumed>) = 0 [pid 5276] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5068] getdents64(3, [pid 5288] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE [pid 5280] close(4 [pid 5272] exit_group(0 [pid 5068] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5289] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5288] <... mprotect resumed>) = 0 [pid 5284] <... futex resumed>) = ? [pid 5280] <... close resumed>) = 0 [pid 5276] <... futex resumed>) = ? [pid 5272] <... exit_group resumed>) = ? [pid 5068] close(3 [pid 5289] <... openat resumed>) = 3 [pid 5288] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5284] +++ exited with 0 +++ [pid 5280] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5276] +++ exited with 0 +++ [pid 5068] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5289] write(3, "1000", 4 [pid 5280] <... futex resumed>) = 1 [pid 5275] <... futex resumed>) = 0 [pid 5272] +++ exited with 0 +++ [pid 5068] rmdir("./6" [pid 5289] <... write resumed>) = 4 [pid 5288] <... clone resumed>, parent_tid=[5290], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5290 [pid 5280] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5275] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... rmdir resumed>) = 0 [pid 5065] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5290 attached [pid 5289] close(3 [pid 5288] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5280] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5275] <... futex resumed>) = 0 [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5272, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5068] mkdir("./7", 0777 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5290] set_robust_list(0x7f45152de9e0, 24 [pid 5289] <... close resumed>) = 0 [pid 5288] <... futex resumed>) = 0 [pid 5280] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5275] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] restart_syscall(<... resuming interrupted clone ...> [pid 5290] <... set_robust_list resumed>) = 0 [pid 5289] symlink("/dev/binderfs", "./binderfs" [pid 5288] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5280] <... open resumed>) = 4 [pid 5070] <... restart_syscall resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5065] lstat("./6/file0", [pid 5290] memfd_create("syzkaller", 0 [pid 5289] <... symlink resumed>) = 0 [pid 5280] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5290] <... memfd_create resumed>) = 3 [pid 5289] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5280] <... futex resumed>) = 1 [pid 5275] <... futex resumed>) = 0 [pid 5290] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5289] <... futex resumed>) = 0 [pid 5280] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5275] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... openat resumed>) = 3 [pid 5065] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5290] <... mmap resumed>) = 0x7f450cebe000 [pid 5289] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5280] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5275] <... futex resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5289] <... mmap resumed>) = 0x7f45152be000 [ 59.849572][ T5276] EXT4-fs (loop5): Free/Dirty block details [ 59.859593][ T5276] EXT4-fs (loop5): free_blocks=2415919104 [ 59.866134][ T5276] EXT4-fs (loop5): dirty_blocks=16 [ 59.872542][ T5276] EXT4-fs (loop5): Block reservation details [ 59.878861][ T5276] EXT4-fs (loop5): i_reserved_data_blocks=1 [pid 5280] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5275] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5290] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5289] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE [pid 5280] <... write resumed>) = 9 [pid 5070] <... openat resumed>) = 3 [pid 5068] close(3 [pid 5289] <... mprotect resumed>) = 0 [pid 5280] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] fstat(3, [pid 5068] <... close resumed>) = 0 [pid 5065] <... openat resumed>) = 4 [pid 5289] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5070] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] fstat(4, [pid 5280] <... futex resumed>) = 1 [pid 5275] <... futex resumed>) = 0 [pid 5070] getdents64(3, [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5289] <... clone resumed>, parent_tid=[5291], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5291 [pid 5280] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5275] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5068] <... clone resumed>, child_tidptr=0x555556f755d0) = 5292 [pid 5065] getdents64(4, [pid 5289] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5280] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5275] <... futex resumed>) = 0 [pid 5070] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5289] <... futex resumed>) = 0 [pid 5280] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5275] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] getdents64(4, [pid 5289] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5280] <... openat resumed>) = 5 [pid 5070] lstat("./6/binderfs", [pid 5065] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5280] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] close(4./strace-static-x86_64: Process 5292 attached ./strace-static-x86_64: Process 5291 attached [pid 5290] <... write resumed>) = 1048576 [pid 5280] <... futex resumed>) = 1 [pid 5275] <... futex resumed>) = 0 [pid 5070] unlink("./6/binderfs" [pid 5065] <... close resumed>) = 0 [pid 5292] set_robust_list(0x555556f755e0, 24 [pid 5291] set_robust_list(0x7f45152de9e0, 24 [pid 5280] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5275] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5292] <... set_robust_list resumed>) = 0 [pid 5291] <... set_robust_list resumed>) = 0 [pid 5280] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5275] <... futex resumed>) = 0 [pid 5070] <... unlink resumed>) = 0 [pid 5065] rmdir("./6/file0" [pid 5292] chdir("./7" [pid 5291] memfd_create("syzkaller", 0 [pid 5290] munmap(0x7f450cebe000, 1048576 [pid 5280] open("./bus", O_RDWR [pid 5275] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5292] <... chdir resumed>) = 0 [pid 5291] <... memfd_create resumed>) = 3 [pid 5290] <... munmap resumed>) = 0 [pid 5280] <... open resumed>) = 6 [pid 5065] <... rmdir resumed>) = 0 [pid 5292] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5291] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5290] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5280] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5292] <... prctl resumed>) = 0 [pid 5291] <... mmap resumed>) = 0x7f450cebe000 [pid 5290] <... openat resumed>) = 4 [pid 5280] <... futex resumed>) = 1 [pid 5275] <... futex resumed>) = 0 [pid 5292] setpgid(0, 0 [pid 5291] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5290] ioctl(4, LOOP_SET_FD, 3 [pid 5280] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5275] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5292] <... setpgid resumed>) = 0 [pid 5280] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5275] <... futex resumed>) = 0 [ 59.956961][ T5252] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 59.966685][ T5290] loop1: detected capacity change from 0 to 2048 [ 59.969859][ T5252] EXT4-fs (loop5): This should not happen!! Data will be lost [ 59.969859][ T5252] [pid 5065] getdents64(3, [pid 5292] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5290] <... ioctl resumed>) = 0 [pid 5280] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5275] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5292] <... openat resumed>) = 3 [pid 5290] close(3 [pid 5065] close(3 [pid 5290] <... close resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5292] write(3, "1000", 4 [pid 5290] mkdir("./file0", 0777 [pid 5280] <... mmap resumed>) = 0x20000000 [pid 5065] rmdir("./6" [pid 5292] <... write resumed>) = 4 [pid 5290] <... mkdir resumed>) = 0 [pid 5280] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... rmdir resumed>) = 0 [pid 5292] close(3 [pid 5290] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5280] <... futex resumed>) = 1 [pid 5275] <... futex resumed>) = 0 [pid 5065] mkdir("./7", 0777 [pid 5292] <... close resumed>) = 0 [pid 5280] sendfile(4, 5, NULL, 2147483713 [pid 5275] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... mkdir resumed>) = 0 [pid 5275] <... futex resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5275] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] <... openat resumed>) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f755d0) = 5293 [pid 5291] <... write resumed>) = 1048576 [pid 5291] munmap(0x7f450cebe000, 1048576 [pid 5292] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5291] <... munmap resumed>) = 0 [pid 5292] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5291] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5292] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5291] <... openat resumed>) = 4 [pid 5291] ioctl(4, LOOP_SET_FD, 3 [pid 5292] <... mmap resumed>) = 0x7f45152be000 [pid 5070] <... umount2 resumed>) = 0 [pid 5070] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] lstat("./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5070] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] getdents64(4, 0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5070] getdents64(4, 0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5070] close(4) = 0 [pid 5070] rmdir("./6/file0") = 0 [pid 5292] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5070] getdents64(3, [pid 5292] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5275] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5070] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5275] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] close(3) = 0 [pid 5070] rmdir("./6" [pid 5292] <... clone resumed>, parent_tid=[5294], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5294 [pid 5275] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5294 attached ./strace-static-x86_64: Process 5293 attached [pid 5292] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5275] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5070] <... rmdir resumed>) = 0 [pid 5294] set_robust_list(0x7f45152de9e0, 24 [pid 5293] set_robust_list(0x555556f755e0, 24 [pid 5292] <... futex resumed>) = 0 [pid 5291] <... ioctl resumed>) = 0 [pid 5275] <... mmap resumed>) = 0x7f450cf9d000 [pid 5070] mkdir("./7", 0777 [pid 5294] <... set_robust_list resumed>) = 0 [pid 5293] <... set_robust_list resumed>) = 0 [pid 5292] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5291] close(3 [pid 5275] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5070] <... mkdir resumed>) = 0 [pid 5294] memfd_create("syzkaller", 0 [pid 5293] chdir("./7" [pid 5291] <... close resumed>) = 0 [pid 5275] <... mprotect resumed>) = 0 [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5294] <... memfd_create resumed>) = 3 [pid 5293] <... chdir resumed>) = 0 [pid 5291] mkdir("./file0", 0777 [pid 5275] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5070] <... openat resumed>) = 3 [pid 5294] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5291] <... mkdir resumed>) = 0 [pid 5070] ioctl(3, LOOP_CLR_FD [pid 5294] <... mmap resumed>) = 0x7f450cebe000 [ 60.020383][ T5291] loop4: detected capacity change from 0 to 2048 [ 60.023017][ T5280] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5291] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5070] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 5298 attached [pid 5294] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5293] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5070] close(3) = 0 [pid 5290] <... mount resumed>) = 0 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5290] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5070] <... clone resumed>, child_tidptr=0x555556f755d0) = 5300 [pid 5290] chdir("./file0"./strace-static-x86_64: Process 5300 attached [pid 5298] set_robust_list(0x7f450cfbd9e0, 24 [pid 5293] <... prctl resumed>) = 0 [pid 5290] <... chdir resumed>) = 0 [pid 5275] <... clone resumed>, parent_tid=[5298], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5298 [pid 5300] set_robust_list(0x555556f755e0, 24 [pid 5298] <... set_robust_list resumed>) = 0 [pid 5293] setpgid(0, 0 [pid 5290] ioctl(4, LOOP_CLR_FD [pid 5275] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5300] <... set_robust_list resumed>) = 0 [pid 5298] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5293] <... setpgid resumed>) = 0 [pid 5290] <... ioctl resumed>) = 0 [pid 5300] chdir("./7" [pid 5293] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5290] close(4 [pid 5275] <... futex resumed>) = 0 [pid 5300] <... chdir resumed>) = 0 [pid 5293] <... openat resumed>) = 3 [pid 5290] <... close resumed>) = 0 [pid 5275] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5300] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5293] write(3, "1000", 4 [pid 5290] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5300] <... prctl resumed>) = 0 [pid 5294] <... write resumed>) = 1048576 [pid 5293] <... write resumed>) = 4 [pid 5291] <... mount resumed>) = 0 [pid 5290] <... futex resumed>) = 1 [pid 5288] <... futex resumed>) = 0 [pid 5300] setpgid(0, 0 [pid 5294] munmap(0x7f450cebe000, 1048576 [pid 5293] close(3 [pid 5291] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5290] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5288] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5300] <... setpgid resumed>) = 0 [pid 5293] <... close resumed>) = 0 [pid 5291] <... openat resumed>) = 3 [pid 5290] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5300] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5293] symlink("/dev/binderfs", "./binderfs" [pid 5291] chdir("./file0" [pid 5290] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5288] <... futex resumed>) = 0 [pid 5300] <... openat resumed>) = 3 [pid 5294] <... munmap resumed>) = 0 [pid 5293] <... symlink resumed>) = 0 [ 60.059317][ T5280] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 60.072081][ T5280] EXT4-fs (loop2): This should not happen!! Data will be lost [ 60.072081][ T5280] [ 60.109283][ T5280] EXT4-fs (loop2): Total free blocks count 0 [pid 5291] <... chdir resumed>) = 0 [pid 5290] <... open resumed>) = 4 [pid 5288] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5300] write(3, "1000", 4 [pid 5293] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5291] ioctl(4, LOOP_CLR_FD [pid 5290] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5300] <... write resumed>) = 4 [pid 5293] <... futex resumed>) = 0 [pid 5291] <... ioctl resumed>) = 0 [pid 5290] <... futex resumed>) = 0 [pid 5300] close(3 [pid 5294] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5293] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5291] close(4 [pid 5290] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5288] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5300] <... close resumed>) = 0 [pid 5294] <... openat resumed>) = 4 [pid 5293] <... mmap resumed>) = 0x7f45152be000 [pid 5291] <... close resumed>) = 0 [pid 5288] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5300] symlink("/dev/binderfs", "./binderfs" [pid 5293] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE [pid 5291] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5300] <... symlink resumed>) = 0 [pid 5293] <... mprotect resumed>) = 0 [pid 5291] <... futex resumed>) = 1 [pid 5289] <... futex resumed>) = 0 [pid 5300] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5294] ioctl(4, LOOP_SET_FD, 3 [pid 5293] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5291] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5290] <... futex resumed>) = 0 [pid 5289] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5288] <... futex resumed>) = 1 [pid 5300] <... futex resumed>) = 0 [pid 5291] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5290] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5289] <... futex resumed>) = 0 [pid 5300] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5294] <... ioctl resumed>) = 0 [pid 5293] <... clone resumed>, parent_tid=[5302], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5302 [pid 5291] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5290] <... write resumed>) = 9 [pid 5289] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5288] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5300] <... mmap resumed>) = 0x7f45152be000 [pid 5294] close(3 [pid 5293] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5291] <... open resumed>) = 4 [pid 5290] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5288] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5275] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 5302 attached [pid 5300] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE [pid 5294] <... close resumed>) = 0 [pid 5293] <... futex resumed>) = 0 [pid 5291] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5290] <... futex resumed>) = 0 [pid 5288] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5302] set_robust_list(0x7f45152de9e0, 24 [pid 5300] <... mprotect resumed>) = 0 [pid 5294] mkdir("./file0", 0777 [pid 5293] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5291] <... futex resumed>) = 1 [pid 5290] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5289] <... futex resumed>) = 0 [pid 5288] <... futex resumed>) = 0 [pid 5302] <... set_robust_list resumed>) = 0 [pid 5300] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5298] <... ioctl resumed>) = 0 [pid 5291] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5280] <... sendfile resumed>) = 117 [pid 5290] <... openat resumed>) = 5 [pid 5289] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5288] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5280] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5298] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5291] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5290] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5289] <... futex resumed>) = 0 [pid 5300] <... clone resumed>, parent_tid=[5303], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5303 [pid 5298] <... futex resumed>) = 0 [pid 5291] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5290] <... futex resumed>) = 1 [pid 5289] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5288] <... futex resumed>) = 0 [pid 5280] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5303 attached [pid 5300] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5298] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5288] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5280] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5275] exit_group(0 [pid 5303] set_robust_list(0x7f45152de9e0, 24 [pid 5300] <... futex resumed>) = 0 [pid 5298] <... futex resumed>) = ? [pid 5294] <... mkdir resumed>) = 0 [pid 5291] <... write resumed>) = 9 [pid 5290] open("./bus", O_RDWR [pid 5288] <... futex resumed>) = 0 [pid 5280] <... futex resumed>) = ? [pid 5275] <... exit_group resumed>) = ? [pid 5303] <... set_robust_list resumed>) = 0 [pid 5302] memfd_create("syzkaller", 0 [pid 5300] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5298] +++ exited with 0 +++ [pid 5294] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5291] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5290] <... open resumed>) = 6 [pid 5288] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5280] +++ exited with 0 +++ [pid 5275] +++ exited with 0 +++ [pid 5303] memfd_create("syzkaller", 0 [pid 5302] <... memfd_create resumed>) = 3 [pid 5291] <... futex resumed>) = 1 [pid 5290] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5288] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5289] <... futex resumed>) = 0 [pid 5303] <... memfd_create resumed>) = 3 [pid 5291] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5290] <... futex resumed>) = 0 [pid 5289] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5288] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5303] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5291] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5290] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5289] <... futex resumed>) = 0 [pid 5288] <... futex resumed>) = 0 [pid 5303] <... mmap resumed>) = 0x7f450cebe000 [pid 5291] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5275, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5303] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5302] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5290] <... mmap resumed>) = 0x20000000 [pid 5289] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5288] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5291] <... openat resumed>) = 5 [pid 5290] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5288] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 5291] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5290] <... futex resumed>) = 0 [pid 5288] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... restart_syscall resumed>) = 0 [pid 5291] <... futex resumed>) = 1 [pid 5290] sendfile(4, 5, NULL, 2147483713 [pid 5289] <... futex resumed>) = 0 [pid 5288] <... futex resumed>) = 0 [ 60.119658][ T5280] EXT4-fs (loop2): Free/Dirty block details [ 60.136472][ T5280] EXT4-fs (loop2): free_blocks=2415919104 [ 60.142463][ T5280] EXT4-fs (loop2): dirty_blocks=16 [ 60.146505][ T5294] loop3: detected capacity change from 0 to 2048 [ 60.147694][ T5280] EXT4-fs (loop2): Block reservation details [ 60.160057][ T5280] EXT4-fs (loop2): i_reserved_data_blocks=1 [pid 5302] <... mmap resumed>) = 0x7f450cebe000 [pid 5291] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5303] <... write resumed>) = 1048576 [pid 5289] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5288] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5303] munmap(0x7f450cebe000, 1048576) = 0 [pid 5303] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5303] ioctl(4, LOOP_SET_FD, 3 [pid 5291] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5289] <... futex resumed>) = 0 [pid 5067] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5302] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5291] open("./bus", O_RDWR [pid 5289] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5294] <... mount resumed>) = 0 [pid 5294] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5294] chdir("./file0") = 0 [pid 5294] ioctl(4, LOOP_CLR_FD) = 0 [pid 5294] close(4) = 0 [pid 5294] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5292] <... futex resumed>) = 0 [pid 5294] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5292] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5292] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5294] <... open resumed>) = 4 [pid 5294] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5292] <... futex resumed>) = 0 [pid 5292] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5292] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5294] <... futex resumed>) = 1 [pid 5294] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5294] <... write resumed>) = 9 [pid 5294] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5292] <... futex resumed>) = 0 [pid 5292] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5292] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5294] openat(AT_FDCWD, "./bus", O_RDONLY) = 5 [pid 5294] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5292] <... futex resumed>) = 0 [pid 5292] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5292] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5291] <... open resumed>) = 6 [pid 5291] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5291] <... futex resumed>) = 1 [pid 5289] <... futex resumed>) = 0 [pid 5291] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5289] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... openat resumed>) = 3 [pid 5291] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5289] <... futex resumed>) = 0 [pid 5067] fstat(3, [pid 5291] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5289] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 60.191331][ T5290] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 60.202713][ T5303] loop5: detected capacity change from 0 to 2048 [ 60.213292][ T5290] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5302] <... write resumed>) = 1048576 [pid 5294] open("./bus", O_RDWR [pid 5291] <... mmap resumed>) = 0x20000000 [pid 5067] getdents64(3, [pid 5302] munmap(0x7f450cebe000, 1048576 [pid 5294] <... open resumed>) = 6 [pid 5294] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5292] <... futex resumed>) = 0 [pid 5294] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5292] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5294] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5292] <... futex resumed>) = 0 [pid 5303] <... ioctl resumed>) = 0 [pid 5294] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5292] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5303] close(3 [pid 5294] <... mmap resumed>) = 0x20000000 [pid 5303] <... close resumed>) = 0 [pid 5294] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5303] mkdir("./file0", 0777 [pid 5294] <... futex resumed>) = 1 [pid 5292] <... futex resumed>) = 0 [pid 5303] <... mkdir resumed>) = 0 [pid 5302] <... munmap resumed>) = 0 [pid 5294] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5292] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5291] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5303] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5294] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5292] <... futex resumed>) = 0 [pid 5302] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5294] sendfile(4, 5, NULL, 2147483713 [pid 5292] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5291] <... futex resumed>) = 1 [pid 5289] <... futex resumed>) = 0 [pid 5288] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5067] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5302] <... openat resumed>) = 4 [ 60.238248][ T5290] EXT4-fs (loop1): This should not happen!! Data will be lost [ 60.238248][ T5290] [ 60.248820][ T5290] EXT4-fs (loop1): Total free blocks count 0 [ 60.256429][ T5290] EXT4-fs (loop1): Free/Dirty block details [ 60.263297][ T5290] EXT4-fs (loop1): free_blocks=2415919104 [ 60.269294][ T5290] EXT4-fs (loop1): dirty_blocks=16 [ 60.274275][ T5294] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5291] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5289] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5288] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5302] ioctl(4, LOOP_SET_FD, 3 [pid 5289] <... futex resumed>) = 0 [pid 5288] <... futex resumed>) = 0 [pid 5291] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5302] <... ioctl resumed>) = 0 [pid 5291] sendfile(4, 5, NULL, 2147483713 [pid 5290] <... sendfile resumed>) = 117 [pid 5289] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5288] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5067] lstat("./7/binderfs", [pid 5290] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5288] <... mmap resumed>) = 0x7f450cf9d000 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5290] <... futex resumed>) = 0 [pid 5288] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5067] unlink("./7/binderfs" [pid 5290] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5288] <... mprotect resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 5288] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5067] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5288] <... clone resumed>, parent_tid=[5307], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5307 [pid 5288] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5288] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5302] close(3) = 0 [ 60.274723][ T5290] EXT4-fs (loop1): Block reservation details [ 60.296232][ T5290] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 60.299150][ T5294] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 60.302658][ T5302] loop0: detected capacity change from 0 to 2048 [ 60.315317][ T5294] EXT4-fs (loop3): This should not happen!! Data will be lost [ 60.315317][ T5294] [pid 5302] mkdir("./file0", 0777) = 0 [pid 5302] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5292] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5292] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5292] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f450cf9d000 [pid 5292] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5292] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5309], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5309 [pid 5292] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5292] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5309 attached [pid 5289] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5288] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5309] set_robust_list(0x7f450cfbd9e0, 24 [pid 5289] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5309] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 5307 attached [pid 5307] set_robust_list(0x7f450cfbd9e0, 24) = 0 [pid 5307] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040) = 0 [pid 5307] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5307] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5303] <... mount resumed>) = 0 [pid 5303] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5303] chdir("./file0") = 0 [ 60.331146][ T5285] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 60.335218][ T5294] EXT4-fs (loop3): Total free blocks count 0 [ 60.353416][ T5294] EXT4-fs (loop3): Free/Dirty block details [ 60.358439][ T5291] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 60.360098][ T5294] EXT4-fs (loop3): free_blocks=2415919104 [ 60.380068][ T5294] EXT4-fs (loop3): dirty_blocks=16 [pid 5303] ioctl(4, LOOP_CLR_FD) = 0 [pid 5303] close(4 [pid 5309] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5303] <... close resumed>) = 0 [pid 5289] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5303] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5303] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5289] <... mmap resumed>) = 0x7f450cf9d000 [pid 5288] exit_group(0 [pid 5300] <... futex resumed>) = 0 [pid 5300] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5288] <... exit_group resumed>) = ? [pid 5300] <... futex resumed>) = 1 [pid 5290] <... futex resumed>) = ? [pid 5290] +++ exited with 0 +++ [pid 5300] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5289] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5307] <... futex resumed>) = ? [pid 5303] <... futex resumed>) = 0 [pid 5303] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5289] <... mprotect resumed>) = 0 [pid 5289] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5311 attached [pid 5309] <... ioctl resumed>) = 0 [pid 5307] +++ exited with 0 +++ [pid 5294] <... sendfile resumed>) = 117 [pid 5289] <... clone resumed>, parent_tid=[5311], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5311 [pid 5288] +++ exited with 0 +++ [pid 5292] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5292] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5309] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5294] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5289] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5288, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5311] set_robust_list(0x7f450cfbd9e0, 24 [pid 5309] <... futex resumed>) = 0 [pid 5303] <... open resumed>) = 4 [pid 5294] <... futex resumed>) = 0 [pid 5292] exit_group(0 [pid 5311] <... set_robust_list resumed>) = 0 [pid 5303] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5292] <... exit_group resumed>) = ? [pid 5311] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5303] <... futex resumed>) = 1 [pid 5300] <... futex resumed>) = 0 [pid 5289] <... futex resumed>) = 0 [pid 5309] +++ exited with 0 +++ [pid 5303] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5300] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5289] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5303] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5300] <... futex resumed>) = 0 [pid 5303] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9) = 9 [pid 5303] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5303] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5300] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5294] +++ exited with 0 +++ [pid 5292] +++ exited with 0 +++ [pid 5300] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5066] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5300] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5292, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5303] <... futex resumed>) = 0 [pid 5300] <... futex resumed>) = 1 [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5066] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5303] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5300] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] <... openat resumed>) = 3 [pid 5303] <... openat resumed>) = 5 [pid 5068] <... restart_syscall resumed>) = 0 [pid 5066] fstat(3, [pid 5303] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5303] <... futex resumed>) = 1 [pid 5300] <... futex resumed>) = 0 [pid 5068] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5303] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5300] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] getdents64(3, [pid 5303] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5300] <... futex resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5303] open("./bus", O_RDWR [pid 5300] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... openat resumed>) = 3 [pid 5066] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5303] <... open resumed>) = 6 [pid 5068] fstat(3, [pid 5066] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5303] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5303] <... futex resumed>) = 1 [pid 5300] <... futex resumed>) = 0 [pid 5068] getdents64(3, [pid 5066] lstat("./6/binderfs", [pid 5303] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5300] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5303] <... mmap resumed>) = 0x20000000 [pid 5300] <... futex resumed>) = 0 [pid 5068] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] unlink("./6/binderfs" [pid 5303] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5300] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... unlink resumed>) = 0 [pid 5303] <... futex resumed>) = 0 [pid 5300] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5068] lstat("./7/binderfs", [ 60.386626][ T5294] EXT4-fs (loop3): Block reservation details [ 60.393464][ T5294] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 60.406297][ T5285] EXT4-fs (loop2): This should not happen!! Data will be lost [ 60.406297][ T5285] [pid 5066] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5303] sendfile(4, 5, NULL, 2147483713 [pid 5300] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5300] <... futex resumed>) = 0 [pid 5068] unlink("./7/binderfs" [pid 5302] <... mount resumed>) = 0 [pid 5300] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... unlink resumed>) = 0 [pid 5302] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5068] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5302] <... openat resumed>) = 3 [pid 5302] chdir("./file0") = 0 [pid 5302] ioctl(4, LOOP_CLR_FD) = 0 [ 60.431624][ T5291] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 60.445492][ T5291] EXT4-fs (loop4): This should not happen!! Data will be lost [ 60.445492][ T5291] [ 60.455867][ T5291] EXT4-fs (loop4): Total free blocks count 0 [ 60.462063][ T5291] EXT4-fs (loop4): Free/Dirty block details [ 60.466030][ T5303] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1095: group 0, [ 60.468004][ T5291] EXT4-fs (loop4): free_blocks=2415919104 [ 60.468025][ T5291] EXT4-fs (loop4): dirty_blocks=16 [pid 5302] close(4) = 0 [pid 5300] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5289] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5302] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5300] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5302] <... futex resumed>) = 1 [pid 5300] <... futex resumed>) = 0 [pid 5293] <... futex resumed>) = 0 [pid 5302] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5300] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5293] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5302] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5300] <... mmap resumed>) = 0x7f450cf9d000 [pid 5293] <... futex resumed>) = 0 [pid 5302] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5300] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5293] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5311] <... ioctl resumed>) = 0 [pid 5302] <... open resumed>) = 4 [ 60.476316][ T5303] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 60.482107][ T5291] EXT4-fs (loop4): Block reservation details [ 60.502741][ T5291] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 60.510077][ T5303] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 60.526221][ T5303] EXT4-fs (loop5): This should not happen!! Data will be lost [ 60.526221][ T5303] [pid 5300] <... mprotect resumed>) = 0 [pid 5291] <... sendfile resumed>) = 117 [pid 5067] <... umount2 resumed>) = 0 [pid 5311] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5302] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5300] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5302] <... futex resumed>) = 1 [pid 5293] <... futex resumed>) = 0 [pid 5302] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5300] <... clone resumed>, parent_tid=[5314], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5314 [pid 5293] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5302] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5300] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5293] <... futex resumed>) = 0 [pid 5302] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5300] <... futex resumed>) = 0 [pid 5293] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5300] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5314 attached [pid 5314] set_robust_list(0x7f450cfbd9e0, 24) = 0 [pid 5314] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5311] <... futex resumed>) = 0 [pid 5303] <... sendfile resumed>) = 117 [pid 5302] <... write resumed>) = 9 [pid 5291] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5311] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5302] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5291] <... futex resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5302] <... futex resumed>) = 1 [pid 5291] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] lstat("./7/file0", [pid 5302] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5067] rmdir("./7/file0") = 0 [pid 5067] getdents64(3, 0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./7") = 0 [pid 5067] mkdir("./8", 0777) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f755d0) = 5315 [pid 5303] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5303] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5289] exit_group(0 [pid 5311] <... futex resumed>) = ? [ 60.528363][ T11] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 60.545656][ T5303] EXT4-fs (loop5): Total free blocks count 0 [ 60.554046][ T11] EXT4-fs (loop1): This should not happen!! Data will be lost [ 60.554046][ T11] [ 60.564653][ T5303] EXT4-fs (loop5): Free/Dirty block details [ 60.564677][ T5303] EXT4-fs (loop5): free_blocks=2415919104 [ 60.564697][ T5303] EXT4-fs (loop5): dirty_blocks=16 [ 60.564713][ T5303] EXT4-fs (loop5): Block reservation details [pid 5291] <... futex resumed>) = ? [pid 5289] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 5315 attached [pid 5314] <... ioctl resumed>) = 0 [pid 5311] +++ exited with 0 +++ [pid 5300] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5293] <... futex resumed>) = 0 [pid 5291] +++ exited with 0 +++ [pid 5289] +++ exited with 0 +++ [pid 5315] set_robust_list(0x555556f755e0, 24 [pid 5314] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5300] exit_group(0 [pid 5293] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5315] <... set_robust_list resumed>) = 0 [pid 5314] <... futex resumed>) = ? [pid 5303] <... futex resumed>) = ? [pid 5300] <... exit_group resumed>) = ? [pid 5293] <... futex resumed>) = 1 [pid 5315] chdir("./8" [pid 5314] +++ exited with 0 +++ [pid 5293] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5315] <... chdir resumed>) = 0 [pid 5315] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5315] setpgid(0, 0) = 0 [pid 5315] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5315] write(3, "1000", 4) = 4 [pid 5315] close(3) = 0 [pid 5315] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5315] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5315] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f45152be000 [pid 5315] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5315] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5316], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5316 [pid 5315] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5315] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5316 attached [pid 5316] set_robust_list(0x7f45152de9e0, 24) = 0 [pid 5316] memfd_create("syzkaller", 0) = 3 [pid 5316] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f450cebe000 [pid 5302] <... futex resumed>) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5289, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5303] +++ exited with 0 +++ [pid 5300] +++ exited with 0 +++ [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5300, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5302] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5069] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5302] <... openat resumed>) = 5 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5302] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... openat resumed>) = 3 [pid 5302] <... futex resumed>) = 1 [pid 5069] fstat(3, [pid 5293] <... futex resumed>) = 0 [pid 5293] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5293] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5316] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5302] open("./bus", O_RDWR [pid 5070] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... umount2 resumed>) = 0 [pid 5316] <... write resumed>) = 1048576 [pid 5316] munmap(0x7f450cebe000, 1048576) = 0 [pid 5316] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] getdents64(3, [pid 5070] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5316] ioctl(4, LOOP_SET_FD, 3 [pid 5302] <... open resumed>) = 6 [pid 5070] <... openat resumed>) = 3 [ 60.564727][ T5303] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 60.595762][ T41] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 60.610437][ T41] EXT4-fs (loop3): This should not happen!! Data will be lost [ 60.610437][ T41] [pid 5302] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] fstat(3, [pid 5069] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5316] <... ioctl resumed>) = 0 [pid 5316] close(3) = 0 [pid 5316] mkdir("./file0", 0777) = 0 [pid 5302] <... futex resumed>) = 1 [pid 5293] <... futex resumed>) = 0 [pid 5070] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5069] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5316] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5293] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5302] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5293] <... futex resumed>) = 0 [pid 5070] getdents64(3, [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./6/file0", [pid 5293] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5302] <... mmap resumed>) = 0x20000000 [pid 5070] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5069] lstat("./7/binderfs", [pid 5302] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5302] <... futex resumed>) = 1 [pid 5293] <... futex resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] unlink("./7/binderfs" [pid 5066] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5302] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5070] lstat("./7/binderfs", [pid 5302] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5293] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5302] sendfile(4, 5, NULL, 2147483713 [pid 5293] <... futex resumed>) = 0 [pid 5070] unlink("./7/binderfs" [pid 5069] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5293] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... unlink resumed>) = 0 [ 60.638292][ T5316] loop2: detected capacity change from 0 to 2048 [pid 5070] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5316] <... mount resumed>) = 0 [pid 5066] <... openat resumed>) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5316] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5066] getdents64(4, [pid 5316] <... openat resumed>) = 3 [pid 5066] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5316] chdir("./file0" [pid 5066] close(4 [pid 5316] <... chdir resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5316] ioctl(4, LOOP_CLR_FD [pid 5066] rmdir("./6/file0" [pid 5316] <... ioctl resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5316] close(4 [pid 5066] getdents64(3, [pid 5316] <... close resumed>) = 0 [pid 5066] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5316] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] close(3 [pid 5316] <... futex resumed>) = 1 [pid 5315] <... futex resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5316] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5315] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5066] rmdir("./6" [pid 5315] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] <... rmdir resumed>) = 0 [pid 5066] mkdir("./7", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f755d0) = 5319 [pid 5068] <... umount2 resumed>) = 0 [pid 5068] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5293] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5293] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5293] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f450cf9d000 [pid 5293] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 5319 attached [pid 5316] <... open resumed>) = 4 [pid 5293] <... mprotect resumed>) = 0 [pid 5316] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [ 60.663856][ T11] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 60.680542][ T51] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 60.695830][ T5302] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5293] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5316] <... futex resumed>) = 1 [pid 5315] <... futex resumed>) = 0 [pid 5316] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5315] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5293] <... clone resumed>, parent_tid=[5320], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5320 [pid 5316] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5315] <... futex resumed>) = 0 [pid 5293] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5316] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5315] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5293] <... futex resumed>) = 0 [pid 5293] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] lstat("./7/file0", [pid 5319] set_robust_list(0x555556f755e0, 24 [pid 5316] <... write resumed>) = 9 [pid 5316] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5316] <... futex resumed>) = 1 [pid 5315] <... futex resumed>) = 0 [pid 5068] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5316] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5315] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5316] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5315] <... futex resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5319] <... set_robust_list resumed>) = 0 [pid 5316] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5315] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... openat resumed>) = 4 [pid 5316] <... openat resumed>) = 5 [pid 5316] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] fstat(4, [pid 5316] <... futex resumed>) = 1 [pid 5315] <... futex resumed>) = 0 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5316] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5315] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] getdents64(4, [pid 5316] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5315] <... futex resumed>) = 0 [pid 5068] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5316] open("./bus", O_RDWR [pid 5315] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] getdents64(4, [pid 5319] chdir("./7" [pid 5316] <... open resumed>) = 6 [pid 5068] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5319] <... chdir resumed>) = 0 [pid 5316] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] close(4 [pid 5316] <... futex resumed>) = 1 [pid 5315] <... futex resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5316] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5315] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] rmdir("./7/file0" [pid 5316] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5315] <... futex resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5319] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 5320 attached ) = 0 [pid 5316] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5315] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] getdents64(3, [pid 5316] <... mmap resumed>) = 0x20000000 [pid 5068] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5316] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] close(3 [pid 5316] <... futex resumed>) = 1 [pid 5315] <... futex resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5316] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5315] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] rmdir("./7" [pid 5316] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5315] <... futex resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5316] sendfile(4, 5, NULL, 2147483713 [pid 5315] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] mkdir("./8", 0777) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5068] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 60.711904][ T11] EXT4-fs (loop4): This should not happen!! Data will be lost [ 60.711904][ T11] [ 60.723028][ T51] EXT4-fs (loop5): This should not happen!! Data will be lost [ 60.723028][ T51] [pid 5068] close(3) = 0 [pid 5320] set_robust_list(0x7f450cfbd9e0, 24 [pid 5319] setpgid(0, 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5320] <... set_robust_list resumed>) = 0 [pid 5319] <... setpgid resumed>) = 0 [pid 5293] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5320] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5319] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5319] write(3, "1000", 4) = 4 [pid 5319] close(3) = 0 [pid 5319] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5319] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5319] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f45152be000 [pid 5319] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5319] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5322], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5322 [pid 5319] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5322 attached ) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x555556f755d0) = 5321 [pid 5319] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5321 attached [pid 5322] set_robust_list(0x7f45152de9e0, 24) = 0 [pid 5321] set_robust_list(0x555556f755e0, 24 [pid 5322] memfd_create("syzkaller", 0 [pid 5321] <... set_robust_list resumed>) = 0 [pid 5322] <... memfd_create resumed>) = 3 [pid 5321] chdir("./8" [pid 5322] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5321] <... chdir resumed>) = 0 [pid 5322] <... mmap resumed>) = 0x7f450cebe000 [pid 5321] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5321] setpgid(0, 0) = 0 [pid 5321] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5315] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 60.752500][ T5302] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 60.772685][ T5316] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 60.788589][ T5316] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 60.802107][ T5316] EXT4-fs (loop2): This should not happen!! Data will be lost [ 60.802107][ T5316] [pid 5321] write(3, "1000", 4) = 4 [pid 5321] close(3) = 0 [pid 5321] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5315] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... umount2 resumed>) = 0 [pid 5069] <... umount2 resumed>) = 0 [pid 5321] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [ 60.812603][ T5316] EXT4-fs (loop2): Total free blocks count 0 [ 60.819962][ T5316] EXT4-fs (loop2): Free/Dirty block details [ 60.826753][ T5302] EXT4-fs (loop0): This should not happen!! Data will be lost [ 60.826753][ T5302] [ 60.836918][ T5316] EXT4-fs (loop2): free_blocks=2415919104 [ 60.842660][ T5316] EXT4-fs (loop2): dirty_blocks=16 [ 60.848234][ T5302] EXT4-fs (loop0): Total free blocks count 0 [pid 5070] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5322] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5321] <... futex resumed>) = 0 [pid 5315] <... futex resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5321] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5070] lstat("./7/file0", [pid 5069] lstat("./7/file0", [pid 5321] <... mmap resumed>) = 0x7f45152be000 [pid 5315] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5070] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5069] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5321] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE [pid 5070] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5321] <... mprotect resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5321] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5070] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5315] <... mmap resumed>) = 0x7f450cf9d000 [pid 5070] <... openat resumed>) = 4 [pid 5069] <... openat resumed>) = 4 [pid 5322] <... write resumed>) = 1048576 [pid 5321] <... clone resumed>, parent_tid=[5323], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5323 [pid 5315] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5070] fstat(4, [pid 5069] fstat(4, [pid 5321] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5069] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5321] <... futex resumed>) = 0 [pid 5070] getdents64(4, [pid 5069] getdents64(4, ./strace-static-x86_64: Process 5323 attached [pid 5321] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5070] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5069] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5323] set_robust_list(0x7f45152de9e0, 24 [pid 5070] getdents64(4, [pid 5069] getdents64(4, [pid 5323] <... set_robust_list resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5069] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5323] memfd_create("syzkaller", 0 [pid 5315] <... mprotect resumed>) = 0 [pid 5070] close(4 [pid 5069] close(4 [pid 5323] <... memfd_create resumed>) = 3 [pid 5322] munmap(0x7f450cebe000, 1048576 [pid 5315] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5070] <... close resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 5323] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5070] rmdir("./7/file0" [pid 5069] rmdir("./7/file0" [pid 5323] <... mmap resumed>) = 0x7f450cebe000 [pid 5070] <... rmdir resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 5324 attached [pid 5322] <... munmap resumed>) = 0 [pid 5315] <... clone resumed>, parent_tid=[5324], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5324 [pid 5070] getdents64(3, [pid 5069] getdents64(3, [pid 5324] set_robust_list(0x7f450cfbd9e0, 24 [pid 5322] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5316] <... sendfile resumed>) = 117 [pid 5070] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5069] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5070] close(3 [pid 5069] close(3 [pid 5070] <... close resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 5070] rmdir("./7" [pid 5069] rmdir("./7" [pid 5315] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5322] <... openat resumed>) = 4 [pid 5070] <... rmdir resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5324] <... set_robust_list resumed>) = 0 [pid 5322] ioctl(4, LOOP_SET_FD, 3 [pid 5316] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5315] <... futex resumed>) = 0 [ 60.863696][ T5302] EXT4-fs (loop0): Free/Dirty block details [ 60.876236][ T5316] EXT4-fs (loop2): Block reservation details [ 60.885954][ T5302] EXT4-fs (loop0): free_blocks=2415919104 [ 60.893853][ T5316] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 60.901569][ T5302] EXT4-fs (loop0): dirty_blocks=16 [ 60.907650][ T5302] EXT4-fs (loop0): Block reservation details [pid 5070] mkdir("./8", 0777 [pid 5069] mkdir("./8", 0777 [pid 5324] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5323] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5070] <... mkdir resumed>) = 0 [pid 5069] <... mkdir resumed>) = 0 [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5070] <... openat resumed>) = 3 [pid 5069] <... openat resumed>) = 3 [pid 5070] ioctl(3, LOOP_CLR_FD [pid 5069] ioctl(3, LOOP_CLR_FD [pid 5316] <... futex resumed>) = 0 [pid 5315] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5069] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5316] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5070] close(3 [pid 5069] close(3 [pid 5324] <... ioctl resumed>) = 0 [pid 5323] <... write resumed>) = 1048576 [pid 5322] <... ioctl resumed>) = 0 [pid 5302] <... sendfile resumed>) = 117 [pid 5070] <... close resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 5324] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5323] munmap(0x7f450cebe000, 1048576 [pid 5322] close(3 [pid 5320] <... ioctl resumed>) = 0 [pid 5302] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5324] <... futex resumed>) = 1 [pid 5323] <... munmap resumed>) = 0 [pid 5322] <... close resumed>) = 0 [pid 5320] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5315] <... futex resumed>) = 0 [pid 5302] <... futex resumed>) = 0 [pid 5324] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5323] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5322] mkdir("./file0", 0777 [pid 5315] exit_group(0 [pid 5302] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5324] <... futex resumed>) = ? [pid 5323] <... openat resumed>) = 4 [pid 5322] <... mkdir resumed>) = 0 [pid 5320] <... futex resumed>) = 0 [pid 5316] <... futex resumed>) = ? [pid 5315] <... exit_group resumed>) = ? [pid 5293] exit_group(0 [pid 5070] <... clone resumed>, child_tidptr=0x555556f755d0) = 5325 [pid 5069] <... clone resumed>, child_tidptr=0x555556f755d0) = 5326 ./strace-static-x86_64: Process 5326 attached [pid 5324] +++ exited with 0 +++ [pid 5323] ioctl(4, LOOP_SET_FD, 3 [pid 5322] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5316] +++ exited with 0 +++ [pid 5315] +++ exited with 0 +++ [pid 5302] <... futex resumed>) = ? [pid 5293] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 5325 attached [pid 5326] set_robust_list(0x555556f755e0, 24 [pid 5320] +++ exited with 0 +++ [pid 5302] +++ exited with 0 +++ [pid 5293] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5315, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5326] <... set_robust_list resumed>) = 0 [pid 5325] set_robust_list(0x555556f755e0, 24 [pid 5323] <... ioctl resumed>) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5293, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5326] chdir("./8" [pid 5325] <... set_robust_list resumed>) = 0 [pid 5323] close(3 [pid 5326] <... chdir resumed>) = 0 [pid 5325] chdir("./8" [pid 5323] <... close resumed>) = 0 [pid 5326] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5325] <... chdir resumed>) = 0 [pid 5323] mkdir("./file0", 0777 [pid 5067] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5326] <... prctl resumed>) = 0 [pid 5325] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5323] <... mkdir resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5326] setpgid(0, 0 [pid 5325] <... prctl resumed>) = 0 [pid 5323] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5326] <... setpgid resumed>) = 0 [pid 5325] setpgid(0, 0 [pid 5067] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5326] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5325] <... setpgid resumed>) = 0 [pid 5322] <... mount resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5326] <... openat resumed>) = 3 [pid 5325] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5322] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] fstat(3, [pid 5065] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5326] write(3, "1000", 4 [pid 5325] <... openat resumed>) = 3 [pid 5322] <... openat resumed>) = 3 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5326] <... write resumed>) = 4 [pid 5325] write(3, "1000", 4 [pid 5322] chdir("./file0" [pid 5067] getdents64(3, [pid 5065] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5326] close(3 [pid 5325] <... write resumed>) = 4 [pid 5322] <... chdir resumed>) = 0 [pid 5067] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5065] <... openat resumed>) = 3 [pid 5326] <... close resumed>) = 0 [pid 5325] close(3 [pid 5322] ioctl(4, LOOP_CLR_FD [pid 5067] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] fstat(3, [pid 5326] symlink("/dev/binderfs", "./binderfs" [pid 5325] <... close resumed>) = 0 [pid 5322] <... ioctl resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] lstat("./8/binderfs", [pid 5065] getdents64(3, [pid 5326] <... symlink resumed>) = 0 [pid 5325] symlink("/dev/binderfs", "./binderfs" [pid 5322] close(4 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5326] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] unlink("./8/binderfs" [pid 5065] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5323] <... mount resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] lstat("./7/binderfs", [pid 5325] <... symlink resumed>) = 0 [pid 5322] <... close resumed>) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./7/binderfs") = 0 [pid 5065] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5326] <... futex resumed>) = 0 [pid 5326] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f45152be000 [pid 5326] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5326] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5331], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5331 [pid 5326] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 60.914760][ T5302] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 60.921422][ T5322] loop1: detected capacity change from 0 to 2048 [ 60.951145][ T5323] loop3: detected capacity change from 0 to 2048 [pid 5326] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5323] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5323] chdir("./file0") = 0 [pid 5323] ioctl(4, LOOP_CLR_FD) = 0 [pid 5323] close(4) = 0 [pid 5323] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5323] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5321] <... futex resumed>) = 0 [pid 5325] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5325] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f45152be000 [pid 5325] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5325] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5332], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5332 [pid 5325] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5321] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5323] <... futex resumed>) = 0 [pid 5321] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5323] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5322] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5325] <... futex resumed>) = 0 [pid 5322] <... futex resumed>) = 1 [pid 5319] <... futex resumed>) = 0 [pid 5325] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5323] <... open resumed>) = 4 [pid 5322] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5319] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5323] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5319] <... futex resumed>) = 0 [pid 5323] <... futex resumed>) = 1 [pid 5322] <... open resumed>) = 4 [pid 5321] <... futex resumed>) = 0 [pid 5319] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5323] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5322] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5321] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5319] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5323] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5322] <... futex resumed>) = 0 [pid 5321] <... futex resumed>) = 0 [pid 5319] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5323] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5322] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5321] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5319] <... futex resumed>) = 0 [pid 5323] <... write resumed>) = 9 [pid 5322] <... write resumed>) = 9 [pid 5319] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5323] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5322] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5319] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5323] <... futex resumed>) = 1 [pid 5322] <... futex resumed>) = 0 [pid 5321] <... futex resumed>) = 0 [pid 5319] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5323] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5322] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5321] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5319] <... futex resumed>) = 0 [pid 5323] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5322] <... openat resumed>) = 5 [pid 5321] <... futex resumed>) = 0 [pid 5319] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5332 attached ./strace-static-x86_64: Process 5331 attached [ 60.998933][ T51] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 61.011743][ T11] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5323] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5322] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5321] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5319] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5332] set_robust_list(0x7f45152de9e0, 24 [pid 5331] set_robust_list(0x7f45152de9e0, 24 [pid 5323] <... openat resumed>) = 5 [pid 5322] <... futex resumed>) = 0 [pid 5319] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5332] <... set_robust_list resumed>) = 0 [pid 5331] <... set_robust_list resumed>) = 0 [pid 5323] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5322] open("./bus", O_RDWR [pid 5319] <... futex resumed>) = 0 [pid 5332] memfd_create("syzkaller", 0 [pid 5331] memfd_create("syzkaller", 0 [pid 5323] <... futex resumed>) = 1 [pid 5322] <... open resumed>) = 6 [pid 5321] <... futex resumed>) = 0 [pid 5319] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5332] <... memfd_create resumed>) = 3 [pid 5331] <... memfd_create resumed>) = 3 [pid 5323] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5322] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5321] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5319] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5332] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5331] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5323] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5322] <... futex resumed>) = 0 [pid 5321] <... futex resumed>) = 0 [pid 5319] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5332] <... mmap resumed>) = 0x7f450cebe000 [pid 5331] <... mmap resumed>) = 0x7f450cebe000 [pid 5323] open("./bus", O_RDWR [pid 5322] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5321] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5319] <... futex resumed>) = 0 [pid 5323] <... open resumed>) = 6 [pid 5322] <... mmap resumed>) = 0x20000000 [pid 5319] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5323] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5322] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5323] <... futex resumed>) = 1 [pid 5322] <... futex resumed>) = 0 [pid 5321] <... futex resumed>) = 0 [pid 5319] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5323] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5322] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5321] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5319] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5323] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5322] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5321] <... futex resumed>) = 0 [pid 5319] <... futex resumed>) = 0 [pid 5332] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5319] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5323] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5322] sendfile(4, 5, NULL, 2147483713 [pid 5321] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5332] <... write resumed>) = 1048576 [pid 5323] <... mmap resumed>) = 0x20000000 [pid 5323] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5332] munmap(0x7f450cebe000, 1048576 [pid 5323] <... futex resumed>) = 1 [pid 5321] <... futex resumed>) = 0 [pid 5332] <... munmap resumed>) = 0 [pid 5332] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 61.044168][ T11] EXT4-fs (loop0): This should not happen!! Data will be lost [ 61.044168][ T11] [ 61.044744][ T51] EXT4-fs (loop2): This should not happen!! Data will be lost [ 61.044744][ T51] [pid 5332] ioctl(4, LOOP_SET_FD, 3 [pid 5323] sendfile(4, 5, NULL, 2147483713 [pid 5321] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... umount2 resumed>) = 0 [pid 5321] <... futex resumed>) = 0 [pid 5321] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5332] <... ioctl resumed>) = 0 [pid 5332] close(3) = 0 [pid 5332] mkdir("./file0", 0777) = 0 [pid 5332] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5067] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5067] rmdir("./8/file0") = 0 [pid 5067] getdents64(3, 0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5067] close(3 [pid 5319] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5319] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5319] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f450cf9d000 [pid 5319] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5319] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5067] <... close resumed>) = 0 [pid 5067] rmdir("./8") = 0 [pid 5319] <... clone resumed>, parent_tid=[5334], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5334 [pid 5319] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5319] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] mkdir("./9", 0777) = 0 [ 61.103081][ T5332] loop5: detected capacity change from 0 to 2048 [ 61.126074][ T5322] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f755d0) = 5335 ./strace-static-x86_64: Process 5335 attached [pid 5321] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5321] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5321] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f450cf9d000 [pid 5331] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5321] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5065] <... umount2 resumed>) = 0 [pid 5335] set_robust_list(0x555556f755e0, 24 [pid 5321] <... mprotect resumed>) = 0 [pid 5335] <... set_robust_list resumed>) = 0 [pid 5321] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5335] chdir("./9" [pid 5332] <... mount resumed>) = 0 [pid 5065] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5335] <... chdir resumed>) = 0 [pid 5332] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5321] <... clone resumed>, parent_tid=[5337], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5337 [pid 5335] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5332] <... openat resumed>) = 3 [pid 5321] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5335] <... prctl resumed>) = 0 [pid 5332] chdir("./file0" [pid 5321] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5337 attached ./strace-static-x86_64: Process 5334 attached [pid 5335] setpgid(0, 0 [pid 5332] <... chdir resumed>) = 0 [pid 5321] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5337] set_robust_list(0x7f450cfbd9e0, 24 [pid 5335] <... setpgid resumed>) = 0 [pid 5334] set_robust_list(0x7f450cfbd9e0, 24 [pid 5332] ioctl(4, LOOP_CLR_FD [pid 5065] lstat("./7/file0", [pid 5337] <... set_robust_list resumed>) = 0 [pid 5335] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5334] <... set_robust_list resumed>) = 0 [pid 5332] <... ioctl resumed>) = 0 [pid 5331] <... write resumed>) = 1048576 [pid 5335] <... openat resumed>) = 3 [pid 5332] close(4 [pid 5335] write(3, "1000", 4 [pid 5332] <... close resumed>) = 0 [pid 5335] <... write resumed>) = 4 [pid 5332] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5335] close(3 [pid 5332] <... futex resumed>) = 1 [pid 5325] <... futex resumed>) = 0 [pid 5335] <... close resumed>) = 0 [pid 5332] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5325] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5335] symlink("/dev/binderfs", "./binderfs" [pid 5332] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5325] <... futex resumed>) = 0 [pid 5335] <... symlink resumed>) = 0 [ 61.154845][ T5323] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 61.188873][ T5322] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5332] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5325] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5337] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5335] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5334] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5332] <... open resumed>) = 4 [pid 5331] munmap(0x7f450cebe000, 1048576 [pid 5319] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5331] <... munmap resumed>) = 0 [pid 5065] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5335] <... futex resumed>) = 0 [pid 5332] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5331] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5335] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5332] <... futex resumed>) = 1 [pid 5331] <... openat resumed>) = 4 [pid 5325] <... futex resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5331] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... openat resumed>) = 4 [pid 5335] <... mmap resumed>) = 0x7f45152be000 [pid 5332] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5325] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5321] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5065] fstat(4, [pid 5335] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE [pid 5332] <... write resumed>) = 9 [pid 5325] <... futex resumed>) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5335] <... mprotect resumed>) = 0 [pid 5332] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5325] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] getdents64(4, [pid 5335] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5332] <... futex resumed>) = 0 [pid 5325] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5065] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5332] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5331] <... ioctl resumed>) = 0 [pid 5325] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] getdents64(4, [pid 5335] <... clone resumed>, parent_tid=[5338], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5338 [ 61.201903][ T5323] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 61.216500][ T5323] EXT4-fs (loop3): This should not happen!! Data will be lost [ 61.216500][ T5323] [ 61.218018][ T5331] loop4: detected capacity change from 0 to 2048 [ 61.226349][ T5323] EXT4-fs (loop3): Total free blocks count 0 [ 61.226373][ T5323] EXT4-fs (loop3): Free/Dirty block details [ 61.245518][ T5323] EXT4-fs (loop3): free_blocks=2415919104 [pid 5332] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5331] close(3 [pid 5325] <... futex resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5335] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5332] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5331] <... close resumed>) = 0 [pid 5325] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] close(4 [pid 5335] <... futex resumed>) = 0 [pid 5332] <... openat resumed>) = 5 [pid 5331] mkdir("./file0", 0777 [pid 5065] <... close resumed>) = 0 [pid 5335] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5332] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5331] <... mkdir resumed>) = 0 [pid 5065] rmdir("./7/file0"./strace-static-x86_64: Process 5338 attached [pid 5332] <... futex resumed>) = 1 [pid 5331] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5325] <... futex resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5338] set_robust_list(0x7f45152de9e0, 24 [pid 5337] <... ioctl resumed>) = 0 [pid 5332] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5325] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5323] <... sendfile resumed>) = 117 [pid 5065] getdents64(3, [pid 5338] <... set_robust_list resumed>) = 0 [pid 5337] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5332] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5325] <... futex resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5338] memfd_create("syzkaller", 0 [pid 5337] <... futex resumed>) = 0 [pid 5332] open("./bus", O_RDWR [pid 5325] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] close(3 [pid 5338] <... memfd_create resumed>) = 3 [pid 5337] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5332] <... open resumed>) = 6 [pid 5065] <... close resumed>) = 0 [pid 5338] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5332] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5323] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] rmdir("./7" [pid 5338] <... mmap resumed>) = 0x7f450cebe000 [pid 5332] <... futex resumed>) = 1 [pid 5325] <... futex resumed>) = 0 [pid 5321] exit_group(0 [pid 5065] <... rmdir resumed>) = 0 [pid 5338] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5337] <... futex resumed>) = ? [pid 5332] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5325] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5321] <... exit_group resumed>) = ? [pid 5065] mkdir("./8", 0777 [pid 5337] +++ exited with 0 +++ [pid 5332] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5325] <... futex resumed>) = 0 [pid 5323] <... futex resumed>) = ? [pid 5065] <... mkdir resumed>) = 0 [pid 5332] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5325] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5332] <... mmap resumed>) = 0x20000000 [pid 5323] +++ exited with 0 +++ [pid 5321] +++ exited with 0 +++ [ 61.252006][ T5323] EXT4-fs (loop3): dirty_blocks=16 [ 61.258544][ T5323] EXT4-fs (loop3): Block reservation details [ 61.265556][ T5323] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 61.272289][ T5322] EXT4-fs (loop1): This should not happen!! Data will be lost [ 61.272289][ T5322] [ 61.282667][ T5322] EXT4-fs (loop1): Total free blocks count 0 [ 61.289487][ T5322] EXT4-fs (loop1): Free/Dirty block details [ 61.295923][ T5322] EXT4-fs (loop1): free_blocks=2415919104 [pid 5065] <... openat resumed>) = 3 [pid 5332] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5338] <... write resumed>) = 1048576 [pid 5332] <... futex resumed>) = 1 [pid 5325] <... futex resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5321, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5332] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5325] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] close(3 [pid 5338] munmap(0x7f450cebe000, 1048576 [pid 5332] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5325] <... futex resumed>) = 0 [pid 5322] <... sendfile resumed>) = 117 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... close resumed>) = 0 [pid 5338] <... munmap resumed>) = 0 [pid 5334] <... ioctl resumed>) = 0 [pid 5332] sendfile(4, 5, NULL, 2147483713 [pid 5325] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5322] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5338] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5322] <... futex resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5338] <... openat resumed>) = 4 [pid 5322] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5338] ioctl(4, LOOP_SET_FD, 3 [pid 5334] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5331] <... mount resumed>) = 0 [pid 5068] fstat(3, ./strace-static-x86_64: Process 5341 attached [pid 5341] set_robust_list(0x555556f755e0, 24) = 0 [pid 5341] chdir("./8") = 0 [pid 5341] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5341] setpgid(0, 0) = 0 [pid 5341] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5341] write(3, "1000", 4) = 4 [pid 5341] close(3) = 0 [pid 5341] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5341] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5341] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f45152be000 [pid 5341] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5341] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5342], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5342 [pid 5341] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5341] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5338] <... ioctl resumed>) = 0 [pid 5338] close(3) = 0 [pid 5338] mkdir("./file0", 0777) = 0 [pid 5338] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5334] <... futex resumed>) = 0 [pid 5334] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5331] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5331] chdir("./file0") = 0 [pid 5331] ioctl(4, LOOP_CLR_FD) = 0 [pid 5331] close(4) = 0 [pid 5331] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5326] <... futex resumed>) = 0 [pid 5331] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5326] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 5342 attached [pid 5326] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5319] exit_group(0 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x555556f755d0) = 5341 [ 61.304369][ T5322] EXT4-fs (loop1): dirty_blocks=16 [ 61.310114][ T5322] EXT4-fs (loop1): Block reservation details [ 61.316580][ T5322] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 61.326047][ T5338] loop2: detected capacity change from 0 to 2048 [ 61.331157][ T5332] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5342] set_robust_list(0x7f45152de9e0, 24 [pid 5331] <... open resumed>) = 4 [pid 5319] <... exit_group resumed>) = ? [pid 5068] getdents64(3, [pid 5342] <... set_robust_list resumed>) = 0 [pid 5334] <... futex resumed>) = ? [pid 5322] <... futex resumed>) = ? [pid 5342] memfd_create("syzkaller", 0 [pid 5334] +++ exited with 0 +++ [pid 5322] +++ exited with 0 +++ [pid 5342] <... memfd_create resumed>) = 3 [pid 5331] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5319] +++ exited with 0 +++ [pid 5068] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5319, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5066] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./7/binderfs" [pid 5342] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5331] <... futex resumed>) = 1 [pid 5325] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5068] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... unlink resumed>) = 0 [pid 5342] <... mmap resumed>) = 0x7f450cebe000 [pid 5331] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5326] <... futex resumed>) = 0 [pid 5325] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5342] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5326] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [ 61.348593][ T5332] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 61.364988][ T5332] EXT4-fs (loop5): This should not happen!! Data will be lost [ 61.364988][ T5332] [ 61.386838][ T5252] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5068] lstat("./8/binderfs", [pid 5331] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5325] <... futex resumed>) = 0 [pid 5326] <... futex resumed>) = 0 [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5326] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] unlink("./8/binderfs") = 0 [pid 5068] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5342] <... write resumed>) = 1048576 [pid 5342] munmap(0x7f450cebe000, 1048576) = 0 [pid 5342] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5342] ioctl(4, LOOP_SET_FD, 3 [pid 5331] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5325] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5338] <... mount resumed>) = 0 [pid 5338] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5338] chdir("./file0") = 0 [pid 5338] ioctl(4, LOOP_CLR_FD) = 0 [pid 5338] close(4) = 0 [pid 5331] <... write resumed>) = 9 [pid 5325] <... mmap resumed>) = 0x7f450cf9d000 [pid 5325] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5338] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5331] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5338] <... futex resumed>) = 1 [pid 5335] <... futex resumed>) = 0 [pid 5331] <... futex resumed>) = 1 [pid 5326] <... futex resumed>) = 0 [pid 5325] <... mprotect resumed>) = 0 [pid 5338] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5335] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5331] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5326] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5338] <... open resumed>) = 4 [pid 5335] <... futex resumed>) = 0 [pid 5331] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5326] <... futex resumed>) = 0 [pid 5325] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5338] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5335] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5331] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5326] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5338] <... futex resumed>) = 0 [pid 5335] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5331] <... openat resumed>) = 5 [pid 5338] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5335] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5331] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5338] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5335] <... futex resumed>) = 0 [pid 5331] <... futex resumed>) = 1 [pid 5326] <... futex resumed>) = 0 [pid 5325] <... clone resumed>, parent_tid=[5345], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5345 ./strace-static-x86_64: Process 5345 attached [pid 5338] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5335] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5331] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5326] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5325] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5345] set_robust_list(0x7f450cfbd9e0, 24 [pid 5338] <... write resumed>) = 9 [pid 5331] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5326] <... futex resumed>) = 0 [pid 5325] <... futex resumed>) = 0 [pid 5345] <... set_robust_list resumed>) = 0 [pid 5338] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5331] open("./bus", O_RDWR [pid 5326] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5325] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] <... umount2 resumed>) = 0 [pid 5345] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5338] <... futex resumed>) = 1 [pid 5335] <... futex resumed>) = 0 [pid 5331] <... open resumed>) = 6 [pid 5066] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5338] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5335] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5331] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5338] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5335] <... futex resumed>) = 0 [pid 5331] <... futex resumed>) = 1 [pid 5326] <... futex resumed>) = 0 [pid 5066] lstat("./7/file0", [pid 5338] openat(AT_FDCWD, "./bus", O_RDONLY [ 61.399916][ T11] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 61.399944][ T5342] loop0: detected capacity change from 0 to 2048 [ 61.415158][ T5332] EXT4-fs (loop5): Total free blocks count 0 [ 61.427092][ T11] EXT4-fs (loop3): This should not happen!! Data will be lost [ 61.427092][ T11] [ 61.438257][ T5252] EXT4-fs (loop1): This should not happen!! Data will be lost [ 61.438257][ T5252] [pid 5335] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5331] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5326] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5338] <... openat resumed>) = 5 [pid 5331] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5326] <... futex resumed>) = 0 [pid 5338] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5331] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5326] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5338] <... futex resumed>) = 1 [pid 5335] <... futex resumed>) = 0 [pid 5335] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5335] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5331] <... mmap resumed>) = 0x20000000 [pid 5338] open("./bus", O_RDWR [pid 5331] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5342] <... ioctl resumed>) = 0 [pid 5338] <... open resumed>) = 6 [pid 5331] <... futex resumed>) = 1 [pid 5326] <... futex resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5338] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5331] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5326] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... openat resumed>) = 4 [pid 5342] close(3 [pid 5338] <... futex resumed>) = 1 [pid 5335] <... futex resumed>) = 0 [pid 5331] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5326] <... futex resumed>) = 0 [pid 5066] fstat(4, [pid 5342] <... close resumed>) = 0 [pid 5338] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5335] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5331] sendfile(4, 5, NULL, 2147483713 [pid 5326] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5342] mkdir("./file0", 0777 [pid 5338] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5335] <... futex resumed>) = 0 [pid 5066] getdents64(4, [pid 5342] <... mkdir resumed>) = 0 [pid 5335] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5325] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 61.463798][ T5332] EXT4-fs (loop5): Free/Dirty block details [ 61.488011][ T5331] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 61.504181][ T5332] EXT4-fs (loop5): free_blocks=2415919104 [pid 5342] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5338] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5068] <... umount2 resumed>) = 0 [pid 5066] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5345] <... ioctl resumed>) = 0 [pid 5338] <... mmap resumed>) = 0x20000000 [pid 5332] <... sendfile resumed>) = 117 [pid 5326] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5068] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] getdents64(4, [pid 5326] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5326] <... futex resumed>) = 0 [pid 5068] lstat("./8/file0", [pid 5326] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5345] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5338] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5332] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5326] <... mmap resumed>) = 0x7f450cf9d000 [pid 5068] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5345] <... futex resumed>) = 0 [pid 5338] <... futex resumed>) = 1 [pid 5335] <... futex resumed>) = 0 [pid 5332] <... futex resumed>) = 0 [pid 5326] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5325] exit_group(0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] close(4 [pid 5345] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5338] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5335] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5332] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5326] <... mprotect resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5338] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 61.510824][ T5332] EXT4-fs (loop5): dirty_blocks=16 [ 61.516627][ T5332] EXT4-fs (loop5): Block reservation details [ 61.522937][ T5332] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 61.530824][ T5331] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 61.543275][ T5331] EXT4-fs (loop4): This should not happen!! Data will be lost [ 61.543275][ T5331] [ 61.553554][ T5331] EXT4-fs (loop4): Total free blocks count 0 [pid 5335] <... futex resumed>) = 0 [pid 5326] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5068] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5348 attached [pid 5338] sendfile(4, 5, NULL, 2147483713 [pid 5335] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5345] <... futex resumed>) = ? [pid 5342] <... mount resumed>) = 0 [pid 5332] <... futex resumed>) = ? [pid 5325] <... exit_group resumed>) = ? [pid 5068] fstat(4, [pid 5066] <... close resumed>) = 0 [pid 5348] set_robust_list(0x7f450cfbd9e0, 24 [pid 5345] +++ exited with 0 +++ [pid 5066] rmdir("./7/file0" [pid 5348] <... set_robust_list resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5348] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5066] getdents64(3, 0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./7") = 0 [pid 5066] mkdir("./8", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f755d0) = 5349 ./strace-static-x86_64: Process 5349 attached [pid 5349] set_robust_list(0x555556f755e0, 24) = 0 [pid 5349] chdir("./8") = 0 [pid 5349] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5326] <... clone resumed>, parent_tid=[5348], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5348 [pid 5342] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5349] <... prctl resumed>) = 0 [pid 5349] setpgid(0, 0) = 0 [pid 5332] +++ exited with 0 +++ [pid 5325] +++ exited with 0 +++ [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5349] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 61.560202][ T5331] EXT4-fs (loop4): Free/Dirty block details [ 61.566426][ T5331] EXT4-fs (loop4): free_blocks=2415919104 [ 61.572195][ T5331] EXT4-fs (loop4): dirty_blocks=16 [ 61.573395][ T5338] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 61.578418][ T5331] EXT4-fs (loop4): Block reservation details [ 61.593188][ T5338] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5349] write(3, "1000", 4 [pid 5342] <... openat resumed>) = 3 [pid 5331] <... sendfile resumed>) = 117 [pid 5326] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] getdents64(4, [pid 5348] <... futex resumed>) = 0 [pid 5342] chdir("./file0" [pid 5326] <... futex resumed>) = 1 [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5325, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5348] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5342] <... chdir resumed>) = 0 [pid 5326] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] restart_syscall(<... resuming interrupted clone ...> [pid 5068] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5349] <... write resumed>) = 4 [pid 5348] <... ioctl resumed>) = 0 [pid 5331] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5349] close(3 [pid 5331] <... futex resumed>) = 0 [pid 5070] <... restart_syscall resumed>) = 0 [pid 5348] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5342] ioctl(4, LOOP_CLR_FD [pid 5068] getdents64(4, [pid 5348] <... futex resumed>) = 1 [pid 5342] <... ioctl resumed>) = 0 [pid 5326] <... futex resumed>) = 0 [pid 5068] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5326] exit_group(0 [pid 5348] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5342] close(4 [pid 5070] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] close(4 [pid 5348] <... futex resumed>) = ? [pid 5342] <... close resumed>) = 0 [pid 5326] <... exit_group resumed>) = ? [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... close resumed>) = 0 [pid 5348] +++ exited with 0 +++ [pid 5349] <... close resumed>) = 0 [pid 5342] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] rmdir("./8/file0" [pid 5349] symlink("/dev/binderfs", "./binderfs" [pid 5342] <... futex resumed>) = 1 [pid 5341] <... futex resumed>) = 0 [pid 5331] +++ exited with 0 +++ [pid 5326] +++ exited with 0 +++ [pid 5070] <... openat resumed>) = 3 [pid 5349] <... symlink resumed>) = 0 [pid 5342] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5341] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] fstat(3, [pid 5068] <... rmdir resumed>) = 0 [pid 5349] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5341] <... futex resumed>) = 0 [pid 5070] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5326, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5349] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f45152be000 [pid 5341] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] getdents64(3, [pid 5068] getdents64(3, [pid 5349] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5342] <... open resumed>) = 4 [pid 5349] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5342] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5068] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5342] <... futex resumed>) = 1 [pid 5341] <... futex resumed>) = 0 [pid 5070] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] close(3 [pid 5349] <... clone resumed>, parent_tid=[5350], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5350 [pid 5342] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5341] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5349] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5342] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5341] <... futex resumed>) = 0 [pid 5070] lstat("./8/binderfs", [pid 5069] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... close resumed>) = 0 [pid 5349] <... futex resumed>) = 0 [pid 5342] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5341] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5349] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5070] unlink("./8/binderfs" [pid 5069] fstat(3, [pid 5068] rmdir("./8" [pid 5342] <... write resumed>) = 9 ./strace-static-x86_64: Process 5350 attached [pid 5342] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... unlink resumed>) = 0 [pid 5069] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5350] set_robust_list(0x7f45152de9e0, 24 [pid 5342] <... futex resumed>) = 1 [pid 5341] <... futex resumed>) = 0 [pid 5070] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] getdents64(3, [pid 5068] mkdir("./9", 0777 [pid 5350] <... set_robust_list resumed>) = 0 [pid 5342] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5341] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5068] <... mkdir resumed>) = 0 [pid 5350] memfd_create("syzkaller", 0 [pid 5342] <... openat resumed>) = 5 [pid 5341] <... futex resumed>) = 0 [pid 5069] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5350] <... memfd_create resumed>) = 3 [pid 5342] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5341] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... openat resumed>) = 3 [pid 5350] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5342] <... futex resumed>) = 0 [pid 5341] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5069] lstat("./8/binderfs", [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5350] <... mmap resumed>) = 0x7f450cebe000 [ 61.617785][ T5331] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 61.641730][ T5338] EXT4-fs (loop2): This should not happen!! Data will be lost [ 61.641730][ T5338] [ 61.654076][ T5338] EXT4-fs (loop2): Total free blocks count 0 [ 61.660602][ T5338] EXT4-fs (loop2): Free/Dirty block details [pid 5342] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5341] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5350] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5342] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5341] <... futex resumed>) = 0 [pid 5335] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] unlink("./8/binderfs" [pid 5068] close(3 [pid 5342] open("./bus", O_RDWR [pid 5341] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] <... unlink resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5342] <... open resumed>) = 6 [pid 5335] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5342] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5341] <... futex resumed>) = 0 [pid 5335] <... futex resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x555556f755d0) = 5351 [pid 5342] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5341] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5335] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5338] <... sendfile resumed>) = 117 ./strace-static-x86_64: Process 5351 attached [pid 5350] <... write resumed>) = 1048576 [pid 5342] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5338] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5335] <... mmap resumed>) = 0x7f450cf9d000 [pid 5351] set_robust_list(0x555556f755e0, 24 [pid 5350] munmap(0x7f450cebe000, 1048576 [pid 5338] <... futex resumed>) = 0 [pid 5335] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5351] <... set_robust_list resumed>) = 0 [pid 5350] <... munmap resumed>) = 0 [pid 5338] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5335] <... mprotect resumed>) = 0 [pid 5351] chdir("./9" [pid 5350] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5335] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5351] <... chdir resumed>) = 0 [pid 5350] <... openat resumed>) = 4 [pid 5351] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5350] ioctl(4, LOOP_SET_FD, 3 [pid 5335] <... clone resumed>, parent_tid=[5352], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5352 [pid 5351] <... prctl resumed>) = 0 [pid 5342] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5341] <... futex resumed>) = 0 [pid 5335] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5351] setpgid(0, 0 [pid 5335] <... futex resumed>) = 0 [pid 5351] <... setpgid resumed>) = 0 [pid 5335] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5351] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5351] write(3, "1000", 4) = 4 [pid 5351] close(3) = 0 [pid 5351] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5351] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5351] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f45152be000 [pid 5351] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5351] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5353], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5353 [pid 5351] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5351] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5350] <... ioctl resumed>) = 0 [pid 5350] close(3) = 0 [pid 5350] mkdir("./file0", 0777) = 0 [ 61.667143][ T5338] EXT4-fs (loop2): free_blocks=2415919104 [ 61.673315][ T5338] EXT4-fs (loop2): dirty_blocks=16 [ 61.679058][ T5338] EXT4-fs (loop2): Block reservation details [ 61.685472][ T5338] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 61.692579][ T51] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 61.698855][ T5350] loop1: detected capacity change from 0 to 2048 [pid 5350] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5341] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5342] <... mmap resumed>) = 0x20000000 [pid 5342] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5353 attached ./strace-static-x86_64: Process 5352 attached ) = 1 [pid 5341] <... futex resumed>) = 0 [pid 5352] set_robust_list(0x7f450cfbd9e0, 24 [pid 5342] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5341] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5353] set_robust_list(0x7f45152de9e0, 24 [pid 5352] <... set_robust_list resumed>) = 0 [pid 5342] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5341] <... futex resumed>) = 0 [pid 5353] <... set_robust_list resumed>) = 0 [pid 5352] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5342] sendfile(4, 5, NULL, 2147483713 [pid 5341] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5352] <... ioctl resumed>) = 0 [pid 5353] memfd_create("syzkaller", 0 [pid 5352] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5353] <... memfd_create resumed>) = 3 [pid 5352] <... futex resumed>) = 1 [pid 5335] <... futex resumed>) = 0 [pid 5353] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5352] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5335] exit_group(0 [pid 5353] <... mmap resumed>) = 0x7f450cebe000 [pid 5352] <... futex resumed>) = ? [pid 5338] <... futex resumed>) = ? [pid 5335] <... exit_group resumed>) = ? [pid 5338] +++ exited with 0 +++ [pid 5350] <... mount resumed>) = 0 [pid 5350] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5350] chdir("./file0") = 0 [pid 5350] ioctl(4, LOOP_CLR_FD) = 0 [pid 5350] close(4) = 0 [pid 5350] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5349] <... futex resumed>) = 0 [pid 5349] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5350] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [ 61.711727][ T11] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 61.718132][ T51] EXT4-fs (loop5): This should not happen!! Data will be lost [ 61.718132][ T51] [ 61.750147][ T11] EXT4-fs (loop4): This should not happen!! Data will be lost [ 61.750147][ T11] [pid 5349] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5350] <... open resumed>) = 4 [pid 5350] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5349] <... futex resumed>) = 0 [pid 5349] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5349] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5350] <... futex resumed>) = 1 [pid 5350] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9) = 9 [pid 5350] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5349] <... futex resumed>) = 0 [pid 5350] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5349] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5350] <... openat resumed>) = 5 [pid 5349] <... futex resumed>) = 0 [pid 5350] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5349] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5350] <... futex resumed>) = 0 [pid 5349] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5350] open("./bus", O_RDWR [pid 5349] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5350] <... open resumed>) = 6 [pid 5349] <... futex resumed>) = 0 [pid 5352] +++ exited with 0 +++ [pid 5350] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5349] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5341] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5335] +++ exited with 0 +++ [pid 5350] <... futex resumed>) = 0 [pid 5349] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5341] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5350] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5349] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5341] <... futex resumed>) = 0 [pid 5350] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5349] <... futex resumed>) = 0 [pid 5350] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5349] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5350] <... mmap resumed>) = 0x20000000 [pid 5341] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5335, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5353] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5341] <... mmap resumed>) = 0x7f450cf9d000 [pid 5067] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5341] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5069] <... umount2 resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5341] <... mprotect resumed>) = 0 [pid 5069] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5341] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... openat resumed>) = 3 [pid 5069] lstat("./8/file0", [ 61.750282][ T5342] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 61.796715][ T5342] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 61.810379][ T5342] EXT4-fs (loop0): This should not happen!! Data will be lost [pid 5067] fstat(3, [pid 5350] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5341] <... clone resumed>, parent_tid=[5356], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5356 [pid 5070] <... umount2 resumed>) = 0 [pid 5069] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5341] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] getdents64(3, [pid 5341] <... futex resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5341] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] lstat("./8/file0", [pid 5069] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5356 attached [pid 5070] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5069] <... openat resumed>) = 4 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5356] set_robust_list(0x7f450cfbd9e0, 24 [pid 5070] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] fstat(4, [pid 5350] <... futex resumed>) = 1 [pid 5067] lstat("./9/binderfs", [pid 5356] <... set_robust_list resumed>) = 0 [pid 5349] <... futex resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5350] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5069] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5356] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5349] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] getdents64(4, [pid 5067] unlink("./9/binderfs" [pid 5350] <... futex resumed>) = 0 [pid 5349] <... futex resumed>) = 1 [pid 5070] <... openat resumed>) = 4 [pid 5069] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5067] <... unlink resumed>) = 0 [ 61.810379][ T5342] [ 61.823451][ T5342] EXT4-fs (loop0): Total free blocks count 0 [ 61.829673][ T5342] EXT4-fs (loop0): Free/Dirty block details [ 61.853080][ T5350] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5350] sendfile(4, 5, NULL, 2147483713 [pid 5349] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] fstat(4, [pid 5069] getdents64(4, [pid 5067] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5341] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5070] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5069] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5070] getdents64(4, [pid 5069] close(4 [pid 5353] <... write resumed>) = 1048576 [pid 5070] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5069] <... close resumed>) = 0 [pid 5070] getdents64(4, [pid 5069] rmdir("./8/file0" [pid 5353] munmap(0x7f450cebe000, 1048576 [pid 5070] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5356] <... ioctl resumed>) = 0 [pid 5353] <... munmap resumed>) = 0 [pid 5342] <... sendfile resumed>) = 117 [pid 5070] close(4 [pid 5069] getdents64(3, [pid 5353] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5070] <... close resumed>) = 0 [pid 5069] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5353] <... openat resumed>) = 4 [pid 5070] rmdir("./8/file0" [pid 5069] close(3 [ 61.856651][ T5342] EXT4-fs (loop0): free_blocks=2415919104 [ 61.873794][ T5342] EXT4-fs (loop0): dirty_blocks=16 [ 61.879450][ T5342] EXT4-fs (loop0): Block reservation details [ 61.879578][ T5252] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 61.885654][ T5342] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 61.905231][ T5350] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5353] ioctl(4, LOOP_SET_FD, 3 [pid 5070] <... rmdir resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 5356] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5349] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5342] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] getdents64(3, [pid 5069] rmdir("./8" [pid 5349] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5341] exit_group(0 [pid 5070] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5349] <... futex resumed>) = 0 [pid 5341] <... exit_group resumed>) = ? [pid 5070] close(3 [pid 5069] mkdir("./9", 0777 [pid 5349] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5070] <... close resumed>) = 0 [pid 5069] <... mkdir resumed>) = 0 [pid 5349] <... mmap resumed>) = 0x7f450cf9d000 [pid 5070] rmdir("./8" [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5349] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5070] <... rmdir resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5349] <... mprotect resumed>) = 0 [pid 5070] mkdir("./9", 0777 [pid 5069] ioctl(3, LOOP_CLR_FD [pid 5349] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5070] <... mkdir resumed>) = 0 [pid 5069] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5069] close(3 [pid 5356] <... futex resumed>) = ? [pid 5349] <... clone resumed>, parent_tid=[5357], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5357 [pid 5342] <... futex resumed>) = ? [pid 5070] <... openat resumed>) = 3 [pid 5069] <... close resumed>) = 0 [pid 5349] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] ioctl(3, LOOP_CLR_FD [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5356] +++ exited with 0 +++ [pid 5349] <... futex resumed>) = 0 [pid 5070] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5349] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5342] +++ exited with 0 +++ [pid 5341] +++ exited with 0 +++ [pid 5070] close(3 [pid 5069] <... clone resumed>, child_tidptr=0x555556f755d0) = 5358 ./strace-static-x86_64: Process 5358 attached ./strace-static-x86_64: Process 5357 attached [pid 5070] <... close resumed>) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5341, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5357] set_robust_list(0x7f450cfbd9e0, 24 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5358] set_robust_list(0x555556f755e0, 24 [pid 5357] <... set_robust_list resumed>) = 0 [pid 5353] <... ioctl resumed>) = 0 [pid 5357] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5353] close(3 [pid 5070] <... clone resumed>, child_tidptr=0x555556f755d0) = 5359 [pid 5065] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5353] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5353] mkdir("./file0", 0777 [pid 5065] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5353] <... mkdir resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5353] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 61.909975][ T5353] loop3: detected capacity change from 0 to 2048 [ 61.918754][ T5350] EXT4-fs (loop1): This should not happen!! Data will be lost [ 61.918754][ T5350] [ 61.934971][ T5350] EXT4-fs (loop1): Total free blocks count 0 [ 61.941312][ T5350] EXT4-fs (loop1): Free/Dirty block details [ 61.950972][ T5350] EXT4-fs (loop1): free_blocks=2415919104 [ 61.958550][ T5350] EXT4-fs (loop1): dirty_blocks=16 [pid 5358] <... set_robust_list resumed>) = 0 [pid 5065] lstat("./8/binderfs", ./strace-static-x86_64: Process 5359 attached {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./8/binderfs") = 0 [pid 5065] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5359] set_robust_list(0x555556f755e0, 24 [pid 5358] chdir("./9" [pid 5359] <... set_robust_list resumed>) = 0 [pid 5358] <... chdir resumed>) = 0 [pid 5349] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5359] chdir("./9" [pid 5358] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] <... umount2 resumed>) = 0 [pid 5067] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5359] <... chdir resumed>) = 0 [pid 5067] <... openat resumed>) = 4 [pid 5358] <... prctl resumed>) = 0 [pid 5359] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5357] <... ioctl resumed>) = 0 [pid 5353] <... mount resumed>) = 0 [pid 5350] <... sendfile resumed>) = 117 [pid 5067] fstat(4, [pid 5359] <... prctl resumed>) = 0 [pid 5358] setpgid(0, 0 [pid 5357] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5353] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5350] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5349] exit_group(0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5359] setpgid(0, 0 [pid 5358] <... setpgid resumed>) = 0 [pid 5357] <... futex resumed>) = ? [pid 5353] <... openat resumed>) = 3 [pid 5350] <... futex resumed>) = ? [pid 5349] <... exit_group resumed>) = ? [pid 5067] getdents64(4, [pid 5359] <... setpgid resumed>) = 0 [pid 5358] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5357] +++ exited with 0 +++ [pid 5353] chdir("./file0" [pid 5350] +++ exited with 0 +++ [pid 5349] +++ exited with 0 +++ [pid 5067] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5359] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5358] <... openat resumed>) = 3 [pid 5353] <... chdir resumed>) = 0 [pid 5067] getdents64(4, [pid 5353] ioctl(4, LOOP_CLR_FD [pid 5067] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5349, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5359] <... openat resumed>) = 3 [pid 5358] write(3, "1000", 4 [pid 5353] <... ioctl resumed>) = 0 [pid 5067] close(4 [pid 5066] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5353] close(4 [pid 5067] <... close resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5359] write(3, "1000", 4 [pid 5358] <... write resumed>) = 4 [pid 5353] <... close resumed>) = 0 [pid 5067] rmdir("./9/file0" [pid 5066] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... umount2 resumed>) = 0 [pid 5359] <... write resumed>) = 4 [pid 5358] close(3 [pid 5353] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5359] close(3 [pid 5358] <... close resumed>) = 0 [pid 5353] <... futex resumed>) = 1 [pid 5351] <... futex resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5359] <... close resumed>) = 0 [ 61.965824][ T5350] EXT4-fs (loop1): Block reservation details [ 61.965856][ T5252] EXT4-fs (loop2): This should not happen!! Data will be lost [ 61.965856][ T5252] [ 61.983157][ T61] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 61.997451][ T61] EXT4-fs (loop0): This should not happen!! Data will be lost [ 61.997451][ T61] [ 62.008879][ T5350] EXT4-fs (loop1): i_reserved_data_blocks=1 [pid 5358] symlink("/dev/binderfs", "./binderfs" [pid 5353] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5351] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] getdents64(3, [pid 5066] fstat(3, [pid 5065] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5359] symlink("/dev/binderfs", "./binderfs" [pid 5358] <... symlink resumed>) = 0 [pid 5353] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5351] <... futex resumed>) = 0 [pid 5067] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5359] <... symlink resumed>) = 0 [pid 5358] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5353] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5351] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] close(3 [pid 5066] getdents64(3, [pid 5359] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5358] <... futex resumed>) = 0 [pid 5353] <... open resumed>) = 4 [pid 5067] <... close resumed>) = 0 [pid 5066] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5359] <... futex resumed>) = 0 [pid 5358] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5353] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] rmdir("./9" [pid 5066] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5359] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5358] <... mmap resumed>) = 0x7f45152be000 [pid 5353] <... futex resumed>) = 1 [pid 5351] <... futex resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./8/file0", [pid 5359] <... mmap resumed>) = 0x7f45152be000 [pid 5358] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE [pid 5353] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5351] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] mkdir("./10", 0777 [pid 5066] lstat("./8/binderfs", [pid 5359] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE [pid 5358] <... mprotect resumed>) = 0 [pid 5353] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5351] <... futex resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5359] <... mprotect resumed>) = 0 [pid 5358] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5353] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5351] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5066] unlink("./8/binderfs" [pid 5065] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5359] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5353] <... write resumed>) = 9 [pid 5067] <... openat resumed>) = 3 [pid 5066] <... unlink resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5358] <... clone resumed>, parent_tid=[5362], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5362 [pid 5353] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5066] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5359] <... clone resumed>, parent_tid=[5363], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5363 [pid 5358] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5353] <... futex resumed>) = 1 [pid 5351] <... futex resumed>) = 0 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5359] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5358] <... futex resumed>) = 0 [pid 5353] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5351] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] close(3 [pid 5065] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5363 attached ./strace-static-x86_64: Process 5362 attached [pid 5359] <... futex resumed>) = 0 [pid 5358] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5353] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5351] <... futex resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5065] fstat(4, [pid 5363] set_robust_list(0x7f45152de9e0, 24 [pid 5362] set_robust_list(0x7f45152de9e0, 24 [pid 5359] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5353] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5351] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x555556f755d0) = 5364 [pid 5353] <... openat resumed>) = 5 ./strace-static-x86_64: Process 5364 attached [pid 5363] <... set_robust_list resumed>) = 0 [pid 5362] <... set_robust_list resumed>) = 0 [pid 5353] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] getdents64(4, [pid 5363] memfd_create("syzkaller", 0) = 3 [pid 5363] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f450cebe000 [pid 5364] set_robust_list(0x555556f755e0, 24 [pid 5363] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5362] memfd_create("syzkaller", 0 [pid 5353] <... futex resumed>) = 1 [pid 5351] <... futex resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5362] <... memfd_create resumed>) = 3 [pid 5351] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] getdents64(4, [pid 5364] <... set_robust_list resumed>) = 0 [pid 5362] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5351] <... futex resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5362] <... mmap resumed>) = 0x7f450cebe000 [pid 5351] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] close(4 [pid 5362] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5065] <... close resumed>) = 0 [pid 5364] chdir("./10" [pid 5353] open("./bus", O_RDWR [pid 5065] rmdir("./8/file0") = 0 [pid 5065] getdents64(3, [pid 5364] <... chdir resumed>) = 0 [pid 5353] <... open resumed>) = 6 [pid 5065] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5364] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5363] <... write resumed>) = 1048576 [pid 5362] <... write resumed>) = 1048576 [pid 5353] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] close(3 [pid 5364] <... prctl resumed>) = 0 [pid 5363] munmap(0x7f450cebe000, 1048576 [pid 5362] munmap(0x7f450cebe000, 1048576 [ 62.081472][ T61] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 62.095312][ T61] EXT4-fs (loop1): This should not happen!! Data will be lost [ 62.095312][ T61] [pid 5353] <... futex resumed>) = 1 [pid 5351] <... futex resumed>) = 0 [pid 5066] <... umount2 resumed>) = 0 [pid 5364] setpgid(0, 0 [pid 5363] <... munmap resumed>) = 0 [pid 5362] <... munmap resumed>) = 0 [pid 5353] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5351] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... close resumed>) = 0 [pid 5066] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5364] <... setpgid resumed>) = 0 [pid 5363] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5362] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5353] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5351] <... futex resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] rmdir("./8" [pid 5364] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5363] <... openat resumed>) = 4 [pid 5362] <... openat resumed>) = 4 [pid 5353] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5351] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] lstat("./8/file0", [pid 5364] <... openat resumed>) = 3 [pid 5363] ioctl(4, LOOP_SET_FD, 3 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5066] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] mkdir("./9", 0777 [pid 5353] <... mmap resumed>) = 0x20000000 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... mkdir resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5066] <... openat resumed>) = 4 [pid 5065] <... openat resumed>) = 3 [pid 5066] fstat(4, [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] getdents64(4, [pid 5065] close(3 [pid 5364] write(3, "1000", 4 [pid 5363] <... ioctl resumed>) = 0 [pid 5353] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5065] <... close resumed>) = 0 [pid 5364] <... write resumed>) = 4 [pid 5363] close(3 [pid 5362] ioctl(4, LOOP_SET_FD, 3 [pid 5353] <... futex resumed>) = 1 [pid 5351] <... futex resumed>) = 0 [pid 5066] getdents64(4, [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5364] close(3 [pid 5363] <... close resumed>) = 0 [pid 5353] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5351] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5363] mkdir("./file0", 0777) = 0 [pid 5363] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue"./strace-static-x86_64: Process 5365 attached [pid 5364] <... close resumed>) = 0 [pid 5362] <... ioctl resumed>) = 0 [pid 5353] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5351] <... futex resumed>) = 0 [pid 5066] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5365] set_robust_list(0x555556f755e0, 24 [pid 5364] symlink("/dev/binderfs", "./binderfs" [pid 5353] sendfile(4, 5, NULL, 2147483713 [pid 5351] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] close(4 [pid 5065] <... clone resumed>, child_tidptr=0x555556f755d0) = 5365 [pid 5365] <... set_robust_list resumed>) = 0 [pid 5364] <... symlink resumed>) = 0 [pid 5362] close(3 [pid 5364] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... close resumed>) = 0 [pid 5364] <... futex resumed>) = 0 [pid 5364] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5066] rmdir("./8/file0" [pid 5364] <... mmap resumed>) = 0x7f45152be000 [pid 5066] <... rmdir resumed>) = 0 [pid 5365] chdir("./9" [pid 5364] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE [pid 5365] <... chdir resumed>) = 0 [pid 5066] getdents64(3, [pid 5365] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5364] <... mprotect resumed>) = 0 [pid 5365] <... prctl resumed>) = 0 [pid 5364] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5066] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5365] setpgid(0, 0 [pid 5066] close(3 [pid 5365] <... setpgid resumed>) = 0 [pid 5365] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... close resumed>) = 0 [pid 5364] <... clone resumed>, parent_tid=[5367], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5367 [pid 5365] <... openat resumed>) = 3 [pid 5066] rmdir("./8" [pid 5364] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5365] write(3, "1000", 4) = 4 [pid 5365] close(3 [pid 5364] <... futex resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5365] <... close resumed>) = 0 [pid 5364] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5365] symlink("/dev/binderfs", "./binderfs" [pid 5066] mkdir("./9", 0777 [pid 5365] <... symlink resumed>) = 0 [pid 5365] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5365] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f45152be000 [pid 5365] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5365] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5368], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5368 [pid 5365] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5365] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5368 attached [pid 5368] set_robust_list(0x7f45152de9e0, 24) = 0 [pid 5368] memfd_create("syzkaller", 0) = 3 [pid 5368] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f450cebe000 [ 62.150993][ T5363] loop5: detected capacity change from 0 to 2048 [ 62.159637][ T5362] loop4: detected capacity change from 0 to 2048 [pid 5066] <... mkdir resumed>) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 ./strace-static-x86_64: Process 5367 attached [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5362] <... close resumed>) = 0 [pid 5066] close(3 [pid 5362] mkdir("./file0", 0777 [pid 5368] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5367] set_robust_list(0x7f45152de9e0, 24 [pid 5363] <... mount resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5362] <... mkdir resumed>) = 0 [pid 5362] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5368] <... write resumed>) = 1048576 [pid 5367] <... set_robust_list resumed>) = 0 [pid 5363] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5351] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5368] munmap(0x7f450cebe000, 1048576 [pid 5367] memfd_create("syzkaller", 0 [pid 5363] <... openat resumed>) = 3 [pid 5351] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5368] <... munmap resumed>) = 0 [pid 5367] <... memfd_create resumed>) = 3 [pid 5363] chdir("./file0" [pid 5351] <... futex resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x555556f755d0) = 5370 [pid 5368] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5367] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5363] <... chdir resumed>) = 0 [pid 5351] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 5370 attached [pid 5370] set_robust_list(0x555556f755e0, 24) = 0 [pid 5370] chdir("./9") = 0 [pid 5370] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5370] setpgid(0, 0 [pid 5368] <... openat resumed>) = 4 [pid 5367] <... mmap resumed>) = 0x7f450cebe000 [pid 5363] ioctl(4, LOOP_CLR_FD [pid 5351] <... mmap resumed>) = 0x7f450cf9d000 [pid 5363] <... ioctl resumed>) = 0 [pid 5368] ioctl(4, LOOP_SET_FD, 3 [pid 5363] close(4 [pid 5370] <... setpgid resumed>) = 0 [pid 5370] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 62.187927][ T5353] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 62.213577][ T5353] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 62.230090][ T5353] EXT4-fs (loop3): This should not happen!! Data will be lost [ 62.230090][ T5353] [ 62.244464][ T5353] EXT4-fs (loop3): Total free blocks count 0 [pid 5370] write(3, "1000", 4 [pid 5368] <... ioctl resumed>) = 0 [pid 5367] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5363] <... close resumed>) = 0 [pid 5351] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5363] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5351] <... mprotect resumed>) = 0 [pid 5370] <... write resumed>) = 4 [pid 5368] close(3 [pid 5363] <... futex resumed>) = 1 [pid 5359] <... futex resumed>) = 0 [pid 5351] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5368] <... close resumed>) = 0 [pid 5363] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5359] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5370] close(3 [pid 5368] mkdir("./file0", 0777 [pid 5363] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5359] <... futex resumed>) = 0 [pid 5370] <... close resumed>) = 0 [pid 5370] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 5372 attached ) = 0 [pid 5372] set_robust_list(0x7f450cfbd9e0, 24 [pid 5370] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5372] <... set_robust_list resumed>) = 0 [pid 5370] <... futex resumed>) = 0 [pid 5372] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5370] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f45152be000 [pid 5370] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE [pid 5368] <... mkdir resumed>) = 0 [pid 5363] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5359] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5351] <... clone resumed>, parent_tid=[5372], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5372 [pid 5370] <... mprotect resumed>) = 0 [pid 5370] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5368] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5363] <... open resumed>) = 4 [pid 5351] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5367] <... write resumed>) = 1048576 [pid 5370] <... clone resumed>, parent_tid=[5374], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5374 [pid 5370] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5362] <... mount resumed>) = 0 [pid 5370] <... futex resumed>) = 0 [pid 5362] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5370] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5363] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5362] <... openat resumed>) = 3 [pid 5351] <... futex resumed>) = 1 [pid 5367] munmap(0x7f450cebe000, 1048576 [pid 5363] <... futex resumed>) = 1 [pid 5362] chdir("./file0" [pid 5359] <... futex resumed>) = 0 [pid 5351] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5367] <... munmap resumed>) = 0 [pid 5363] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5362] <... chdir resumed>) = 0 [pid 5359] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5374 attached [pid 5372] <... futex resumed>) = 0 [pid 5367] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5363] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5362] ioctl(4, LOOP_CLR_FD) = 0 [ 62.256619][ T5368] loop0: detected capacity change from 0 to 2048 [ 62.266312][ T5353] EXT4-fs (loop3): Free/Dirty block details [ 62.284184][ T5353] EXT4-fs (loop3): free_blocks=2415919104 [ 62.294270][ T5353] EXT4-fs (loop3): dirty_blocks=16 [pid 5362] close(4 [pid 5374] set_robust_list(0x7f45152de9e0, 24 [pid 5372] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5367] <... openat resumed>) = 4 [pid 5363] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5362] <... close resumed>) = 0 [pid 5359] <... futex resumed>) = 0 [pid 5353] <... sendfile resumed>) = 117 [pid 5372] <... ioctl resumed>) = 0 [pid 5367] ioctl(4, LOOP_SET_FD, 3 [pid 5362] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5359] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5362] <... futex resumed>) = 1 [pid 5353] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5362] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5353] <... futex resumed>) = 0 [pid 5353] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5374] <... set_robust_list resumed>) = 0 [pid 5374] memfd_create("syzkaller", 0) = 3 [pid 5374] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f450cebe000 [pid 5372] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5358] <... futex resumed>) = 0 [pid 5363] <... write resumed>) = 9 [pid 5358] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5362] <... futex resumed>) = 0 [pid 5372] <... futex resumed>) = 1 [pid 5362] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5358] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5351] <... futex resumed>) = 0 [pid 5363] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5372] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5374] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5368] <... mount resumed>) = 0 [pid 5363] <... futex resumed>) = 1 [pid 5362] <... open resumed>) = 4 [pid 5359] <... futex resumed>) = 0 [pid 5351] exit_group(0 [pid 5372] <... futex resumed>) = ? [pid 5368] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5363] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5362] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5359] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5353] <... futex resumed>) = ? [pid 5351] <... exit_group resumed>) = ? [pid 5372] +++ exited with 0 +++ [pid 5368] <... openat resumed>) = 3 [pid 5363] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5362] <... futex resumed>) = 1 [pid 5359] <... futex resumed>) = 0 [pid 5358] <... futex resumed>) = 0 [pid 5353] +++ exited with 0 +++ [pid 5367] <... ioctl resumed>) = 0 [pid 5351] +++ exited with 0 +++ [pid 5359] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5358] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5351, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5363] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5362] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5368] chdir("./file0" [pid 5358] <... futex resumed>) = 0 [pid 5367] close(3 [pid 5363] <... openat resumed>) = 5 [pid 5368] <... chdir resumed>) = 0 [pid 5367] <... close resumed>) = 0 [pid 5362] <... write resumed>) = 9 [pid 5363] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5358] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5368] ioctl(4, LOOP_CLR_FD [pid 5363] <... futex resumed>) = 1 [pid 5362] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5359] <... futex resumed>) = 0 [pid 5358] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5068] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5368] <... ioctl resumed>) = 0 [pid 5363] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5362] <... futex resumed>) = 0 [pid 5359] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5358] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5368] close(4 [pid 5363] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5362] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5359] <... futex resumed>) = 0 [pid 5358] <... futex resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5368] <... close resumed>) = 0 [pid 5363] open("./bus", O_RDWR [pid 5367] mkdir("./file0", 0777 [pid 5362] <... openat resumed>) = 5 [pid 5359] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5358] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... openat resumed>) = 3 [pid 5368] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5367] <... mkdir resumed>) = 0 [pid 5363] <... open resumed>) = 6 [pid 5362] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5358] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5068] fstat(3, [pid 5368] <... futex resumed>) = 1 [pid 5367] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5365] <... futex resumed>) = 0 [pid 5363] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5358] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5368] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5365] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5363] <... futex resumed>) = 1 [pid 5362] <... futex resumed>) = 0 [pid 5359] <... futex resumed>) = 0 [pid 5358] <... futex resumed>) = 0 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5368] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5365] <... futex resumed>) = 0 [pid 5363] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5362] open("./bus", O_RDWR [pid 5359] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5358] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] getdents64(3, [pid 5368] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5365] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5363] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5362] <... open resumed>) = 6 [pid 5359] <... futex resumed>) = 0 [pid 5068] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5363] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5359] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5362] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5368] <... open resumed>) = 4 [pid 5363] <... mmap resumed>) = 0x20000000 [pid 5362] <... futex resumed>) = 1 [pid 5358] <... futex resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 62.303971][ T5353] EXT4-fs (loop3): Block reservation details [ 62.310378][ T5353] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 62.319487][ T5367] loop2: detected capacity change from 0 to 2048 [pid 5368] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5363] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5362] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5358] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] lstat("./9/binderfs", [pid 5374] <... write resumed>) = 1048576 [pid 5368] <... futex resumed>) = 1 [pid 5365] <... futex resumed>) = 0 [pid 5363] <... futex resumed>) = 1 [pid 5362] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5367] <... mount resumed>) = 0 [pid 5359] <... futex resumed>) = 0 [pid 5358] <... futex resumed>) = 0 [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5374] munmap(0x7f450cebe000, 1048576 [pid 5368] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5367] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5365] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5363] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5362] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5359] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5358] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] unlink("./9/binderfs" [pid 5374] <... munmap resumed>) = 0 [pid 5368] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5367] <... openat resumed>) = 3 [pid 5365] <... futex resumed>) = 0 [pid 5363] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5362] <... mmap resumed>) = 0x20000000 [pid 5359] <... futex resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 5374] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5368] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5367] chdir("./file0" [pid 5365] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5363] sendfile(4, 5, NULL, 2147483713 [pid 5362] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5359] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5374] <... openat resumed>) = 4 [pid 5368] <... write resumed>) = 9 [pid 5367] <... chdir resumed>) = 0 [pid 5362] <... futex resumed>) = 1 [pid 5358] <... futex resumed>) = 0 [pid 5374] ioctl(4, LOOP_SET_FD, 3 [pid 5368] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5367] ioctl(4, LOOP_CLR_FD [pid 5362] sendfile(4, 5, NULL, 2147483713 [pid 5358] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5368] <... futex resumed>) = 1 [pid 5367] <... ioctl resumed>) = 0 [pid 5358] <... futex resumed>) = 0 [pid 5368] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5367] close(4 [pid 5358] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5367] <... close resumed>) = 0 [pid 5365] <... futex resumed>) = 0 [pid 5367] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5367] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5374] <... ioctl resumed>) = 0 [pid 5374] close(3) = 0 [pid 5374] mkdir("./file0", 0777 [pid 5365] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5364] <... futex resumed>) = 0 [pid 5365] <... futex resumed>) = 1 [pid 5368] <... futex resumed>) = 0 [pid 5364] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5368] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5365] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5368] <... openat resumed>) = 5 [pid 5367] <... futex resumed>) = 0 [pid 5364] <... futex resumed>) = 1 [pid 5368] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5367] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5364] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 62.395638][ T5363] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 62.398195][ T5374] loop1: detected capacity change from 0 to 2048 [ 62.411433][ T5363] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 62.430513][ T61] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5359] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5368] <... futex resumed>) = 1 [pid 5367] <... open resumed>) = 4 [pid 5365] <... futex resumed>) = 0 [pid 5367] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5364] <... futex resumed>) = 0 [pid 5367] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5364] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5364] <... futex resumed>) = 0 [pid 5367] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5364] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5374] <... mkdir resumed>) = 0 [pid 5374] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5368] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5365] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5359] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5368] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5367] <... write resumed>) = 9 [pid 5365] <... futex resumed>) = 0 [pid 5359] <... futex resumed>) = 0 [pid 5368] open("./bus", O_RDWR [pid 5367] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5364] <... futex resumed>) = 0 [pid 5367] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5364] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5358] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5364] <... futex resumed>) = 0 [pid 5358] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5367] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5364] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5358] <... futex resumed>) = 0 [pid 5367] <... openat resumed>) = 5 [pid 5358] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5367] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5358] <... mmap resumed>) = 0x7f450cf9d000 [pid 5367] <... futex resumed>) = 1 [pid 5364] <... futex resumed>) = 0 [pid 5358] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5368] <... open resumed>) = 6 [pid 5367] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5365] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5364] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5359] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5358] <... mprotect resumed>) = 0 [pid 5367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5364] <... futex resumed>) = 0 [pid 5358] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5367] open("./bus", O_RDWR [pid 5364] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5367] <... open resumed>) = 6 [pid 5358] <... clone resumed>, parent_tid=[5379], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5379 [pid 5367] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5358] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5367] <... futex resumed>) = 1 [pid 5364] <... futex resumed>) = 0 [pid 5358] <... futex resumed>) = 0 [pid 5367] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5364] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5358] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5364] <... futex resumed>) = 0 [pid 5367] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5364] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5379 attached [pid 5367] <... mmap resumed>) = 0x20000000 [pid 5379] set_robust_list(0x7f450cfbd9e0, 24 [pid 5367] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5379] <... set_robust_list resumed>) = 0 [pid 5367] <... futex resumed>) = 1 [pid 5364] <... futex resumed>) = 0 [pid 5379] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5368] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5367] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5365] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 62.451077][ T5362] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 62.467762][ T61] EXT4-fs (loop3): This should not happen!! Data will be lost [ 62.467762][ T61] [ 62.477637][ T5363] EXT4-fs (loop5): This should not happen!! Data will be lost [ 62.477637][ T5363] [ 62.488541][ T5362] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5364] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5359] <... mmap resumed>) = 0x7f450cf9d000 [pid 5368] <... futex resumed>) = 0 [pid 5367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5365] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5364] <... futex resumed>) = 0 [pid 5367] sendfile(4, 5, NULL, 2147483713 [pid 5364] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5368] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5365] <... futex resumed>) = 0 [ 62.503634][ T5363] EXT4-fs (loop5): Total free blocks count 0 [ 62.509782][ T5362] EXT4-fs (loop4): This should not happen!! Data will be lost [ 62.509782][ T5362] [ 62.517718][ T5367] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 62.520090][ T5363] EXT4-fs (loop5): Free/Dirty block details [ 62.536139][ T5367] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5359] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5368] <... mmap resumed>) = 0x20000000 [pid 5365] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5359] <... mprotect resumed>) = 0 [pid 5368] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5365] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5359] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5358] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5068] <... umount2 resumed>) = 0 [pid 5068] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5368] <... futex resumed>) = 0 [pid 5365] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5368] sendfile(4, 5, NULL, 2147483713 [pid 5365] <... futex resumed>) = 0 [pid 5068] <... openat resumed>) = 4 [pid 5068] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, 0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, 0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5068] close(4) = 0 [pid 5359] <... clone resumed>, parent_tid=[5381], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5381 [pid 5068] rmdir("./9/file0" [pid 5359] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... rmdir resumed>) = 0 [pid 5359] <... futex resumed>) = 0 [pid 5068] getdents64(3, [pid 5359] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [ 62.542417][ T5362] EXT4-fs (loop4): Total free blocks count 0 [ 62.560167][ T5363] EXT4-fs (loop5): free_blocks=2415919104 [ 62.565944][ T5363] EXT4-fs (loop5): dirty_blocks=16 [ 62.572630][ T5362] EXT4-fs (loop4): Free/Dirty block details [ 62.580467][ T5362] EXT4-fs (loop4): free_blocks=2415919104 [ 62.585730][ T5368] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters ./strace-static-x86_64: Process 5381 attached [pid 5365] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] close(3 [pid 5374] <... mount resumed>) = 0 [pid 5364] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5374] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5364] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... close resumed>) = 0 [pid 5374] <... openat resumed>) = 3 [pid 5364] <... futex resumed>) = 0 [pid 5068] rmdir("./9" [pid 5374] chdir("./file0" [pid 5364] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5381] set_robust_list(0x7f450cfbd9e0, 24 [pid 5374] <... chdir resumed>) = 0 [pid 5364] <... mmap resumed>) = 0x7f450cf9d000 [pid 5068] mkdir("./10", 0777 [pid 5374] ioctl(4, LOOP_CLR_FD [pid 5364] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5359] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5068] <... mkdir resumed>) = 0 [pid 5374] <... ioctl resumed>) = 0 [pid 5364] <... mprotect resumed>) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5381] <... set_robust_list resumed>) = 0 [pid 5374] close(4 [pid 5364] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5068] <... openat resumed>) = 3 [pid 5381] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5374] <... close resumed>) = 0 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5374] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5364] <... clone resumed>, parent_tid=[5383], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5383 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 62.586517][ T5367] EXT4-fs (loop2): This should not happen!! Data will be lost [ 62.586517][ T5367] [ 62.602404][ T5363] EXT4-fs (loop5): Block reservation details [ 62.611317][ T5367] EXT4-fs (loop2): Total free blocks count 0 [ 62.624042][ T5367] EXT4-fs (loop2): Free/Dirty block details [ 62.630881][ T5367] EXT4-fs (loop2): free_blocks=2415919104 [ 62.637019][ T5367] EXT4-fs (loop2): dirty_blocks=16 [ 62.645053][ T5362] EXT4-fs (loop4): dirty_blocks=16 [pid 5374] <... futex resumed>) = 1 [pid 5370] <... futex resumed>) = 0 [pid 5364] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] close(3./strace-static-x86_64: Process 5383 attached [pid 5374] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5370] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5364] <... futex resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5383] set_robust_list(0x7f450cfbd9e0, 24 [pid 5374] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5370] <... futex resumed>) = 0 [pid 5364] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5383] <... set_robust_list resumed>) = 0 [pid 5374] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5370] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5365] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 5384 attached [pid 5383] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5374] <... open resumed>) = 4 [pid 5367] <... sendfile resumed>) = 117 [pid 5068] <... clone resumed>, child_tidptr=0x555556f755d0) = 5384 [pid 5383] <... ioctl resumed>) = 0 [pid 5374] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5383] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5374] <... futex resumed>) = 1 [pid 5370] <... futex resumed>) = 0 [pid 5384] set_robust_list(0x555556f755e0, 24 [pid 5383] <... futex resumed>) = 1 [pid 5374] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5370] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5367] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5365] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5364] <... futex resumed>) = 0 [pid 5383] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5374] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5370] <... futex resumed>) = 0 [ 62.654532][ T5367] EXT4-fs (loop2): Block reservation details [ 62.663179][ T5367] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 62.669829][ T5368] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 62.675639][ T5362] EXT4-fs (loop4): Block reservation details [ 62.682915][ T5368] EXT4-fs (loop0): This should not happen!! Data will be lost [ 62.682915][ T5368] [ 62.698575][ T5368] EXT4-fs (loop0): Total free blocks count 0 [pid 5364] exit_group(0 [pid 5384] <... set_robust_list resumed>) = 0 [pid 5383] <... futex resumed>) = ? [pid 5374] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5370] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5367] <... futex resumed>) = ? [pid 5365] <... futex resumed>) = 0 [pid 5364] <... exit_group resumed>) = ? [pid 5384] chdir("./10" [pid 5383] +++ exited with 0 +++ [pid 5374] <... write resumed>) = 9 [pid 5367] +++ exited with 0 +++ [pid 5365] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5364] +++ exited with 0 +++ [pid 5384] <... chdir resumed>) = 0 [pid 5374] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5365] <... mmap resumed>) = 0x7f450cf9d000 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5364, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5374] <... futex resumed>) = 1 [pid 5370] <... futex resumed>) = 0 [pid 5374] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5370] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5384] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5374] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5370] <... futex resumed>) = 0 [pid 5365] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5384] <... prctl resumed>) = 0 [pid 5374] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5370] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5379] <... ioctl resumed>) = 0 [pid 5368] <... sendfile resumed>) = 117 [pid 5365] <... mprotect resumed>) = 0 [pid 5363] <... sendfile resumed>) = 117 [pid 5381] <... ioctl resumed>) = 0 [pid 5362] <... sendfile resumed>) = 117 [pid 5384] setpgid(0, 0 [pid 5381] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5379] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5374] <... openat resumed>) = 5 [pid 5368] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5365] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5363] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5362] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5385 attached [pid 5384] <... setpgid resumed>) = 0 [pid 5381] <... futex resumed>) = 0 [pid 5379] <... futex resumed>) = 0 [pid 5374] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5368] <... futex resumed>) = 0 [pid 5363] <... futex resumed>) = 0 [pid 5362] <... futex resumed>) = 0 [pid 5067] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5385] set_robust_list(0x7f450cfbd9e0, 24 [pid 5384] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5381] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5379] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5374] <... futex resumed>) = 1 [pid 5370] <... futex resumed>) = 0 [pid 5368] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5365] <... clone resumed>, parent_tid=[5385], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5385 [pid 5363] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5362] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5359] exit_group(0 [pid 5358] exit_group(0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5385] <... set_robust_list resumed>) = 0 [pid 5384] <... openat resumed>) = 3 [pid 5381] <... futex resumed>) = ? [pid 5379] <... futex resumed>) = ? [pid 5374] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5370] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5365] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5363] <... futex resumed>) = ? [pid 5362] <... futex resumed>) = ? [pid 5359] <... exit_group resumed>) = ? [pid 5358] <... exit_group resumed>) = ? [pid 5067] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5384] write(3, "1000", 4 [pid 5381] +++ exited with 0 +++ [pid 5379] +++ exited with 0 +++ [pid 5374] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5370] <... futex resumed>) = 0 [pid 5365] <... futex resumed>) = 0 [pid 5363] +++ exited with 0 +++ [pid 5362] +++ exited with 0 +++ [pid 5384] <... write resumed>) = 4 [pid 5365] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5384] close(3) = 0 [pid 5359] +++ exited with 0 +++ [pid 5384] symlink("/dev/binderfs", "./binderfs" [pid 5370] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5384] <... symlink resumed>) = 0 [pid 5358] +++ exited with 0 +++ [pid 5384] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5358, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5384] <... futex resumed>) = 0 [pid 5384] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f45152be000 [pid 5069] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5384] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5384] <... mprotect resumed>) = 0 [pid 5374] open("./bus", O_RDWR [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5359, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5069] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... openat resumed>) = 3 [pid 5385] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5384] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5069] <... openat resumed>) = 3 [pid 5374] <... open resumed>) = 6 [pid 5070] restart_syscall(<... resuming interrupted clone ...> [pid 5069] fstat(3, [pid 5067] fstat(3, [pid 5384] <... clone resumed>, parent_tid=[5386], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5386 [pid 5374] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... restart_syscall resumed>) = 0 [pid 5069] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5384] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] getdents64(3, [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5385] <... ioctl resumed>) = 0 [pid 5384] <... futex resumed>) = 0 [pid 5374] <... futex resumed>) = 1 [pid 5370] <... futex resumed>) = 0 [pid 5069] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5385] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5384] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5374] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5370] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] getdents64(3, [pid 5385] <... futex resumed>) = 1 [pid 5374] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5370] <... futex resumed>) = 0 [pid 5365] <... futex resumed>) = 0 [pid 5070] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5385] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5374] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5370] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5365] exit_group(0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] lstat("./9/binderfs", [pid 5067] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5368] <... futex resumed>) = ? [pid 5365] <... exit_group resumed>) = ? [pid 5069] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5374] <... mmap resumed>) = 0x20000000 [pid 5368] +++ exited with 0 +++ [pid 5070] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] unlink("./9/binderfs"./strace-static-x86_64: Process 5386 attached [pid 5385] <... futex resumed>) = ? [pid 5374] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... openat resumed>) = 3 [pid 5069] <... unlink resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5374] <... futex resumed>) = 1 [pid 5370] <... futex resumed>) = 0 [pid 5070] fstat(3, [pid 5069] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] lstat("./10/binderfs", [pid 5374] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5370] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5386] set_robust_list(0x7f45152de9e0, 24) = 0 [pid 5386] memfd_create("syzkaller", 0) = 3 [pid 5374] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5370] <... futex resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5374] sendfile(4, 5, NULL, 2147483713 [pid 5370] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] getdents64(3, [pid 5067] unlink("./10/binderfs" [pid 5386] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5070] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5386] <... mmap resumed>) = 0x7f450cebe000 [pid 5070] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... unlink resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] lstat("./9/binderfs", [ 62.705280][ T5368] EXT4-fs (loop0): Free/Dirty block details [ 62.711938][ T5368] EXT4-fs (loop0): free_blocks=2415919104 [ 62.718319][ T5368] EXT4-fs (loop0): dirty_blocks=16 [ 62.722571][ T5363] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 62.723963][ T5368] EXT4-fs (loop0): Block reservation details [ 62.736061][ T5368] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 62.742601][ T5362] EXT4-fs (loop4): i_reserved_data_blocks=1 [pid 5067] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5386] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5070] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5386] <... write resumed>) = 1048576 [pid 5386] munmap(0x7f450cebe000, 1048576) = 0 [pid 5386] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5386] ioctl(4, LOOP_SET_FD, 3 [pid 5070] unlink("./9/binderfs") = 0 [pid 5070] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5385] +++ exited with 0 +++ [pid 5365] +++ exited with 0 +++ [ 62.785704][ T5252] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 62.799888][ T61] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 62.800733][ T41] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 62.814679][ T5252] EXT4-fs (loop2): This should not happen!! Data will be lost [ 62.814679][ T5252] [pid 5370] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5365, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5370] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5370] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5386] <... ioctl resumed>) = 0 [pid 5386] close(3 [pid 5370] <... mmap resumed>) = 0x7f450cf9d000 [pid 5386] <... close resumed>) = 0 [pid 5370] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5065] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5386] mkdir("./file0", 0777) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5386] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5370] <... mprotect resumed>) = 0 [pid 5067] <... umount2 resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5370] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5067] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... openat resumed>) = 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] fstat(3, ./strace-static-x86_64: Process 5387 attached [pid 5370] <... clone resumed>, parent_tid=[5387], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5387 [pid 5069] <... umount2 resumed>) = 0 [pid 5067] lstat("./10/file0", [pid 5387] set_robust_list(0x7f450cfbd9e0, 24 [pid 5370] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5387] <... set_robust_list resumed>) = 0 [pid 5370] <... futex resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] getdents64(3, [pid 5387] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5370] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] lstat("./9/file0", [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5069] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... openat resumed>) = 4 [pid 5065] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 62.827955][ T5374] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 62.836377][ T61] EXT4-fs (loop4): This should not happen!! Data will be lost [ 62.836377][ T61] [ 62.851474][ T5386] loop3: detected capacity change from 0 to 2048 [pid 5067] fstat(4, [pid 5069] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... openat resumed>) = 4 [pid 5067] getdents64(4, [pid 5069] fstat(4, [pid 5067] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5069] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, [pid 5069] getdents64(4, [pid 5067] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5069] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5067] close(4 [pid 5069] getdents64(4, [pid 5067] <... close resumed>) = 0 [pid 5069] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5067] rmdir("./10/file0" [pid 5069] close(4 [pid 5067] <... rmdir resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 5067] getdents64(3, [pid 5069] rmdir("./9/file0" [pid 5067] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5067] close(3 [pid 5069] getdents64(3, [pid 5067] <... close resumed>) = 0 [pid 5069] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5067] rmdir("./10" [pid 5069] close(3 [pid 5067] <... rmdir resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 5067] mkdir("./11", 0777 [pid 5069] rmdir("./9" [pid 5067] <... mkdir resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5069] mkdir("./10", 0777 [pid 5067] <... openat resumed>) = 3 [pid 5069] <... mkdir resumed>) = 0 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5069] <... openat resumed>) = 3 [pid 5067] close(3 [pid 5069] ioctl(3, LOOP_CLR_FD [pid 5067] <... close resumed>) = 0 [pid 5069] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] close(3 [pid 5065] lstat("./9/binderfs", [pid 5069] <... close resumed>) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x555556f755d0) = 5390 ./strace-static-x86_64: Process 5390 attached [pid 5386] <... mount resumed>) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5386] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] unlink("./9/binderfs" [pid 5390] set_robust_list(0x555556f755e0, 24 [pid 5386] <... openat resumed>) = 3 [pid 5069] <... clone resumed>, child_tidptr=0x555556f755d0) = 5391 [pid 5390] <... set_robust_list resumed>) = 0 [pid 5386] chdir("./file0" [pid 5065] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 5391 attached [pid 5390] chdir("./11" [pid 5386] <... chdir resumed>) = 0 [ 62.916387][ T41] EXT4-fs (loop5): This should not happen!! Data will be lost [ 62.916387][ T41] [ 62.927971][ T5374] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 62.948414][ T5374] EXT4-fs (loop1): This should not happen!! Data will be lost [ 62.948414][ T5374] [pid 5391] set_robust_list(0x555556f755e0, 24 [pid 5390] <... chdir resumed>) = 0 [pid 5386] ioctl(4, LOOP_CLR_FD [pid 5065] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5391] <... set_robust_list resumed>) = 0 [pid 5386] <... ioctl resumed>) = 0 [pid 5391] chdir("./10" [pid 5386] close(4 [pid 5391] <... chdir resumed>) = 0 [pid 5386] <... close resumed>) = 0 [pid 5391] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5386] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5391] <... prctl resumed>) = 0 [pid 5386] <... futex resumed>) = 1 [pid 5384] <... futex resumed>) = 0 [pid 5391] setpgid(0, 0 [pid 5386] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5384] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5391] <... setpgid resumed>) = 0 [pid 5386] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5384] <... futex resumed>) = 0 [pid 5391] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5390] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5386] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5384] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5391] <... openat resumed>) = 3 [pid 5391] write(3, "1000", 4) = 4 [pid 5391] close(3) = 0 [pid 5391] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5391] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5391] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f45152be000 [pid 5391] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5391] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5392], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5392 [pid 5391] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5391] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5392 attached [pid 5390] <... prctl resumed>) = 0 [pid 5370] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5392] set_robust_list(0x7f45152de9e0, 24 [pid 5390] setpgid(0, 0 [pid 5392] <... set_robust_list resumed>) = 0 [pid 5390] <... setpgid resumed>) = 0 [pid 5392] memfd_create("syzkaller", 0 [pid 5390] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5386] <... open resumed>) = 4 [pid 5392] <... memfd_create resumed>) = 3 [pid 5390] <... openat resumed>) = 3 [pid 5386] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5384] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5392] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5390] write(3, "1000", 4 [pid 5386] <... futex resumed>) = 0 [pid 5384] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5384] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 62.961389][ T41] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 62.973966][ T5374] EXT4-fs (loop1): Total free blocks count 0 [ 62.976754][ T41] EXT4-fs (loop0): This should not happen!! Data will be lost [ 62.976754][ T41] [ 62.986554][ T5374] EXT4-fs (loop1): Free/Dirty block details [ 63.000308][ T5374] EXT4-fs (loop1): free_blocks=2415919104 [ 63.007307][ T5374] EXT4-fs (loop1): dirty_blocks=16 [pid 5386] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5392] <... mmap resumed>) = 0x7f450cebe000 [pid 5390] <... write resumed>) = 4 [pid 5386] <... write resumed>) = 9 [pid 5390] close(3 [pid 5386] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5374] <... sendfile resumed>) = 117 [pid 5374] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5374] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5065] <... umount2 resumed>) = 0 [pid 5070] <... umount2 resumed>) = 0 [pid 5065] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 63.015594][ T5374] EXT4-fs (loop1): Block reservation details [ 63.023011][ T5374] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 63.053082][ T26] kauditd_printk_skb: 83 callbacks suppressed [pid 5390] <... close resumed>) = 0 [pid 5387] <... ioctl resumed>) = 0 [pid 5386] <... futex resumed>) = 1 [pid 5384] <... futex resumed>) = 0 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./9/file0") = 0 [pid 5065] getdents64(3, 0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./9") = 0 [pid 5065] mkdir("./10", 0777 [pid 5384] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5386] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5390] symlink("/dev/binderfs", "./binderfs" [pid 5384] <... futex resumed>) = 0 [pid 5387] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5386] <... openat resumed>) = 5 [pid 5065] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f755d0) = 5393 ./strace-static-x86_64: Process 5393 attached [pid 5393] set_robust_list(0x555556f755e0, 24) = 0 [pid 5393] chdir("./10") = 0 [pid 5393] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5393] setpgid(0, 0) = 0 [pid 5393] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5393] write(3, "1000", 4) = 4 [pid 5393] close(3) = 0 [pid 5393] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5393] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5393] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f45152be000 [pid 5393] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5393] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5394], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5394 [pid 5393] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5393] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5394 attached [pid 5394] set_robust_list(0x7f45152de9e0, 24) = 0 [pid 5394] memfd_create("syzkaller", 0) = 3 [pid 5394] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f450cebe000 [pid 5394] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5394] munmap(0x7f450cebe000, 1048576) = 0 [pid 5394] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5394] ioctl(4, LOOP_SET_FD, 3 [pid 5384] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5390] <... symlink resumed>) = 0 [pid 5387] <... futex resumed>) = 0 [pid 5370] exit_group(0) = ? [pid 5390] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5386] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5387] +++ exited with 0 +++ [pid 5386] <... futex resumed>) = 1 [pid 5390] <... futex resumed>) = 0 [pid 5384] <... futex resumed>) = 0 [pid 5374] <... futex resumed>) = ? [pid 5390] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5386] open("./bus", O_RDWR [pid 5384] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5374] +++ exited with 0 +++ [pid 5370] +++ exited with 0 +++ [pid 5386] <... open resumed>) = 6 [pid 5384] <... futex resumed>) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5370, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5390] <... mmap resumed>) = 0x7f45152be000 [pid 5386] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5384] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5390] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE [pid 5386] <... futex resumed>) = 0 [pid 5394] <... ioctl resumed>) = 0 [pid 5384] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5384] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5390] <... mprotect resumed>) = 0 [pid 5386] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5384] <... futex resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5384] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5386] <... mmap resumed>) = 0x20000000 [pid 5066] <... openat resumed>) = 3 [pid 5390] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5386] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] fstat(3, [pid 5390] <... clone resumed>, parent_tid=[5395], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5395 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5386] <... futex resumed>) = 1 [pid 5384] <... futex resumed>) = 0 [pid 5384] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5390] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5384] <... futex resumed>) = 0 [pid 5066] getdents64(3, [pid 5386] sendfile(4, 5, NULL, 2147483713 [pid 5390] <... futex resumed>) = 0 [pid 5384] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5392] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5390] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5066] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5070] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] lstat("./9/file0", [pid 5066] lstat("./9/binderfs", [pid 5070] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5070] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 63.053100][ T26] audit: type=1804 audit(1672294496.282:185): pid=5386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor259" name="/root/syzkaller.SZgq5q/10/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 63.087855][ T5394] loop0: detected capacity change from 0 to 2048 [pid 5066] unlink("./9/binderfs" [pid 5394] close(3 [pid 5392] <... write resumed>) = 1048576 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... unlink resumed>) = 0 [pid 5394] <... close resumed>) = 0 [pid 5070] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5394] mkdir("./file0", 0777 [pid 5070] <... openat resumed>) = 4 [pid 5394] <... mkdir resumed>) = 0 [pid 5070] fstat(4, [pid 5394] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5070] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] getdents64(4, [pid 5066] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5395 attached [pid 5070] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5395] set_robust_list(0x7f45152de9e0, 24 [pid 5070] getdents64(4, 0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5070] close(4) = 0 [pid 5070] rmdir("./9/file0") = 0 [pid 5070] getdents64(3, 0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5070] close(3) = 0 [pid 5070] rmdir("./9") = 0 [pid 5070] mkdir("./10", 0777) = 0 [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5070] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5070] close(3) = 0 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f755d0) = 5396 [pid 5392] munmap(0x7f450cebe000, 1048576) = 0 [pid 5392] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5392] ioctl(4, LOOP_SET_FD, 3 [pid 5395] <... set_robust_list resumed>) = 0 [pid 5384] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 5396 attached [pid 5396] set_robust_list(0x555556f755e0, 24) = 0 [pid 5396] chdir("./10") = 0 [pid 5396] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5396] setpgid(0, 0) = 0 [pid 5396] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5396] write(3, "1000", 4 [pid 5395] memfd_create("syzkaller", 0 [pid 5384] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5396] <... write resumed>) = 4 [ 63.110895][ T5386] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 63.128405][ T61] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 63.136003][ T5386] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 63.151052][ T5392] loop4: detected capacity change from 0 to 2048 [pid 5396] close(3 [pid 5384] <... futex resumed>) = 0 [pid 5395] <... memfd_create resumed>) = 3 [pid 5396] <... close resumed>) = 0 [pid 5396] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5396] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5396] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f45152be000 [pid 5396] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5396] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5397], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5397 [pid 5396] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5396] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5392] <... ioctl resumed>) = 0 [pid 5392] close(3) = 0 [pid 5392] mkdir("./file0", 0777) = 0 [pid 5392] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5384] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5395] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f450cebe000 [pid 5384] <... mmap resumed>) = 0x7f450cf9d000 [pid 5384] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5384] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5398], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5398 [pid 5384] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 63.168965][ T61] EXT4-fs (loop1): This should not happen!! Data will be lost [ 63.168965][ T61] [ 63.171344][ T5386] EXT4-fs (loop3): This should not happen!! Data will be lost [ 63.171344][ T5386] [pid 5384] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5397 attached [pid 5395] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 5398 attached [pid 5398] set_robust_list(0x7f450cfbd9e0, 24) = 0 [pid 5398] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5397] set_robust_list(0x7f45152de9e0, 24) = 0 [pid 5395] <... write resumed>) = 1048576 [pid 5066] <... umount2 resumed>) = 0 [pid 5397] memfd_create("syzkaller", 0) = 3 [pid 5066] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5397] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5395] munmap(0x7f450cebe000, 1048576 [pid 5394] <... mount resumed>) = 0 [pid 5392] <... mount resumed>) = 0 [pid 5394] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5392] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5394] <... openat resumed>) = 3 [pid 5392] <... openat resumed>) = 3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5394] chdir("./file0" [pid 5392] chdir("./file0" [pid 5394] <... chdir resumed>) = 0 [pid 5392] <... chdir resumed>) = 0 [pid 5397] <... mmap resumed>) = 0x7f450cebe000 [pid 5394] ioctl(4, LOOP_CLR_FD [pid 5392] ioctl(4, LOOP_CLR_FD [pid 5394] <... ioctl resumed>) = 0 [pid 5392] <... ioctl resumed>) = 0 [pid 5395] <... munmap resumed>) = 0 [ 63.210079][ T5386] EXT4-fs (loop3): Total free blocks count 0 [ 63.217966][ T26] audit: type=1804 audit(1672294496.322:186): pid=5386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor259" name="/root/syzkaller.SZgq5q/10/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 63.228414][ T5386] EXT4-fs (loop3): Free/Dirty block details [ 63.250484][ T5386] EXT4-fs (loop3): free_blocks=2415919104 [pid 5394] close(4 [pid 5392] close(4 [pid 5384] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5066] lstat("./9/file0", [pid 5397] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5395] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5394] <... close resumed>) = 0 [pid 5392] <... close resumed>) = 0 [pid 5395] <... openat resumed>) = 4 [pid 5394] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5392] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5395] ioctl(4, LOOP_SET_FD, 3 [pid 5394] <... futex resumed>) = 1 [pid 5393] <... futex resumed>) = 0 [pid 5392] <... futex resumed>) = 1 [pid 5391] <... futex resumed>) = 0 [pid 5394] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5393] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5392] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5391] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5394] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5393] <... futex resumed>) = 0 [pid 5392] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5391] <... futex resumed>) = 0 [pid 5394] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5393] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5392] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5391] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5394] <... open resumed>) = 4 [pid 5392] <... open resumed>) = 4 [pid 5394] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5392] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5394] <... futex resumed>) = 1 [pid 5393] <... futex resumed>) = 0 [pid 5392] <... futex resumed>) = 1 [pid 5391] <... futex resumed>) = 0 [pid 5397] <... write resumed>) = 1048576 [pid 5395] <... ioctl resumed>) = 0 [pid 5394] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5393] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5392] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5391] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5394] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5393] <... futex resumed>) = 0 [pid 5392] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5391] <... futex resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5394] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5393] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 63.266390][ T26] audit: type=1804 audit(1672294496.332:187): pid=5386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor259" name="/root/syzkaller.SZgq5q/10/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 63.297735][ T5395] loop2: detected capacity change from 0 to 2048 [pid 5392] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5391] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5397] munmap(0x7f450cebe000, 1048576 [pid 5395] close(3 [pid 5394] <... write resumed>) = 9 [pid 5392] <... write resumed>) = 9 [pid 5066] <... openat resumed>) = 4 [pid 5397] <... munmap resumed>) = 0 [pid 5395] <... close resumed>) = 0 [pid 5392] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5391] <... futex resumed>) = 0 [pid 5392] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5391] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5392] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5391] <... futex resumed>) = 0 [pid 5395] mkdir("./file0", 0777 [pid 5394] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5392] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5391] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5397] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5066] fstat(4, [pid 5397] <... openat resumed>) = 4 [pid 5395] <... mkdir resumed>) = 0 [pid 5394] <... futex resumed>) = 1 [pid 5392] <... openat resumed>) = 5 [pid 5386] <... sendfile resumed>) = 117 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 63.317491][ T5386] EXT4-fs (loop3): dirty_blocks=16 [ 63.322718][ T5386] EXT4-fs (loop3): Block reservation details [ 63.336620][ T5386] EXT4-fs (loop3): i_reserved_data_blocks=1 [pid 5397] ioctl(4, LOOP_SET_FD, 3 [pid 5395] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5394] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5386] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] getdents64(4, [pid 5398] <... ioctl resumed>) = 0 [pid 5393] <... futex resumed>) = 0 [pid 5392] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5398] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5393] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5392] <... futex resumed>) = 1 [pid 5391] <... futex resumed>) = 0 [pid 5398] <... futex resumed>) = 0 [pid 5393] <... futex resumed>) = 0 [pid 5392] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5391] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5398] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5393] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5392] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5391] <... futex resumed>) = 0 [pid 5392] open("./bus", O_RDWR [pid 5391] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5392] <... open resumed>) = 6 [pid 5392] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5391] <... futex resumed>) = 0 [pid 5392] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5391] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5392] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5391] <... futex resumed>) = 0 [pid 5392] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5391] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5392] <... mmap resumed>) = 0x20000000 [pid 5392] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5397] <... ioctl resumed>) = 0 [pid 5394] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5392] <... futex resumed>) = 1 [pid 5391] <... futex resumed>) = 0 [pid 5386] <... futex resumed>) = 0 [pid 5066] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5392] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5391] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5392] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5391] <... futex resumed>) = 0 [pid 5392] sendfile(4, 5, NULL, 2147483713 [pid 5391] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] getdents64(4, 0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./9/file0") = 0 [pid 5066] getdents64(3, 0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./9") = 0 [pid 5066] mkdir("./10", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 63.345565][ T26] audit: type=1804 audit(1672294496.572:188): pid=5392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor259" name="/root/syzkaller.rfbWou/10/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 63.357457][ T5397] loop5: detected capacity change from 0 to 2048 [ 63.377532][ T26] audit: type=1804 audit(1672294496.602:189): pid=5392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor259" name="/root/syzkaller.rfbWou/10/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 63.383482][ T5392] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5066] close(3 [pid 5397] close(3 [pid 5394] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5386] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5384] exit_group(0 [pid 5066] <... close resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f755d0) = 5405 ./strace-static-x86_64: Process 5405 attached [pid 5405] set_robust_list(0x555556f755e0, 24) = 0 [pid 5405] chdir("./10") = 0 [pid 5405] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5405] setpgid(0, 0) = 0 [pid 5405] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5405] write(3, "1000", 4) = 4 [pid 5405] close(3) = 0 [pid 5405] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5405] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5405] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f45152be000 [pid 5405] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5405] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5406], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5406 [pid 5405] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5397] <... close resumed>) = 0 [pid 5394] <... openat resumed>) = 5 [pid 5405] <... futex resumed>) = 0 [pid 5384] <... exit_group resumed>) = ? [pid 5405] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5398] <... futex resumed>) = ? [pid 5393] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5398] +++ exited with 0 +++ [pid 5397] mkdir("./file0", 0777 [pid 5393] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5386] <... futex resumed>) = ? [pid 5394] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5397] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5406 attached [pid 5406] set_robust_list(0x7f45152de9e0, 24) = 0 [pid 5393] <... futex resumed>) = 0 [pid 5386] +++ exited with 0 +++ [pid 5384] +++ exited with 0 +++ [pid 5394] <... futex resumed>) = 0 [pid 5406] memfd_create("syzkaller", 0 [pid 5393] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5394] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5406] <... memfd_create resumed>) = 3 [pid 5406] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f450cebe000 [pid 5393] <... mmap resumed>) = 0x7f450cf9d000 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5384, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5406] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5397] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5395] <... mount resumed>) = 0 [pid 5393] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5395] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5393] <... mprotect resumed>) = 0 [pid 5068] <... restart_syscall resumed>) = 0 [pid 5395] chdir("./file0" [pid 5393] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5395] <... chdir resumed>) = 0 [pid 5395] ioctl(4, LOOP_CLR_FD [pid 5068] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5395] <... ioctl resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5393] <... clone resumed>, parent_tid=[5407], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5407 [pid 5395] close(4 [pid 5068] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5395] <... close resumed>) = 0 [ 63.418122][ T5392] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 63.440137][ T5392] EXT4-fs (loop4): This should not happen!! Data will be lost [ 63.440137][ T5392] ./strace-static-x86_64: Process 5407 attached [pid 5395] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5393] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5391] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5068] <... openat resumed>) = 3 [pid 5406] <... write resumed>) = 1048576 [pid 5406] munmap(0x7f450cebe000, 1048576) = 0 [pid 5407] set_robust_list(0x7f450cfbd9e0, 24 [pid 5395] <... futex resumed>) = 1 [pid 5407] <... set_robust_list resumed>) = 0 [pid 5393] <... futex resumed>) = 0 [pid 5391] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5390] <... futex resumed>) = 0 [pid 5068] fstat(3, [pid 5406] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5393] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5407] open("./bus", O_RDWR [pid 5406] <... openat resumed>) = 4 [pid 5395] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5391] <... futex resumed>) = 0 [pid 5390] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5406] ioctl(4, LOOP_SET_FD, 3 [pid 5407] <... open resumed>) = 6 [pid 5397] <... mount resumed>) = 0 [pid 5395] <... open resumed>) = 4 [pid 5391] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5390] <... futex resumed>) = 0 [pid 5068] getdents64(3, [pid 5406] <... ioctl resumed>) = 0 [pid 5406] close(3) = 0 [pid 5406] mkdir("./file0", 0777) = 0 [pid 5406] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5407] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5397] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5395] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5391] <... mmap resumed>) = 0x7f450cf9d000 [pid 5390] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5407] <... futex resumed>) = 1 [pid 5068] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5407] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5397] <... openat resumed>) = 3 [pid 5395] <... futex resumed>) = 0 [pid 5393] <... futex resumed>) = 0 [pid 5391] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5390] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5068] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5397] chdir("./file0" [pid 5395] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5393] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5391] <... mprotect resumed>) = 0 [pid 5390] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5397] <... chdir resumed>) = 0 [pid 5395] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5394] <... futex resumed>) = 0 [pid 5393] <... futex resumed>) = 1 [pid 5391] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5390] <... futex resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5397] ioctl(4, LOOP_CLR_FD [pid 5395] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5394] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5393] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5397] <... ioctl resumed>) = 0 [pid 5390] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] lstat("./10/binderfs", [pid 5395] <... write resumed>) = 9 [pid 5394] <... mmap resumed>) = 0x20000000 [ 63.460866][ T26] audit: type=1804 audit(1672294496.602:190): pid=5392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor259" name="/root/syzkaller.rfbWou/10/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 63.476710][ T5392] EXT4-fs (loop4): Total free blocks count 0 [ 63.493664][ T5406] loop1: detected capacity change from 0 to 2048 [ 63.496849][ T5392] EXT4-fs (loop4): Free/Dirty block details [pid 5397] close(4 [pid 5395] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5394] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5391] <... clone resumed>, parent_tid=[5410], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5410 [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5395] <... futex resumed>) = 1 [pid 5390] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5410 attached [pid 5395] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5390] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5410] set_robust_list(0x7f450cfbd9e0, 24 [pid 5395] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5390] <... futex resumed>) = 0 [pid 5410] <... set_robust_list resumed>) = 0 [pid 5395] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5390] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5410] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5395] <... openat resumed>) = 5 [pid 5397] <... close resumed>) = 0 [pid 5395] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5394] <... futex resumed>) = 1 [pid 5391] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] unlink("./10/binderfs" [pid 5395] <... futex resumed>) = 1 [pid 5390] <... futex resumed>) = 0 [pid 5395] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5390] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5410] <... futex resumed>) = 0 [pid 5397] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5395] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5394] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5393] <... futex resumed>) = 0 [pid 5391] <... futex resumed>) = 1 [pid 5390] <... futex resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 5410] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5397] <... futex resumed>) = 1 [pid 5396] <... futex resumed>) = 0 [pid 5395] open("./bus", O_RDWR [pid 5393] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5391] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5390] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5397] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5396] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5395] <... open resumed>) = 6 [pid 5394] <... futex resumed>) = 0 [pid 5393] <... futex resumed>) = 1 [pid 5395] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5390] <... futex resumed>) = 0 [pid 5395] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 63.512941][ T26] audit: type=1804 audit(1672294496.662:191): pid=5394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor259" name="/root/syzkaller.LpWJ6a/10/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 63.513173][ T5392] EXT4-fs (loop4): free_blocks=2415919104 [ 63.553098][ T11] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5390] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5395] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5390] <... futex resumed>) = 0 [pid 5395] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5390] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5397] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5396] <... futex resumed>) = 0 [pid 5395] <... mmap resumed>) = 0x20000000 [pid 5394] sendfile(4, 5, NULL, 2147483713 [pid 5393] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5406] <... mount resumed>) = 0 [pid 5397] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5396] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5395] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5390] <... futex resumed>) = 0 [pid 5395] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5390] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5397] <... open resumed>) = 4 [pid 5395] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5390] <... futex resumed>) = 0 [pid 5397] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5395] sendfile(4, 5, NULL, 2147483713 [pid 5390] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5406] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5397] <... futex resumed>) = 1 [pid 5396] <... futex resumed>) = 0 [ 63.558958][ T5392] EXT4-fs (loop4): dirty_blocks=16 [ 63.580542][ T11] EXT4-fs (loop3): This should not happen!! Data will be lost [ 63.580542][ T11] [ 63.588911][ T5394] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5406] <... openat resumed>) = 3 [pid 5397] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5396] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5391] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5406] chdir("./file0" [pid 5397] <... write resumed>) = 9 [pid 5396] <... futex resumed>) = 0 [pid 5393] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5390] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5390] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5390] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f450cf9d000 [pid 5390] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5390] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5410] <... ioctl resumed>) = 0 [pid 5406] <... chdir resumed>) = 0 [pid 5397] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5396] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5393] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5392] <... sendfile resumed>) = 117 [pid 5410] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5390] <... clone resumed>, parent_tid=[5413], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5413 [pid 5410] <... futex resumed>) = 0 [pid 5390] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5410] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5390] <... futex resumed>) = 0 [pid 5390] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5413 attached [pid 5413] set_robust_list(0x7f450cfbd9e0, 24) = 0 [ 63.599128][ T5395] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 63.605841][ T5392] EXT4-fs (loop4): Block reservation details [ 63.623797][ T5394] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 63.627332][ T5392] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 63.645004][ T26] audit: type=1804 audit(1672294496.722:192): pid=5407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor259" name="/root/syzkaller.LpWJ6a/10/file0/bus" dev="loop0" ino=18 res=1 errno=0 [pid 5413] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5406] ioctl(4, LOOP_CLR_FD [pid 5397] <... futex resumed>) = 0 [pid 5396] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5393] <... futex resumed>) = 1 [ 63.659544][ T5394] EXT4-fs (loop0): This should not happen!! Data will be lost [ 63.659544][ T5394] [ 63.668287][ T26] audit: type=1804 audit(1672294496.742:193): pid=5394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor259" name="/root/syzkaller.LpWJ6a/10/file0/bus" dev="loop0" ino=18 res=1 errno=0 [pid 5407] <... futex resumed>) = 0 [pid 5406] <... ioctl resumed>) = 0 [pid 5397] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5396] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5393] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5390] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5406] close(4 [pid 5397] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5396] <... futex resumed>) = 0 [pid 5406] <... close resumed>) = 0 [pid 5397] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5396] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5392] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5406] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5397] <... openat resumed>) = 5 [pid 5392] <... futex resumed>) = 0 [pid 5391] exit_group(0 [pid 5410] <... futex resumed>) = ? [pid 5406] <... futex resumed>) = 1 [pid 5405] <... futex resumed>) = 0 [pid 5397] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5391] <... exit_group resumed>) = ? [pid 5410] +++ exited with 0 +++ [pid 5406] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5405] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5397] <... futex resumed>) = 1 [pid 5396] <... futex resumed>) = 0 [pid 5392] +++ exited with 0 +++ [pid 5391] +++ exited with 0 +++ [pid 5406] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5405] <... futex resumed>) = 0 [pid 5397] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5396] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5406] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5405] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5397] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5396] <... futex resumed>) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5391, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5407] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5406] <... open resumed>) = 4 [pid 5397] open("./bus", O_RDWR [pid 5396] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5406] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5397] <... open resumed>) = 6 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5406] <... futex resumed>) = 1 [pid 5405] <... futex resumed>) = 0 [pid 5397] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5406] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5405] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5397] <... futex resumed>) = 1 [pid 5396] <... futex resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5406] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5405] <... futex resumed>) = 0 [pid 5397] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5396] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] fstat(3, [pid 5406] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5405] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5397] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5396] <... futex resumed>) = 0 [pid 5069] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5406] <... write resumed>) = 9 [pid 5397] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5396] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] getdents64(3, [pid 5406] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5397] <... mmap resumed>) = 0x20000000 [pid 5069] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5406] <... futex resumed>) = 1 [pid 5405] <... futex resumed>) = 0 [pid 5397] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5406] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5405] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5397] <... futex resumed>) = 1 [pid 5396] <... futex resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5406] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5405] <... futex resumed>) = 0 [pid 5397] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5396] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] lstat("./10/binderfs", [pid 5406] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5405] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5397] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5396] <... futex resumed>) = 0 [pid 5069] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5406] <... openat resumed>) = 5 [ 63.700625][ T26] audit: type=1804 audit(1672294496.772:194): pid=5395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor259" name="/root/syzkaller.ruCmtn/11/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 63.724009][ T5395] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 63.754676][ T5395] EXT4-fs (loop2): This should not happen!! Data will be lost [ 63.754676][ T5395] [pid 5397] sendfile(4, 5, NULL, 2147483713 [pid 5396] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] unlink("./10/binderfs" [pid 5407] <... ioctl resumed>) = 0 [pid 5406] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5394] <... sendfile resumed>) = 117 [pid 5393] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] <... unlink resumed>) = 0 [pid 5406] <... futex resumed>) = 1 [pid 5405] <... futex resumed>) = 0 [pid 5069] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5406] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5405] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5406] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5405] <... futex resumed>) = 0 [pid 5406] open("./bus", O_RDWR [pid 5405] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5406] <... open resumed>) = 6 [pid 5406] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5405] <... futex resumed>) = 0 [pid 5406] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5405] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5406] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5405] <... futex resumed>) = 0 [pid 5406] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5405] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5406] <... mmap resumed>) = 0x20000000 [pid 5406] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5405] <... futex resumed>) = 0 [pid 5406] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5405] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5406] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5405] <... futex resumed>) = 0 [ 63.765052][ T5394] EXT4-fs (loop0): Total free blocks count 0 [ 63.768507][ T5397] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 63.785814][ T5394] EXT4-fs (loop0): Free/Dirty block details [ 63.785839][ T5394] EXT4-fs (loop0): free_blocks=2415919104 [ 63.785860][ T5394] EXT4-fs (loop0): dirty_blocks=16 [ 63.785877][ T5394] EXT4-fs (loop0): Block reservation details [ 63.785902][ T5394] EXT4-fs (loop0): i_reserved_data_blocks=1 [pid 5406] sendfile(4, 5, NULL, 2147483713 [pid 5405] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5407] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5394] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5393] exit_group(0 [pid 5068] <... umount2 resumed>) = 0 [pid 5393] <... exit_group resumed>) = ? [pid 5068] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./10/file0", [pid 5396] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5396] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5396] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f450cf9d000 [pid 5396] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5396] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5068] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5396] <... clone resumed>, parent_tid=[5414], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5414 [pid 5068] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5396] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5068] <... openat resumed>) = 4 [pid 5396] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, 0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, 0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5068] close(4) = 0 [pid 5068] rmdir("./10/file0") = 0 [pid 5068] getdents64(3, 0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 5068] rmdir("./10" [pid 5407] <... futex resumed>) = ? [pid 5394] <... futex resumed>) = ? [pid 5068] <... rmdir resumed>) = 0 [pid 5068] mkdir("./11", 0777 [pid 5394] +++ exited with 0 +++ [pid 5068] <... mkdir resumed>) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 5414 attached [pid 5407] +++ exited with 0 +++ [pid 5393] +++ exited with 0 +++ [pid 5068] <... openat resumed>) = 3 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5393, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5068] close(3 [pid 5065] <... restart_syscall resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... clone resumed>, child_tidptr=0x555556f755d0) = 5415 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 63.786356][ T5395] EXT4-fs (loop2): Total free blocks count 0 [ 63.810361][ T5406] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 63.835380][ T5395] EXT4-fs (loop2): Free/Dirty block details [ 63.841972][ T11] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5414] set_robust_list(0x7f450cfbd9e0, 24 [pid 5065] getdents64(3, ./strace-static-x86_64: Process 5415 attached 0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5415] set_robust_list(0x555556f755e0, 24 [pid 5405] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5065] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5415] <... set_robust_list resumed>) = 0 [pid 5414] <... set_robust_list resumed>) = 0 [pid 5405] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5415] chdir("./11" [pid 5405] <... futex resumed>) = 0 [pid 5065] lstat("./10/binderfs", [pid 5415] <... chdir resumed>) = 0 [pid 5405] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5415] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5405] <... mmap resumed>) = 0x7f450cf9d000 [pid 5065] unlink("./10/binderfs" [pid 5415] <... prctl resumed>) = 0 [pid 5405] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5065] <... unlink resumed>) = 0 [pid 5415] setpgid(0, 0 [pid 5405] <... mprotect resumed>) = 0 [pid 5065] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5415] <... setpgid resumed>) = 0 [pid 5405] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5415] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5405] <... clone resumed>, parent_tid=[5416], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5416 [pid 5415] write(3, "1000", 4 [pid 5405] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5415] <... write resumed>) = 4 [pid 5405] <... futex resumed>) = 0 [pid 5415] close(3 [pid 5405] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5415] <... close resumed>) = 0 [pid 5415] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5415] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5415] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f45152be000 [pid 5414] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5396] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5415] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE) = 0 [ 63.858696][ T5395] EXT4-fs (loop2): free_blocks=2415919104 [ 63.867198][ T5397] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 63.887936][ T11] EXT4-fs (loop4): This should not happen!! Data will be lost [ 63.887936][ T11] [ 63.899055][ T9] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5415] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5416 attached , parent_tid=[5417], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5417 [pid 5415] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5415] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5417 attached [pid 5417] set_robust_list(0x7f45152de9e0, 24) = 0 [pid 5417] memfd_create("syzkaller", 0) = 3 [pid 5417] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f450cebe000 [pid 5416] set_robust_list(0x7f450cfbd9e0, 24) = 0 [pid 5405] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5405] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 5417] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5416] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5405] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] <... umount2 resumed>) = 0 [pid 5069] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] lstat("./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5069] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 63.901098][ T5406] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 63.912245][ T9] EXT4-fs (loop0): This should not happen!! Data will be lost [ 63.912245][ T9] [ 63.935032][ T5395] EXT4-fs (loop2): dirty_blocks=16 [ 63.940863][ T5395] EXT4-fs (loop2): Block reservation details [ 63.961047][ T5397] EXT4-fs (loop5): This should not happen!! Data will be lost [pid 5069] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5069] getdents64(4, 0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5069] getdents64(4, 0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5069] close(4) = 0 [pid 5069] rmdir("./10/file0") = 0 [pid 5069] getdents64(3, 0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5069] close(3) = 0 [pid 5417] <... write resumed>) = 1048576 [pid 5069] rmdir("./10" [pid 5417] munmap(0x7f450cebe000, 1048576 [pid 5069] <... rmdir resumed>) = 0 [pid 5417] <... munmap resumed>) = 0 [pid 5069] mkdir("./11", 0777 [pid 5417] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5069] <... mkdir resumed>) = 0 [pid 5417] <... openat resumed>) = 4 [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5417] ioctl(4, LOOP_SET_FD, 3 [pid 5069] <... openat resumed>) = 3 [pid 5069] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5069] close(3) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f755d0) = 5418 ./strace-static-x86_64: Process 5418 attached [ 63.961047][ T5397] [ 63.967912][ T5395] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 63.988142][ T5417] loop3: detected capacity change from 0 to 2048 [ 64.010016][ T5397] EXT4-fs (loop5): Total free blocks count 0 [pid 5418] set_robust_list(0x555556f755e0, 24) = 0 [pid 5413] <... ioctl resumed>) = 0 [pid 5395] <... sendfile resumed>) = 117 [pid 5065] <... umount2 resumed>) = 0 [pid 5418] chdir("./11" [pid 5413] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5418] <... chdir resumed>) = 0 [pid 5413] <... futex resumed>) = 0 [pid 5418] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5413] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5418] <... prctl resumed>) = 0 [pid 5417] <... ioctl resumed>) = 0 [pid 5418] setpgid(0, 0 [pid 5417] close(3 [pid 5418] <... setpgid resumed>) = 0 [pid 5417] <... close resumed>) = 0 [pid 5418] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5417] mkdir("./file0", 0777 [pid 5418] <... openat resumed>) = 3 [pid 5417] <... mkdir resumed>) = 0 [pid 5418] write(3, "1000", 4 [pid 5417] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5418] <... write resumed>) = 4 [pid 5418] close(3 [pid 5395] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5418] <... close resumed>) = 0 [pid 5390] exit_group(0 [pid 5418] symlink("/dev/binderfs", "./binderfs" [pid 5413] <... futex resumed>) = ? [pid 5390] <... exit_group resumed>) = ? [pid 5418] <... symlink resumed>) = 0 [pid 5413] +++ exited with 0 +++ [pid 5418] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5418] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f45152be000 [pid 5418] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE [pid 5395] <... futex resumed>) = ? [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5418] <... mprotect resumed>) = 0 [pid 5418] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5419], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5419 [pid 5418] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5418] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5419 attached [pid 5419] set_robust_list(0x7f45152de9e0, 24 [pid 5395] +++ exited with 0 +++ [pid 5390] +++ exited with 0 +++ [pid 5065] lstat("./10/file0", [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5390, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5419] <... set_robust_list resumed>) = 0 [pid 5419] memfd_create("syzkaller", 0) = 3 [pid 5419] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f450cebe000 [pid 5419] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 64.016032][ T5397] EXT4-fs (loop5): Free/Dirty block details [ 64.020494][ T5406] EXT4-fs (loop1): This should not happen!! Data will be lost [ 64.020494][ T5406] [ 64.033825][ T5406] EXT4-fs (loop1): Total free blocks count 0 [ 64.041633][ T5406] EXT4-fs (loop1): Free/Dirty block details [ 64.051230][ T5406] EXT4-fs (loop1): free_blocks=2415919104 [ 64.058009][ T5406] EXT4-fs (loop1): dirty_blocks=16 [ 64.061895][ T5397] EXT4-fs (loop5): free_blocks=2415919104 [pid 5067] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5417] <... mount resumed>) = 0 [pid 5419] <... write resumed>) = 1048576 [pid 5067] unlink("./11/binderfs" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5417] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5416] <... ioctl resumed>) = 0 [pid 5406] <... sendfile resumed>) = 117 [pid 5067] <... unlink resumed>) = 0 [pid 5067] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5419] munmap(0x7f450cebe000, 1048576 [pid 5417] <... openat resumed>) = 3 [pid 5416] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5419] <... munmap resumed>) = 0 [pid 5419] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5419] ioctl(4, LOOP_SET_FD, 3 [pid 5417] chdir("./file0" [pid 5416] <... futex resumed>) = 0 [pid 5406] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... openat resumed>) = 4 [pid 5417] <... chdir resumed>) = 0 [pid 5416] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5406] <... futex resumed>) = 0 [pid 5065] fstat(4, [pid 5417] ioctl(4, LOOP_CLR_FD [pid 5406] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5417] <... ioctl resumed>) = 0 [pid 5065] getdents64(4, [pid 5417] close(4 [pid 5065] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5419] <... ioctl resumed>) = 0 [pid 5417] <... close resumed>) = 0 [pid 5405] exit_group(0 [pid 5065] getdents64(4, [pid 5417] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5417] <... futex resumed>) = 1 [pid 5416] <... futex resumed>) = ? [pid 5406] <... futex resumed>) = ? [pid 5405] <... exit_group resumed>) = ? [pid 5065] close(4 [pid 5417] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5416] +++ exited with 0 +++ [pid 5406] +++ exited with 0 +++ [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./10/file0") = 0 [ 64.063364][ T5406] EXT4-fs (loop1): Block reservation details [ 64.079790][ T5406] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 64.086911][ T5397] EXT4-fs (loop5): dirty_blocks=16 [ 64.093317][ T9] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 64.101659][ T5419] loop4: detected capacity change from 0 to 2048 [ 64.112699][ T5397] EXT4-fs (loop5): Block reservation details [pid 5065] getdents64(3, 0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5419] close(3 [pid 5415] <... futex resumed>) = 0 [pid 5405] +++ exited with 0 +++ [pid 5065] close(3 [pid 5419] <... close resumed>) = 0 [pid 5415] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5414] <... ioctl resumed>) = 0 [pid 5397] <... sendfile resumed>) = 117 [pid 5065] <... close resumed>) = 0 [pid 5414] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5405, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5065] rmdir("./10" [pid 5414] <... futex resumed>) = 0 [pid 5066] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... rmdir resumed>) = 0 [pid 5414] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] mkdir("./11", 0777 [pid 5066] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... mkdir resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5066] fstat(3, [pid 5065] <... openat resumed>) = 3 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5066] getdents64(3, [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5065] close(3 [pid 5066] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... close resumed>) = 0 [pid 5419] mkdir("./file0", 0777 [pid 5417] <... futex resumed>) = 0 [pid 5415] <... futex resumed>) = 1 [pid 5397] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5419] <... mkdir resumed>) = 0 [pid 5417] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5415] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5397] <... futex resumed>) = 0 [pid 5066] lstat("./10/binderfs", ./strace-static-x86_64: Process 5422 attached [pid 5419] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5417] <... open resumed>) = 4 [pid 5397] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5396] exit_group(0 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x555556f755d0) = 5422 [pid 5422] set_robust_list(0x555556f755e0, 24 [pid 5417] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5414] <... futex resumed>) = ? [pid 5397] <... futex resumed>) = ? [pid 5396] <... exit_group resumed>) = ? [pid 5066] unlink("./10/binderfs" [pid 5422] <... set_robust_list resumed>) = 0 [pid 5417] <... futex resumed>) = 1 [pid 5415] <... futex resumed>) = 0 [pid 5414] +++ exited with 0 +++ [pid 5397] +++ exited with 0 +++ [pid 5396] +++ exited with 0 +++ [pid 5422] chdir("./11" [pid 5417] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5415] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... unlink resumed>) = 0 [pid 5422] <... chdir resumed>) = 0 [pid 5417] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5415] <... futex resumed>) = 0 [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5396, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5066] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5422] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5417] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5415] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5422] <... prctl resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5422] setpgid(0, 0 [pid 5417] <... write resumed>) = 9 [pid 5070] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5422] <... setpgid resumed>) = 0 [pid 5417] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... openat resumed>) = 3 [ 64.125018][ T5397] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 64.132222][ T9] EXT4-fs (loop2): This should not happen!! Data will be lost [ 64.132222][ T9] [pid 5422] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5422] write(3, "1000", 4) = 4 [pid 5422] close(3) = 0 [pid 5422] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5422] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5422] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f45152be000 [pid 5422] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5422] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5424], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5424 [pid 5422] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5422] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5067] <... umount2 resumed>) = 0 [pid 5067] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./11/file0", [pid 5417] <... futex resumed>) = 1 [pid 5415] <... futex resumed>) = 0 [pid 5070] fstat(3, [pid 5417] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5415] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5417] <... openat resumed>) = 5 [pid 5415] <... futex resumed>) = 0 [pid 5070] getdents64(3, [pid 5417] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5415] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5417] <... futex resumed>) = 0 [pid 5415] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5070] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5417] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5415] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5417] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5415] <... futex resumed>) = 0 [pid 5070] lstat("./10/binderfs", [pid 5067] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5417] open("./bus", O_RDWR [pid 5415] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5417] <... open resumed>) = 6 [pid 5070] unlink("./10/binderfs" [pid 5417] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... openat resumed>) = 4 [pid 5417] <... futex resumed>) = 1 [pid 5415] <... futex resumed>) = 0 [pid 5070] <... unlink resumed>) = 0 [pid 5417] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5415] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] fstat(4, [pid 5417] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5415] <... futex resumed>) = 0 [pid 5417] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5415] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5417] <... mmap resumed>) = 0x20000000 [pid 5067] getdents64(4, [pid 5417] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5417] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5415] <... futex resumed>) = 0 [ 64.170723][ T41] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 64.191659][ T9] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 64.192539][ T41] EXT4-fs (loop1): This should not happen!! Data will be lost [ 64.192539][ T41] [pid 5067] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5415] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5417] <... futex resumed>) = 0 [pid 5417] sendfile(4, 5, NULL, 2147483713 [pid 5415] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5424 attached [pid 5424] set_robust_list(0x7f45152de9e0, 24) = 0 [pid 5424] memfd_create("syzkaller", 0) = 3 [pid 5424] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f450cebe000 [pid 5424] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5067] getdents64(4, 0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5067] rmdir("./11/file0" [pid 5424] <... write resumed>) = 1048576 [pid 5424] munmap(0x7f450cebe000, 1048576 [pid 5067] <... rmdir resumed>) = 0 [pid 5067] getdents64(3, [pid 5419] <... mount resumed>) = 0 [pid 5067] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5419] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] close(3 [pid 5419] <... openat resumed>) = 3 [pid 5067] <... close resumed>) = 0 [pid 5419] chdir("./file0" [pid 5067] rmdir("./11" [pid 5419] <... chdir resumed>) = 0 [pid 5419] ioctl(4, LOOP_CLR_FD) = 0 [pid 5419] close(4) = 0 [pid 5419] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5418] <... futex resumed>) = 0 [pid 5419] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5418] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5418] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5424] <... munmap resumed>) = 0 [pid 5424] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5424] ioctl(4, LOOP_SET_FD, 3 [pid 5419] <... open resumed>) = 4 [pid 5067] <... rmdir resumed>) = 0 [pid 5419] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5418] <... futex resumed>) = 0 [pid 5419] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5418] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] mkdir("./12", 0777 [pid 5419] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5418] <... futex resumed>) = 0 [pid 5419] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5418] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] <... mkdir resumed>) = 0 [pid 5419] <... write resumed>) = 9 [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5419] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5418] <... futex resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5419] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5418] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5419] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5418] <... futex resumed>) = 0 [pid 5419] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5418] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5419] <... openat resumed>) = 5 [pid 5419] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] close(3 [pid 5419] <... futex resumed>) = 1 [pid 5418] <... futex resumed>) = 0 [pid 5415] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5067] <... close resumed>) = 0 [pid 5419] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5418] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5415] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5419] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5418] <... futex resumed>) = 0 [pid 5415] <... futex resumed>) = 0 [pid 5419] open("./bus", O_RDWR [pid 5418] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5415] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5419] <... open resumed>) = 6 [pid 5415] <... mmap resumed>) = 0x7f450cf9d000 [pid 5419] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [ 64.223287][ T5417] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 64.255117][ T5424] loop0: detected capacity change from 0 to 2048 [pid 5415] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5067] <... clone resumed>, child_tidptr=0x555556f755d0) = 5426 [pid 5419] <... futex resumed>) = 1 [pid 5418] <... futex resumed>) = 0 [pid 5415] <... mprotect resumed>) = 0 [pid 5419] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5418] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5415] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5426 attached [pid 5419] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5418] <... futex resumed>) = 0 [pid 5426] set_robust_list(0x555556f755e0, 24 [pid 5419] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5418] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5415] <... clone resumed>, parent_tid=[5427], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5427 [pid 5426] <... set_robust_list resumed>) = 0 [pid 5424] <... ioctl resumed>) = 0 [pid 5419] <... mmap resumed>) = 0x20000000 [pid 5415] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5426] chdir("./12" [pid 5424] close(3 [pid 5419] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5415] <... futex resumed>) = 0 [pid 5426] <... chdir resumed>) = 0 [pid 5424] <... close resumed>) = 0 [pid 5419] <... futex resumed>) = 1 [pid 5418] <... futex resumed>) = 0 [pid 5415] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5426] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5424] mkdir("./file0", 0777 [pid 5419] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5418] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5426] <... prctl resumed>) = 0 [pid 5424] <... mkdir resumed>) = 0 [pid 5419] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5418] <... futex resumed>) = 0 [pid 5426] setpgid(0, 0 [pid 5424] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5419] sendfile(4, 5, NULL, 2147483713 [pid 5418] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5427 attached [pid 5426] <... setpgid resumed>) = 0 [pid 5427] set_robust_list(0x7f450cfbd9e0, 24 [pid 5426] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5427] <... set_robust_list resumed>) = 0 [pid 5426] <... openat resumed>) = 3 [pid 5427] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5426] write(3, "1000", 4) = 4 [pid 5426] close(3) = 0 [pid 5426] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5426] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5426] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f45152be000 [pid 5426] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5426] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5429], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5429 [pid 5426] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5426] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5429 attached [pid 5429] set_robust_list(0x7f45152de9e0, 24) = 0 [pid 5429] memfd_create("syzkaller", 0) = 3 [pid 5429] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f450cebe000 [ 64.272149][ T9] EXT4-fs (loop5): This should not happen!! Data will be lost [ 64.272149][ T9] [ 64.283680][ T5419] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5424] <... mount resumed>) = 0 [pid 5418] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5415] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5066] <... umount2 resumed>) = 0 [pid 5424] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5418] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5424] <... openat resumed>) = 3 [pid 5418] <... futex resumed>) = 0 [pid 5429] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5424] chdir("./file0" [pid 5418] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5066] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5429] <... write resumed>) = 1048576 [pid 5424] <... chdir resumed>) = 0 [pid 5418] <... mmap resumed>) = 0x7f450cf9d000 [pid 5424] ioctl(4, LOOP_CLR_FD [ 64.326072][ T5419] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 64.340941][ T5417] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 64.367070][ T5419] EXT4-fs (loop4): This should not happen!! Data will be lost [pid 5418] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5424] <... ioctl resumed>) = 0 [pid 5418] <... mprotect resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5424] close(4 [pid 5418] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5431 attached [pid 5424] <... close resumed>) = 0 [pid 5066] lstat("./10/file0", [pid 5424] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5418] <... clone resumed>, parent_tid=[5431], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5431 [pid 5424] <... futex resumed>) = 1 [pid 5422] <... futex resumed>) = 0 [pid 5418] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5424] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5422] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5418] <... futex resumed>) = 0 [pid 5424] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 64.367070][ T5419] [ 64.377327][ T5419] EXT4-fs (loop4): Total free blocks count 0 [ 64.384067][ T5419] EXT4-fs (loop4): Free/Dirty block details [ 64.390096][ T5419] EXT4-fs (loop4): free_blocks=2415919104 [ 64.396653][ T5417] EXT4-fs (loop3): This should not happen!! Data will be lost [ 64.396653][ T5417] [ 64.401886][ T5419] EXT4-fs (loop4): dirty_blocks=16 [ 64.409860][ T5417] EXT4-fs (loop3): Total free blocks count 0 [pid 5422] <... futex resumed>) = 0 [pid 5418] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5431] set_robust_list(0x7f450cfbd9e0, 24 [pid 5424] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5422] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... umount2 resumed>) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5431] <... set_robust_list resumed>) = 0 [pid 5424] <... open resumed>) = 4 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5424] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5422] <... futex resumed>) = 0 [pid 5070] lstat("./10/file0", [pid 5424] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5422] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5431] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5429] munmap(0x7f450cebe000, 1048576 [pid 5424] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5422] <... futex resumed>) = 0 [pid 5070] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5429] <... munmap resumed>) = 0 [pid 5424] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5422] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5429] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5424] <... write resumed>) = 9 [pid 5070] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5429] <... openat resumed>) = 4 [pid 5424] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... openat resumed>) = 4 [pid 5429] ioctl(4, LOOP_SET_FD, 3 [pid 5424] <... futex resumed>) = 1 [pid 5422] <... futex resumed>) = 0 [pid 5070] fstat(4, [pid 5066] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5429] <... ioctl resumed>) = 0 [pid 5427] <... ioctl resumed>) = 0 [pid 5424] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5422] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5417] <... sendfile resumed>) = 117 [pid 5070] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... openat resumed>) = 4 [pid 5417] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] fstat(4, [pid 5417] <... futex resumed>) = 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5431] <... ioctl resumed>) = 0 [pid 5429] close(3 [pid 5427] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5424] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5422] <... futex resumed>) = 0 [pid 5419] <... sendfile resumed>) = 117 [pid 5418] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5417] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5415] exit_group(0 [pid 5070] getdents64(4, [pid 5066] getdents64(4, [pid 5431] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5429] <... close resumed>) = 0 [pid 5427] <... futex resumed>) = ? [pid 5424] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5422] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5419] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5417] <... futex resumed>) = ? [pid 5415] <... exit_group resumed>) = ? [pid 5070] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5066] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5431] <... futex resumed>) = 0 [pid 5429] mkdir("./file0", 0777 [pid 5427] +++ exited with 0 +++ [pid 5424] <... openat resumed>) = 5 [pid 5419] <... futex resumed>) = 0 [pid 5417] +++ exited with 0 +++ [pid 5415] +++ exited with 0 +++ [pid 5070] getdents64(4, [pid 5066] getdents64(4, [pid 5431] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5429] <... mkdir resumed>) = 0 [pid 5424] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5419] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5418] exit_group(0 [pid 5070] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5415, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5066] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5431] <... futex resumed>) = ? [pid 5429] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5424] <... futex resumed>) = 1 [pid 5422] <... futex resumed>) = 0 [pid 5419] <... futex resumed>) = ? [pid 5418] <... exit_group resumed>) = ? [pid 5070] close(4 [pid 5066] close(4 [pid 5431] +++ exited with 0 +++ [pid 5424] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5422] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5419] +++ exited with 0 +++ [pid 5418] +++ exited with 0 +++ [pid 5070] <... close resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5424] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5422] <... futex resumed>) = 0 [pid 5070] rmdir("./10/file0" [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5418, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5424] open("./bus", O_RDWR [pid 5422] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... rmdir resumed>) = 0 [pid 5066] rmdir("./10/file0" [pid 5424] <... open resumed>) = 6 [pid 5070] getdents64(3, [pid 5424] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5069] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... rmdir resumed>) = 0 [pid 5424] <... futex resumed>) = 1 [pid 5422] <... futex resumed>) = 0 [pid 5070] close(3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] getdents64(3, [pid 5424] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5422] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... close resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5424] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5422] <... futex resumed>) = 0 [pid 5070] rmdir("./10" [pid 5069] <... openat resumed>) = 3 [pid 5068] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5424] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5422] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... rmdir resumed>) = 0 [pid 5069] fstat(3, [pid 5068] <... openat resumed>) = 3 [pid 5424] <... mmap resumed>) = 0x20000000 [pid 5070] mkdir("./11", 0777 [pid 5069] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] fstat(3, [pid 5066] close(3 [pid 5424] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... mkdir resumed>) = 0 [pid 5069] getdents64(3, [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... close resumed>) = 0 [pid 5424] <... futex resumed>) = 1 [pid 5422] <... futex resumed>) = 0 [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5069] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5068] getdents64(3, [pid 5066] rmdir("./10" [pid 5424] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5422] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... openat resumed>) = 3 [pid 5069] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5424] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5422] <... futex resumed>) = 0 [pid 5070] ioctl(3, LOOP_CLR_FD [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... rmdir resumed>) = 0 [pid 5424] sendfile(4, 5, NULL, 2147483713 [pid 5422] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5069] lstat("./11/binderfs", [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] mkdir("./11", 0777 [ 64.422219][ T5417] EXT4-fs (loop3): Free/Dirty block details [ 64.428822][ T5417] EXT4-fs (loop3): free_blocks=2415919104 [ 64.434566][ T5417] EXT4-fs (loop3): dirty_blocks=16 [ 64.441582][ T5417] EXT4-fs (loop3): Block reservation details [ 64.449179][ T5429] loop2: detected capacity change from 0 to 2048 [ 64.449489][ T5417] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 64.457324][ T5419] EXT4-fs (loop4): Block reservation details [ 64.468641][ T5419] EXT4-fs (loop4): i_reserved_data_blocks=1 [pid 5070] close(3 [pid 5069] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] lstat("./11/binderfs", [pid 5070] <... close resumed>) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f755d0) = 5434 [pid 5069] unlink("./11/binderfs" [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] <... unlink resumed>) = 0 [pid 5068] unlink("./11/binderfs" [pid 5069] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... unlink resumed>) = 0 [pid 5429] <... mount resumed>) = 0 [pid 5068] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] <... clone resumed>, child_tidptr=0x555556f755d0) = 5435 [ 64.516434][ T5424] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 64.537435][ T61] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 64.550625][ T9] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 ./strace-static-x86_64: Process 5435 attached ./strace-static-x86_64: Process 5434 attached [pid 5429] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5422] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5435] set_robust_list(0x555556f755e0, 24 [pid 5434] set_robust_list(0x555556f755e0, 24 [pid 5429] <... openat resumed>) = 3 [pid 5422] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5435] <... set_robust_list resumed>) = 0 [pid 5435] chdir("./11") = 0 [pid 5435] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5435] setpgid(0, 0) = 0 [pid 5435] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5435] write(3, "1000", 4) = 4 [ 64.552432][ T5424] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 64.563644][ T9] EXT4-fs (loop3): This should not happen!! Data will be lost [ 64.563644][ T9] [ 64.577305][ T61] EXT4-fs (loop4): This should not happen!! Data will be lost [ 64.577305][ T61] [ 64.586977][ T5424] EXT4-fs (loop0): This should not happen!! Data will be lost [ 64.586977][ T5424] [ 64.610325][ T5424] EXT4-fs (loop0): Total free blocks count 0 [pid 5435] close(3) = 0 [pid 5435] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5434] <... set_robust_list resumed>) = 0 [pid 5429] chdir("./file0" [pid 5422] <... futex resumed>) = 0 [pid 5435] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5435] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f45152be000 [pid 5434] chdir("./11" [pid 5429] <... chdir resumed>) = 0 [pid 5422] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5435] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5429] ioctl(4, LOOP_CLR_FD [pid 5422] <... mmap resumed>) = 0x7f450cf9d000 [pid 5434] <... chdir resumed>) = 0 [pid 5435] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5429] <... ioctl resumed>) = 0 [pid 5435] <... clone resumed>, parent_tid=[5436], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5436 [pid 5435] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5434] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5429] close(4 [pid 5422] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5435] <... futex resumed>) = 0 [pid 5435] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5434] <... prctl resumed>) = 0 [pid 5429] <... close resumed>) = 0 [pid 5422] <... mprotect resumed>) = 0 [pid 5429] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5434] setpgid(0, 0 [pid 5429] <... futex resumed>) = 1 [pid 5426] <... futex resumed>) = 0 [pid 5434] <... setpgid resumed>) = 0 [pid 5426] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5429] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5426] <... futex resumed>) = 0 [pid 5434] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5426] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5422] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5434] <... openat resumed>) = 3 [pid 5434] write(3, "1000", 4 [pid 5429] <... open resumed>) = 4 [pid 5422] <... clone resumed>, parent_tid=[5437], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5437 [pid 5434] <... write resumed>) = 4 [pid 5429] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5422] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5434] close(3 [pid 5429] <... futex resumed>) = 1 [pid 5426] <... futex resumed>) = 0 [pid 5422] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5436 attached [pid 5436] set_robust_list(0x7f45152de9e0, 24) = 0 [pid 5436] memfd_create("syzkaller", 0) = 3 [pid 5436] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f450cebe000 [pid 5426] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5434] <... close resumed>) = 0 [pid 5426] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5422] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5429] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5434] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5434] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5434] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5429] <... write resumed>) = 9 [pid 5068] <... umount2 resumed>) = 0 [pid 5434] <... mmap resumed>) = 0x7f45152be000 [pid 5068] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5434] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE [pid 5429] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5426] <... futex resumed>) = 0 [pid 5429] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5426] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5434] <... mprotect resumed>) = 0 [pid 5426] <... futex resumed>) = 0 [pid 5429] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5426] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5429] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5434] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./11/file0", [pid 5429] <... openat resumed>) = 5 [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5429] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5426] <... futex resumed>) = 0 [pid 5426] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5429] open("./bus", O_RDWR [pid 5426] <... futex resumed>) = 0 [pid 5426] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5434] <... clone resumed>, parent_tid=[5438], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5438 [pid 5429] <... open resumed>) = 6 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5434] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5429] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5434] <... futex resumed>) = 0 [pid 5434] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5429] <... futex resumed>) = 1 [pid 5426] <... futex resumed>) = 0 [pid 5429] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5426] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5436] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5069] <... umount2 resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5068] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, 0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, 0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5068] close(4) = 0 [pid 5068] rmdir("./11/file0") = 0 [pid 5068] getdents64(3, 0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 5068] rmdir("./11") = 0 [pid 5068] mkdir("./12", 0777 [pid 5429] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5426] <... futex resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5429] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5426] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5429] <... mmap resumed>) = 0x20000000 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5429] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] close(3) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f755d0) = 5439 ./strace-static-x86_64: Process 5439 attached [pid 5439] set_robust_list(0x555556f755e0, 24) = 0 [pid 5429] <... futex resumed>) = 1 [pid 5426] <... futex resumed>) = 0 [pid 5426] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5426] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5439] chdir("./12") = 0 [pid 5439] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5439] setpgid(0, 0) = 0 [pid 5439] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5429] sendfile(4, 5, NULL, 2147483713 [pid 5439] write(3, "1000", 4 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5439] <... write resumed>) = 4 [pid 5439] close(3) = 0 [ 64.619553][ T5424] EXT4-fs (loop0): Free/Dirty block details [pid 5439] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5439] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5436] <... write resumed>) = 1048576 [pid 5439] <... futex resumed>) = 0 [pid 5436] munmap(0x7f450cebe000, 1048576 [pid 5439] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5436] <... munmap resumed>) = 0 [pid 5439] <... mmap resumed>) = 0x7f45152be000 [pid 5439] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE [pid 5436] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5422] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5439] <... mprotect resumed>) = 0 [pid 5436] <... openat resumed>) = 4 [pid 5439] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5436] ioctl(4, LOOP_SET_FD, 3 [pid 5069] lstat("./11/file0", ./strace-static-x86_64: Process 5438 attached ./strace-static-x86_64: Process 5437 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5439] <... clone resumed>, parent_tid=[5440], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5440 [pid 5439] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5439] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5438] set_robust_list(0x7f45152de9e0, 24 [pid 5437] set_robust_list(0x7f450cfbd9e0, 24 [pid 5069] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5438] <... set_robust_list resumed>) = 0 [pid 5437] <... set_robust_list resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5437] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5438] memfd_create("syzkaller", 0 [pid 5069] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5440 attached [pid 5438] <... memfd_create resumed>) = 3 [pid 5069] getdents64(4, [pid 5440] set_robust_list(0x7f45152de9e0, 24) = 0 [pid 5438] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5069] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5440] memfd_create("syzkaller", 0 [pid 5436] <... ioctl resumed>) = 0 [pid 5438] <... mmap resumed>) = 0x7f450cebe000 [pid 5069] getdents64(4, [pid 5440] <... memfd_create resumed>) = 3 [pid 5436] close(3 [pid 5069] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5440] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5426] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] close(4 [pid 5440] <... mmap resumed>) = 0x7f450cebe000 [pid 5436] <... close resumed>) = 0 [pid 5426] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5436] mkdir("./file0", 0777 [pid 5426] <... futex resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 5436] <... mkdir resumed>) = 0 [pid 5426] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5069] rmdir("./11/file0" [pid 5436] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5426] <... mmap resumed>) = 0x7f450cf9d000 [ 64.685073][ T5436] loop5: detected capacity change from 0 to 2048 [ 64.691084][ T5429] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 64.695849][ T5424] EXT4-fs (loop0): free_blocks=2415919104 [pid 5438] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5426] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5069] <... rmdir resumed>) = 0 [pid 5426] <... mprotect resumed>) = 0 [pid 5426] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5438] <... write resumed>) = 1048576 [pid 5426] <... clone resumed>, parent_tid=[5442], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5442 [pid 5069] getdents64(3, [pid 5426] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5440] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5426] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5436] <... mount resumed>) = 0 [pid 5436] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 ./strace-static-x86_64: Process 5442 attached [pid 5436] chdir("./file0" [pid 5442] set_robust_list(0x7f450cfbd9e0, 24 [pid 5436] <... chdir resumed>) = 0 [pid 5442] <... set_robust_list resumed>) = 0 [pid 5436] ioctl(4, LOOP_CLR_FD [pid 5442] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5436] <... ioctl resumed>) = 0 [pid 5440] <... write resumed>) = 1048576 [pid 5436] close(4) = 0 [pid 5436] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5438] munmap(0x7f450cebe000, 1048576 [pid 5436] <... futex resumed>) = 1 [pid 5435] <... futex resumed>) = 0 [pid 5069] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5436] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5435] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5436] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5435] <... futex resumed>) = 0 [pid 5436] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5435] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5436] <... open resumed>) = 4 [pid 5436] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5437] <... ioctl resumed>) = 0 [pid 5436] <... futex resumed>) = 1 [pid 5435] <... futex resumed>) = 0 [pid 5424] <... sendfile resumed>) = 117 [pid 5436] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5435] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5436] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5435] <... futex resumed>) = 0 [pid 5436] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5435] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5438] <... munmap resumed>) = 0 [pid 5437] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5436] <... write resumed>) = 9 [pid 5069] close(3 [pid 5438] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5437] <... futex resumed>) = 0 [pid 5436] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... close resumed>) = 0 [pid 5437] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5436] <... futex resumed>) = 1 [pid 5435] <... futex resumed>) = 0 [pid 5069] rmdir("./11" [pid 5438] <... openat resumed>) = 4 [pid 5436] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5435] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5436] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5435] <... futex resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5438] ioctl(4, LOOP_SET_FD, 3 [pid 5436] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5435] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5436] <... openat resumed>) = 5 [pid 5069] mkdir("./12", 0777 [pid 5436] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5435] <... futex resumed>) = 0 [pid 5436] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5435] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5436] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5435] <... futex resumed>) = 0 [pid 5436] open("./bus", O_RDWR [pid 5435] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5436] <... open resumed>) = 6 [pid 5436] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5435] <... futex resumed>) = 0 [pid 5436] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5435] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5436] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5435] <... futex resumed>) = 0 [pid 5436] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5435] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5436] <... mmap resumed>) = 0x20000000 [pid 5436] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5424] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5436] <... futex resumed>) = 1 [pid 5435] <... futex resumed>) = 0 [pid 5436] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5435] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5424] <... futex resumed>) = 0 [pid 5436] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5435] <... futex resumed>) = 0 [ 64.739725][ T5424] EXT4-fs (loop0): dirty_blocks=16 [ 64.747496][ T5424] EXT4-fs (loop0): Block reservation details [ 64.751886][ T5429] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 64.769654][ T5424] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 64.781949][ T5438] loop1: detected capacity change from 0 to 2048 [pid 5436] sendfile(4, 5, NULL, 2147483713 [pid 5435] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5424] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5440] munmap(0x7f450cebe000, 1048576 [pid 5438] <... ioctl resumed>) = 0 [pid 5426] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] <... mkdir resumed>) = 0 [pid 5440] <... munmap resumed>) = 0 [pid 5438] close(3 [pid 5422] exit_group(0 [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5440] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5438] <... close resumed>) = 0 [pid 5437] <... futex resumed>) = ? [pid 5422] <... exit_group resumed>) = ? [pid 5069] <... openat resumed>) = 3 [pid 5440] <... openat resumed>) = 4 [pid 5438] mkdir("./file0", 0777 [pid 5437] +++ exited with 0 +++ [pid 5069] ioctl(3, LOOP_CLR_FD [ 64.793259][ T5436] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 64.793802][ T5429] EXT4-fs (loop2): This should not happen!! Data will be lost [ 64.793802][ T5429] [ 64.808461][ T5436] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 64.831396][ T5436] EXT4-fs (loop5): This should not happen!! Data will be lost [ 64.831396][ T5436] [pid 5440] ioctl(4, LOOP_SET_FD, 3 [pid 5438] <... mkdir resumed>) = 0 [pid 5069] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5438] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5424] <... futex resumed>) = ? [pid 5069] close(3 [pid 5424] +++ exited with 0 +++ [pid 5422] +++ exited with 0 +++ [pid 5069] <... close resumed>) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5422, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5069] <... clone resumed>, child_tidptr=0x555556f755d0) = 5445 [pid 5065] <... restart_syscall resumed>) = 0 ./strace-static-x86_64: Process 5445 attached [pid 5065] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5440] <... ioctl resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5440] close(3 [pid 5065] fstat(3, [pid 5440] <... close resumed>) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5445] set_robust_list(0x555556f755e0, 24 [pid 5440] mkdir("./file0", 0777 [pid 5435] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5065] getdents64(3, [pid 5440] <... mkdir resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [ 64.838624][ T5440] loop3: detected capacity change from 0 to 2048 [ 64.841951][ T5436] EXT4-fs (loop5): Total free blocks count 0 [ 64.855983][ T5436] EXT4-fs (loop5): Free/Dirty block details [ 64.865232][ T5436] EXT4-fs (loop5): free_blocks=2415919104 [ 64.871480][ T5436] EXT4-fs (loop5): dirty_blocks=16 [ 64.877332][ T5436] EXT4-fs (loop5): Block reservation details [ 64.884953][ T5436] EXT4-fs (loop5): i_reserved_data_blocks=1 [pid 5440] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5065] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5445] <... set_robust_list resumed>) = 0 [pid 5436] <... sendfile resumed>) = 117 [pid 5435] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5445] chdir("./12" [pid 5436] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5435] <... futex resumed>) = 0 [pid 5445] <... chdir resumed>) = 0 [pid 5436] <... futex resumed>) = 0 [pid 5435] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5445] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5436] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5435] <... mmap resumed>) = 0x7f450cf9d000 [pid 5445] <... prctl resumed>) = 0 [pid 5435] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5445] setpgid(0, 0 [pid 5435] <... mprotect resumed>) = 0 [pid 5445] <... setpgid resumed>) = 0 [pid 5435] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5445] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5435] <... clone resumed>, parent_tid=[5447], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5447 [pid 5445] write(3, "1000", 4 [pid 5435] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5445] <... write resumed>) = 4 [pid 5435] <... futex resumed>) = 0 [pid 5445] close(3 [pid 5435] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5445] <... close resumed>) = 0 [pid 5445] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5445] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5445] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5445] <... mmap resumed>) = 0x7f45152be000 [pid 5445] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE [pid 5065] lstat("./11/binderfs", [pid 5445] <... mprotect resumed>) = 0 [pid 5445] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5438] <... mount resumed>) = 0 [pid 5445] <... clone resumed>, parent_tid=[5448], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5448 [pid 5438] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5445] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5438] <... openat resumed>) = 3 [pid 5065] unlink("./11/binderfs" [pid 5445] <... futex resumed>) = 0 [pid 5438] chdir("./file0" [pid 5445] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5065] <... unlink resumed>) = 0 [pid 5438] <... chdir resumed>) = 0 [pid 5065] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5448 attached ./strace-static-x86_64: Process 5447 attached [pid 5438] ioctl(4, LOOP_CLR_FD [pid 5448] set_robust_list(0x7f45152de9e0, 24 [pid 5447] set_robust_list(0x7f450cfbd9e0, 24 [pid 5440] <... mount resumed>) = 0 [pid 5438] <... ioctl resumed>) = 0 [pid 5448] <... set_robust_list resumed>) = 0 [pid 5447] <... set_robust_list resumed>) = 0 [pid 5440] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [ 64.890683][ T5429] EXT4-fs (loop2): Total free blocks count 0 [ 64.905572][ T9] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 64.905839][ T5429] EXT4-fs (loop2): Free/Dirty block details [ 64.921221][ T9] EXT4-fs (loop0): This should not happen!! Data will be lost [ 64.921221][ T9] [ 64.924779][ T5429] EXT4-fs (loop2): free_blocks=2415919104 [pid 5438] close(4 [pid 5448] memfd_create("syzkaller", 0 [pid 5447] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5440] <... openat resumed>) = 3 [pid 5438] <... close resumed>) = 0 [pid 5448] <... memfd_create resumed>) = 3 [pid 5447] <... ioctl resumed>) = 0 [pid 5440] chdir("./file0" [pid 5438] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5448] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5447] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5440] <... chdir resumed>) = 0 [pid 5438] <... futex resumed>) = 1 [pid 5434] <... futex resumed>) = 0 [pid 5448] <... mmap resumed>) = 0x7f450cebe000 [pid 5447] <... futex resumed>) = 0 [pid 5440] ioctl(4, LOOP_CLR_FD [pid 5438] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5435] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5434] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5447] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5442] <... ioctl resumed>) = 0 [pid 5440] <... ioctl resumed>) = 0 [pid 5438] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5435] exit_group(0 [pid 5434] <... futex resumed>) = 0 [pid 5429] <... sendfile resumed>) = 117 [pid 5448] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5447] <... futex resumed>) = ? [pid 5442] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5440] close(4 [pid 5438] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5436] <... futex resumed>) = ? [pid 5435] <... exit_group resumed>) = ? [pid 5434] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5429] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... umount2 resumed>) = 0 [pid 5447] +++ exited with 0 +++ [pid 5442] <... futex resumed>) = 0 [pid 5440] <... close resumed>) = 0 [pid 5438] <... open resumed>) = 4 [pid 5436] +++ exited with 0 +++ [pid 5435] +++ exited with 0 +++ [pid 5442] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5065] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5440] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5426] exit_group(0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5442] <... futex resumed>) = ? [pid 5440] <... futex resumed>) = 1 [pid 5439] <... futex resumed>) = 0 [pid 5438] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5429] <... futex resumed>) = ? [pid 5426] <... exit_group resumed>) = ? [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5435, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5442] +++ exited with 0 +++ [pid 5440] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5439] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5438] <... futex resumed>) = 1 [pid 5434] <... futex resumed>) = 0 [pid 5070] restart_syscall(<... resuming interrupted clone ...> [pid 5065] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5440] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5439] <... futex resumed>) = 0 [pid 5438] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5434] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... restart_syscall resumed>) = 0 [pid 5065] <... openat resumed>) = 4 [pid 5440] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5439] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5438] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5434] <... futex resumed>) = 0 [pid 5429] +++ exited with 0 +++ [pid 5426] +++ exited with 0 +++ [pid 5065] fstat(4, [pid 5434] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5426, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5438] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5440] <... open resumed>) = 4 [pid 5070] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] getdents64(4, [pid 5440] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5438] <... write resumed>) = 9 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5440] <... futex resumed>) = 1 [pid 5439] <... futex resumed>) = 0 [pid 5438] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] getdents64(4, [pid 5448] <... write resumed>) = 1048576 [pid 5440] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5070] <... openat resumed>) = 3 [ 64.939931][ T5429] EXT4-fs (loop2): dirty_blocks=16 [ 64.945302][ T5429] EXT4-fs (loop2): Block reservation details [ 64.952377][ T5429] EXT4-fs (loop2): i_reserved_data_blocks=1 [pid 5448] munmap(0x7f450cebe000, 1048576 [pid 5070] fstat(3, [pid 5067] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5439] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5438] <... futex resumed>) = 1 [pid 5434] <... futex resumed>) = 0 [pid 5070] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5448] <... munmap resumed>) = 0 [pid 5070] getdents64(3, [pid 5067] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5448] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5440] <... futex resumed>) = 0 [pid 5439] <... futex resumed>) = 1 [pid 5438] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5434] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5067] <... openat resumed>) = 3 [pid 5065] close(4 [pid 5448] <... openat resumed>) = 4 [pid 5440] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5439] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5438] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5434] <... futex resumed>) = 0 [pid 5070] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] fstat(3, [pid 5065] <... close resumed>) = 0 [pid 5448] ioctl(4, LOOP_SET_FD, 3 [pid 5440] <... write resumed>) = 9 [pid 5438] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5434] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] rmdir("./11/file0" [pid 5448] <... ioctl resumed>) = 0 [pid 5440] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5438] <... openat resumed>) = 5 [pid 5070] lstat("./11/binderfs", [pid 5067] getdents64(3, [pid 5448] close(3 [pid 5440] <... futex resumed>) = 1 [pid 5070] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5439] <... futex resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5448] <... close resumed>) = 0 [pid 5440] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5439] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5438] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] unlink("./11/binderfs" [pid 5067] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] getdents64(3, [pid 5448] mkdir("./file0", 0777 [pid 5440] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5439] <... futex resumed>) = 0 [pid 5438] <... futex resumed>) = 1 [pid 5434] <... futex resumed>) = 0 [pid 5070] <... unlink resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5448] <... mkdir resumed>) = 0 [pid 5440] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5439] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5438] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5434] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] lstat("./12/binderfs", [pid 5065] close(3 [pid 5448] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5440] <... openat resumed>) = 5 [pid 5438] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5434] <... futex resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./12/binderfs") = 0 [pid 5067] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./11") = 0 [pid 5065] mkdir("./12", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 65.011317][ T5448] loop4: detected capacity change from 0 to 2048 [ 65.038522][ T11] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5065] close(3 [pid 5440] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5438] open("./bus", O_RDWR [pid 5434] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] <... close resumed>) = 0 [pid 5440] <... futex resumed>) = 1 [pid 5439] <... futex resumed>) = 0 [pid 5438] <... open resumed>) = 6 [pid 5440] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5439] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5438] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5440] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5439] <... futex resumed>) = 0 [pid 5438] <... futex resumed>) = 1 [pid 5434] <... futex resumed>) = 0 [pid 5440] open("./bus", O_RDWR [pid 5439] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5438] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5434] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5440] <... open resumed>) = 6 [pid 5438] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5434] <... futex resumed>) = 0 [pid 5440] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5438] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5434] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5440] <... futex resumed>) = 1 [pid 5439] <... futex resumed>) = 0 [pid 5438] <... mmap resumed>) = 0x20000000 [pid 5440] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5439] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5438] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5440] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5439] <... futex resumed>) = 0 [pid 5438] <... futex resumed>) = 1 [pid 5434] <... futex resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5440] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5439] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5438] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5434] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5440] <... mmap resumed>) = 0x20000000 [pid 5438] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5434] <... futex resumed>) = 0 [pid 5440] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5438] sendfile(4, 5, NULL, 2147483713 [pid 5434] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5440] <... futex resumed>) = 1 [pid 5439] <... futex resumed>) = 0 [pid 5440] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5439] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5452 attached [pid 5440] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5439] <... futex resumed>) = 0 [pid 5070] <... umount2 resumed>) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x555556f755d0) = 5452 [pid 5452] set_robust_list(0x555556f755e0, 24 [ 65.052551][ T9] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 65.063030][ T11] EXT4-fs (loop5): This should not happen!! Data will be lost [ 65.063030][ T11] [ 65.088902][ T5438] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5440] sendfile(4, 5, NULL, 2147483713 [pid 5439] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5452] <... set_robust_list resumed>) = 0 [pid 5434] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5434] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5434] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f450cf9d000 [pid 5434] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5434] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5454], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5454 [pid 5434] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5434] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5452] chdir("./12" [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5452] <... chdir resumed>) = 0 [pid 5070] lstat("./11/file0", [pid 5452] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 5454 attached ) = 0 [pid 5070] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 65.109703][ T9] EXT4-fs (loop2): This should not happen!! Data will be lost [ 65.109703][ T9] [ 65.111973][ T5440] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 65.122961][ T5438] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 65.140537][ T5440] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5454] set_robust_list(0x7f450cfbd9e0, 24 [pid 5452] setpgid(0, 0 [pid 5448] <... mount resumed>) = 0 [pid 5070] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = 0 [pid 5454] <... set_robust_list resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5454] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5452] <... setpgid resumed>) = 0 [pid 5452] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5070] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5448] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5452] <... openat resumed>) = 3 [pid 5070] <... openat resumed>) = 4 [pid 5448] <... openat resumed>) = 3 [pid 5070] fstat(4, [pid 5452] write(3, "1000", 4 [pid 5448] chdir("./file0" [pid 5452] <... write resumed>) = 4 [pid 5070] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5452] close(3 [pid 5448] <... chdir resumed>) = 0 [pid 5070] getdents64(4, [pid 5452] <... close resumed>) = 0 [pid 5448] ioctl(4, LOOP_CLR_FD [pid 5070] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5452] symlink("/dev/binderfs", "./binderfs" [pid 5448] <... ioctl resumed>) = 0 [pid 5070] getdents64(4, [pid 5452] <... symlink resumed>) = 0 [pid 5448] close(4 [pid 5439] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5070] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5067] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5452] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5448] <... close resumed>) = 0 [pid 5439] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5452] <... futex resumed>) = 0 [pid 5448] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5439] <... futex resumed>) = 0 [pid 5434] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5070] close(4 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5452] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5448] <... futex resumed>) = 1 [pid 5445] <... futex resumed>) = 0 [pid 5439] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5070] <... close resumed>) = 0 [pid 5067] lstat("./12/file0", [pid 5452] <... mmap resumed>) = 0x7f45152be000 [pid 5448] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5445] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5439] <... mmap resumed>) = 0x7f450cf9d000 [pid 5070] rmdir("./11/file0" [pid 5452] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE [pid 5445] <... futex resumed>) = 0 [pid 5439] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5452] <... mprotect resumed>) = 0 [pid 5448] <... open resumed>) = 4 [pid 5445] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5439] <... mprotect resumed>) = 0 [pid 5070] <... rmdir resumed>) = 0 [pid 5067] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5452] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5448] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5439] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5070] getdents64(3, [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5448] <... futex resumed>) = 1 [pid 5445] <... futex resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5067] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5452] <... clone resumed>, parent_tid=[5455], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5455 [pid 5448] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5445] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5439] <... clone resumed>, parent_tid=[5456], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5456 [ 65.160297][ T5438] EXT4-fs (loop1): This should not happen!! Data will be lost [ 65.160297][ T5438] [ 65.161399][ T5440] EXT4-fs (loop3): This should not happen!! Data will be lost [ 65.161399][ T5440] [pid 5070] close(3 [pid 5067] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5456 attached ./strace-static-x86_64: Process 5455 attached [pid 5452] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5448] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5445] <... futex resumed>) = 0 [pid 5439] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... close resumed>) = 0 [pid 5067] fstat(4, [pid 5452] <... futex resumed>) = 0 [pid 5448] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5445] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] rmdir("./11" [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5456] set_robust_list(0x7f450cfbd9e0, 24 [pid 5455] set_robust_list(0x7f45152de9e0, 24 [pid 5452] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5448] <... write resumed>) = 9 [pid 5070] <... rmdir resumed>) = 0 [pid 5067] getdents64(4, [pid 5456] <... set_robust_list resumed>) = 0 [pid 5455] <... set_robust_list resumed>) = 0 [pid 5448] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5439] <... futex resumed>) = 0 [pid 5070] mkdir("./12", 0777 [pid 5067] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5456] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5455] memfd_create("syzkaller", 0 [pid 5448] <... futex resumed>) = 1 [pid 5445] <... futex resumed>) = 0 [pid 5070] <... mkdir resumed>) = 0 [pid 5067] getdents64(4, [pid 5455] <... memfd_create resumed>) = 3 [pid 5448] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5445] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5067] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5455] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5448] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5445] <... futex resumed>) = 0 [pid 5070] <... openat resumed>) = 3 [pid 5067] close(4 [pid 5455] <... mmap resumed>) = 0x7f450cebe000 [pid 5448] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5445] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] ioctl(3, LOOP_CLR_FD [pid 5067] <... close resumed>) = 0 [pid 5455] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5448] <... openat resumed>) = 5 [pid 5439] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 65.206466][ T5438] EXT4-fs (loop1): Total free blocks count 0 [ 65.213750][ T5438] EXT4-fs (loop1): Free/Dirty block details [ 65.219863][ T5438] EXT4-fs (loop1): free_blocks=2415919104 [ 65.227372][ T5438] EXT4-fs (loop1): dirty_blocks=16 [ 65.227936][ T5440] EXT4-fs (loop3): Total free blocks count 0 [ 65.233171][ T5438] EXT4-fs (loop1): Block reservation details [ 65.245861][ T5438] EXT4-fs (loop1): i_reserved_data_blocks=1 [pid 5067] rmdir("./12/file0" [pid 5454] <... ioctl resumed>) = 0 [pid 5448] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5438] <... sendfile resumed>) = 117 [pid 5070] close(3 [pid 5067] <... rmdir resumed>) = 0 [pid 5455] <... write resumed>) = 1048576 [pid 5454] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5448] <... futex resumed>) = 1 [pid 5445] <... futex resumed>) = 0 [pid 5438] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... close resumed>) = 0 [pid 5067] getdents64(3, [pid 5454] <... futex resumed>) = 0 [pid 5448] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5445] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5454] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5448] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5445] <... futex resumed>) = 0 [pid 5438] <... futex resumed>) = 0 [pid 5434] exit_group(0 [pid 5067] close(3 [pid 5448] open("./bus", O_RDWR [pid 5445] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... clone resumed>, child_tidptr=0x555556f755d0) = 5457 [pid 5067] <... close resumed>) = 0 [pid 5448] <... open resumed>) = 6 [pid 5067] rmdir("./12" [pid 5448] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... rmdir resumed>) = 0 [pid 5448] <... futex resumed>) = 1 [pid 5445] <... futex resumed>) = 0 [pid 5067] mkdir("./13", 0777 [pid 5455] munmap(0x7f450cebe000, 1048576 [pid 5448] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5445] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5457 attached [pid 5455] <... munmap resumed>) = 0 [pid 5454] <... futex resumed>) = ? [pid 5448] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5445] <... futex resumed>) = 0 [pid 5434] <... exit_group resumed>) = ? [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5455] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5454] +++ exited with 0 +++ [pid 5448] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5445] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] <... openat resumed>) = 3 [pid 5455] <... openat resumed>) = 4 [pid 5448] <... mmap resumed>) = 0x20000000 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5455] ioctl(4, LOOP_SET_FD, 3 [pid 5448] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5457] set_robust_list(0x555556f755e0, 24 [pid 5448] <... futex resumed>) = 1 [pid 5445] <... futex resumed>) = 0 [pid 5440] <... sendfile resumed>) = 117 [pid 5438] +++ exited with 0 +++ [pid 5434] +++ exited with 0 +++ [pid 5457] <... set_robust_list resumed>) = 0 [pid 5440] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5457] chdir("./12" [pid 5456] <... ioctl resumed>) = 0 [pid 5448] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5445] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5455] <... ioctl resumed>) = 0 [pid 5440] <... futex resumed>) = 0 [pid 5067] close(3 [pid 5457] <... chdir resumed>) = 0 [pid 5456] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5448] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5445] <... futex resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5434, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5457] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5457] setpgid(0, 0) = 0 [pid 5457] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5457] write(3, "1000", 4) = 4 [pid 5457] close(3) = 0 [pid 5457] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5456] <... futex resumed>) = 1 [pid 5439] <... futex resumed>) = 0 [pid 5448] sendfile(4, 5, NULL, 2147483713 [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 5445] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5457] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5456] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5439] exit_group(0 [pid 5457] <... futex resumed>) = 0 [pid 5066] <... restart_syscall resumed>) = 0 [pid 5457] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f45152be000 [pid 5457] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5439] <... exit_group resumed>) = ? [pid 5456] <... futex resumed>) = ? [pid 5457] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5459], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5459 [pid 5457] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5456] +++ exited with 0 +++ [pid 5457] <... futex resumed>) = 0 [pid 5457] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5066] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] <... clone resumed>, child_tidptr=0x555556f755d0) = 5458 [pid 5066] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, [pid 5455] close(3 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5455] <... close resumed>) = 0 [pid 5066] getdents64(3, [pid 5455] mkdir("./file0", 0777 [pid 5066] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5455] <... mkdir resumed>) = 0 [ 65.253328][ T5440] EXT4-fs (loop3): Free/Dirty block details [ 65.260139][ T5440] EXT4-fs (loop3): free_blocks=2415919104 [ 65.266551][ T5440] EXT4-fs (loop3): dirty_blocks=16 [ 65.272586][ T5440] EXT4-fs (loop3): Block reservation details [ 65.279405][ T5440] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 65.284090][ T5455] loop0: detected capacity change from 0 to 2048 [pid 5455] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5440] +++ exited with 0 +++ [pid 5439] +++ exited with 0 +++ ./strace-static-x86_64: Process 5458 attached [pid 5458] set_robust_list(0x555556f755e0, 24) = 0 [pid 5458] chdir("./13") = 0 [pid 5458] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5458] setpgid(0, 0) = 0 [pid 5458] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5458] write(3, "1000", 4) = 4 [pid 5458] close(3) = 0 [pid 5458] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5458] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5439, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] unlink("./11/binderfs" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5458] <... futex resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... openat resumed>) = 3 [pid 5458] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5068] fstat(3, [pid 5458] <... mmap resumed>) = 0x7f45152be000 [pid 5458] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5458] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5460], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5460 [pid 5458] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5458] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5460 attached [pid 5460] set_robust_list(0x7f45152de9e0, 24) = 0 [pid 5460] memfd_create("syzkaller", 0) = 3 [pid 5460] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f450cebe000 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, 0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] unlink("./12/binderfs") = 0 [pid 5068] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5460] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5460] munmap(0x7f450cebe000, 1048576) = 0 [pid 5460] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 65.309221][ T5448] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 65.329886][ T9] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 65.346712][ T11] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5460] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5459 attached [pid 5445] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5460] <... ioctl resumed>) = 0 [pid 5460] close(3) = 0 [pid 5460] mkdir("./file0", 0777) = 0 [pid 5460] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5445] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5459] set_robust_list(0x7f45152de9e0, 24 [pid 5455] <... mount resumed>) = 0 [pid 5445] <... futex resumed>) = 0 [ 65.357058][ T5460] loop2: detected capacity change from 0 to 2048 [ 65.362627][ T11] EXT4-fs (loop3): This should not happen!! Data will be lost [ 65.362627][ T11] [ 65.371451][ T5448] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 65.389186][ T5448] EXT4-fs (loop4): This should not happen!! Data will be lost [ 65.389186][ T5448] [ 65.389902][ T9] EXT4-fs (loop1): This should not happen!! Data will be lost [ 65.389902][ T9] [pid 5459] <... set_robust_list resumed>) = 0 [pid 5455] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5445] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5459] memfd_create("syzkaller", 0 [pid 5455] <... openat resumed>) = 3 [pid 5445] <... mmap resumed>) = 0x7f450cf9d000 [pid 5459] <... memfd_create resumed>) = 3 [pid 5455] chdir("./file0" [pid 5445] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5459] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5455] <... chdir resumed>) = 0 [pid 5455] ioctl(4, LOOP_CLR_FD [pid 5445] <... mprotect resumed>) = 0 [pid 5459] <... mmap resumed>) = 0x7f450cebe000 [pid 5455] <... ioctl resumed>) = 0 [pid 5445] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5463 attached [pid 5459] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5455] close(4 [pid 5463] set_robust_list(0x7f450cfbd9e0, 24 [pid 5455] <... close resumed>) = 0 [pid 5445] <... clone resumed>, parent_tid=[5463], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5463 [pid 5463] <... set_robust_list resumed>) = 0 [pid 5455] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5445] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5463] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5455] <... futex resumed>) = 1 [pid 5452] <... futex resumed>) = 0 [pid 5445] <... futex resumed>) = 0 [pid 5452] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5445] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5455] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5452] <... futex resumed>) = 0 [pid 5452] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5455] <... open resumed>) = 4 [pid 5455] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5452] <... futex resumed>) = 0 [pid 5455] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5452] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5455] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5452] <... futex resumed>) = 0 [pid 5455] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5452] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5455] <... write resumed>) = 9 [pid 5455] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5452] <... futex resumed>) = 0 [pid 5455] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5452] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5455] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5448] <... sendfile resumed>) = 117 [pid 5448] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5448] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5452] <... futex resumed>) = 0 [pid 5452] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5463] <... ioctl resumed>) = 0 [pid 5455] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5463] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5445] <... futex resumed>) = 0 [pid 5463] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5445] exit_group(0 [pid 5463] <... futex resumed>) = ? [pid 5448] <... futex resumed>) = ? [pid 5445] <... exit_group resumed>) = ? [pid 5463] +++ exited with 0 +++ [pid 5455] <... openat resumed>) = 5 [pid 5448] +++ exited with 0 +++ [pid 5459] <... write resumed>) = 1048576 [pid 5445] +++ exited with 0 +++ [pid 5459] munmap(0x7f450cebe000, 1048576 [pid 5455] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5445, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5452] <... futex resumed>) = 0 [pid 5455] <... futex resumed>) = 1 [pid 5452] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5455] open("./bus", O_RDWR [pid 5452] <... futex resumed>) = 0 [pid 5452] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5455] <... open resumed>) = 6 [pid 5069] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5455] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] fstat(3, [pid 5459] <... munmap resumed>) = 0 [pid 5069] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5455] <... futex resumed>) = 1 [pid 5452] <... futex resumed>) = 0 [pid 5452] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5069] getdents64(3, [pid 5455] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5452] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5459] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5069] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5455] <... mmap resumed>) = 0x20000000 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] lstat("./12/binderfs", [pid 5455] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5069] unlink("./12/binderfs" [pid 5455] <... futex resumed>) = 1 [pid 5452] <... futex resumed>) = 0 [pid 5452] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5455] sendfile(4, 5, NULL, 2147483713 [pid 5452] <... futex resumed>) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 5452] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5459] <... openat resumed>) = 4 [ 65.399906][ T5448] EXT4-fs (loop4): Total free blocks count 0 [ 65.414909][ T5448] EXT4-fs (loop4): Free/Dirty block details [ 65.424467][ T5448] EXT4-fs (loop4): free_blocks=2415919104 [ 65.431787][ T5448] EXT4-fs (loop4): dirty_blocks=16 [ 65.438059][ T5448] EXT4-fs (loop4): Block reservation details [ 65.444341][ T5448] EXT4-fs (loop4): i_reserved_data_blocks=1 [pid 5459] ioctl(4, LOOP_SET_FD, 3 [pid 5460] <... mount resumed>) = 0 [pid 5069] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = 0 [pid 5460] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5460] chdir("./file0") = 0 [pid 5460] ioctl(4, LOOP_CLR_FD) = 0 [pid 5460] close(4) = 0 [pid 5459] <... ioctl resumed>) = 0 [pid 5459] close(3) = 0 [pid 5459] mkdir("./file0", 0777 [pid 5460] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5458] <... futex resumed>) = 0 [pid 5460] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5458] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5460] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5458] <... futex resumed>) = 0 [pid 5458] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5460] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 65.483314][ T5459] loop5: detected capacity change from 0 to 2048 [pid 5068] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, 0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5460] <... open resumed>) = 4 [pid 5066] <... umount2 resumed>) = 0 [pid 5460] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] getdents64(4, [pid 5460] <... futex resumed>) = 1 [pid 5458] <... futex resumed>) = 0 [pid 5458] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5460] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5458] <... futex resumed>) = 0 [pid 5458] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5068] close(4) = 0 [pid 5068] rmdir("./12/file0") = 0 [pid 5068] getdents64(3, 0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 5068] rmdir("./12") = 0 [pid 5068] mkdir("./13", 0777) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5068] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5068] close(3) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f755d0) = 5466 [pid 5460] <... write resumed>) = 9 [pid 5459] <... mkdir resumed>) = 0 [pid 5452] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5460] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5452] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5460] <... futex resumed>) = 1 [pid 5458] <... futex resumed>) = 0 [pid 5452] <... futex resumed>) = 0 [pid 5460] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5458] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5452] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5460] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5458] <... futex resumed>) = 0 [pid 5458] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5452] <... mmap resumed>) = 0x7f450cf9d000 [pid 5460] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5452] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5066] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5452] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5460] <... openat resumed>) = 5 [pid 5452] <... clone resumed>, parent_tid=[5467], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5467 [pid 5460] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5452] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5460] <... futex resumed>) = 1 [pid 5458] <... futex resumed>) = 0 [pid 5452] <... futex resumed>) = 0 [pid 5458] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] lstat("./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./11/file0") = 0 ./strace-static-x86_64: Process 5467 attached [pid 5467] set_robust_list(0x7f450cfbd9e0, 24) = 0 [pid 5467] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5066] getdents64(3, 0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./11") = 0 [pid 5066] mkdir("./12", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f755d0) = 5468 ./strace-static-x86_64: Process 5468 attached [pid 5468] set_robust_list(0x555556f755e0, 24) = 0 [pid 5468] chdir("./12") = 0 [pid 5468] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5458] <... futex resumed>) = 0 [pid 5452] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5460] open("./bus", O_RDWR [pid 5458] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5460] <... open resumed>) = 6 [pid 5460] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5459] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5458] <... futex resumed>) = 0 [pid 5460] <... futex resumed>) = 1 [pid 5458] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 65.530231][ T5455] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 65.556129][ T41] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5468] <... prctl resumed>) = 0 [pid 5458] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5460] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5468] setpgid(0, 0) = 0 [pid 5460] <... mmap resumed>) = 0x20000000 [pid 5468] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5460] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5468] <... openat resumed>) = 3 [pid 5460] <... futex resumed>) = 1 [pid 5458] <... futex resumed>) = 0 [pid 5458] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5458] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5466 attached [pid 5468] write(3, "1000", 4 [pid 5460] sendfile(4, 5, NULL, 2147483713 [pid 5468] <... write resumed>) = 4 [pid 5468] close(3) = 0 [pid 5468] symlink("/dev/binderfs", "./binderfs") = 0 [ 65.577963][ T5455] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 65.592507][ T5455] EXT4-fs (loop0): This should not happen!! Data will be lost [ 65.592507][ T5455] [ 65.605689][ T5455] EXT4-fs (loop0): Total free blocks count 0 [ 65.610476][ T5460] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5466] set_robust_list(0x555556f755e0, 24 [pid 5468] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5466] <... set_robust_list resumed>) = 0 [pid 5452] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5468] <... futex resumed>) = 0 [pid 5466] chdir("./13" [pid 5458] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5468] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5466] <... chdir resumed>) = 0 [pid 5458] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5468] <... mmap resumed>) = 0x7f45152be000 [pid 5458] <... futex resumed>) = 0 [pid 5468] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE [pid 5466] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5458] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5468] <... mprotect resumed>) = 0 [pid 5466] <... prctl resumed>) = 0 [pid 5458] <... mmap resumed>) = 0x7f450cf9d000 [pid 5468] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5458] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5468] <... clone resumed>, parent_tid=[5469], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5469 [pid 5458] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5468] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5458] <... clone resumed>, parent_tid=[5470], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5470 [pid 5468] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5458] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5458] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5469 attached [pid 5469] set_robust_list(0x7f45152de9e0, 24) = 0 [pid 5466] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 5470 attached [pid 5466] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5470] set_robust_list(0x7f450cfbd9e0, 24 [pid 5466] <... openat resumed>) = 3 [pid 5470] <... set_robust_list resumed>) = 0 [ 65.613106][ T5455] EXT4-fs (loop0): Free/Dirty block details [ 65.630879][ T41] EXT4-fs (loop4): This should not happen!! Data will be lost [ 65.630879][ T41] [ 65.633902][ T5455] EXT4-fs (loop0): free_blocks=2415919104 [ 65.649786][ T5455] EXT4-fs (loop0): dirty_blocks=16 [ 65.652409][ T5460] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 65.669667][ T5460] EXT4-fs (loop2): This should not happen!! Data will be lost [ 65.669667][ T5460] [pid 5466] write(3, "1000", 4 [pid 5469] memfd_create("syzkaller", 0) = 3 [pid 5469] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f450cebe000 [pid 5470] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5466] <... write resumed>) = 4 [pid 5466] close(3 [pid 5459] <... mount resumed>) = 0 [pid 5466] <... close resumed>) = 0 [pid 5459] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5466] symlink("/dev/binderfs", "./binderfs" [pid 5469] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5459] <... openat resumed>) = 3 [pid 5466] <... symlink resumed>) = 0 [pid 5466] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5459] chdir("./file0" [pid 5466] <... futex resumed>) = 0 [pid 5466] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5459] <... chdir resumed>) = 0 [pid 5458] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5466] <... mmap resumed>) = 0x7f45152be000 [pid 5459] ioctl(4, LOOP_CLR_FD [pid 5466] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE [pid 5459] <... ioctl resumed>) = 0 [pid 5466] <... mprotect resumed>) = 0 [pid 5459] close(4) = 0 [ 65.681119][ T5460] EXT4-fs (loop2): Total free blocks count 0 [ 65.687650][ T5460] EXT4-fs (loop2): Free/Dirty block details [ 65.692332][ T5455] EXT4-fs (loop0): Block reservation details [ 65.695587][ T5460] EXT4-fs (loop2): free_blocks=2415919104 [ 65.706568][ T5460] EXT4-fs (loop2): dirty_blocks=16 [pid 5466] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5459] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5457] <... futex resumed>) = 0 [pid 5469] <... write resumed>) = 1048576 [pid 5466] <... clone resumed>, parent_tid=[5473], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5473 [pid 5069] <... umount2 resumed>) = 0 [pid 5469] munmap(0x7f450cebe000, 1048576) = 0 [pid 5469] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 5473 attached [pid 5466] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5459] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5457] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5469] <... openat resumed>) = 4 [pid 5466] <... futex resumed>) = 0 [pid 5459] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5457] <... futex resumed>) = 0 [pid 5466] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5459] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5457] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5473] set_robust_list(0x7f45152de9e0, 24 [pid 5470] <... ioctl resumed>) = 0 [pid 5469] ioctl(4, LOOP_SET_FD, 3 [pid 5467] <... ioctl resumed>) = 0 [pid 5460] <... sendfile resumed>) = 117 [pid 5459] <... open resumed>) = 4 [pid 5069] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5473] <... set_robust_list resumed>) = 0 [pid 5470] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5459] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5455] <... sendfile resumed>) = 117 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5470] <... futex resumed>) = 0 [pid 5459] <... futex resumed>) = 1 [pid 5457] <... futex resumed>) = 0 [pid 5069] lstat("./12/file0", [pid 5470] futex(0x7f45153b77b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5459] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5457] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5459] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5457] <... futex resumed>) = 0 [pid 5069] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5459] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5457] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5459] <... write resumed>) = 9 [pid 5069] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5459] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... openat resumed>) = 4 [pid 5459] <... futex resumed>) = 1 [pid 5457] <... futex resumed>) = 0 [pid 5069] fstat(4, [pid 5459] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5457] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5459] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5457] <... futex resumed>) = 0 [pid 5069] getdents64(4, [pid 5459] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5457] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5459] <... openat resumed>) = 5 [pid 5069] getdents64(4, [pid 5459] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5459] <... futex resumed>) = 1 [pid 5457] <... futex resumed>) = 0 [pid 5069] close(4 [pid 5459] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5457] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... close resumed>) = 0 [pid 5467] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5459] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5457] <... futex resumed>) = 0 [pid 5069] rmdir("./12/file0" [pid 5473] memfd_create("syzkaller", 0 [pid 5467] <... futex resumed>) = 0 [pid 5460] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5459] open("./bus", O_RDWR [pid 5457] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5455] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5452] exit_group(0 [pid 5069] <... rmdir resumed>) = 0 [pid 5473] <... memfd_create resumed>) = 3 [pid 5460] <... futex resumed>) = 0 [pid 5459] <... open resumed>) = 6 [pid 5458] exit_group(0 [pid 5455] <... futex resumed>) = ? [pid 5452] <... exit_group resumed>) = ? [pid 5069] getdents64(3, [pid 5473] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5470] <... futex resumed>) = ? [pid 5469] <... ioctl resumed>) = 0 [pid 5467] +++ exited with 0 +++ [pid 5459] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5458] <... exit_group resumed>) = ? [pid 5455] +++ exited with 0 +++ [pid 5452] +++ exited with 0 +++ [pid 5069] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5473] <... mmap resumed>) = 0x7f450cebe000 [pid 5470] +++ exited with 0 +++ [pid 5469] close(3 [pid 5460] +++ exited with 0 +++ [pid 5459] <... futex resumed>) = 1 [pid 5458] +++ exited with 0 +++ [pid 5457] <... futex resumed>) = 0 [pid 5069] close(3 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5452, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5473] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5459] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5457] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... close resumed>) = 0 [pid 5469] <... close resumed>) = 0 [pid 5459] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5457] <... futex resumed>) = 0 [pid 5069] rmdir("./12" [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5458, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5469] mkdir("./file0", 0777 [pid 5459] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5457] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] <... rmdir resumed>) = 0 [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 5469] <... mkdir resumed>) = 0 [pid 5459] <... mmap resumed>) = 0x20000000 [pid 5069] mkdir("./13", 0777 [pid 5067] <... restart_syscall resumed>) = 0 [pid 5469] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5459] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... mkdir resumed>) = 0 [pid 5473] <... write resumed>) = 1048576 [pid 5473] munmap(0x7f450cebe000, 1048576 [pid 5459] <... futex resumed>) = 1 [pid 5457] <... futex resumed>) = 0 [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5065] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5459] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5457] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5473] <... munmap resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5067] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5473] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5459] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5457] <... futex resumed>) = 0 [pid 5069] ioctl(3, LOOP_CLR_FD [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5473] <... openat resumed>) = 4 [pid 5459] sendfile(4, 5, NULL, 2147483713 [pid 5457] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 65.732737][ T5455] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 65.745562][ T5460] EXT4-fs (loop2): Block reservation details [ 65.752564][ T5460] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 65.772077][ T5469] loop1: detected capacity change from 0 to 2048 [pid 5067] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... openat resumed>) = 3 [pid 5473] ioctl(4, LOOP_SET_FD, 3 [pid 5069] close(3 [pid 5067] <... openat resumed>) = 3 [pid 5065] fstat(3, [pid 5473] <... ioctl resumed>) = 0 [pid 5473] close(3) = 0 [pid 5473] mkdir("./file0", 0777) = 0 [pid 5473] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5069] <... close resumed>) = 0 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] getdents64(3, 0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5065] getdents64(3, [pid 5067] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... clone resumed>, child_tidptr=0x555556f755d0) = 5476 [pid 5065] <... getdents64 resumed>0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5469] <... mount resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5469] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] lstat("./13/binderfs", [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5469] <... openat resumed>) = 3 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] lstat("./12/binderfs", [pid 5469] chdir("./file0" [pid 5067] unlink("./13/binderfs" [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5469] <... chdir resumed>) = 0 [pid 5065] unlink("./12/binderfs"./strace-static-x86_64: Process 5476 attached [pid 5469] ioctl(4, LOOP_CLR_FD [pid 5065] <... unlink resumed>) = 0 [pid 5476] set_robust_list(0x555556f755e0, 24 [pid 5469] <... ioctl resumed>) = 0 [pid 5065] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5476] <... set_robust_list resumed>) = 0 [pid 5469] close(4 [pid 5476] chdir("./13" [pid 5469] <... close resumed>) = 0 [pid 5476] <... chdir resumed>) = 0 [pid 5469] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5476] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5469] <... futex resumed>) = 1 [pid 5468] <... futex resumed>) = 0 [pid 5476] <... prctl resumed>) = 0 [pid 5469] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5468] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5476] setpgid(0, 0 [pid 5469] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 65.811268][ T5473] loop3: detected capacity change from 0 to 2048 [ 65.814449][ T5459] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 65.847120][ T5459] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 5468] <... futex resumed>) = 0 [pid 5476] <... setpgid resumed>) = 0 [pid 5469] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5468] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5457] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5067] <... unlink resumed>) = 0 [pid 5476] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5469] <... open resumed>) = 4 [pid 5457] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5476] <... openat resumed>) = 3 [pid 5469] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5457] <... futex resumed>) = 0 [pid 5476] write(3, "1000", 4 [pid 5469] <... futex resumed>) = 1 [pid 5468] <... futex resumed>) = 0 [pid 5457] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5476] <... write resumed>) = 4 [pid 5469] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5468] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5457] <... mmap resumed>) = 0x7f450cf9d000 [pid 5476] close(3 [pid 5469] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5468] <... futex resumed>) = 0 [pid 5457] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE [pid 5476] <... close resumed>) = 0 [pid 5469] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5468] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5457] <... mprotect resumed>) = 0 [pid 5476] symlink("/dev/binderfs", "./binderfs" [pid 5473] <... mount resumed>) = 0 [pid 5469] <... write resumed>) = 9 [pid 5457] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5067] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5476] <... symlink resumed>) = 0 [pid 5473] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5469] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5476] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5473] <... openat resumed>) = 3 [pid 5469] <... futex resumed>) = 1 [pid 5468] <... futex resumed>) = 0 [pid 5457] <... clone resumed>, parent_tid=[5479], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5479 [pid 5476] <... futex resumed>) = 0 [pid 5473] chdir("./file0" [pid 5469] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5468] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5457] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5476] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5473] <... chdir resumed>) = 0 [pid 5469] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5468] <... futex resumed>) = 0 [pid 5457] <... futex resumed>) = 0 [pid 5476] <... mmap resumed>) = 0x7f45152be000 [pid 5473] ioctl(4, LOOP_CLR_FD [pid 5469] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5468] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5457] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5479 attached [ 65.860465][ T11] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 65.860842][ T5459] EXT4-fs (loop5): This should not happen!! Data will be lost [ 65.860842][ T5459] [ 65.887429][ T11] EXT4-fs (loop0): This should not happen!! Data will be lost [ 65.887429][ T11] [ 65.899150][ T5459] EXT4-fs (loop5): Total free blocks count 0 [ 65.905998][ T5459] EXT4-fs (loop5): Free/Dirty block details [pid 5476] mprotect(0x7f45152bf000, 131072, PROT_READ|PROT_WRITE [pid 5473] <... ioctl resumed>) = 0 [pid 5469] <... openat resumed>) = 5 [pid 5479] set_robust_list(0x7f450cfbd9e0, 24 [pid 5476] <... mprotect resumed>) = 0 [pid 5473] close(4 [pid 5469] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5479] <... set_robust_list resumed>) = 0 [pid 5476] clone(child_stack=0x7f45152de3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5473] <... close resumed>) = 0 [pid 5469] <... futex resumed>) = 1 [pid 5468] <... futex resumed>) = 0 [pid 5479] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5473] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5469] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5468] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5476] <... clone resumed>, parent_tid=[5480], tls=0x7f45152de700, child_tidptr=0x7f45152de9d0) = 5480 [pid 5473] <... futex resumed>) = 1 [pid 5469] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5468] <... futex resumed>) = 0 [pid 5466] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5480 attached [pid 5476] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5473] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5469] open("./bus", O_RDWR [pid 5468] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5466] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... umount2 resumed>) = 0 [pid 5476] <... futex resumed>) = 0 [pid 5473] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5469] <... open resumed>) = 6 [pid 5466] <... futex resumed>) = 0 [pid 5065] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5476] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5473] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|0x29800030, 000 [pid 5469] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5466] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5480] set_robust_list(0x7f45152de9e0, 24 [pid 5473] <... open resumed>) = 4 [pid 5469] <... futex resumed>) = 1 [pid 5468] <... futex resumed>) = 0 [pid 5065] lstat("./12/file0", [pid 5473] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5469] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5468] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5457] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5473] <... futex resumed>) = 1 [pid 5469] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5468] <... futex resumed>) = 0 [pid 5466] <... futex resumed>) = 0 [pid 5065] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5473] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5469] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5468] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5466] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5473] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5469] <... mmap resumed>) = 0x20000000 [pid 5466] <... futex resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5473] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 5469] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5466] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] <... openat resumed>) = 4 [pid 5480] <... set_robust_list resumed>) = 0 [pid 5473] <... write resumed>) = 9 [ 65.912125][ T5459] EXT4-fs (loop5): free_blocks=2415919104 [ 65.919857][ T41] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 65.934382][ T5459] EXT4-fs (loop5): dirty_blocks=16 [ 65.943218][ T41] EXT4-fs (loop2): This should not happen!! Data will be lost [ 65.943218][ T41] [ 65.953873][ T5459] EXT4-fs (loop5): Block reservation details [pid 5469] <... futex resumed>) = 1 [pid 5468] <... futex resumed>) = 0 [pid 5065] fstat(4, [pid 5480] memfd_create("syzkaller", 0 [pid 5473] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5469] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5468] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5473] <... futex resumed>) = 1 [pid 5469] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5468] <... futex resumed>) = 0 [pid 5466] <... futex resumed>) = 0 [pid 5065] getdents64(4, [pid 5480] <... memfd_create resumed>) = 3 [pid 5473] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5469] sendfile(4, 5, NULL, 2147483713 [pid 5468] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5466] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... getdents64 resumed>0x555556f7e660 /* 2 entries */, 32768) = 48 [pid 5473] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5466] <... futex resumed>) = 0 [pid 5065] getdents64(4, [pid 5480] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5479] <... ioctl resumed>) = 0 [pid 5459] <... sendfile resumed>) = 117 [pid 5473] openat(AT_FDCWD, "./bus", O_RDONLY [pid 5065] <... getdents64 resumed>0x555556f7e660 /* 0 entries */, 32768) = 0 [pid 5480] <... mmap resumed>) = 0x7f450cebe000 [pid 5479] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5466] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5459] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5457] exit_group(0 [pid 5065] close(4 [pid 5480] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5479] <... futex resumed>) = 0 [pid 5473] <... openat resumed>) = 5 [pid 5459] <... futex resumed>) = 0 [pid 5067] <... umount2 resumed>) = 0 [pid 5480] <... write resumed>) = 1048576 [pid 5459] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5480] munmap(0x7f450cebe000, 1048576) = 0 [pid 5480] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5065] <... close resumed>) = 0 [ 65.963732][ T5459] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 65.989276][ T5469] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 5473] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5459] <... futex resumed>) = ? [pid 5457] <... exit_group resumed>) = ? [pid 5067] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] rmdir("./12/file0" [pid 5459] +++ exited with 0 +++ [pid 5480] <... openat resumed>) = 4 [pid 5480] ioctl(4, LOOP_SET_FD, 3 [pid 5479] +++ exited with 0 +++ [pid 5473] <... futex resumed>) = 1 [pid 5473] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5466] <... futex resumed>) = 0 [pid 5457] +++ exited with 0 +++ [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... rmdir resumed>) = 0 [pid 5480] <... ioctl resumed>) = 0 [pid 5480] close(3 [pid 5468] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5466] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] lstat("./13/file0", [pid 5065] getdents64(3, [pid 5480] <... close resumed>) = 0 [pid 5480] mkdir("./file0", 0777) = 0 [pid 5480] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 5468] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5466] <... futex resumed>) = 1 [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5457, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5473] <... futex resumed>) = 0 [pid 5468] <... futex resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... getdents64 resumed>0x555556f76620 /* 0 entries */, 32768) = 0 [pid 5473] open("./bus", O_RDWR [pid 5468] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5466] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] close(3 [pid 5473] <... open resumed>) = 6 [pid 5468] <... mmap resumed>) = 0x7f450cf9d000 [pid 5070] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... close resumed>) = 0 [pid 5473] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5473] futex(0x7f45153b77a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5468] mprotect(0x7f450cf9e000, 131072, PROT_READ|PROT_WRITE) = 0 [ 66.007230][ T5469] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 66.020909][ T5480] loop4: detected capacity change from 0 to 2048 [ 66.022142][ T5469] EXT4-fs (loop1): This should not happen!! Data will be lost [ 66.022142][ T5469] [ 66.037344][ T5469] EXT4-fs (loop1): Total free blocks count 0 [ 66.043605][ T5469] EXT4-fs (loop1): Free/Dirty block details [ 66.051367][ T5469] EXT4-fs (loop1): free_blocks=2415919104 [pid 5468] clone(child_stack=0x7f450cfbd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5481], tls=0x7f450cfbd700, child_tidptr=0x7f450cfbd9d0) = 5481 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5468] futex(0x7f45153b77b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5466] <... futex resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] rmdir("./12" [pid 5468] <... futex resumed>) = 0 [pid 5468] futex(0x7f45153b77bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5481 attached [pid 5481] set_robust_list(0x7f450cfbd9e0, 24) = 0 [pid 5481] ioctl(6, _IOC(_IOC_WRITE, 0x66, 0x29, 0x4), 0x20000040 [pid 5466] futex(0x7f45153b77a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5473] <... futex resumed>) = 0 [pid 5466] <... futex resumed>) = 1 [pid 5070] <... openat resumed>) = 3 [pid 5067] <... openat resumed>) = 4 [pid 5065] <... rmdir resumed>) = 0 [pid 5070] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] getdents64(3, 0x555556f76620 /* 4 entries */, 32768) = 112 [pid 5070] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5070] unlink("./12/binderfs" [pid 5473] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5466] futex(0x7f45153b77ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... unlink resumed>) = 0 [pid 5067] fstat(4, [pid 5481] <... ioctl resumed>) = 0 [pid 5469] <... sendfile resumed>) = 117 [pid 5065] mkdir("./13", 0777 [pid 5481] futex(0x7f45153b77bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5480] <... mount resumed>) = 0 [pid 5473] <... mmap resumed>) = 0x20000000 [pid 5469] futex(0x7f45153b77ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5481] <... futex resumed>) = 1 [pid 5480] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTO