ci2-upstream-fs/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci2-upstream-fs/syz-executor767758505 <...> _PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6354] <... set_robust_list resumed>) = 0 [pid 6346] mount("/dev/loop3", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6345] <... openat resumed>) = 4 [pid 6343] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6339] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6354] rt_sigprocmask(SIG_SETMASK, [] [pid 6343] <... futex resumed>) = 0 [pid 6339] <... futex resumed>) = 0 [pid 6354] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6343] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6339] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6354] memfd_create("syzkaller", 0 [pid 6345] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6343] <... openat resumed>) = 6 [pid 6354] <... memfd_create resumed>) = 3 [pid 6345] <... futex resumed>) = 1 [pid 6341] <... futex resumed>) = 0 [pid 6354] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6343] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6341] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6354] <... mmap resumed>) = 0x7fef8c868000 [pid 6345] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6343] <... futex resumed>) = 1 [pid 6341] <... futex resumed>) = 0 [pid 6339] <... futex resumed>) = 0 [pid 6345] <... openat resumed>) = 5 [pid 6343] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6341] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6339] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6345] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6343] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6341] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6339] <... futex resumed>) = 0 [pid 6345] <... futex resumed>) = 0 [pid 6343] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6341] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6339] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6352] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6345] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6343] <... mmap resumed>) = 0x200000000000 [pid 6341] <... futex resumed>) = 0 [pid 6336] <... sendfile resumed>) = 159744 [pid 6354] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6345] <... openat resumed>) = 6 [pid 6343] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6341] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6336] +++ killed by SIGBUS +++ [pid 6345] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6343] <... futex resumed>) = 1 [pid 6339] <... futex resumed>) = 0 [pid 6345] <... futex resumed>) = 1 [pid 6343] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6341] <... futex resumed>) = 0 [pid 6339] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6341] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6339] <... futex resumed>) = 0 [pid 6345] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6343] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 117.780321][ T6352] EXT4-fs (loop4): Free/Dirty block details [ 117.780332][ T6352] EXT4-fs (loop4): free_blocks=20480 [ 117.780345][ T6352] EXT4-fs (loop4): dirty_blocks=160 [ 117.780356][ T6352] EXT4-fs (loop4): Block reservation details [ 117.780367][ T6352] EXT4-fs (loop4): i_reserved_data_blocks=10 [ 117.809560][ T6345] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 6339] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6352] +++ killed by SIGBUS +++ [pid 6345] <... mmap resumed>) = 0x200000000000 [pid 6343] sendfile(4, 5, NULL, 553647746 [pid 6341] <... futex resumed>) = 0 [pid 6335] +++ killed by SIGBUS +++ [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6335, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6345] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6341] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 6345] <... futex resumed>) = 0 [pid 6341] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5614] <... restart_syscall resumed>) = 0 [pid 6354] <... write resumed>) = 524288 [pid 6345] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6341] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6346] <... mount resumed>) = 0 [pid 6345] <... futex resumed>) = 0 [pid 6341] <... futex resumed>) = 1 [pid 5614] umount2("./28", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6354] munmap(0x7fef8c868000, 138412032 [pid 6345] sendfile(4, 5, NULL, 553647746 [pid 6341] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6354] <... munmap resumed>) = 0 [pid 5614] <... openat resumed>) = 3 [pid 5614] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6354] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6354] ioctl(4, LOOP_SET_FD, 3 [pid 5614] getdents64(3, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5614] umount2("./28/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6346] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6346] chdir("./file1") = 0 [pid 6354] <... ioctl resumed>) = 0 [pid 6346] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6346] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6354] close(3 [pid 6346] <... futex resumed>) = 1 [pid 6340] <... futex resumed>) = 0 [pid 6354] <... close resumed>) = 0 [pid 6340] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6354] close(4 [pid 6340] <... futex resumed>) = 0 [pid 6346] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6340] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6339] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6354] <... close resumed>) = 0 [pid 6346] <... openat resumed>) = 4 [pid 6339] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6354] mkdir("./file1", 0777 [pid 6346] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6339] <... futex resumed>) = 0 [pid 6354] <... mkdir resumed>) = 0 [pid 6346] <... futex resumed>) = 1 [pid 6340] <... futex resumed>) = 0 [pid 6339] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6354] mount("/dev/loop1", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6346] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6341] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6340] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6346] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6341] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6340] <... futex resumed>) = 0 [pid 6339] <... mmap resumed>) = 0x7fef94c47000 [pid 6340] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 117.922481][ T6346] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 6346] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6341] <... futex resumed>) = 0 [pid 6339] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6346] <... openat resumed>) = 5 [pid 6341] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6339] <... mprotect resumed>) = 0 [pid 6341] <... mmap resumed>) = 0x7fef94c47000 [pid 6341] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6339] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6341] <... mprotect resumed>) = 0 [pid 6339] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6339] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 6359 attached [pid 6341] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6339] <... clone3 resumed> => {parent_tid=[6359]}, 88) = 6359 [pid 6341] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6339] rt_sigprocmask(SIG_SETMASK, [] [pid 6359] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6346] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6339] <... rt_sigprocmask resumed>, NULL, 8) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6360 attached [pid 6359] <... rseq resumed>) = 0 [pid 6346] <... futex resumed>) = 1 [pid 6340] <... futex resumed>) = 0 [pid 6339] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6360] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6359] set_robust_list(0x7fef94c679a0, 24 [pid 6346] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6341] <... clone3 resumed> => {parent_tid=[6360]}, 88) = 6360 [pid 6340] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6339] <... futex resumed>) = 0 [pid 6360] <... rseq resumed>) = 0 [pid 6359] <... set_robust_list resumed>) = 0 [pid 6346] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6341] rt_sigprocmask(SIG_SETMASK, [] [pid 6340] <... futex resumed>) = 0 [pid 6360] set_robust_list(0x7fef94c679a0, 24 [pid 6359] rt_sigprocmask(SIG_SETMASK, [] [pid 6346] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6341] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6340] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6339] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6360] <... set_robust_list resumed>) = 0 [pid 6359] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6346] <... openat resumed>) = 6 [ 117.984977][ T3414] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 152 with max blocks 4 with error 28 [ 117.992433][ T5614] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6341] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6359] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6360] rt_sigprocmask(SIG_SETMASK, [] [pid 6341] <... futex resumed>) = 0 [pid 6341] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6360] <... rt_sigprocmask resumed>, NULL, 8) = 0 [ 118.046794][ T6359] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 118.046969][ T6359] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 428 with error 28 [ 118.046989][ T6359] EXT4-fs (loop2): This should not happen!! Data will be lost [ 118.046989][ T6359] [ 118.047001][ T6359] EXT4-fs (loop2): Total free blocks count 0 [ 118.047011][ T6359] EXT4-fs (loop2): Free/Dirty block details [pid 6346] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6346] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6345] <... sendfile resumed>) = 757760 [pid 6360] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6343] <... sendfile resumed>) = ? [pid 6340] <... futex resumed>) = 0 [pid 6339] <... futex resumed>) = ? [pid 6345] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6343] +++ killed by SIGBUS +++ [pid 6341] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5614] <... umount2 resumed>) = 0 [pid 6354] <... mount resumed>) = 0 [pid 6345] <... futex resumed>) = ? [pid 6340] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [ 118.047021][ T6359] EXT4-fs (loop2): free_blocks=20480 [ 118.047033][ T6359] EXT4-fs (loop2): dirty_blocks=432 [ 118.047042][ T6359] EXT4-fs (loop2): Block reservation details [ 118.047051][ T6359] EXT4-fs (loop2): i_reserved_data_blocks=27 [ 118.107562][ T6345] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [pid 5614] umount2("./28/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6360] +++ killed by SIGBUS +++ [pid 6359] +++ killed by SIGBUS +++ [pid 6346] <... futex resumed>) = 0 [pid 6345] +++ killed by SIGBUS +++ [pid 6340] <... futex resumed>) = 1 [pid 6339] +++ killed by SIGBUS +++ [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6354] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6341] +++ killed by SIGBUS +++ [pid 6354] <... openat resumed>) = 3 [pid 6346] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6340] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6341, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6354] chdir("./file1" [pid 6346] <... mmap resumed>) = 0x200000000000 [pid 5611] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6339, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6354] <... chdir resumed>) = 0 [pid 6346] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] newfstatat(AT_FDCWD, "./28/file1" [pid 6354] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6346] <... futex resumed>) = 1 [pid 6340] <... futex resumed>) = 0 [pid 5611] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 6354] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5614] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6346] sendfile(4, 5, NULL, 553647746 [pid 6340] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] umount2("./28/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] <... restart_syscall resumed>) = 0 [pid 6354] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6340] <... futex resumed>) = 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6354] <... futex resumed>) = 1 [pid 6353] <... futex resumed>) = 0 [pid 6340] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] openat(AT_FDCWD, "./28/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6354] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6353] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... openat resumed>) = 4 [pid 6354] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6353] <... futex resumed>) = 0 [pid 6354] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6353] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6354] <... openat resumed>) = 4 [pid 5614] fstat(4 [ 118.108106][ T6360] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 740 with error 28 [ 118.108133][ T6360] EXT4-fs (loop0): This should not happen!! Data will be lost [ 118.108133][ T6360] [ 118.108146][ T6360] EXT4-fs (loop0): Total free blocks count 0 [ 118.108158][ T6360] EXT4-fs (loop0): Free/Dirty block details [ 118.108169][ T6360] EXT4-fs (loop0): free_blocks=20480 [ 118.108182][ T6360] EXT4-fs (loop0): dirty_blocks=752 [ 118.108194][ T6360] EXT4-fs (loop0): Block reservation details [ 118.108204][ T6360] EXT4-fs (loop0): i_reserved_data_blocks=47 [pid 5609] umount2("./28", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5611] umount2("./29", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6354] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] getdents64(4 [pid 6354] <... futex resumed>) = 1 [pid 6353] <... futex resumed>) = 0 [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6354] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6353] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] getdents64(4 [pid 5611] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5609] <... openat resumed>) = 3 [pid 6354] <... openat resumed>) = 5 [pid 6353] <... futex resumed>) = 0 [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5611] <... openat resumed>) = 3 [pid 6354] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6353] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] fstat(3 [pid 6353] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6354] <... futex resumed>) = 0 [pid 6353] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] close(4 [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5611] fstat(3 [pid 6354] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6353] <... futex resumed>) = 0 [pid 5614] <... close resumed>) = 0 [pid 5609] getdents64(3 [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6354] <... openat resumed>) = 6 [pid 6353] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] rmdir("./28/file1" [pid 5611] getdents64(3 [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5614] <... rmdir resumed>) = 0 [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./28/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6354] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6340] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5611] umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6354] <... futex resumed>) = 1 [pid 6353] <... futex resumed>) = 0 [pid 6340] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6354] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6353] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] umount2("./28/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6354] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6353] <... futex resumed>) = 0 [pid 6340] <... futex resumed>) = 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6353] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6354] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6340] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6354] <... mmap resumed>) = 0x200000000000 [pid 5614] newfstatat(AT_FDCWD, "./28/binderfs" [pid 6340] <... mmap resumed>) = 0x7fef94c47000 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6354] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [ 118.149930][ T6354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 6340] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6354] <... futex resumed>) = 1 [pid 6353] <... futex resumed>) = 0 [pid 5614] unlink("./28/binderfs" [pid 6353] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5614] <... unlink resumed>) = 0 [pid 6354] sendfile(4, 5, NULL, 553647746 [pid 6353] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6340] <... mprotect resumed>) = 0 [pid 5614] getdents64(3 [pid 6340] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6340] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5614] close(3) = 0 [pid 6340] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5614] rmdir("./28"ci2-upstream-fs/strace-static-x86_64: Process 6363 attached ) = 0 [pid 6340] <... clone3 resumed> => {parent_tid=[6363]}, 88) = 6363 [pid 6340] rt_sigprocmask(SIG_SETMASK, [] [pid 6363] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6340] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] mkdir("./29", 0777 [pid 6340] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... mkdir resumed>) = 0 [pid 6363] <... rseq resumed>) = 0 [pid 6340] <... futex resumed>) = 0 [pid 6363] set_robust_list(0x7fef94c679a0, 24 [pid 6340] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6363] <... set_robust_list resumed>) = 0 [pid 5614] <... openat resumed>) = 3 [pid 6363] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5614] ioctl(3, LOOP_CLR_FD) = 0 [pid 5614] close(3 [pid 6353] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6353] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6353] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c47000 [ 118.287947][ T5611] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 118.295266][ T5609] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6353] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6353] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6353] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 6364 attached => {parent_tid=[6364]}, 88) = 6364 [pid 6364] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6353] rt_sigprocmask(SIG_SETMASK, [] [pid 6364] <... rseq resumed>) = 0 [pid 6353] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6340] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 118.326045][ T6363] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 118.326260][ T6363] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 216 with error 28 [ 118.326284][ T6363] EXT4-fs (loop3): This should not happen!! Data will be lost [ 118.326284][ T6363] [ 118.326297][ T6363] EXT4-fs (loop3): Total free blocks count 0 [ 118.326310][ T6363] EXT4-fs (loop3): Free/Dirty block details [ 118.326322][ T6363] EXT4-fs (loop3): free_blocks=20480 [ 118.326334][ T6363] EXT4-fs (loop3): dirty_blocks=224 [pid 6364] set_robust_list(0x7fef94c679a0, 24 [pid 6363] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6353] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6346] <... sendfile resumed>) = 225280 [pid 5614] <... close resumed>) = 0 [pid 5611] <... umount2 resumed>) = 0 [pid 5609] <... umount2 resumed>) = 0 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5611] umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5614] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] umount2("./28/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6364] <... set_robust_list resumed>) = 0 [pid 6363] +++ killed by SIGBUS +++ [pid 6353] <... futex resumed>) = 0 [pid 6346] +++ killed by SIGBUS +++ [pid 6340] +++ killed by SIGBUS +++ [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5611] newfstatat(AT_FDCWD, "./29/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6365 attached [pid 6364] rt_sigprocmask(SIG_SETMASK, [] [pid 6353] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6340, si_uid=0, si_status=SIGBUS, si_utime=1 /* 0.01 s */, si_stime=0} --- [pid 5611] umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6364] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6365 [pid 5612] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 118.326345][ T6363] EXT4-fs (loop3): Block reservation details [ 118.326355][ T6363] EXT4-fs (loop3): i_reserved_data_blocks=14 [ 118.344521][ T5611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.361519][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] <... restart_syscall resumed>) = 0 [pid 5609] newfstatat(AT_FDCWD, "./28/file1" [pid 6365] set_robust_list(0x5555748a66e0, 24 [pid 5611] openat(AT_FDCWD, "./29/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6365] <... set_robust_list resumed>) = 0 [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5611] <... openat resumed>) = 4 [pid 5609] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6365] rt_sigprocmask(SIG_SETMASK, [] [pid 5611] fstat(4 [pid 5609] umount2("./28/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6365] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5612] umount2("./29", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6365] chdir("./29" [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] getdents64(4 [pid 5609] openat(AT_FDCWD, "./28/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6365] <... chdir resumed>) = 0 [pid 5612] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5609] <... openat resumed>) = 4 [pid 6365] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5612] <... openat resumed>) = 3 [pid 5611] getdents64(4 [pid 5609] fstat(4 [pid 6365] <... prctl resumed>) = 0 [pid 5612] fstat(3 [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6365] setpgid(0, 0 [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5611] close(4 [pid 5609] getdents64(4 [pid 6365] <... setpgid resumed>) = 0 [pid 5612] getdents64(3 [pid 5611] <... close resumed>) = 0 [pid 6365] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5611] rmdir("./29/file1" [pid 6365] <... openat resumed>) = 3 [pid 5612] umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] <... rmdir resumed>) = 0 [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6365] write(3, "1000", 4 [pid 5611] umount2("./29/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] getdents64(4 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6365] <... write resumed>) = 4 [pid 5611] newfstatat(AT_FDCWD, "./29/binderfs" [pid 5609] close(4 [pid 6365] close(3 [pid 5609] <... close resumed>) = 0 [pid 6365] <... close resumed>) = 0 [pid 6364] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6354] <... sendfile resumed>) = 368640 [pid 5611] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] rmdir("./28/file1" [pid 6365] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6354] ???( [pid 6353] <... futex resumed>) = ? [pid 5611] unlink("./29/binderfs" [pid 5609] <... rmdir resumed>) = 0 [pid 6365] write(1, "executing program\n", 18 [pid 6354] <... ??? resumed>) = ? [ 118.464291][ T6364] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 118.464509][ T6364] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 356 with error 28 [ 118.464532][ T6364] EXT4-fs (loop1): This should not happen!! Data will be lost [ 118.464532][ T6364] [ 118.464546][ T6364] EXT4-fs (loop1): Total free blocks count 0 [ 118.464558][ T6364] EXT4-fs (loop1): Free/Dirty block details [pid 6365] <... write resumed>) = 18 [pid 6354] +++ killed by SIGBUS +++ [pid 5609] umount2("./28/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW executing program [pid 6365] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6365] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60}, NULL, 8) = 0 [pid 5609] newfstatat(AT_FDCWD, "./28/binderfs" [pid 6364] +++ killed by SIGBUS +++ [pid 6353] +++ killed by SIGBUS +++ [pid 6365] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 5609] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6365] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6353, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5609] unlink("./28/binderfs" [pid 6365] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5610] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 6365] <... mmap resumed>) = 0x7fef94c68000 [pid 5610] <... restart_syscall resumed>) = 0 [pid 5609] <... unlink resumed>) = 0 [pid 6365] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6365] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5610] umount2("./28", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] getdents64(3 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6365] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5610] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5609] close(3 [pid 6365] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 5610] <... openat resumed>) = 3 [pid 5610] fstat(3 [pid 5609] <... close resumed>) = 0 [pid 5609] rmdir("./28" [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] <... rmdir resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6367 attached [pid 6365] <... clone3 resumed> => {parent_tid=[6367]}, 88) = 6367 [pid 5610] getdents64(3 [pid 6367] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6365] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6365] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] umount2("./28/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] mkdir("./29", 0777 [pid 6367] <... rseq resumed>) = 0 [pid 6365] <... futex resumed>) = 0 [pid 5609] <... mkdir resumed>) = 0 [pid 6367] set_robust_list(0x7fef94c889a0, 24 [pid 6365] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6367] <... set_robust_list resumed>) = 0 [pid 6367] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6367] memfd_create("syzkaller", 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6367] <... memfd_create resumed>) = 3 [ 118.464570][ T6364] EXT4-fs (loop1): free_blocks=20480 [ 118.464583][ T6364] EXT4-fs (loop1): dirty_blocks=368 [ 118.464595][ T6364] EXT4-fs (loop1): Block reservation details [ 118.464606][ T6364] EXT4-fs (loop1): i_reserved_data_blocks=23 [pid 5611] <... unlink resumed>) = 0 [pid 5609] <... openat resumed>) = 3 [pid 6367] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5609] ioctl(3, LOOP_CLR_FD [pid 6367] <... mmap resumed>) = 0x7fef8c868000 [pid 5609] <... ioctl resumed>) = 0 [pid 5609] close(3 [pid 6367] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5611] getdents64(3, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5611] close(3 [pid 5609] <... close resumed>) = 0 [pid 5611] <... close resumed>) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5611] rmdir("./29") = 0 [pid 5609] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6368 [pid 5609] rt_sigprocmask(SIG_SETMASK, []ci2-upstream-fs/strace-static-x86_64: Process 6368 attached , NULL, 8) = 0 [ 118.561966][ T13] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 216 with max blocks 4 with error 28 [ 118.563987][ T5612] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 5611] mkdir("./30", 0777 [pid 6368] set_robust_list(0x5555748a66e0, 24 [pid 5611] <... mkdir resumed>) = 0 [pid 6368] <... set_robust_list resumed>) = 0 [pid 6368] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6368] chdir("./29" [pid 6367] <... write resumed>) = 524288 [pid 5612] <... umount2 resumed>) = 0 [pid 5611] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6368] <... chdir resumed>) = 0 [pid 5611] <... openat resumed>) = 3 [pid 6368] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5612] umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] ioctl(3, LOOP_CLR_FD [pid 6368] <... prctl resumed>) = 0 [pid 6367] munmap(0x7fef8c868000, 138412032 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] <... ioctl resumed>) = 0 [pid 6368] setpgid(0, 0 [pid 6367] <... munmap resumed>) = 0 [pid 5612] newfstatat(AT_FDCWD, "./29/file1" [pid 5611] close(3 [pid 6368] <... setpgid resumed>) = 0 [pid 5612] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6368] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5612] umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6368] <... openat resumed>) = 3 [pid 6367] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6367] <... openat resumed>) = 4 [pid 5612] openat(AT_FDCWD, "./29/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6367] ioctl(4, LOOP_SET_FD, 3 [pid 5612] <... openat resumed>) = 4 [pid 6368] write(3, "1000", 4 [pid 5612] fstat(4 [pid 6368] <... write resumed>) = 4 [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6368] close(3 [pid 5612] getdents64(4 [pid 6368] <... close resumed>) = 0 [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6368] symlink("/dev/binderfs", "./binderfs" [pid 5612] getdents64(4 [pid 6368] <... symlink resumed>) = 0 [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5612] close(4) = 0 [pid 6368] write(1, "executing program\n", 18) = 18 executing program [pid 5612] rmdir("./29/file1" [pid 6368] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6367] <... ioctl resumed>) = 0 [pid 6368] <... futex resumed>) = 0 [pid 6367] close(3 [pid 5612] <... rmdir resumed>) = 0 [pid 6368] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6367] <... close resumed>) = 0 [pid 6368] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6367] close(4 [pid 6368] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 5612] umount2("./29/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6368] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6367] <... close resumed>) = 0 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6368] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6367] mkdir("./file1", 0777 [pid 6368] <... mmap resumed>) = 0x7fef94c68000 [pid 6367] <... mkdir resumed>) = 0 [pid 5612] newfstatat(AT_FDCWD, "./29/binderfs" [pid 6368] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6367] mount("/dev/loop4", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5612] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] <... close resumed>) = 0 [pid 6368] <... mprotect resumed>) = 0 [pid 5612] unlink("./29/binderfs" [pid 5611] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5610] <... umount2 resumed>) = 0 [pid 6368] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5612] <... unlink resumed>) = 0 [pid 5611] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5610] umount2("./28/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6368] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 5612] getdents64(3 [ 118.612957][ T13] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 356 with max blocks 4 with error 28 [ 118.622186][ T5610] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 5611] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ci2-upstream-fs/strace-static-x86_64: Process 6371 attached ci2-upstream-fs/strace-static-x86_64: Process 6370 attached [pid 6368] <... clone3 resumed> => {parent_tid=[6370]}, 88) = 6370 [pid 6371] set_robust_list(0x5555748a66e0, 24 [pid 5611] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6371 [pid 6371] <... set_robust_list resumed>) = 0 [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5610] newfstatat(AT_FDCWD, "./28/file1" [pid 6370] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6368] rt_sigprocmask(SIG_SETMASK, [] [pid 6371] rt_sigprocmask(SIG_SETMASK, [] [pid 6370] <... rseq resumed>) = 0 [pid 6368] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6368] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6371] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6370] set_robust_list(0x7fef94c889a0, 24 [pid 6368] <... futex resumed>) = 0 [pid 6371] chdir("./30" [pid 6370] <... set_robust_list resumed>) = 0 [pid 6368] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5612] close(3 [pid 5610] umount2("./28/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6371] <... chdir resumed>) = 0 [pid 6370] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] <... close resumed>) = 0 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6371] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6370] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5612] rmdir("./29" [pid 5611] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] openat(AT_FDCWD, "./28/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6371] <... prctl resumed>) = 0 [pid 6370] memfd_create("syzkaller", 0 [pid 5611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6371] setpgid(0, 0 [pid 6370] <... memfd_create resumed>) = 3 [pid 6371] <... setpgid resumed>) = 0 [pid 6370] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6371] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6370] <... mmap resumed>) = 0x7fef8c868000 [pid 6370] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5612] <... rmdir resumed>) = 0 [pid 6371] <... openat resumed>) = 3 [pid 5612] mkdir("./30", 0777 [pid 5610] <... openat resumed>) = 4 [pid 6371] write(3, "1000", 4) = 4 [pid 6371] close(3 [pid 5612] <... mkdir resumed>) = 0 [pid 5610] fstat(4 [pid 6371] <... close resumed>) = 0 [pid 5612] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6371] symlink("/dev/binderfs", "./binderfs" [pid 5612] <... openat resumed>) = 3 [pid 5610] getdents64(4 [pid 6371] <... symlink resumed>) = 0 [pid 5612] ioctl(3, LOOP_CLR_FD [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6371] write(1, "executing program\n", 18 [pid 5612] <... ioctl resumed>) = 0 [pid 5610] getdents64(4 [pid 5612] close(3 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6371] <... write resumed>) = 18 [pid 6371] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6371] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 5610] close(4 [pid 6371] <... rt_sigaction resumed>, NULL, 8) = 0 executing program [pid 6371] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 5610] <... close resumed>) = 0 [pid 6371] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6370] <... write resumed>) = 524288 [pid 5610] rmdir("./28/file1" [pid 6371] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c68000 [pid 6371] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6371] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6371] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6370] munmap(0x7fef8c868000, 138412032 [pid 5610] <... rmdir resumed>) = 0 [pid 6371] <... clone3 resumed> => {parent_tid=[6374]}, 88) = 6374 [pid 5610] umount2("./28/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6371] rt_sigprocmask(SIG_SETMASK, []ci2-upstream-fs/strace-static-x86_64: Process 6374 attached , NULL, 8) = 0 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6371] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6370] <... munmap resumed>) = 0 [pid 5610] newfstatat(AT_FDCWD, "./28/binderfs" [pid 6370] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5610] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6370] ioctl(4, LOOP_SET_FD, 3 [pid 5610] unlink("./28/binderfs" [pid 6374] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6371] <... futex resumed>) = 0 [pid 6370] <... ioctl resumed>) = 0 [pid 6370] close(3) = 0 [pid 6370] close(4) = 0 [pid 6370] mkdir("./file1", 0777 [pid 5610] <... unlink resumed>) = 0 [pid 6374] <... rseq resumed>) = 0 [pid 6371] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6370] <... mkdir resumed>) = 0 [pid 6374] set_robust_list(0x7fef94c889a0, 24 [pid 6367] <... mount resumed>) = 0 [pid 5610] getdents64(3 [pid 6374] <... set_robust_list resumed>) = 0 [pid 6370] mount("/dev/loop0", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6374] rt_sigprocmask(SIG_SETMASK, [] [pid 6367] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5612] <... close resumed>) = 0 [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6374] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6367] <... openat resumed>) = 3 [pid 6374] memfd_create("syzkaller", 0 [pid 6367] chdir("./file1" [pid 5612] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5610] close(3 [pid 6374] <... memfd_create resumed>) = 3 [pid 6367] <... chdir resumed>) = 0 [pid 5610] <... close resumed>) = 0 [pid 6374] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6367] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5612] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5610] rmdir("./28" [pid 6374] <... mmap resumed>) = 0x7fef8c868000 [pid 5612] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6367] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5610] <... rmdir resumed>) = 0 [pid 6367] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6365] <... futex resumed>) = 0 [pid 6367] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 6365] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6367] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6365] <... futex resumed>) = 0 [pid 6365] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] mkdir("./29", 0777ci2-upstream-fs/strace-static-x86_64: Process 6375 attached [pid 5612] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6375 [pid 5610] <... mkdir resumed>) = 0 [pid 6375] set_robust_list(0x5555748a66e0, 24 [pid 6374] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6367] <... openat resumed>) = 4 [pid 5612] rt_sigprocmask(SIG_SETMASK, [] [pid 6375] <... set_robust_list resumed>) = 0 [pid 6367] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6375] rt_sigprocmask(SIG_SETMASK, [] [pid 6370] <... mount resumed>) = 0 [pid 5612] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6375] <... rt_sigprocmask resumed>, NULL, 8) = 0 [ 118.754097][ T6367] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 6367] <... futex resumed>) = 1 [pid 5610] <... openat resumed>) = 3 [pid 6375] chdir("./30" [pid 6367] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6365] <... futex resumed>) = 0 [pid 5610] ioctl(3, LOOP_CLR_FD [pid 6375] <... chdir resumed>) = 0 [pid 6370] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6375] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6370] <... openat resumed>) = 3 [pid 6375] <... prctl resumed>) = 0 [pid 6375] setpgid(0, 0) = 0 [pid 6370] chdir("./file1" [pid 6365] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... ioctl resumed>) = 0 [pid 6375] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6370] <... chdir resumed>) = 0 [pid 6365] <... futex resumed>) = 0 [pid 6375] <... openat resumed>) = 3 [pid 6370] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6375] write(3, "1000", 4 [pid 6367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6365] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] close(3 [pid 6375] <... write resumed>) = 4 [pid 6370] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6367] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6375] close(3 [pid 6370] <... futex resumed>) = 1 [pid 6368] <... futex resumed>) = 0 [pid 6367] <... openat resumed>) = 5 [pid 6375] <... close resumed>) = 0 [pid 6370] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6368] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6367] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6375] symlink("/dev/binderfs", "./binderfs" [pid 6368] <... futex resumed>) = 0 [pid 6375] <... symlink resumed>) = 0 [pid 6368] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6370] <... openat resumed>) = 4 [pid 6375] write(1, "executing program\n", 18 [pid 6370] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6375] <... write resumed>) = 18 [pid 6370] <... futex resumed>) = 1 [pid 6368] <... futex resumed>) = 0 [pid 6368] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6367] <... futex resumed>) = 1 [pid 6368] <... futex resumed>) = 0 [pid 6365] <... futex resumed>) = 0 executing program [pid 6368] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6367] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [ 118.807265][ T6370] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 6370] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6365] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6375] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6374] <... write resumed>) = 524288 [pid 6375] <... futex resumed>) = 0 [pid 6370] <... openat resumed>) = 5 [pid 6367] <... futex resumed>) = 0 [pid 6365] <... futex resumed>) = 1 [pid 6375] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6370] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6367] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6365] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6375] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6374] munmap(0x7fef8c868000, 138412032 [pid 6370] <... futex resumed>) = 1 [pid 6368] <... futex resumed>) = 0 [pid 6367] <... openat resumed>) = 6 [pid 6375] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6374] <... munmap resumed>) = 0 [pid 6368] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6375] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6370] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6368] <... futex resumed>) = 0 [pid 6375] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6370] <... openat resumed>) = 6 [pid 6368] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6367] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... close resumed>) = 0 [pid 6374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6367] <... futex resumed>) = 1 [pid 6365] <... futex resumed>) = 0 [pid 6375] <... mmap resumed>) = 0x7fef94c68000 [pid 6374] <... openat resumed>) = 4 [pid 6370] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6365] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6367] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 5610] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6375] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6370] <... futex resumed>) = 1 [pid 6368] <... futex resumed>) = 0 [pid 6365] <... futex resumed>) = 0 [pid 6375] <... mprotect resumed>) = 0 [pid 6374] ioctl(4, LOOP_SET_FD, 3 [pid 6370] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6368] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6367] <... mmap resumed>) = 0x200000000000 [pid 6365] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6375] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6370] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6368] <... futex resumed>) = 0 [pid 5610] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6375] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6370] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6368] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-upstream-fs/strace-static-x86_64: Process 6378 attached [pid 6375] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6374] <... ioctl resumed>) = 0 [pid 6370] <... mmap resumed>) = 0x200000000000 [pid 6367] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000ci2-upstream-fs/strace-static-x86_64: Process 6379 attached [pid 6370] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6368] <... futex resumed>) = 0 [pid 6368] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6375] <... clone3 resumed> => {parent_tid=[6379]}, 88) = 6379 [pid 6368] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6375] rt_sigprocmask(SIG_SETMASK, [] [pid 6379] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6375] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6370] sendfile(4, 5, NULL, 553647746 [pid 6379] <... rseq resumed>) = 0 [pid 6375] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6374] close(3 [pid 6367] <... futex resumed>) = 1 [pid 6365] <... futex resumed>) = 0 [pid 6379] set_robust_list(0x7fef94c889a0, 24 [pid 6375] <... futex resumed>) = 0 [pid 6379] <... set_robust_list resumed>) = 0 [pid 6375] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6379] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6379] memfd_create("syzkaller", 0 [pid 6365] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6378] set_robust_list(0x5555748a66e0, 24 [pid 6374] <... close resumed>) = 0 [pid 6367] sendfile(4, 5, NULL, 553647746 [pid 6379] <... memfd_create resumed>) = 3 [pid 6378] <... set_robust_list resumed>) = 0 [pid 6374] close(4 [pid 6365] <... futex resumed>) = 0 [pid 5610] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6378 [pid 6379] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6378] rt_sigprocmask(SIG_SETMASK, [] [pid 6374] <... close resumed>) = 0 [pid 6365] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] rt_sigprocmask(SIG_SETMASK, [] [pid 6379] <... mmap resumed>) = 0x7fef8c868000 [pid 6374] mkdir("./file1", 0777) = 0 [pid 5610] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6378] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6378] chdir("./29" [pid 6374] mount("/dev/loop2", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6378] <... chdir resumed>) = 0 [pid 6379] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6378] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6378] setpgid(0, 0) = 0 [pid 6378] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6378] write(3, "1000", 4) = 4 [pid 6378] close(3) = 0 [pid 6378] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6379] <... write resumed>) = 524288 [pid 6378] write(1, "executing program\n", 18 [pid 6368] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6378] <... write resumed>) = 18 [pid 6379] munmap(0x7fef8c868000, 138412032 executing program [pid 6368] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6378] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6379] <... munmap resumed>) = 0 [pid 6378] <... futex resumed>) = 0 [pid 6368] <... futex resumed>) = 0 [pid 6368] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c47000 [pid 6379] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6368] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6379] <... openat resumed>) = 4 [pid 6378] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6368] <... mprotect resumed>) = 0 [pid 6365] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6365] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6368] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6365] <... futex resumed>) = 0 [pid 6378] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6379] ioctl(4, LOOP_SET_FD, 3 [pid 6368] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6378] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6365] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6378] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6365] <... mmap resumed>) = 0x7fef94c47000 [pid 6368] <... clone3 resumed> => {parent_tid=[6382]}, 88) = 6382 ci2-upstream-fs/strace-static-x86_64: Process 6382 attached [pid 6378] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6368] rt_sigprocmask(SIG_SETMASK, [] [pid 6365] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6378] <... mmap resumed>) = 0x7fef94c68000 [pid 6368] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6368] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6368] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6365] <... mprotect resumed>) = 0 [pid 6378] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6365] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6382] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6378] <... mprotect resumed>) = 0 [pid 6365] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6382] <... rseq resumed>) = 0 [pid 6378] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6382] set_robust_list(0x7fef94c679a0, 24 [pid 6365] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6382] <... set_robust_list resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6383 attached [pid 6382] rt_sigprocmask(SIG_SETMASK, [] [pid 6378] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6382] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6383] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 6374] <... mount resumed>) = 0 [pid 6383] set_robust_list(0x7fef94c679a0, 24) = 0 [pid 6383] rt_sigprocmask(SIG_SETMASK, [] [pid 6378] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6383] <... rt_sigprocmask resumed>, NULL, 8) = 0 [ 118.986446][ T6374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.987330][ T6382] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 118.991558][ T6382] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 204 with error 28 [ 118.991589][ T6382] EXT4-fs (loop0): This should not happen!! Data will be lost [ 118.991589][ T6382] [ 118.991613][ T6382] EXT4-fs (loop0): Total free blocks count 0 [ 118.991625][ T6382] EXT4-fs (loop0): Free/Dirty block details [ 118.991637][ T6382] EXT4-fs (loop0): free_blocks=20480 [ 118.991651][ T6382] EXT4-fs (loop0): dirty_blocks=208 [ 118.991663][ T6382] EXT4-fs (loop0): Block reservation details [ 118.991674][ T6382] EXT4-fs (loop0): i_reserved_data_blocks=13 [pid 6383] futex(0x7fef94d63e58, FUTEX_WAIT_PRIVATE, 0, NULLci2-upstream-fs/strace-static-x86_64: Process 6384 attached [pid 6384] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 6365] <... clone3 resumed> => {parent_tid=[6383]}, 88) = 6383 [pid 6384] set_robust_list(0x7fef94c889a0, 24 [pid 6365] rt_sigprocmask(SIG_SETMASK, [] [pid 6384] <... set_robust_list resumed>) = 0 [pid 6384] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6384] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6374] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6368] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6365] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6365] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6374] <... openat resumed>) = 3 [pid 6379] <... ioctl resumed>) = 0 [pid 6378] <... clone3 resumed> => {parent_tid=[6384]}, 88) = 6384 [pid 6378] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6378] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6384] <... futex resumed>) = 0 [pid 6378] <... futex resumed>) = 1 [pid 6384] memfd_create("syzkaller", 0 [pid 6378] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6384] <... memfd_create resumed>) = 3 [pid 6365] <... futex resumed>) = 1 [pid 6384] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6383] <... futex resumed>) = 0 [pid 6384] <... mmap resumed>) = 0x7fef8c868000 [pid 6365] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6374] chdir("./file1") = 0 [pid 6384] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6379] close(3) = 0 [pid 6379] close(4) = 0 [pid 6379] mkdir("./file1", 0777) = 0 [pid 6379] mount("/dev/loop3", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6384] <... write resumed>) = 524288 [pid 6374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6384] munmap(0x7fef8c868000, 138412032) = 0 [pid 6384] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6384] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6384] close(3 [pid 6374] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6384] <... close resumed>) = 0 [pid 6384] close(4) = 0 [pid 6384] mkdir("./file1", 0777) = 0 [ 119.058795][ T6383] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 119.061160][ T6383] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 980 with error 28 [ 119.061190][ T6383] EXT4-fs (loop4): This should not happen!! Data will be lost [ 119.061190][ T6383] [ 119.063122][ T6383] EXT4-fs (loop4): Total free blocks count 0 [ 119.063141][ T6383] EXT4-fs (loop4): Free/Dirty block details [ 119.063154][ T6383] EXT4-fs (loop4): free_blocks=20480 [ 119.063167][ T6383] EXT4-fs (loop4): dirty_blocks=992 [pid 6384] mount("/dev/loop1", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6365] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6383] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6367] <... sendfile resumed>) = 1003520 [pid 6374] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6371] <... futex resumed>) = 0 [pid 6374] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6371] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6367] +++ killed by SIGBUS +++ [pid 6374] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6371] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6383] +++ killed by SIGBUS +++ [pid 6382] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6374] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6370] <... sendfile resumed>) = 212992 [pid 6365] +++ killed by SIGBUS +++ [pid 6374] <... openat resumed>) = 4 [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6365, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 6370] +++ killed by SIGBUS +++ [pid 6382] +++ killed by SIGBUS +++ [pid 6368] +++ killed by SIGBUS +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6368, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 5614] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 6374] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6371] <... futex resumed>) = 0 [pid 6374] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6371] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] umount2("./29", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... restart_syscall resumed>) = 0 [pid 6374] <... openat resumed>) = 5 [pid 6371] <... futex resumed>) = 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6374] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6371] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6374] <... futex resumed>) = 0 [pid 5614] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6374] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6371] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5614] <... openat resumed>) = 3 [pid 6371] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6374] <... futex resumed>) = 0 [pid 6371] <... futex resumed>) = 1 [pid 5614] fstat(3 [pid 6374] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6371] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6374] <... openat resumed>) = 6 [pid 5614] getdents64(3 [pid 5609] umount2("./29", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6374] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5614] umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6374] <... futex resumed>) = 1 [pid 6371] <... futex resumed>) = 0 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6374] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6371] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6374] <... mmap resumed>) = 0x200000000000 [pid 6371] <... futex resumed>) = 0 [pid 5609] <... openat resumed>) = 3 [pid 6374] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6371] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6374] <... futex resumed>) = 0 [pid 6371] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5609] fstat(3 [pid 6374] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6371] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6374] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6371] <... futex resumed>) = 0 [ 119.063179][ T6383] EXT4-fs (loop4): Block reservation details [ 119.063190][ T6383] EXT4-fs (loop4): i_reserved_data_blocks=62 [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6374] sendfile(4, 5, NULL, 553647746 [pid 6371] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] getdents64(3 [pid 6379] <... mount resumed>) = 0 [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6379] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6379] chdir("./file1") = 0 [pid 6379] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6379] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6375] <... futex resumed>) = 0 [pid 6379] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6375] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6375] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6379] <... openat resumed>) = 4 [pid 6379] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6375] <... futex resumed>) = 0 [pid 6379] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6375] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6379] <... openat resumed>) = 5 [pid 6379] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6375] <... futex resumed>) = 0 [pid 6379] <... futex resumed>) = 0 [pid 6375] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6379] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6375] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6371] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6379] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6375] <... futex resumed>) = 0 [ 119.209263][ T6379] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.232538][ T5614] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6371] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6379] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6375] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6371] <... futex resumed>) = 0 [pid 6379] <... openat resumed>) = 6 [pid 6371] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6379] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6371] <... mmap resumed>) = 0x7fef94c47000 [pid 6379] <... futex resumed>) = 1 [pid 6375] <... futex resumed>) = 0 [pid 6379] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6375] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6371] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6379] <... mmap resumed>) = 0x200000000000 [pid 6375] <... futex resumed>) = 0 [pid 6371] <... mprotect resumed>) = 0 [pid 6384] <... mount resumed>) = 0 [pid 6375] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6371] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6384] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6379] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6371] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6384] <... openat resumed>) = 3 [pid 6379] <... futex resumed>) = 1 [pid 6375] <... futex resumed>) = 0 [pid 6371] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 6390 attached [pid 6384] chdir("./file1" [pid 6379] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6375] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6384] <... chdir resumed>) = 0 [pid 6379] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6375] <... futex resumed>) = 0 [pid 6379] sendfile(4, 5, NULL, 553647746 [pid 6375] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6371] <... clone3 resumed> => {parent_tid=[6390]}, 88) = 6390 [pid 6390] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6384] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6390] <... rseq resumed>) = 0 [pid 6384] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6371] rt_sigprocmask(SIG_SETMASK, [] [pid 6390] set_robust_list(0x7fef94c679a0, 24 [pid 6384] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6390] <... set_robust_list resumed>) = 0 [ 119.249993][ T6384] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.271949][ T177] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 204 with max blocks 4 with error 28 [ 119.282663][ T5609] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6384] <... futex resumed>) = 1 [pid 6378] <... futex resumed>) = 0 [pid 6371] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6390] rt_sigprocmask(SIG_SETMASK, [] [pid 6384] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6378] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6371] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6390] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6384] <... openat resumed>) = 4 [pid 6378] <... futex resumed>) = 0 [pid 6371] <... futex resumed>) = 0 [ 119.291545][ T5614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [pid 6378] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6371] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6384] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6378] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6384] <... futex resumed>) = 0 [pid 6378] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6384] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6378] <... futex resumed>) = 0 [pid 6384] <... openat resumed>) = 5 [pid 6378] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6384] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6375] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6375] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6384] <... futex resumed>) = 1 [pid 6378] <... futex resumed>) = 0 [pid 6375] <... futex resumed>) = 0 [pid 6384] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6378] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6375] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6384] <... openat resumed>) = 6 [pid 6378] <... futex resumed>) = 0 [pid 6375] <... mmap resumed>) = 0x7fef94c47000 [pid 6378] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6375] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6375] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6384] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6375] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6390] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6384] <... futex resumed>) = 1 [pid 6378] <... futex resumed>) = 0 [pid 6375] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 6391 attached [pid 6384] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6378] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6384] <... mmap resumed>) = 0x200000000000 [pid 6378] <... futex resumed>) = 0 [pid 6375] <... clone3 resumed> => {parent_tid=[6391]}, 88) = 6391 [pid 6391] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6384] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6378] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6375] rt_sigprocmask(SIG_SETMASK, [] [pid 6374] <... sendfile resumed>) = ? [pid 6371] <... futex resumed>) = ? [pid 5614] <... umount2 resumed>) = 0 [pid 5609] <... umount2 resumed>) = 0 [ 119.336286][ T6390] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 119.336484][ T6390] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 196 with error 28 [ 119.336508][ T6390] EXT4-fs (loop2): This should not happen!! Data will be lost [ 119.336508][ T6390] [ 119.336522][ T6390] EXT4-fs (loop2): Total free blocks count 0 [ 119.336534][ T6390] EXT4-fs (loop2): Free/Dirty block details [pid 6391] <... rseq resumed>) = 0 [pid 6390] +++ killed by SIGBUS +++ [pid 6384] <... futex resumed>) = 0 [pid 6378] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6375] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6374] +++ killed by SIGBUS +++ [pid 6371] +++ killed by SIGBUS +++ [pid 5614] umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6391] set_robust_list(0x7fef94c679a0, 24 [pid 6384] sendfile(4, 5, NULL, 553647746 [pid 6378] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6375] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6391] <... set_robust_list resumed>) = 0 [pid 6378] <... futex resumed>) = 0 [pid 6375] <... futex resumed>) = 0 [pid 5614] newfstatat(AT_FDCWD, "./29/file1" [pid 5611] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6371, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5609] newfstatat(AT_FDCWD, "./29/file1" [pid 6391] rt_sigprocmask(SIG_SETMASK, [] [pid 6378] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6375] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 5614] umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] <... restart_syscall resumed>) = 0 [pid 5609] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6391] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5614] openat(AT_FDCWD, "./29/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5611] umount2("./30", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./29/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5611] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] <... openat resumed>) = 4 [pid 5611] fstat(3 [pid 5609] fstat(4 [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5611] getdents64(3 [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5609] getdents64(4 [pid 5611] umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [ 119.336546][ T6390] EXT4-fs (loop2): free_blocks=20480 [ 119.336559][ T6390] EXT4-fs (loop2): dirty_blocks=208 [ 119.336571][ T6390] EXT4-fs (loop2): Block reservation details [ 119.336582][ T6390] EXT4-fs (loop2): i_reserved_data_blocks=13 [ 119.419371][ T6391] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [pid 5609] rmdir("./29/file1") = 0 [pid 6391] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6379] <... sendfile resumed>) = 212992 [pid 5609] umount2("./29/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6375] <... futex resumed>) = ? [pid 6379] +++ killed by SIGBUS +++ [pid 5614] <... openat resumed>) = 4 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./29/binderfs") = 0 [pid 6391] +++ killed by SIGBUS +++ [pid 6378] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6375] +++ killed by SIGBUS +++ [pid 5609] getdents64(3 [pid 6378] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6375, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6378] <... futex resumed>) = 0 [pid 5612] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 5609] close(3 [pid 6378] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5612] <... restart_syscall resumed>) = 0 [pid 5609] <... close resumed>) = 0 [pid 6378] <... mmap resumed>) = 0x7fef94c47000 [pid 6378] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 5609] rmdir("./29" [pid 6378] <... mprotect resumed>) = 0 [pid 6378] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5612] umount2("./30", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... rmdir resumed>) = 0 [pid 6378] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5612] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6378] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 6392 attached [pid 5612] <... openat resumed>) = 3 [pid 5609] mkdir("./30", 0777 [pid 6378] <... clone3 resumed> => {parent_tid=[6392]}, 88) = 6392 [ 119.420092][ T6391] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 204 with error 28 [ 119.420120][ T6391] EXT4-fs (loop3): This should not happen!! Data will be lost [ 119.420120][ T6391] [ 119.420133][ T6391] EXT4-fs (loop3): Total free blocks count 0 [ 119.420144][ T6391] EXT4-fs (loop3): Free/Dirty block details [ 119.420165][ T6391] EXT4-fs (loop3): free_blocks=20480 [ 119.420178][ T6391] EXT4-fs (loop3): dirty_blocks=208 [ 119.420190][ T6391] EXT4-fs (loop3): Block reservation details [pid 5612] fstat(3 [pid 6378] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] <... mkdir resumed>) = 0 [pid 6392] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6378] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] fstat(4 [pid 5612] getdents64(3 [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5614] getdents64(4 [pid 6392] <... rseq resumed>) = 0 [pid 6378] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [ 119.420200][ T6391] EXT4-fs (loop3): i_reserved_data_blocks=13 [pid 5612] umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6392] set_robust_list(0x7fef94c679a0, 24 [pid 6378] <... futex resumed>) = 0 [pid 5614] getdents64(4 [pid 5609] <... openat resumed>) = 3 [pid 6392] <... set_robust_list resumed>) = 0 [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5611] <... umount2 resumed>) = 0 [pid 6392] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] close(4 [pid 5609] ioctl(3, LOOP_CLR_FD [pid 6392] <... rt_sigprocmask resumed>, NULL, 8) = 0 [ 119.508432][ T13] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 196 with max blocks 4 with error 28 [ 119.517045][ T5611] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6378] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] <... close resumed>) = 0 [pid 5611] umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... ioctl resumed>) = 0 [pid 5614] rmdir("./29/file1") = 0 [pid 5609] close(3 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] newfstatat(AT_FDCWD, "./30/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5611] openat(AT_FDCWD, "./30/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5614] umount2("./29/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] getdents64(4, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5611] getdents64(4, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5611] close(4) = 0 [pid 5611] rmdir("./30/file1") = 0 [pid 5609] <... close resumed>) = 0 [pid 5611] umount2("./30/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5611] newfstatat(AT_FDCWD, "./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] unlink("./30/binderfs" [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5611] <... unlink resumed>) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5611] getdents64(3, 0x5555748a7790 /* 0 entries */, 32768) = 0 [ 119.548853][ T6392] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 119.549071][ T6392] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 824 with error 28 [ 119.549095][ T6392] EXT4-fs (loop1): This should not happen!! Data will be lost [ 119.549095][ T6392] [ 119.549109][ T6392] EXT4-fs (loop1): Total free blocks count 0 [ 119.549121][ T6392] EXT4-fs (loop1): Free/Dirty block details [ 119.549134][ T6392] EXT4-fs (loop1): free_blocks=20480 [ 119.549146][ T6392] EXT4-fs (loop1): dirty_blocks=832 [pid 5611] close(3) = 0 [pid 5612] <... umount2 resumed>) = 0 [pid 5611] rmdir("./30"ci2-upstream-fs/strace-static-x86_64: Process 6393 attached ) = 0 [pid 5612] umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6393 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] newfstatat(AT_FDCWD, "./30/file1" [pid 5611] mkdir("./31", 0777 [pid 6393] set_robust_list(0x5555748a66e0, 24 [pid 5612] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] <... mkdir resumed>) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6378] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6393] <... set_robust_list resumed>) = 0 [pid 5612] umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6393] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6393] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6393] chdir("./30") = 0 [pid 5612] openat(AT_FDCWD, "./30/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6393] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5612] <... openat resumed>) = 4 [pid 5611] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6393] <... prctl resumed>) = 0 [pid 5614] newfstatat(AT_FDCWD, "./29/binderfs" [pid 5612] fstat(4 [pid 5611] <... openat resumed>) = 3 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6393] setpgid(0, 0 [pid 5614] unlink("./29/binderfs" [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6393] <... setpgid resumed>) = 0 [pid 5614] <... unlink resumed>) = 0 [pid 5612] getdents64(4 [pid 5611] ioctl(3, LOOP_CLR_FD [pid 6393] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5614] getdents64(3 [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5611] <... ioctl resumed>) = 0 [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5611] close(3 [pid 5612] getdents64(4, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5614] close(3 [pid 5612] close(4 [pid 6393] <... openat resumed>) = 3 [pid 5614] <... close resumed>) = 0 [pid 5612] <... close resumed>) = 0 [pid 6393] write(3, "1000", 4 [pid 6392] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6393] <... write resumed>) = 4 [pid 6393] close(3 [pid 5614] rmdir("./29" [pid 5612] rmdir("./30/file1" [pid 6393] <... close resumed>) = 0 [pid 5614] <... rmdir resumed>) = 0 [pid 5611] <... close resumed>) = 0 [pid 6393] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5611] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6393] write(1, "executing program\n", 18 [pid 6384] <... sendfile resumed>) = ? executing program [pid 5611] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6393] <... write resumed>) = 18 [pid 6384] +++ killed by SIGBUS +++ [ 119.549158][ T6392] EXT4-fs (loop1): Block reservation details [ 119.549169][ T6392] EXT4-fs (loop1): i_reserved_data_blocks=52 [ 119.551988][ T13] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 204 with max blocks 4 with error 28 [ 119.554544][ T5612] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 5614] mkdir("./30", 0777ci2-upstream-fs/strace-static-x86_64: Process 6394 attached [pid 6393] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... mkdir resumed>) = 0 [pid 5611] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6394 [pid 5611] rt_sigprocmask(SIG_SETMASK, [] [pid 6393] <... futex resumed>) = 0 [pid 6392] +++ killed by SIGBUS +++ [pid 6378] +++ killed by SIGBUS +++ [pid 6394] set_robust_list(0x5555748a66e0, 24 [pid 5614] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6393] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 5612] <... rmdir resumed>) = 0 [pid 5610] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6378, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 6394] <... set_robust_list resumed>) = 0 [pid 6393] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 5614] <... openat resumed>) = 3 [pid 5612] umount2("./30/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 6394] rt_sigprocmask(SIG_SETMASK, [] [pid 6393] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 5614] ioctl(3, LOOP_CLR_FD [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6394] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6393] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] <... ioctl resumed>) = 0 [pid 5612] newfstatat(AT_FDCWD, "./30/binderfs" [pid 6394] chdir("./31" [pid 6393] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6394] <... chdir resumed>) = 0 [pid 6393] <... mmap resumed>) = 0x7fef94c68000 [pid 5614] close(3 [pid 6394] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6393] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 5612] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5610] <... restart_syscall resumed>) = 0 [pid 5612] unlink("./30/binderfs" [pid 6394] <... prctl resumed>) = 0 [pid 6393] <... mprotect resumed>) = 0 [pid 6394] setpgid(0, 0 [pid 6393] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5610] umount2("./29", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6394] <... setpgid resumed>) = 0 [pid 6393] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6394] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6393] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 5610] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5612] <... unlink resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6395 attached [pid 5610] <... openat resumed>) = 3 [pid 5610] fstat(3 [pid 6394] <... openat resumed>) = 3 [pid 5612] getdents64(3 [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6395] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6394] write(3, "1000", 4 [pid 6393] <... clone3 resumed> => {parent_tid=[6395]}, 88) = 6395 [pid 5614] <... close resumed>) = 0 [pid 5612] close(3 [pid 5610] getdents64(3 [pid 6395] <... rseq resumed>) = 0 [pid 6394] <... write resumed>) = 4 [pid 6393] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6394] close(3 [pid 6393] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6395] set_robust_list(0x7fef94c889a0, 24 [pid 6394] <... close resumed>) = 0 [pid 6393] <... futex resumed>) = 0 [pid 5612] <... close resumed>) = 0 [pid 5610] umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6395] <... set_robust_list resumed>) = 0 [pid 6394] symlink("/dev/binderfs", "./binderfs" [pid 6393] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5612] rmdir("./30" [pid 6395] rt_sigprocmask(SIG_SETMASK, [] [pid 6394] <... symlink resumed>) = 0 [pid 5614] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5612] <... rmdir resumed>) = 0 [pid 6395] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5612] mkdir("./31", 0777 [pid 6394] write(1, "executing program\n", 18) = 18 executing program [pid 6395] memfd_create("syzkaller", 0 [pid 6394] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... mkdir resumed>) = 0 [pid 6394] <... futex resumed>) = 0 [pid 5612] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6395] <... memfd_create resumed>) = 3 [pid 6394] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60}ci2-upstream-fs/strace-static-x86_64: Process 6396 attached [pid 6395] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6394] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6395] <... mmap resumed>) = 0x7fef8c868000 [pid 6394] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 5614] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6396 [pid 6394] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] <... openat resumed>) = 3 [pid 6396] set_robust_list(0x5555748a66e0, 24 [pid 6394] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6396] <... set_robust_list resumed>) = 0 [pid 6394] <... mmap resumed>) = 0x7fef94c68000 [pid 6396] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6394] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6396] chdir("./30" [pid 6395] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6394] <... mprotect resumed>) = 0 [pid 5612] ioctl(3, LOOP_CLR_FD [pid 6396] <... chdir resumed>) = 0 [pid 6396] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6394] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5612] <... ioctl resumed>) = 0 [pid 5612] close(3 [pid 6396] <... prctl resumed>) = 0 [pid 6394] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6396] setpgid(0, 0 [pid 5612] <... close resumed>) = 0 [pid 6396] <... setpgid resumed>) = 0 [pid 6394] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0}ci2-upstream-fs/strace-static-x86_64: Process 6397 attached [pid 6396] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5612] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6396] <... openat resumed>) = 3 [pid 6394] <... clone3 resumed> => {parent_tid=[6397]}, 88) = 6397 [pid 5612] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6397] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6396] write(3, "1000", 4 [pid 6394] rt_sigprocmask(SIG_SETMASK, [] [pid 6397] <... rseq resumed>) = 0 [pid 6394] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6397] set_robust_list(0x7fef94c889a0, 24 [pid 6396] <... write resumed>) = 4 [pid 6394] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6397] <... set_robust_list resumed>) = 0 [pid 6396] close(3 [pid 6397] rt_sigprocmask(SIG_SETMASK, [] [pid 6396] <... close resumed>) = 0 [pid 6395] <... write resumed>) = 524288 [pid 6394] <... futex resumed>) = 0 [pid 5612] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6397] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6396] symlink("/dev/binderfs", "./binderfs" [pid 6394] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6396] <... symlink resumed>) = 0 [pid 6397] memfd_create("syzkaller", 0) = 3 executing program [pid 6396] write(1, "executing program\n", 18 [pid 6397] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6396] <... write resumed>) = 18 [pid 6397] <... mmap resumed>) = 0x7fef8c868000 [pid 6396] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6396] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6395] munmap(0x7fef8c868000, 138412032 [pid 6396] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6395] <... munmap resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6398 attached [pid 6396] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6395] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6396] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6395] <... openat resumed>) = 4 [pid 5612] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6398 [pid 6398] set_robust_list(0x5555748a66e0, 24 [pid 6397] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6396] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6395] ioctl(4, LOOP_SET_FD, 3 [pid 6398] <... set_robust_list resumed>) = 0 [pid 6396] <... mmap resumed>) = 0x7fef94c68000 [pid 5612] rt_sigprocmask(SIG_SETMASK, [] [pid 6398] rt_sigprocmask(SIG_SETMASK, [] [pid 6395] <... ioctl resumed>) = 0 [pid 5612] <... rt_sigprocmask resumed>, NULL, 8) = 0 [ 119.764777][ T177] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 824 with max blocks 4 with error 28 [ 119.788222][ T5610] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6396] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6398] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6395] close(3 [pid 6397] <... write resumed>) = 524288 [pid 6396] <... mprotect resumed>) = 0 [pid 6395] <... close resumed>) = 0 [pid 6398] chdir("./31" [pid 6396] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6395] close(4 [pid 6398] <... chdir resumed>) = 0 [pid 6396] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6395] <... close resumed>) = 0 [pid 6398] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6396] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0}ci2-upstream-fs/strace-static-x86_64: Process 6399 attached [pid 6398] setpgid(0, 0 [pid 6399] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6398] <... setpgid resumed>) = 0 [pid 6397] munmap(0x7fef8c868000, 138412032 [pid 6396] <... clone3 resumed> => {parent_tid=[6399]}, 88) = 6399 [pid 6395] mkdir("./file1", 0777 [pid 6399] <... rseq resumed>) = 0 [pid 6398] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6397] <... munmap resumed>) = 0 [pid 6396] rt_sigprocmask(SIG_SETMASK, [] [pid 6398] <... openat resumed>) = 3 [pid 6399] set_robust_list(0x7fef94c889a0, 24 [pid 6398] write(3, "1000", 4 [pid 6396] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6399] <... set_robust_list resumed>) = 0 [pid 6398] <... write resumed>) = 4 [pid 6396] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6399] rt_sigprocmask(SIG_SETMASK, [] [pid 6398] close(3 [pid 6396] <... futex resumed>) = 0 [pid 6399] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6398] <... close resumed>) = 0 [pid 6397] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6399] memfd_create("syzkaller", 0 [pid 6398] symlink("/dev/binderfs", "./binderfs" [pid 6397] <... openat resumed>) = 4 [pid 6396] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6395] <... mkdir resumed>) = 0 [pid 6399] <... memfd_create resumed>) = 3 [pid 6397] ioctl(4, LOOP_SET_FD, 3 [pid 6395] mount("/dev/loop0", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6398] <... symlink resumed>) = 0 [pid 6397] <... ioctl resumed>) = 0 [pid 6397] close(3) = 0 [pid 6397] close(4) = 0 [pid 6397] mkdir("./file1", 0777) = 0 [pid 6397] mount("/dev/loop2", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6399] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6398] write(1, "executing program\n", 18 [pid 5610] <... umount2 resumed>) = 0 [pid 6399] <... mmap resumed>) = 0x7fef8c868000 executing program [pid 6399] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6398] <... write resumed>) = 18 [pid 5610] umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6398] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6398] <... futex resumed>) = 0 [pid 5610] newfstatat(AT_FDCWD, "./29/file1" [pid 6398] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60}, NULL, 8) = 0 [pid 5610] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6398] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 5610] umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6398] <... rt_sigprocmask resumed>, NULL, 8) = 0 [ 119.821947][ T6395] set_capacity_and_notify: 11 callbacks suppressed [ 119.821964][ T6395] loop0: detected capacity change from 0 to 1024 [ 119.869883][ T6397] loop2: detected capacity change from 0 to 1024 [pid 6398] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6395] <... mount resumed>) = 0 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6398] <... mmap resumed>) = 0x7fef94c68000 [pid 5610] openat(AT_FDCWD, "./29/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6399] <... write resumed>) = 524288 [pid 6398] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6399] munmap(0x7fef8c868000, 138412032 [pid 6398] <... mprotect resumed>) = 0 [pid 5610] <... openat resumed>) = 4 [pid 6395] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6399] <... munmap resumed>) = 0 [pid 6395] <... openat resumed>) = 3 [pid 5610] fstat(4 [pid 6399] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6398] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6395] chdir("./file1" [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6395] <... chdir resumed>) = 0 [pid 6399] <... openat resumed>) = 4 [pid 6398] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6395] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5610] getdents64(4 [pid 6399] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6398] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6395] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6398] <... clone3 resumed> => {parent_tid=[6404]}, 88) = 6404 [pid 6398] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6398] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6398] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-upstream-fs/strace-static-x86_64: Process 6404 attached [pid 6395] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6399] close(3 [pid 6395] <... futex resumed>) = 1 [pid 6399] <... close resumed>) = 0 [pid 6399] close(4 [pid 6397] <... mount resumed>) = 0 [pid 6395] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6393] <... futex resumed>) = 0 [pid 5610] getdents64(4 [pid 6399] <... close resumed>) = 0 [pid 6393] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6399] mkdir("./file1", 0777 [pid 6395] <... futex resumed>) = 0 [pid 6393] <... futex resumed>) = 1 [pid 5610] close(4 [pid 6397] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6395] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6393] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6404] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5610] <... close resumed>) = 0 [pid 6397] <... openat resumed>) = 3 [pid 6404] <... rseq resumed>) = 0 [pid 6404] set_robust_list(0x7fef94c889a0, 24) = 0 [pid 6404] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 119.917209][ T6395] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.948859][ T6399] loop4: detected capacity change from 0 to 1024 [ 119.950485][ T6397] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 6399] <... mkdir resumed>) = 0 [pid 6404] memfd_create("syzkaller", 0 [pid 6397] chdir("./file1" [pid 5610] rmdir("./29/file1" [pid 6404] <... memfd_create resumed>) = 3 [pid 5610] <... rmdir resumed>) = 0 [pid 6397] <... chdir resumed>) = 0 [pid 6404] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fef8c868000 [pid 6397] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6404] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6395] <... openat resumed>) = 4 [pid 6399] mount("/dev/loop4", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6397] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6394] <... futex resumed>) = 0 [pid 6395] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6394] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6397] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6395] <... futex resumed>) = 1 [pid 6394] <... futex resumed>) = 0 [pid 6393] <... futex resumed>) = 0 [pid 6395] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6394] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6393] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] umount2("./29/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6395] <... openat resumed>) = 5 [pid 6393] <... futex resumed>) = 0 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6395] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6393] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] newfstatat(AT_FDCWD, "./29/binderfs" [pid 6397] <... openat resumed>) = 4 [pid 6395] <... futex resumed>) = 0 [pid 5610] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6395] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6393] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 119.980829][ T37] kauditd_printk_skb: 11 callbacks suppressed [ 119.980859][ T37] audit: type=1800 audit(1785844650.374:154): pid=6395 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop0" ino=15 res=0 errno=0 [pid 6404] <... write resumed>) = 524288 [pid 6397] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6393] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] unlink("./29/binderfs" [pid 6397] <... futex resumed>) = 1 [pid 6395] <... futex resumed>) = 0 [pid 6394] <... futex resumed>) = 0 [pid 6393] <... futex resumed>) = 1 [pid 5610] <... unlink resumed>) = 0 [pid 6394] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6395] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6394] <... futex resumed>) = 0 [pid 6393] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6397] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6395] <... openat resumed>) = 6 [pid 6404] munmap(0x7fef8c868000, 138412032 [pid 6397] <... openat resumed>) = 5 [pid 6394] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6404] <... munmap resumed>) = 0 [pid 6397] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6395] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] getdents64(3 [pid 6395] <... futex resumed>) = 1 [pid 6393] <... futex resumed>) = 0 [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6397] <... futex resumed>) = 0 [pid 6394] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5610] close(3 [pid 6404] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6397] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6395] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6394] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6393] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... close resumed>) = 0 [pid 5610] rmdir("./29" [pid 6395] <... mmap resumed>) = 0x200000000000 [pid 5610] <... rmdir resumed>) = 0 [pid 6397] <... openat resumed>) = 6 [pid 6393] <... futex resumed>) = 0 [pid 6404] <... openat resumed>) = 4 [pid 6393] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] mkdir("./30", 0777 [pid 6394] <... futex resumed>) = 0 [pid 6404] ioctl(4, LOOP_SET_FD, 3 [pid 6399] <... mount resumed>) = 0 [pid 6397] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6395] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6394] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6393] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6394] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6393] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6404] <... ioctl resumed>) = 0 [pid 6399] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6397] <... futex resumed>) = 0 [pid 6395] <... futex resumed>) = 0 [pid 6394] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6393] <... futex resumed>) = 0 [pid 5610] <... mkdir resumed>) = 0 [pid 6404] close(3 [pid 6397] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6395] sendfile(4, 5, NULL, 553647746 [pid 6394] <... futex resumed>) = 0 [ 120.016653][ T37] audit: type=1800 audit(1785844650.414:155): pid=6397 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 120.059175][ T6399] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 6393] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6404] <... close resumed>) = 0 [pid 6399] <... openat resumed>) = 3 [pid 6397] <... mmap resumed>) = 0x200000000000 [pid 6394] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6404] close(4) = 0 [pid 6399] chdir("./file1") = 0 [pid 6399] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6404] mkdir("./file1", 0777 [pid 6399] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5610] <... openat resumed>) = 3 [pid 6399] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6396] <... futex resumed>) = 0 [pid 6399] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6396] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] ioctl(3, LOOP_CLR_FD [pid 6404] <... mkdir resumed>) = 0 [pid 6397] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6396] <... futex resumed>) = 0 [pid 6399] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6397] <... futex resumed>) = 1 [pid 6396] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6394] <... futex resumed>) = 0 [pid 5610] <... ioctl resumed>) = 0 [pid 6397] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6394] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] close(3 [pid 6399] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6397] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6394] <... futex resumed>) = 0 [pid 6397] sendfile(4, 5, NULL, 553647746 [pid 6394] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6404] mount("/dev/loop3", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6399] <... openat resumed>) = 4 [ 120.076260][ T6404] loop3: detected capacity change from 0 to 1024 [pid 6399] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6396] <... futex resumed>) = 0 [pid 6399] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6396] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6399] <... openat resumed>) = 5 [pid 6396] <... futex resumed>) = 0 [pid 5610] <... close resumed>) = 0 [pid 6399] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6396] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6399] <... futex resumed>) = 0 [pid 6396] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6396] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6399] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6396] <... futex resumed>) = 0 [pid 6399] <... openat resumed>) = 6 [pid 6396] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6393] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6394] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6393] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6394] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6393] <... futex resumed>) = 0 [pid 6394] <... futex resumed>) = 0 [pid 6399] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6394] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6393] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5610] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6394] <... mmap resumed>) = 0x7fef94c47000 [pid 6393] <... mmap resumed>) = 0x7fef94c47000 [pid 6394] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6393] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6399] <... futex resumed>) = 1 [pid 6396] <... futex resumed>) = 0 [pid 6393] <... mprotect resumed>) = 0 [pid 6399] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6396] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6399] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6396] <... futex resumed>) = 0 [pid 6394] <... mprotect resumed>) = 0 [pid 6399] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6396] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-upstream-fs/strace-static-x86_64: Process 6409 attached [pid 6399] <... mmap resumed>) = 0x200000000000 [pid 6394] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6393] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5610] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6409 [pid 6409] set_robust_list(0x5555748a66e0, 24 [pid 6399] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] rt_sigprocmask(SIG_SETMASK, [] [pid 6409] <... set_robust_list resumed>) = 0 [pid 6399] <... futex resumed>) = 1 [pid 6396] <... futex resumed>) = 0 [pid 5610] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6409] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6399] sendfile(4, 5, NULL, 553647746 [pid 6396] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6409] chdir("./30" [pid 6396] <... futex resumed>) = 0 [ 120.108608][ T37] audit: type=1800 audit(1785844650.504:156): pid=6399 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop4" ino=15 res=0 errno=0 [pid 6394] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6393] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6394] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 6410 attached ci2-upstream-fs/strace-static-x86_64: Process 6411 attached [pid 6409] <... chdir resumed>) = 0 [pid 6396] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6409] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6410] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6409] <... prctl resumed>) = 0 [pid 6404] <... mount resumed>) = 0 [pid 6394] <... clone3 resumed> => {parent_tid=[6411]}, 88) = 6411 [pid 6411] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6410] <... rseq resumed>) = 0 [pid 6409] setpgid(0, 0 [pid 6394] rt_sigprocmask(SIG_SETMASK, [] [pid 6393] <... clone3 resumed> => {parent_tid=[6410]}, 88) = 6410 [pid 6411] <... rseq resumed>) = 0 [pid 6404] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6393] rt_sigprocmask(SIG_SETMASK, [] [pid 6411] set_robust_list(0x7fef94c679a0, 24 [pid 6410] set_robust_list(0x7fef94c679a0, 24 [pid 6409] <... setpgid resumed>) = 0 [pid 6394] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6393] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6411] <... set_robust_list resumed>) = 0 [pid 6404] <... openat resumed>) = 3 [pid 6394] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6393] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6411] rt_sigprocmask(SIG_SETMASK, [] [pid 6410] <... set_robust_list resumed>) = 0 [pid 6409] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6404] chdir("./file1" [pid 6394] <... futex resumed>) = 0 [pid 6393] <... futex resumed>) = 0 [pid 6411] <... rt_sigprocmask resumed>, NULL, 8) = 0 [ 120.184121][ T6404] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 6410] rt_sigprocmask(SIG_SETMASK, [] [pid 6409] <... openat resumed>) = 3 [pid 6404] <... chdir resumed>) = 0 [pid 6394] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6393] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6410] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6404] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6396] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6409] write(3, "1000", 4 [pid 6404] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6396] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6409] <... write resumed>) = 4 [ 120.227753][ T6411] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 120.229589][ T6411] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 360 with error 28 [ 120.229618][ T6411] EXT4-fs (loop2): This should not happen!! Data will be lost [ 120.229618][ T6411] [ 120.229632][ T6411] EXT4-fs (loop2): Total free blocks count 0 [ 120.229644][ T6411] EXT4-fs (loop2): Free/Dirty block details [pid 6411] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6410] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6409] close(3 [pid 6404] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6397] <... sendfile resumed>) = 368640 [pid 6396] <... futex resumed>) = 0 [pid 6395] <... sendfile resumed>) = ? [pid 6394] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 120.229657][ T6411] EXT4-fs (loop2): free_blocks=20480 [ 120.229669][ T6411] EXT4-fs (loop2): dirty_blocks=368 [ 120.229681][ T6411] EXT4-fs (loop2): Block reservation details [ 120.229692][ T6411] EXT4-fs (loop2): i_reserved_data_blocks=23 [ 120.250249][ T6395] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [pid 6393] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6409] <... close resumed>) = 0 [pid 6404] <... futex resumed>) = 1 [pid 6398] <... futex resumed>) = 0 [pid 6397] +++ killed by SIGBUS +++ [pid 6396] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6410] +++ killed by SIGBUS +++ [pid 6409] symlink("/dev/binderfs", "./binderfs" [pid 6404] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6398] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6396] <... mmap resumed>) = 0x7fef94c47000 [pid 6411] +++ killed by SIGBUS +++ [pid 6409] <... symlink resumed>) = 0 [pid 6404] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6398] <... futex resumed>) = 0 [pid 6396] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6394] +++ killed by SIGBUS +++ [pid 6409] write(1, "executing program\n", 18 [pid 6404] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 executing program [pid 6398] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6396] <... mprotect resumed>) = 0 [pid 6395] +++ killed by SIGBUS +++ [pid 6393] +++ killed by SIGBUS +++ [pid 6409] <... write resumed>) = 18 [pid 6396] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5611] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6394, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6409] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6393, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 6409] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 6409] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6409] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6409] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c68000 [pid 6409] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5609] <... restart_syscall resumed>) = 0 [ 120.251478][ T6410] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 420 with error 28 [ 120.251511][ T6410] EXT4-fs (loop0): This should not happen!! Data will be lost [ 120.251511][ T6410] [ 120.251525][ T6410] EXT4-fs (loop0): Total free blocks count 0 [ 120.251537][ T6410] EXT4-fs (loop0): Free/Dirty block details [ 120.251549][ T6410] EXT4-fs (loop0): free_blocks=20480 [ 120.251572][ T6410] EXT4-fs (loop0): dirty_blocks=432 [ 120.251583][ T6410] EXT4-fs (loop0): Block reservation details [ 120.251594][ T6410] EXT4-fs (loop0): i_reserved_data_blocks=27 [pid 6409] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6404] <... openat resumed>) = 4 [pid 6396] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6409] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6409] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0}ci2-upstream-fs/strace-static-x86_64: Process 6412 attached [pid 5609] umount2("./30", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6412] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6409] <... clone3 resumed> => {parent_tid=[6412]}, 88) = 6412 [pid 5611] umount2("./31", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6404] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6412] <... rseq resumed>) = 0 [pid 6412] set_robust_list(0x7fef94c889a0, 24 [pid 6409] rt_sigprocmask(SIG_SETMASK, [] [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6412] <... set_robust_list resumed>) = 0 [pid 6409] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6404] <... futex resumed>) = 1 [pid 6398] <... futex resumed>) = 0 [pid 5611] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6396] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5609] <... openat resumed>) = 3 ci2-upstream-fs/strace-static-x86_64: Process 6413 attached [pid 6412] rt_sigprocmask(SIG_SETMASK, [] [pid 6409] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6404] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6398] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... openat resumed>) = 3 [pid 6413] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6412] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6409] <... futex resumed>) = 0 [pid 6404] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6398] <... futex resumed>) = 0 [pid 5611] fstat(3 [pid 6396] <... clone3 resumed> => {parent_tid=[6413]}, 88) = 6413 [pid 5609] fstat(3 [pid 6413] <... rseq resumed>) = 0 [pid 6412] memfd_create("syzkaller", 0 [pid 6409] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6404] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6398] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6396] rt_sigprocmask(SIG_SETMASK, [] [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6413] set_robust_list(0x7fef94c679a0, 24 [pid 6412] <... memfd_create resumed>) = 3 [pid 6404] <... openat resumed>) = 5 [pid 6396] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5611] getdents64(3 [pid 5609] getdents64(3 [pid 6413] <... set_robust_list resumed>) = 0 [pid 6412] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6404] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6396] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6413] rt_sigprocmask(SIG_SETMASK, [] [pid 6412] <... mmap resumed>) = 0x7fef8c868000 [pid 6404] <... futex resumed>) = 1 [pid 6398] <... futex resumed>) = 0 [pid 6396] <... futex resumed>) = 0 [pid 5611] umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6413] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6404] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6398] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6396] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6404] <... openat resumed>) = 6 [pid 6398] <... futex resumed>) = 0 [pid 6398] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6404] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6412] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6404] <... futex resumed>) = 1 [pid 6398] <... futex resumed>) = 0 [pid 6398] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6404] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6398] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6404] <... mmap resumed>) = 0x200000000000 [ 120.377432][ T37] audit: type=1800 audit(1785844650.774:157): pid=6404 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop3" ino=15 res=0 errno=0 [pid 6404] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6404] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6398] <... futex resumed>) = 0 [pid 6398] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6404] <... futex resumed>) = 0 [pid 6398] <... futex resumed>) = 1 [pid 6404] sendfile(4, 5, NULL, 553647746 [pid 6398] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6412] <... write resumed>) = 524288 [pid 6412] munmap(0x7fef8c868000, 138412032) = 0 [pid 6412] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6412] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6412] close(3) = 0 [pid 6412] close(4) = 0 [pid 6412] mkdir("./file1", 0777 [pid 6396] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 120.421124][ T6399] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 120.436313][ T6413] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 656 with error 28 [ 120.436345][ T6413] EXT4-fs (loop4): This should not happen!! Data will be lost [ 120.436345][ T6413] [ 120.436360][ T6413] EXT4-fs (loop4): Total free blocks count 0 [ 120.436372][ T6413] EXT4-fs (loop4): Free/Dirty block details [ 120.436385][ T6413] EXT4-fs (loop4): free_blocks=20480 [pid 6398] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6398] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6398] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c47000 [pid 6412] <... mkdir resumed>) = 0 [pid 6398] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6412] mount("/dev/loop1", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6398] <... mprotect resumed>) = 0 [pid 6398] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6398] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 6414 attached => {parent_tid=[6414]}, 88) = 6414 [pid 6414] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 6414] set_robust_list(0x7fef94c679a0, 24 [pid 6398] rt_sigprocmask(SIG_SETMASK, [] [pid 6414] <... set_robust_list resumed>) = 0 [pid 6398] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6414] rt_sigprocmask(SIG_SETMASK, [] [pid 6398] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6414] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6398] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6413] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6399] <... sendfile resumed>) = 671744 [pid 6399] +++ killed by SIGBUS +++ [ 120.436398][ T6413] EXT4-fs (loop4): dirty_blocks=656 [ 120.436409][ T6413] EXT4-fs (loop4): Block reservation details [ 120.436421][ T6413] EXT4-fs (loop4): i_reserved_data_blocks=41 [ 120.473611][ T6412] loop1: detected capacity change from 0 to 1024 [ 120.500025][ T5611] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 120.501768][ T5609] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6413] +++ killed by SIGBUS +++ [pid 6396] +++ killed by SIGBUS +++ [pid 6414] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6404] <... sendfile resumed>) = 335872 [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6396, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 6398] <... futex resumed>) = ? [pid 6414] +++ killed by SIGBUS +++ [pid 6404] +++ killed by SIGBUS +++ [pid 6398] +++ killed by SIGBUS +++ [ 120.534086][ T6414] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 120.537752][ T6414] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 324 with error 28 [ 120.537782][ T6414] EXT4-fs (loop3): This should not happen!! Data will be lost [ 120.537782][ T6414] [ 120.537795][ T6414] EXT4-fs (loop3): Total free blocks count 0 [ 120.537806][ T6414] EXT4-fs (loop3): Free/Dirty block details [pid 5614] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5611] <... umount2 resumed>) = 0 [pid 5612] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6398, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5611] umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5612] umount2("./31", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5614] umount2("./30", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] newfstatat(AT_FDCWD, "./31/file1" [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5612] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5611] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5612] <... openat resumed>) = 3 [pid 5611] umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5614] <... openat resumed>) = 3 [pid 5612] fstat(3 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5614] fstat(3 [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5611] openat(AT_FDCWD, "./31/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5612] getdents64(3 [pid 5611] <... openat resumed>) = 4 [pid 5614] getdents64(3 [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5611] fstat(4 [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5612] umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6412] <... mount resumed>) = 0 [pid 5614] umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6412] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5611] getdents64(4 [pid 6412] <... openat resumed>) = 3 [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6412] chdir("./file1" [pid 5611] getdents64(4 [pid 6412] <... chdir resumed>) = 0 [pid 6412] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [ 120.537817][ T6414] EXT4-fs (loop3): free_blocks=20480 [ 120.537830][ T6414] EXT4-fs (loop3): dirty_blocks=336 [ 120.537841][ T6414] EXT4-fs (loop3): Block reservation details [ 120.537851][ T6414] EXT4-fs (loop3): i_reserved_data_blocks=21 [ 120.569798][ T5611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.626510][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [pid 6412] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... umount2 resumed>) = 0 [pid 5611] close(4) = 0 [ 120.627029][ T6412] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.658204][ T13] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 324 with max blocks 4 with error 28 [ 120.662065][ T5614] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 5611] rmdir("./31/file1") = 0 [pid 6412] <... futex resumed>) = 1 [pid 6409] <... futex resumed>) = 0 [pid 5614] <... umount2 resumed>) = 0 [pid 5612] <... umount2 resumed>) = 0 [pid 5609] umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6409] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6409] <... futex resumed>) = 0 [pid 5614] umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6412] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6409] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./30/file1" [pid 5611] umount2("./31/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5611] newfstatat(AT_FDCWD, "./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] unlink("./31/binderfs" [pid 5614] newfstatat(AT_FDCWD, "./30/file1" [pid 5612] newfstatat(AT_FDCWD, "./31/file1" [pid 5611] <... unlink resumed>) = 0 [pid 5609] umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5612] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] getdents64(3 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5612] umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5614] umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] close(3 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] <... close resumed>) = 0 [pid 5609] openat(AT_FDCWD, "./30/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5614] openat(AT_FDCWD, "./30/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5611] rmdir("./31" [pid 5609] <... openat resumed>) = 4 [pid 5614] <... openat resumed>) = 4 [pid 5612] openat(AT_FDCWD, "./31/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5611] <... rmdir resumed>) = 0 [pid 5609] fstat(4 [pid 5611] mkdir("./32", 0777 [pid 6412] <... openat resumed>) = 4 [pid 5614] fstat(4 [pid 5612] <... openat resumed>) = 4 [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5612] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6412] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5612] getdents64(4 [pid 5611] <... mkdir resumed>) = 0 [pid 5609] getdents64(4 [pid 6412] <... futex resumed>) = 1 [pid 6409] <... futex resumed>) = 0 [pid 5614] getdents64(4 [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5611] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6412] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6409] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5612] getdents64(4 [pid 5611] <... openat resumed>) = 3 [pid 5609] getdents64(4 [pid 6412] <... openat resumed>) = 5 [pid 6409] <... futex resumed>) = 0 [pid 5614] getdents64(4 [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6409] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5611] ioctl(3, LOOP_CLR_FD [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5614] close(4 [pid 5611] <... ioctl resumed>) = 0 [pid 5609] close(4 [pid 5614] <... close resumed>) = 0 [pid 6412] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [ 120.665084][ T5612] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 120.678235][ T5614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.714485][ T37] audit: type=1800 audit(1785844651.114:158): pid=6412 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop1" ino=15 res=0 errno=0 [pid 5614] rmdir("./30/file1" [pid 5612] close(4 [pid 5611] close(3 [pid 5609] <... close resumed>) = 0 [pid 6412] <... futex resumed>) = 1 [pid 6409] <... futex resumed>) = 0 [pid 5612] <... close resumed>) = 0 [pid 6409] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] rmdir("./31/file1" [pid 6412] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000) = 6 [pid 6409] <... futex resumed>) = 0 [pid 5614] <... rmdir resumed>) = 0 [pid 5612] <... rmdir resumed>) = 0 [pid 5609] rmdir("./30/file1") = 0 [pid 5609] umount2("./30/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6412] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6409] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] umount2("./30/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5612] umount2("./31/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6412] <... futex resumed>) = 0 [pid 5609] newfstatat(AT_FDCWD, "./30/binderfs" [pid 6412] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6409] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6412] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6409] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] newfstatat(AT_FDCWD, "./30/binderfs" [pid 5612] newfstatat(AT_FDCWD, "./31/binderfs" [pid 5611] <... close resumed>) = 0 [pid 5609] unlink("./30/binderfs" [pid 6412] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 5612] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6412] <... mmap resumed>) = 0x200000000000 [pid 6409] <... futex resumed>) = 0 [pid 5614] unlink("./30/binderfs" [pid 5612] unlink("./31/binderfs" [pid 5609] <... unlink resumed>) = 0 [pid 5614] <... unlink resumed>) = 0 [pid 5611] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5609] getdents64(3 [pid 6412] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6409] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... unlink resumed>) = 0 [pid 5611] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6412] <... futex resumed>) = 0 [pid 6409] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5614] getdents64(3 [pid 5611] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5609] close(3 [pid 6412] sendfile(4, 5, NULL, 553647746 [pid 6409] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5612] getdents64(3 [pid 6409] <... futex resumed>) = 0 [pid 5609] <... close resumed>) = 0 [pid 5609] rmdir("./30" [pid 6409] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] close(3 [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6417 attached [pid 5614] <... close resumed>) = 0 [pid 5612] close(3 [pid 5609] <... rmdir resumed>) = 0 [pid 5614] rmdir("./30" [pid 5612] <... close resumed>) = 0 [pid 5611] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6417 [pid 5611] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] rmdir("./31" [pid 5611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] mkdir("./31", 0777 [pid 6417] set_robust_list(0x5555748a66e0, 24 [pid 5614] <... rmdir resumed>) = 0 [pid 5612] <... rmdir resumed>) = 0 [pid 5612] mkdir("./32", 0777) = 0 [pid 6417] <... set_robust_list resumed>) = 0 [pid 6417] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5614] mkdir("./31", 0777 [pid 6417] chdir("./32" [pid 5612] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5609] <... mkdir resumed>) = 0 [pid 6417] <... chdir resumed>) = 0 [pid 5614] <... mkdir resumed>) = 0 [pid 6417] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6417] setpgid(0, 0) = 0 [pid 5614] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5612] <... openat resumed>) = 3 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6417] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5614] <... openat resumed>) = 3 [pid 5612] ioctl(3, LOOP_CLR_FD [pid 5609] <... openat resumed>) = 3 [pid 6417] <... openat resumed>) = 3 [pid 5614] ioctl(3, LOOP_CLR_FD [pid 5612] <... ioctl resumed>) = 0 [pid 5612] close(3 [pid 5609] ioctl(3, LOOP_CLR_FD [pid 6417] write(3, "1000", 4 [pid 5614] <... ioctl resumed>) = 0 [pid 5609] <... ioctl resumed>) = 0 [pid 6417] <... write resumed>) = 4 [pid 5614] close(3 [pid 5609] close(3 [pid 6417] close(3 [pid 6409] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6417] <... close resumed>) = 0 [pid 6409] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6417] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6409] <... futex resumed>) = 0 [pid 6417] write(1, "executing program\n", 18 executing program [pid 6409] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6417] <... write resumed>) = 18 [pid 6409] <... mmap resumed>) = 0x7fef94c47000 [pid 6417] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6409] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6417] <... futex resumed>) = 0 [pid 6417] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6409] <... mprotect resumed>) = 0 [pid 6417] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6417] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6417] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c68000 [pid 6417] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6409] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5614] <... close resumed>) = 0 [pid 5609] <... close resumed>) = 0 [pid 6417] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6409] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6409] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 6418 attached [pid 6417] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6417] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6409] <... clone3 resumed> => {parent_tid=[6418]}, 88) = 6418 ci2-upstream-fs/strace-static-x86_64: Process 6419 attached [pid 6409] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] <... close resumed>) = 0 [pid 6419] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6418] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6417] <... clone3 resumed> => {parent_tid=[6419]}, 88) = 6419 [pid 6409] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5612] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6419] <... rseq resumed>) = 0 [pid 6418] <... rseq resumed>) = 0 [pid 6417] rt_sigprocmask(SIG_SETMASK, [] [pid 6409] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5612] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6419] set_robust_list(0x7fef94c889a0, 24 [pid 6418] set_robust_list(0x7fef94c679a0, 24 [pid 6417] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6409] <... futex resumed>) = 0 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5609] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6419] <... set_robust_list resumed>) = 0 [pid 6418] <... set_robust_list resumed>) = 0 [pid 6417] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6409] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6419] rt_sigprocmask(SIG_SETMASK, [] [pid 6418] rt_sigprocmask(SIG_SETMASK, [] [pid 6417] <... futex resumed>) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6419] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6418] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6417] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-upstream-fs/strace-static-x86_64: Process 6420 attached ci2-upstream-fs/strace-static-x86_64: Process 6422 attached ci2-upstream-fs/strace-static-x86_64: Process 6421 attached [pid 6419] memfd_create("syzkaller", 0 [pid 6420] set_robust_list(0x5555748a66e0, 24 [pid 6422] set_robust_list(0x5555748a66e0, 24 [pid 6420] <... set_robust_list resumed>) = 0 [pid 6419] <... memfd_create resumed>) = 3 [pid 6421] set_robust_list(0x5555748a66e0, 24) = 0 [pid 5614] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6420 [pid 6421] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6421 [ 120.912536][ T6412] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 120.914046][ T6418] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 904 with error 28 [ 120.914076][ T6418] EXT4-fs (loop1): This should not happen!! Data will be lost [ 120.914076][ T6418] [ 120.914099][ T6418] EXT4-fs (loop1): Total free blocks count 0 [ 120.914112][ T6418] EXT4-fs (loop1): Free/Dirty block details [pid 5612] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6422 [pid 6421] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6420] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5612] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 6421] chdir("./32" [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6421] <... chdir resumed>) = 0 [pid 6421] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6420] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6421] <... prctl resumed>) = 0 [pid 6420] chdir("./31" [pid 6421] setpgid(0, 0) = 0 [pid 6421] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6422] <... set_robust_list resumed>) = 0 [pid 6420] <... chdir resumed>) = 0 [pid 6422] rt_sigprocmask(SIG_SETMASK, [] [pid 6419] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6421] write(3, "1000", 4) = 4 [pid 6421] close(3) = 0 [pid 6409] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6421] symlink("/dev/binderfs", "./binderfs" [pid 6419] <... mmap resumed>) = 0x7fef8c868000 [pid 6421] <... symlink resumed>) = 0 [pid 6421] write(1, "executing program\n", 18 [pid 6420] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6421] <... write resumed>) = 18 [pid 6421] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6421] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6420] <... prctl resumed>) = 0 [pid 6422] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6421] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6421] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6421] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c68000 [pid 6420] setpgid(0, 0 [pid 6422] chdir("./31" [pid 6421] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6421] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6420] <... setpgid resumed>) = 0 [pid 6421] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6421] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0}ci2-upstream-fs/strace-static-x86_64: Process 6423 attached => {parent_tid=[6423]}, 88) = 6423 [pid 6421] rt_sigprocmask(SIG_SETMASK, [] [pid 6423] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6421] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6423] <... rseq resumed>) = 0 [pid 6423] set_robust_list(0x7fef94c889a0, 24 [pid 6421] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6423] <... set_robust_list resumed>) = 0 [pid 6421] <... futex resumed>) = 0 [pid 6423] rt_sigprocmask(SIG_SETMASK, [] [pid 6421] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6423] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6423] memfd_create("syzkaller", 0) = 3 [pid 6423] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fef8c868000 executing program [pid 6420] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6422] <... chdir resumed>) = 0 [pid 6422] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6420] <... openat resumed>) = 3 [pid 6423] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6422] <... prctl resumed>) = 0 [pid 6420] write(3, "1000", 4 [pid 6422] setpgid(0, 0 [pid 6420] <... write resumed>) = 4 [pid 6419] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6422] <... setpgid resumed>) = 0 [pid 6420] close(3 [pid 6418] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6422] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6420] <... close resumed>) = 0 [pid 6419] <... write resumed>) = 524288 [pid 6422] <... openat resumed>) = 3 [pid 6420] symlink("/dev/binderfs", "./binderfs" [pid 6419] munmap(0x7fef8c868000, 138412032 [pid 6412] <... sendfile resumed>) = ? [pid 6423] <... write resumed>) = 524288 [ 120.914124][ T6418] EXT4-fs (loop1): free_blocks=20480 [ 120.914137][ T6418] EXT4-fs (loop1): dirty_blocks=912 [ 120.914148][ T6418] EXT4-fs (loop1): Block reservation details [ 120.914159][ T6418] EXT4-fs (loop1): i_reserved_data_blocks=57 [pid 6422] write(3, "1000", 4 [pid 6420] <... symlink resumed>) = 0 [pid 6419] <... munmap resumed>) = 0 [pid 6412] +++ killed by SIGBUS +++ [pid 6423] munmap(0x7fef8c868000, 138412032 [pid 6419] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6418] +++ killed by SIGBUS +++ [pid 6422] <... write resumed>) = 4 [pid 6409] +++ killed by SIGBUS +++ [pid 6423] <... munmap resumed>) = 0 [pid 6422] close(3 [pid 6420] write(1, "executing program\n", 18 [pid 5610] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6409, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=10 /* 0.10 s */} --- executing program [pid 6423] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6422] <... close resumed>) = 0 [pid 6420] <... write resumed>) = 18 [pid 6423] <... openat resumed>) = 4 [pid 6422] symlink("/dev/binderfs", "./binderfs" [pid 6423] ioctl(4, LOOP_SET_FD, 3 [pid 6422] <... symlink resumed>) = 0 [pid 6420] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6419] <... openat resumed>) = 4 [pid 6422] write(1, "executing program\n", 18) = 18 [pid 6422] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6420] <... futex resumed>) = 0 [pid 6420] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6419] ioctl(4, LOOP_SET_FD, 3 [pid 6422] <... futex resumed>) = 0 [pid 6420] <... rt_sigaction resumed>, NULL, 8) = 0 executing program [pid 6422] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6423] <... ioctl resumed>) = 0 [pid 6422] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6420] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6419] <... ioctl resumed>) = 0 [pid 6423] close(3 [pid 6422] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6420] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6419] close(3 [pid 6423] <... close resumed>) = 0 [pid 6422] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6420] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6419] <... close resumed>) = 0 [pid 6423] close(4 [pid 6422] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6420] <... mmap resumed>) = 0x7fef94c68000 [pid 6423] <... close resumed>) = 0 [pid 6422] <... mmap resumed>) = 0x7fef94c68000 [pid 6419] close(4 [pid 6422] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6419] <... close resumed>) = 0 [pid 6423] mkdir("./file1", 0777 [pid 6422] <... mprotect resumed>) = 0 [pid 6420] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6419] mkdir("./file1", 0777 [pid 5610] umount2("./30", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6422] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6420] <... mprotect resumed>) = 0 [pid 6422] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6420] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5610] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6422] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6420] <... rt_sigprocmask resumed>, [], 8) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6424 attached [pid 6420] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 5610] <... openat resumed>) = 3 ci2-upstream-fs/strace-static-x86_64: Process 6425 attached [pid 6424] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6422] <... clone3 resumed> => {parent_tid=[6424]}, 88) = 6424 [pid 6424] <... rseq resumed>) = 0 [pid 6422] rt_sigprocmask(SIG_SETMASK, [] [pid 6420] <... clone3 resumed> => {parent_tid=[6425]}, 88) = 6425 [pid 6424] set_robust_list(0x7fef94c889a0, 24 [pid 6422] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6420] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] fstat(3 [pid 6425] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6424] <... set_robust_list resumed>) = 0 [pid 6422] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6420] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6425] <... rseq resumed>) = 0 [pid 6424] rt_sigprocmask(SIG_SETMASK, [] [pid 6422] <... futex resumed>) = 0 [pid 6420] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6424] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6423] <... mkdir resumed>) = 0 [pid 6422] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5610] getdents64(3 [pid 6425] set_robust_list(0x7fef94c889a0, 24 [pid 6423] mount("/dev/loop3", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6420] <... futex resumed>) = 0 [pid 6425] <... set_robust_list resumed>) = 0 [pid 6424] memfd_create("syzkaller", 0 [pid 6420] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6425] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6425] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6424] <... memfd_create resumed>) = 3 [pid 6425] memfd_create("syzkaller", 0 [ 121.045406][ T6423] loop3: detected capacity change from 0 to 1024 [ 121.047667][ T6419] loop2: detected capacity change from 0 to 1024 [pid 6424] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6425] <... memfd_create resumed>) = 3 [pid 6424] <... mmap resumed>) = 0x7fef8c868000 [pid 6425] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fef8c868000 [pid 6419] <... mkdir resumed>) = 0 [pid 6425] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6424] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6419] mount("/dev/loop2", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6425] <... write resumed>) = 524288 [pid 6424] <... write resumed>) = 524288 [pid 6425] munmap(0x7fef8c868000, 138412032) = 0 [pid 6424] munmap(0x7fef8c868000, 138412032 [pid 6425] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6424] <... munmap resumed>) = 0 [pid 6425] <... openat resumed>) = 4 [pid 6424] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6425] ioctl(4, LOOP_SET_FD, 3 [pid 6424] <... openat resumed>) = 4 [pid 6425] <... ioctl resumed>) = 0 [pid 6424] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6425] close(3 [pid 6424] close(3 [pid 6425] <... close resumed>) = 0 [pid 6424] <... close resumed>) = 0 [ 121.149886][ T5610] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 121.184568][ T6425] loop4: detected capacity change from 0 to 1024 [pid 6424] close(4 [pid 6425] close(4 [pid 6424] <... close resumed>) = 0 [pid 6425] <... close resumed>) = 0 [pid 6424] mkdir("./file1", 0777) = 0 [pid 6419] <... mount resumed>) = 0 [pid 6419] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6419] chdir("./file1") = 0 [pid 6419] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6419] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6419] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6417] <... futex resumed>) = 0 [pid 6417] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6425] mkdir("./file1", 0777 [pid 6419] <... futex resumed>) = 0 [pid 6417] <... futex resumed>) = 1 [pid 6419] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777) = 4 [pid 6417] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6419] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6425] <... mkdir resumed>) = 0 [pid 6417] <... futex resumed>) = 0 [pid 6424] mount("/dev/loop0", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6417] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6417] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6419] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC) = 5 [pid 6419] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6417] <... futex resumed>) = 0 [pid 6417] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6417] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6419] <... futex resumed>) = 1 [ 121.186858][ T6424] loop0: detected capacity change from 0 to 1024 [ 121.205115][ T5610] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [pid 6419] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6425] mount("/dev/loop4", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6419] <... openat resumed>) = 6 [pid 6423] <... mount resumed>) = 0 [pid 6419] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6417] <... futex resumed>) = 0 [pid 6419] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6417] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6419] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6423] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5610] <... umount2 resumed>) = 0 [pid 6423] <... openat resumed>) = 3 [pid 5610] umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6423] chdir("./file1" [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6423] <... chdir resumed>) = 0 [pid 5610] newfstatat(AT_FDCWD, "./30/file1" [pid 6417] <... futex resumed>) = 0 [pid 6423] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6417] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6423] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5610] umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6423] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6423] <... futex resumed>) = 1 [pid 6421] <... futex resumed>) = 0 [pid 5610] openat(AT_FDCWD, "./30/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6423] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6421] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... openat resumed>) = 4 [pid 6423] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6421] <... futex resumed>) = 0 [pid 5610] fstat(4 [pid 6423] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6421] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6423] <... openat resumed>) = 4 [pid 5610] getdents64(4 [pid 6423] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6419] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6423] <... futex resumed>) = 1 [pid 6421] <... futex resumed>) = 0 [pid 6419] <... mmap resumed>) = 0x200000000000 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6423] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6421] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6419] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] getdents64(4 [pid 6423] <... openat resumed>) = 5 [pid 6421] <... futex resumed>) = 0 [pid 6419] <... futex resumed>) = 1 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6417] <... futex resumed>) = 0 [pid 6423] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6421] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6419] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6417] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] close(4 [pid 6417] <... futex resumed>) = 0 [pid 6423] <... futex resumed>) = 0 [pid 6421] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6419] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6417] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... close resumed>) = 0 [pid 6423] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6421] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6419] sendfile(4, 5, NULL, 553647746 [pid 6423] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6421] <... futex resumed>) = 0 [pid 5610] rmdir("./30/file1" [pid 6423] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6421] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6423] <... openat resumed>) = 6 [pid 5610] <... rmdir resumed>) = 0 [pid 6423] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] umount2("./30/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6423] <... futex resumed>) = 1 [pid 6421] <... futex resumed>) = 0 [pid 6421] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] newfstatat(AT_FDCWD, "./30/binderfs" [pid 6423] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6421] <... futex resumed>) = 0 [pid 6421] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6425] <... mount resumed>) = 0 [pid 6423] <... mmap resumed>) = 0x200000000000 [pid 5610] unlink("./30/binderfs") = 0 [pid 5610] getdents64(3, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6425] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5610] close(3) = 0 [pid 6425] <... openat resumed>) = 3 [pid 6423] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] rmdir("./30" [pid 6425] chdir("./file1" [pid 6423] <... futex resumed>) = 1 [ 121.244994][ T37] audit: type=1800 audit(1785844651.634:159): pid=6419 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 121.268748][ T37] audit: type=1800 audit(1785844651.664:160): pid=6423 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop3" ino=15 res=0 errno=0 [pid 6421] <... futex resumed>) = 0 [pid 6425] <... chdir resumed>) = 0 [pid 6423] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6421] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6424] <... mount resumed>) = 0 [pid 6423] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6425] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6424] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6423] sendfile(4, 5, NULL, 553647746 [pid 6421] <... futex resumed>) = 0 [pid 5610] <... rmdir resumed>) = 0 [pid 6421] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6424] <... openat resumed>) = 3 [pid 6425] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6424] chdir("./file1" [pid 5610] mkdir("./31", 0777 [pid 6425] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6424] <... chdir resumed>) = 0 [pid 6425] <... futex resumed>) = 1 [pid 6424] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6420] <... futex resumed>) = 0 [pid 6420] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6424] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6420] <... futex resumed>) = 0 [pid 6425] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6420] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6425] <... openat resumed>) = 4 [pid 6424] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6417] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6424] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6417] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6417] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c47000 [pid 6417] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6417] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6422] <... futex resumed>) = 0 [pid 6422] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6417] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6417] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6424] <... futex resumed>) = 0 [pid 6422] <... futex resumed>) = 1 [pid 6424] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777ci2-upstream-fs/strace-static-x86_64: Process 6434 attached [pid 6422] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6425] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6434] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 6434] set_robust_list(0x7fef94c679a0, 24 [pid 6425] <... futex resumed>) = 1 [pid 6420] <... futex resumed>) = 0 [pid 6420] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6434] <... set_robust_list resumed>) = 0 [pid 6417] <... clone3 resumed> => {parent_tid=[6434]}, 88) = 6434 [pid 6417] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6417] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6434] rt_sigprocmask(SIG_SETMASK, [] [pid 6420] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6417] <... futex resumed>) = 0 [pid 6434] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6425] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6424] <... openat resumed>) = 4 [pid 6425] <... openat resumed>) = 5 [pid 6424] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6421] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 121.350483][ T37] audit: type=1800 audit(1785844651.744:161): pid=6425 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop4" ino=15 res=0 errno=0 [pid 6417] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6425] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6424] <... futex resumed>) = 1 [pid 6422] <... futex resumed>) = 0 [pid 6421] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6425] <... futex resumed>) = 1 [pid 6424] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6422] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6421] <... futex resumed>) = 0 [pid 6420] <... futex resumed>) = 0 [pid 6422] <... futex resumed>) = 0 [pid 6421] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6420] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6422] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6421] <... mmap resumed>) = 0x7fef94c47000 [pid 6420] <... futex resumed>) = 0 [pid 6420] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... mkdir resumed>) = 0 [pid 6424] <... openat resumed>) = 5 [pid 6421] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6434] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6425] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6424] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6421] <... mprotect resumed>) = 0 [pid 6419] <... sendfile resumed>) = 303104 [ 121.381933][ T37] audit: type=1800 audit(1785844651.774:162): pid=6424 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 121.387945][ T6434] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 121.389186][ T6434] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 292 with error 28 [ 121.389217][ T6434] EXT4-fs (loop2): This should not happen!! Data will be lost [ 121.389217][ T6434] [pid 5610] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6425] <... openat resumed>) = 6 [pid 6424] <... futex resumed>) = 1 [pid 6422] <... futex resumed>) = 0 [pid 6421] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6417] <... futex resumed>) = ? [pid 6434] +++ killed by SIGBUS +++ [pid 6424] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6422] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... openat resumed>) = 3 [pid 6422] <... futex resumed>) = 0 [pid 6421] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5610] ioctl(3, LOOP_CLR_FD [pid 6425] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6424] <... openat resumed>) = 6 [pid 6422] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6421] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5610] <... ioctl resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6435 attached [pid 6425] <... futex resumed>) = 1 [pid 6420] <... futex resumed>) = 0 [pid 6419] +++ killed by SIGBUS +++ [pid 6417] +++ killed by SIGBUS +++ [pid 6424] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] close(3 [pid 6435] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6425] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6424] <... futex resumed>) = 1 [pid 6422] <... futex resumed>) = 0 [pid 6421] <... clone3 resumed> => {parent_tid=[6435]}, 88) = 6435 [pid 6420] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6417, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6435] <... rseq resumed>) = 0 [pid 6425] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6424] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6422] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6421] rt_sigprocmask(SIG_SETMASK, [] [pid 6420] <... futex resumed>) = 0 [pid 5611] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 6435] set_robust_list(0x7fef94c679a0, 24 [pid 6425] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6424] <... mmap resumed>) = 0x200000000000 [pid 6422] <... futex resumed>) = 0 [pid 6421] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6420] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6435] <... set_robust_list resumed>) = 0 [pid 6425] <... mmap resumed>) = 0x200000000000 [pid 6424] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6422] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6421] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... restart_syscall resumed>) = 0 [pid 6435] rt_sigprocmask(SIG_SETMASK, [] [pid 6425] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6424] <... futex resumed>) = 0 [pid 6422] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6421] <... futex resumed>) = 0 [pid 5610] <... close resumed>) = 0 [pid 6435] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6425] <... futex resumed>) = 1 [pid 6424] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6422] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6421] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6420] <... futex resumed>) = 0 [pid 6425] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6424] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6422] <... futex resumed>) = 0 [pid 6420] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6435] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6425] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6424] sendfile(4, 5, NULL, 553647746 [pid 6422] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6420] <... futex resumed>) = 0 [pid 5610] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6425] sendfile(4, 5, NULL, 553647746 [pid 5611] umount2("./32", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6420] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5611] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORYci2-upstream-fs/strace-static-x86_64: Process 6436 attached [pid 6421] <... futex resumed>) = ? [pid 5611] <... openat resumed>) = 3 [pid 6435] +++ killed by SIGBUS +++ [pid 5611] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5611] getdents64(3 [pid 6436] set_robust_list(0x5555748a66e0, 24 [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5610] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6436 [pid 6436] <... set_robust_list resumed>) = 0 [ 121.389232][ T6434] EXT4-fs (loop2): Total free blocks count 0 [ 121.389245][ T6434] EXT4-fs (loop2): Free/Dirty block details [ 121.389258][ T6434] EXT4-fs (loop2): free_blocks=20480 [ 121.389272][ T6434] EXT4-fs (loop2): dirty_blocks=304 [ 121.389285][ T6434] EXT4-fs (loop2): Block reservation details [ 121.389296][ T6434] EXT4-fs (loop2): i_reserved_data_blocks=19 [ 121.454112][ T6435] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [pid 5611] umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6436] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6436] chdir("./31") = 0 [pid 6436] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6436] setpgid(0, 0) = 0 [pid 6436] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6422] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6422] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6436] write(3, "1000", 4 [pid 6422] <... futex resumed>) = 0 [pid 6422] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6436] <... write resumed>) = 4 [pid 6422] <... mmap resumed>) = 0x7fef94c47000 [pid 6422] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6420] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6436] close(3 [pid 6422] <... mprotect resumed>) = 0 [pid 6420] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6436] <... close resumed>) = 0 [pid 6420] <... futex resumed>) = 0 [pid 6436] symlink("/dev/binderfs", "./binderfs" [pid 6422] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6420] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6436] <... symlink resumed>) = 0 [pid 6422] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6420] <... mmap resumed>) = 0x7fef94c47000 [pid 6420] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6422] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6420] <... mprotect resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6437 attached [ 121.454311][ T6435] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 56 with error 28 [ 121.454334][ T6435] EXT4-fs (loop3): This should not happen!! Data will be lost [ 121.454334][ T6435] [ 121.454348][ T6435] EXT4-fs (loop3): Total free blocks count 0 [ 121.454360][ T6435] EXT4-fs (loop3): Free/Dirty block details [ 121.454373][ T6435] EXT4-fs (loop3): free_blocks=20480 [ 121.454386][ T6435] EXT4-fs (loop3): dirty_blocks=64 [ 121.454397][ T6435] EXT4-fs (loop3): Block reservation details [pid 6436] write(1, "executing program\n", 18 [pid 6420] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6437] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6436] <... write resumed>) = 18 [pid 6422] <... clone3 resumed> => {parent_tid=[6437]}, 88) = 6437 [pid 6420] <... rt_sigprocmask resumed>, [], 8) = 0 executing program [pid 6437] <... rseq resumed>) = 0 [pid 6436] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6423] <... sendfile resumed>) = ? [pid 6420] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 6438 attached [pid 6437] set_robust_list(0x7fef94c679a0, 24 [pid 6436] <... futex resumed>) = 0 [pid 6423] +++ killed by SIGBUS +++ [pid 6422] rt_sigprocmask(SIG_SETMASK, [] [pid 6421] +++ killed by SIGBUS +++ [pid 6437] <... set_robust_list resumed>) = 0 [pid 6436] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 5612] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6421, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6438] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6437] rt_sigprocmask(SIG_SETMASK, [] [pid 6436] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6422] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6420] <... clone3 resumed> => {parent_tid=[6438]}, 88) = 6438 [pid 6438] <... rseq resumed>) = 0 [pid 6437] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6436] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6422] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6420] rt_sigprocmask(SIG_SETMASK, [] [pid 6438] set_robust_list(0x7fef94c679a0, 24) = 0 [pid 6420] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6438] rt_sigprocmask(SIG_SETMASK, [] [pid 6436] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6422] <... futex resumed>) = 0 [ 121.454407][ T6435] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 121.562672][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 292 with max blocks 4 with error 28 [ 121.562692][ T12] EXT4-fs (loop2): This should not happen!! Data will be lost [ 121.562692][ T12] [pid 6420] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] umount2("./32", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6438] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6436] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6422] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6436] <... mmap resumed>) = 0x7fef94c68000 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6436] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6420] <... futex resumed>) = 0 [pid 5612] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6436] <... mprotect resumed>) = 0 [pid 6420] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... openat resumed>) = 3 [pid 6436] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5612] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6436] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5612] getdents64(3 [pid 6437] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6436] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 ci2-upstream-fs/strace-static-x86_64: Process 6439 attached [pid 6422] <... futex resumed>) = ? [pid 5612] umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6437] +++ killed by SIGBUS +++ [pid 6436] <... clone3 resumed> => {parent_tid=[6439]}, 88) = 6439 [pid 6424] <... sendfile resumed>) = ? [pid 6439] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 6438] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6436] rt_sigprocmask(SIG_SETMASK, [] [pid 6439] set_robust_list(0x7fef94c889a0, 24 [pid 6436] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6425] <... sendfile resumed>) = ? [pid 6420] <... futex resumed>) = ? [pid 6439] <... set_robust_list resumed>) = 0 [pid 6438] +++ killed by SIGBUS +++ [pid 6436] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6424] +++ killed by SIGBUS +++ [pid 6422] +++ killed by SIGBUS +++ [ 121.564813][ T5611] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 121.598456][ T6437] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 121.598674][ T6437] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 148 with error 28 [ 121.598696][ T6437] EXT4-fs (loop0): This should not happen!! Data will be lost [ 121.598696][ T6437] [ 121.598709][ T6437] EXT4-fs (loop0): Total free blocks count 0 [pid 6439] rt_sigprocmask(SIG_SETMASK, [] [pid 6436] <... futex resumed>) = 0 [pid 6425] +++ killed by SIGBUS +++ [pid 6420] +++ killed by SIGBUS +++ [pid 6436] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6420, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6439] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6439] memfd_create("syzkaller", 0 [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6422, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6439] <... memfd_create resumed>) = 3 [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 6439] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5614] umount2("./31", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... restart_syscall resumed>) = 0 [pid 6439] <... mmap resumed>) = 0x7fef8c868000 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 121.598722][ T6437] EXT4-fs (loop0): Free/Dirty block details [ 121.598734][ T6437] EXT4-fs (loop0): free_blocks=20480 [ 121.598747][ T6437] EXT4-fs (loop0): dirty_blocks=160 [ 121.598758][ T6437] EXT4-fs (loop0): Block reservation details [ 121.598769][ T6437] EXT4-fs (loop0): i_reserved_data_blocks=10 [ 121.600436][ T6438] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [pid 6439] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5614] fstat(3 [pid 5609] umount2("./31", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5614] getdents64(3 [pid 5609] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5609] <... openat resumed>) = 3 [pid 5614] umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] <... umount2 resumed>) = 0 [pid 5609] fstat(3 [pid 5611] umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5611] newfstatat(AT_FDCWD, "./32/file1" [pid 6439] <... write resumed>) = 524288 [pid 6439] munmap(0x7fef8c868000, 138412032 [pid 5611] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6439] <... munmap resumed>) = 0 [pid 5611] umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] getdents64(3 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6439] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5611] openat(AT_FDCWD, "./32/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 121.600641][ T6438] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 204 with error 28 [ 121.600667][ T6438] EXT4-fs (loop4): This should not happen!! Data will be lost [ 121.600667][ T6438] [ 121.600680][ T6438] EXT4-fs (loop4): Total free blocks count 0 [ 121.600696][ T6438] EXT4-fs (loop4): Free/Dirty block details [ 121.600708][ T6438] EXT4-fs (loop4): free_blocks=20480 [ 121.600721][ T6438] EXT4-fs (loop4): dirty_blocks=208 [ 121.600733][ T6438] EXT4-fs (loop4): Block reservation details [ 121.600744][ T6438] EXT4-fs (loop4): i_reserved_data_blocks=13 [pid 5609] umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6439] <... openat resumed>) = 4 [pid 5611] <... openat resumed>) = 4 [pid 5611] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5611] getdents64(4, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6439] ioctl(4, LOOP_SET_FD, 3 [pid 5611] getdents64(4, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5611] close(4) = 0 [pid 5611] rmdir("./32/file1") = 0 [pid 5611] umount2("./32/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6439] <... ioctl resumed>) = 0 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] newfstatat(AT_FDCWD, "./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5612] <... umount2 resumed>) = 0 [pid 6439] close(3 [pid 5612] umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] unlink("./32/binderfs" [pid 6439] <... close resumed>) = 0 [pid 5611] <... unlink resumed>) = 0 [pid 6439] close(4) = 0 [pid 5611] getdents64(3 [pid 6439] mkdir("./file1", 0777) = 0 [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6439] mount("/dev/loop1", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 121.749907][ T5612] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 121.764127][ T6439] loop1: detected capacity change from 0 to 1024 [pid 5611] close(3 [pid 5612] newfstatat(AT_FDCWD, "./32/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] <... close resumed>) = 0 [pid 5611] rmdir("./32") = 0 [pid 5611] mkdir("./33", 0777) = 0 [pid 5611] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5611] ioctl(3, LOOP_CLR_FD) = 0 [pid 5611] close(3 [pid 5612] umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5614] <... umount2 resumed>) = 0 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] <... close resumed>) = 0 [pid 5612] openat(AT_FDCWD, "./32/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5611] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5611] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5614] umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./31/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./31/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5612] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5612] getdents64(4, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5614] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5612] getdents64(4, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5612] close(4 [ 121.788036][ T177] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 204 with max blocks 4 with error 28 [ 121.788067][ T177] EXT4-fs (loop4): This should not happen!! Data will be lost [ 121.788067][ T177] [ 121.799960][ T5614] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 5614] getdents64(4, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5612] <... close resumed>) = 0 [pid 5614] getdents64(4, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5612] rmdir("./32/file1" [pid 5614] close(4 [pid 5612] <... rmdir resumed>) = 0 [pid 5614] <... close resumed>) = 0 [pid 5614] rmdir("./31/file1" [pid 5612] umount2("./32/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5612] newfstatat(AT_FDCWD, "./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5612] unlink("./32/binderfs") = 0 [pid 5612] getdents64(3, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5612] close(3) = 0 [pid 5612] rmdir("./32") = 0 [pid 5614] <... rmdir resumed>) = 0 [pid 5614] umount2("./31/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./31/binderfs" [pid 5612] mkdir("./33", 0777 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5612] <... mkdir resumed>) = 0 [pid 5614] unlink("./31/binderfs") = 0 [pid 5612] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5612] ioctl(3, LOOP_CLR_FD) = 0 [pid 5612] close(3 [pid 5614] getdents64(3, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5614] close(3) = 0 [pid 5614] rmdir("./31") = 0 [pid 5614] mkdir("./32", 0777) = 0 [pid 5614] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 ci2-upstream-fs/strace-static-x86_64: Process 6442 attached [pid 5609] <... umount2 resumed>) = 0 [pid 6442] set_robust_list(0x5555748a66e0, 24 [pid 5614] ioctl(3, LOOP_CLR_FD [pid 5609] umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6439] <... mount resumed>) = 0 [pid 5614] <... ioctl resumed>) = 0 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6442] <... set_robust_list resumed>) = 0 [pid 5611] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6442 [pid 6442] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] newfstatat(AT_FDCWD, "./31/file1" [pid 6442] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] close(3 [pid 5611] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6439] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6442] chdir("./33" [pid 6439] <... openat resumed>) = 3 [pid 5611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5612] <... close resumed>) = 0 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6442] <... chdir resumed>) = 0 [pid 6439] chdir("./file1" [pid 5609] openat(AT_FDCWD, "./31/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5612] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6442] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6439] <... chdir resumed>) = 0 [pid 5612] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5609] <... openat resumed>) = 4 [pid 5609] fstat(4 [pid 5612] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 121.864953][ T177] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 148 with max blocks 4 with error 28 [ 121.864984][ T177] EXT4-fs (loop0): This should not happen!! Data will be lost [ 121.864984][ T177] [ 121.884067][ T5609] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 5609] getdents64(4, 0x5555748af7d0 /* 2 entries */, 32768) = 48 ci2-upstream-fs/strace-static-x86_64: Process 6443 attached [pid 5609] getdents64(4 [pid 5612] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6443 [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./31/file1" [pid 6443] set_robust_list(0x5555748a66e0, 24 [pid 6442] <... prctl resumed>) = 0 [pid 6439] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5612] rt_sigprocmask(SIG_SETMASK, [] [pid 6442] setpgid(0, 0) = 0 [pid 6439] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5612] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6443] <... set_robust_list resumed>) = 0 [pid 6442] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6439] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6443] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] <... rmdir resumed>) = 0 [pid 6443] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6442] <... openat resumed>) = 3 [pid 6439] <... futex resumed>) = 1 [pid 6436] <... futex resumed>) = 0 [pid 5614] <... close resumed>) = 0 [pid 6436] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6443] chdir("./33" [pid 6442] write(3, "1000", 4 [pid 6439] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5609] umount2("./31/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6436] <... futex resumed>) = 0 [pid 6442] <... write resumed>) = 4 [pid 6436] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6443] <... chdir resumed>) = 0 [pid 5614] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6442] close(3 [pid 6439] <... openat resumed>) = 4 [pid 5609] newfstatat(AT_FDCWD, "./31/binderfs" [pid 6443] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6443] setpgid(0, 0 [pid 6439] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6443] <... setpgid resumed>) = 0 [pid 6439] <... futex resumed>) = 1 [pid 6436] <... futex resumed>) = 0 [pid 6443] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6436] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6443] <... openat resumed>) = 3 [pid 6439] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6436] <... futex resumed>) = 0 [pid 6443] write(3, "1000", 4 [pid 6439] <... openat resumed>) = 5 [pid 6436] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6443] <... write resumed>) = 4 [pid 6439] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6436] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6439] <... futex resumed>) = 0 [pid 6442] <... close resumed>) = 0 [pid 6439] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6443] close(3 [pid 6439] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6436] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6443] <... close resumed>) = 0 [pid 6439] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6436] <... futex resumed>) = 0 [pid 6439] <... openat resumed>) = 6 [pid 6443] symlink("/dev/binderfs", "./binderfs" [pid 6436] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6443] <... symlink resumed>) = 0 [pid 6439] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6443] write(1, "executing program\n", 18 [pid 6439] <... futex resumed>) = 0 [pid 6436] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6442] symlink("/dev/binderfs", "./binderfs" [pid 6439] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6436] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] unlink("./31/binderfs" [pid 6443] <... write resumed>) = 18 executing program [pid 6439] <... mmap resumed>) = 0x200000000000 [pid 6436] <... futex resumed>) = 0 [pid 6442] <... symlink resumed>) = 0 [pid 5609] <... unlink resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6444 attached [pid 6443] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6436] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] getdents64(3 [pid 6443] <... futex resumed>) = 0 [pid 6444] set_robust_list(0x5555748a66e0, 24 [pid 6443] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6439] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6444] <... set_robust_list resumed>) = 0 [pid 6442] write(1, "executing program\n", 18 [pid 5614] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6444 [pid 5609] close(3 [pid 6442] <... write resumed>) = 18 [pid 6444] rt_sigprocmask(SIG_SETMASK, [] [pid 6443] <... rt_sigaction resumed>, NULL, 8) = 0 executing program [pid 6439] <... futex resumed>) = 1 [pid 6436] <... futex resumed>) = 0 [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] <... close resumed>) = 0 [pid 6442] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6444] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6443] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6442] <... futex resumed>) = 0 [pid 6439] sendfile(4, 5, NULL, 553647746 [pid 6436] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] rmdir("./31" [pid 6444] chdir("./32" [pid 6443] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6442] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6436] <... futex resumed>) = 0 [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6444] <... chdir resumed>) = 0 [pid 6443] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6442] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6436] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] <... rmdir resumed>) = 0 [pid 6444] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6443] <... mmap resumed>) = 0x7fef94c68000 [pid 6442] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6444] <... prctl resumed>) = 0 [pid 6443] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6442] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] mkdir("./32", 0777 [pid 6444] setpgid(0, 0 [pid 6443] <... mprotect resumed>) = 0 [pid 6442] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6444] <... setpgid resumed>) = 0 [pid 6443] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6442] <... mmap resumed>) = 0x7fef94c68000 [pid 5609] <... mkdir resumed>) = 0 [pid 6442] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6444] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6443] <... rt_sigprocmask resumed>, [], 8) = 0 [ 121.979341][ T37] audit: type=1800 audit(1785844652.374:163): pid=6439 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop1" ino=15 res=0 errno=0 [pid 6442] <... mprotect resumed>) = 0 [pid 6444] <... openat resumed>) = 3 [pid 6443] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6442] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6442] <... rt_sigprocmask resumed>, [], 8) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6445 attached [pid 6444] write(3, "1000", 4 [pid 6442] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 5609] <... openat resumed>) = 3 ci2-upstream-fs/strace-static-x86_64: Process 6446 attached [pid 6445] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6444] <... write resumed>) = 4 [pid 6443] <... clone3 resumed> => {parent_tid=[6445]}, 88) = 6445 [pid 5609] ioctl(3, LOOP_CLR_FD [pid 6446] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6444] close(3 [pid 6443] rt_sigprocmask(SIG_SETMASK, [] [pid 6446] <... rseq resumed>) = 0 [pid 6445] <... rseq resumed>) = 0 [pid 6444] <... close resumed>) = 0 [pid 6443] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6442] <... clone3 resumed> => {parent_tid=[6446]}, 88) = 6446 [pid 5609] <... ioctl resumed>) = 0 [pid 6446] set_robust_list(0x7fef94c889a0, 24 [pid 6444] symlink("/dev/binderfs", "./binderfs" [pid 6443] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6442] rt_sigprocmask(SIG_SETMASK, [] [pid 6446] <... set_robust_list resumed>) = 0 [pid 6445] set_robust_list(0x7fef94c889a0, 24 [pid 6444] <... symlink resumed>) = 0 [pid 6443] <... futex resumed>) = 0 [pid 6442] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] close(3 [pid 6445] <... set_robust_list resumed>) = 0 [pid 6443] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6446] rt_sigprocmask(SIG_SETMASK, [] [pid 6442] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6446] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6444] write(1, "executing program\n", 18 [pid 6442] <... futex resumed>) = 0 executing program [pid 6446] memfd_create("syzkaller", 0 [pid 6445] rt_sigprocmask(SIG_SETMASK, [] [pid 6444] <... write resumed>) = 18 [pid 6442] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6446] <... memfd_create resumed>) = 3 [pid 6444] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6446] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6445] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6444] <... futex resumed>) = 0 [pid 6446] <... mmap resumed>) = 0x7fef8c868000 [pid 6445] memfd_create("syzkaller", 0 [pid 6444] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6445] <... memfd_create resumed>) = 3 [pid 6444] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6436] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6445] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6444] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6436] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... close resumed>) = 0 [pid 6444] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6436] <... futex resumed>) = 0 [pid 6445] <... mmap resumed>) = 0x7fef8c868000 [pid 6444] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c68000 [pid 6436] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c47000 [pid 6444] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6436] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6446] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6444] <... mprotect resumed>) = 0 [pid 6436] <... mprotect resumed>) = 0 [pid 5609] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6445] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6444] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6436] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6444] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6436] <... rt_sigprocmask resumed>, [], 8) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6448 attached ci2-upstream-fs/strace-static-x86_64: Process 6447 attached [pid 6436] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6448] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6447] set_robust_list(0x5555748a66e0, 24 [pid 6444] <... clone3 resumed> => {parent_tid=[6448]}, 88) = 6448 ci2-upstream-fs/strace-static-x86_64: Process 6449 attached [pid 6448] <... rseq resumed>) = 0 [pid 6447] <... set_robust_list resumed>) = 0 [pid 6444] rt_sigprocmask(SIG_SETMASK, [] [pid 6436] <... clone3 resumed> => {parent_tid=[6449]}, 88) = 6449 [pid 6448] set_robust_list(0x7fef94c889a0, 24 [pid 6447] rt_sigprocmask(SIG_SETMASK, [] [pid 6444] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6436] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6447 [pid 6449] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6448] <... set_robust_list resumed>) = 0 [pid 6447] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6446] <... write resumed>) = 524288 [pid 6444] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6436] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 6449] <... rseq resumed>) = 0 [pid 6448] rt_sigprocmask(SIG_SETMASK, [] [pid 6447] chdir("./32" [pid 6445] <... write resumed>) = 524288 [pid 6444] <... futex resumed>) = 0 [pid 6436] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6449] set_robust_list(0x7fef94c679a0, 24 [pid 6448] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6447] <... chdir resumed>) = 0 [pid 6444] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6436] <... futex resumed>) = 0 [pid 6449] <... set_robust_list resumed>) = 0 [pid 6448] memfd_create("syzkaller", 0 [pid 6447] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6446] munmap(0x7fef8c868000, 138412032 [pid 6436] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6447] <... prctl resumed>) = 0 [pid 6449] rt_sigprocmask(SIG_SETMASK, [] [pid 6448] <... memfd_create resumed>) = 3 [pid 6447] setpgid(0, 0 [pid 6446] <... munmap resumed>) = 0 [pid 6445] munmap(0x7fef8c868000, 138412032 [pid 6449] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6447] <... setpgid resumed>) = 0 [pid 6448] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6447] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6446] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6445] <... munmap resumed>) = 0 [pid 6446] <... openat resumed>) = 4 [pid 6448] <... mmap resumed>) = 0x7fef8c868000 [pid 6447] <... openat resumed>) = 3 [pid 6446] ioctl(4, LOOP_SET_FD, 3 [pid 6445] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6447] write(3, "1000", 4 [pid 6445] <... openat resumed>) = 4 [pid 6447] <... write resumed>) = 4 [pid 6445] ioctl(4, LOOP_SET_FD, 3 [pid 6447] close(3) = 0 [pid 6447] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6448] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6447] write(1, "executing program\n", 18) = 18 [pid 6447] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6446] <... ioctl resumed>) = 0 [pid 6447] <... futex resumed>) = 0 [pid 6446] close(3 [pid 6447] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6446] <... close resumed>) = 0 [pid 6447] <... rt_sigaction resumed>, NULL, 8) = 0 executing program [pid 6446] close(4 [pid 6447] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6446] <... close resumed>) = 0 [pid 6445] <... ioctl resumed>) = 0 [pid 6447] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6446] mkdir("./file1", 0777 [pid 6447] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6446] <... mkdir resumed>) = 0 [pid 6447] <... mmap resumed>) = 0x7fef94c68000 [pid 6445] close(3 [pid 6447] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6446] mount("/dev/loop2", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6445] <... close resumed>) = 0 [pid 6436] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6447] <... mprotect resumed>) = 0 [pid 6445] close(4 [pid 6447] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6445] <... close resumed>) = 0 [pid 6448] <... write resumed>) = 524288 [pid 6445] mkdir("./file1", 0777 [pid 6447] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6445] <... mkdir resumed>) = 0 [pid 6448] munmap(0x7fef8c868000, 138412032) = 0 [ 122.143174][ T6449] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 122.143348][ T6449] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 316 with error 28 [ 122.143371][ T6449] EXT4-fs (loop1): This should not happen!! Data will be lost [ 122.143371][ T6449] [ 122.143384][ T6449] EXT4-fs (loop1): Total free blocks count 0 [ 122.143396][ T6449] EXT4-fs (loop1): Free/Dirty block details [pid 6447] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0}ci2-upstream-fs/strace-static-x86_64: Process 6450 attached [pid 6448] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6445] mount("/dev/loop3", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6450] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6448] <... openat resumed>) = 4 [pid 6447] <... clone3 resumed> => {parent_tid=[6450]}, 88) = 6450 [pid 6450] <... rseq resumed>) = 0 [pid 6448] ioctl(4, LOOP_SET_FD, 3 [pid 6447] rt_sigprocmask(SIG_SETMASK, [] [pid 6450] set_robust_list(0x7fef94c889a0, 24 [pid 6449] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6448] <... ioctl resumed>) = 0 [pid 6447] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6439] <... sendfile resumed>) = 323584 [pid 6450] <... set_robust_list resumed>) = 0 [pid 6447] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6450] rt_sigprocmask(SIG_SETMASK, [] [pid 6449] +++ killed by SIGBUS +++ [pid 6448] close(3 [pid 6447] <... futex resumed>) = 0 [pid 6446] <... mount resumed>) = 0 [pid 6450] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6448] <... close resumed>) = 0 [pid 6447] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6446] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6450] memfd_create("syzkaller", 0 [pid 6448] close(4 [pid 6446] <... openat resumed>) = 3 [pid 6439] +++ killed by SIGBUS +++ [pid 6436] +++ killed by SIGBUS +++ [pid 5610] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6436, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6450] <... memfd_create resumed>) = 3 [pid 6448] <... close resumed>) = 0 [pid 5610] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 6450] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fef8c868000 [ 122.143409][ T6449] EXT4-fs (loop1): free_blocks=20480 [ 122.143422][ T6449] EXT4-fs (loop1): dirty_blocks=336 [ 122.143434][ T6449] EXT4-fs (loop1): Block reservation details [ 122.143445][ T6449] EXT4-fs (loop1): i_reserved_data_blocks=20 [pid 6446] chdir("./file1" [pid 6448] mkdir("./file1", 0777 [pid 6446] <... chdir resumed>) = 0 [pid 6448] <... mkdir resumed>) = 0 [pid 6446] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5610] <... restart_syscall resumed>) = 0 [pid 6446] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6450] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6448] mount("/dev/loop4", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6446] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6446] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6442] <... futex resumed>) = 0 [pid 5610] umount2("./31", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6442] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6446] <... futex resumed>) = 0 [pid 6442] <... futex resumed>) = 1 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6446] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6442] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6446] <... openat resumed>) = 4 [pid 6445] <... mount resumed>) = 0 [pid 5610] fstat(3 [pid 6446] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6446] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6442] <... futex resumed>) = 0 [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6445] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5610] getdents64(3 [pid 6442] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6445] chdir("./file1" [pid 6442] <... futex resumed>) = 1 [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6445] <... chdir resumed>) = 0 [pid 6442] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6446] <... futex resumed>) = 0 [pid 6445] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6446] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 5610] umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6445] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6446] <... openat resumed>) = 5 [pid 6445] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6443] <... futex resumed>) = 0 [pid 6446] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6443] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6442] <... futex resumed>) = 0 [pid 6445] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6442] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6445] <... openat resumed>) = 4 [pid 6443] <... futex resumed>) = 0 [pid 6442] <... futex resumed>) = 0 [pid 6450] <... write resumed>) = 524288 [pid 6446] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6443] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6442] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6445] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6445] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6450] munmap(0x7fef8c868000, 138412032 [pid 6443] <... futex resumed>) = 0 [pid 6450] <... munmap resumed>) = 0 [pid 6446] <... openat resumed>) = 6 [pid 6443] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6446] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6445] <... futex resumed>) = 0 [pid 6443] <... futex resumed>) = 1 [pid 6446] <... futex resumed>) = 1 [pid 6445] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6442] <... futex resumed>) = 0 [pid 6446] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6442] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6446] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6442] <... futex resumed>) = 0 [pid 6446] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6442] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6450] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6446] <... mmap resumed>) = 0x200000000000 [pid 6445] <... openat resumed>) = 5 [pid 6443] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6450] <... openat resumed>) = 4 [pid 6446] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6450] ioctl(4, LOOP_SET_FD, 3 [pid 6446] <... futex resumed>) = 1 [pid 6445] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6443] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6442] <... futex resumed>) = 0 [pid 6448] <... mount resumed>) = 0 [pid 6446] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6442] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6446] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6442] <... futex resumed>) = 0 [pid 6446] sendfile(4, 5, NULL, 553647746 [pid 6442] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6448] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6445] <... futex resumed>) = 0 [pid 6443] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6448] <... openat resumed>) = 3 [pid 6445] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6443] <... futex resumed>) = 0 [pid 6448] chdir("./file1" [pid 6445] <... openat resumed>) = 6 [pid 6443] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6450] <... ioctl resumed>) = 0 [pid 6448] <... chdir resumed>) = 0 [pid 6445] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6448] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6445] <... futex resumed>) = 1 [pid 6443] <... futex resumed>) = 0 [pid 6448] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6445] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6443] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6450] close(3 [pid 6445] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6443] <... futex resumed>) = 0 [pid 6450] <... close resumed>) = 0 [pid 6448] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6445] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6443] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6450] close(4 [pid 6448] <... futex resumed>) = 1 [pid 6444] <... futex resumed>) = 0 [ 122.334598][ T5610] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6450] <... close resumed>) = 0 [pid 6448] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6445] <... mmap resumed>) = 0x200000000000 [pid 6444] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6450] mkdir("./file1", 0777 [pid 6448] <... openat resumed>) = 4 [pid 6445] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6442] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5610] <... umount2 resumed>) = 0 [pid 6450] <... mkdir resumed>) = 0 [pid 6445] <... futex resumed>) = 1 [pid 6444] <... futex resumed>) = 0 [pid 6443] <... futex resumed>) = 0 [pid 6442] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6450] mount("/dev/loop0", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6448] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6445] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6444] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6443] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6442] <... futex resumed>) = 0 [pid 5610] umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6448] <... futex resumed>) = 0 [pid 6445] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6444] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6443] <... futex resumed>) = 0 [pid 6442] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6448] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6445] sendfile(4, 5, NULL, 553647746 [pid 6444] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6443] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6442] <... mmap resumed>) = 0x7fef94c47000 [pid 5610] newfstatat(AT_FDCWD, "./31/file1" [pid 6448] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6442] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6448] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6444] <... futex resumed>) = 0 [pid 5610] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6448] <... openat resumed>) = 5 [pid 6444] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6442] <... mprotect resumed>) = 0 [pid 6448] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6444] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6442] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5610] umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6448] <... futex resumed>) = 0 [pid 6444] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6442] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6448] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6444] <... futex resumed>) = 0 [pid 6448] <... openat resumed>) = 6 [pid 6444] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6442] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5610] openat(AT_FDCWD, "./31/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6448] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... openat resumed>) = 4 [pid 5610] fstat(4ci2-upstream-fs/strace-static-x86_64: Process 6459 attached [pid 6448] <... futex resumed>) = 1 [pid 6444] <... futex resumed>) = 0 [pid 6442] <... clone3 resumed> => {parent_tid=[6459]}, 88) = 6459 [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6459] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6450] <... mount resumed>) = 0 [pid 6448] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6444] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6442] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] getdents64(4 [pid 6459] <... rseq resumed>) = 0 [pid 6450] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6448] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6444] <... futex resumed>) = 0 [pid 6442] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6459] set_robust_list(0x7fef94c679a0, 24 [pid 6450] <... openat resumed>) = 3 [pid 6443] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6442] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6459] <... set_robust_list resumed>) = 0 [pid 6450] chdir("./file1" [pid 6448] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6444] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6443] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6442] <... futex resumed>) = 0 [pid 5610] getdents64(4 [pid 6459] rt_sigprocmask(SIG_SETMASK, [] [pid 6450] <... chdir resumed>) = 0 [pid 6448] <... mmap resumed>) = 0x200000000000 [pid 6443] <... futex resumed>) = 0 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6459] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6450] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6448] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6443] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6442] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] close(4 [pid 6450] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6448] <... futex resumed>) = 1 [pid 6444] <... futex resumed>) = 0 [pid 6443] <... mmap resumed>) = 0x7fef94c47000 [pid 5610] <... close resumed>) = 0 [pid 6450] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] rmdir("./31/file1" [pid 6447] <... futex resumed>) = 0 [ 122.525396][ T6446] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 122.528978][ T6459] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1336 with error 28 [ 122.529009][ T6459] EXT4-fs (loop2): This should not happen!! Data will be lost [ 122.529009][ T6459] [ 122.529023][ T6459] EXT4-fs (loop2): Total free blocks count 0 [pid 6450] <... futex resumed>) = 1 [pid 6448] sendfile(4, 5, NULL, 553647746 [pid 6447] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6444] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6443] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6442] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5610] <... rmdir resumed>) = 0 [pid 6450] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6444] <... futex resumed>) = 0 [pid 6443] <... mprotect resumed>) = 0 [pid 6444] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6443] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6447] <... futex resumed>) = 0 [pid 6447] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6443] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6443] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6450] <... openat resumed>) = 4 [pid 5610] umount2("./31/binderfs", MNT_FORCE|UMOUNT_NOFOLLOWci2-upstream-fs/strace-static-x86_64: Process 6460 attached ) = -1 EINVAL (Invalid argument) [pid 6443] <... clone3 resumed> => {parent_tid=[6460]}, 88) = 6460 [pid 5610] newfstatat(AT_FDCWD, "./31/binderfs" [pid 6460] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6450] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6443] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6460] <... rseq resumed>) = 0 [pid 6450] <... futex resumed>) = 1 [pid 6447] <... futex resumed>) = 0 [pid 6443] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6460] set_robust_list(0x7fef94c679a0, 24 [pid 6450] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6447] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6443] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] unlink("./31/binderfs" [pid 6460] <... set_robust_list resumed>) = 0 [pid 6450] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6447] <... futex resumed>) = 0 [pid 6443] <... futex resumed>) = 0 [pid 6460] rt_sigprocmask(SIG_SETMASK, [] [pid 6450] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6447] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 122.529035][ T6459] EXT4-fs (loop2): Free/Dirty block details [ 122.529048][ T6459] EXT4-fs (loop2): free_blocks=20480 [ 122.529061][ T6459] EXT4-fs (loop2): dirty_blocks=1344 [ 122.529073][ T6459] EXT4-fs (loop2): Block reservation details [ 122.529084][ T6459] EXT4-fs (loop2): i_reserved_data_blocks=84 [pid 6443] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... unlink resumed>) = 0 [pid 6460] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6450] <... openat resumed>) = 5 [pid 6450] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] getdents64(3 [pid 6450] <... futex resumed>) = 1 [pid 6447] <... futex resumed>) = 0 [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6450] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 6447] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] close(3) = 0 [pid 6450] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6447] <... futex resumed>) = 0 [pid 5610] rmdir("./31" [pid 6450] <... openat resumed>) = 6 [pid 6447] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6444] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6450] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6447] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6444] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6450] <... futex resumed>) = 0 [pid 6447] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6444] <... futex resumed>) = 0 [pid 6450] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6447] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... rmdir resumed>) = 0 [pid 6444] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6450] <... mmap resumed>) = 0x200000000000 [pid 5610] mkdir("./32", 0777 [pid 6444] <... mmap resumed>) = 0x7fef94c47000 [pid 6450] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6444] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6450] <... futex resumed>) = 1 [pid 6447] <... futex resumed>) = 0 [pid 6450] sendfile(4, 5, NULL, 553647746 [pid 6447] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6444] <... mprotect resumed>) = 0 [ 122.645746][ T6445] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 122.648952][ T6460] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 396 with error 28 [ 122.648984][ T6460] EXT4-fs (loop3): This should not happen!! Data will be lost [ 122.648984][ T6460] [ 122.648998][ T6460] EXT4-fs (loop3): Total free blocks count 0 [ 122.649011][ T6460] EXT4-fs (loop3): Free/Dirty block details [pid 6460] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6459] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6447] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6446] <... sendfile resumed>) = 1368064 [pid 6445] <... sendfile resumed>) = 405504 [pid 6443] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5610] <... mkdir resumed>) = 0 [pid 6446] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6445] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6446] <... futex resumed>) = 0 [pid 6446] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5610] <... openat resumed>) = 3 [pid 6445] <... futex resumed>) = ? [pid 5610] ioctl(3, LOOP_CLR_FD [pid 6460] +++ killed by SIGBUS +++ [pid 6445] +++ killed by SIGBUS +++ [pid 5610] <... ioctl resumed>) = 0 [pid 5610] close(3 [pid 6444] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6443] +++ killed by SIGBUS +++ [pid 5610] <... close resumed>) = 0 [pid 6444] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5612] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6443, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=11 /* 0.11 s */} --- ci2-upstream-fs/strace-static-x86_64: Process 6461 attached [pid 5610] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6461] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6446] <... futex resumed>) = ? [pid 6444] <... clone3 resumed> => {parent_tid=[6461]}, 88) = 6461 [pid 5610] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6444] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6444] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6446] +++ killed by SIGBUS +++ [pid 6444] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6461] <... rseq resumed>) = 0 [pid 6444] <... futex resumed>) = 0 [pid 6461] set_robust_list(0x7fef94c679a0, 24 [pid 6444] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-upstream-fs/strace-static-x86_64: Process 6462 attached [pid 6461] <... set_robust_list resumed>) = 0 [pid 6447] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 122.649024][ T6460] EXT4-fs (loop3): free_blocks=20480 [ 122.649037][ T6460] EXT4-fs (loop3): dirty_blocks=400 [ 122.649049][ T6460] EXT4-fs (loop3): Block reservation details [ 122.649060][ T6460] EXT4-fs (loop3): i_reserved_data_blocks=25 [pid 6462] set_robust_list(0x5555748a66e0, 24 [pid 6461] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6462 [pid 6462] <... set_robust_list resumed>) = 0 [pid 6461] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6459] +++ killed by SIGBUS +++ [pid 6447] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6442] +++ killed by SIGBUS +++ [pid 5612] umount2("./33", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6462] rt_sigprocmask(SIG_SETMASK, [] [pid 6447] <... futex resumed>) = 0 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6442, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5610] rt_sigprocmask(SIG_SETMASK, [] [pid 6462] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5612] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6462] chdir("./32" [pid 6447] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5612] <... openat resumed>) = 3 [pid 6462] <... chdir resumed>) = 0 [pid 6447] <... mmap resumed>) = 0x7fef94c47000 [pid 6462] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6447] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6462] <... prctl resumed>) = 0 [pid 6447] <... mprotect resumed>) = 0 [pid 6462] setpgid(0, 0 [pid 6447] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6462] <... setpgid resumed>) = 0 [pid 6447] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6462] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6447] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 6463 attached [pid 6462] <... openat resumed>) = 3 [pid 6463] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6462] write(3, "1000", 4 [pid 6447] <... clone3 resumed> => {parent_tid=[6463]}, 88) = 6463 [pid 5612] fstat(3 [pid 5610] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6463] <... rseq resumed>) = 0 [pid 6462] <... write resumed>) = 4 [pid 6447] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6463] set_robust_list(0x7fef94c679a0, 24 [pid 6462] close(3 [pid 6447] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6463] <... set_robust_list resumed>) = 0 [pid 6462] <... close resumed>) = 0 [pid 6447] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6463] rt_sigprocmask(SIG_SETMASK, [] [pid 6462] symlink("/dev/binderfs", "./binderfs" [pid 6447] <... futex resumed>) = 0 [pid 6463] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6444] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5612] getdents64(3 [pid 6462] <... symlink resumed>) = 0 [pid 6447] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] umount2("./33", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6462] write(1, "executing program\n", 18 [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 6462] <... write resumed>) = 18 [pid 5612] umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6462] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [ 122.765226][ T6461] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 122.767360][ T6461] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 468 with error 28 [ 122.767391][ T6461] EXT4-fs (loop4): This should not happen!! Data will be lost [ 122.767391][ T6461] [ 122.767406][ T6461] EXT4-fs (loop4): Total free blocks count 0 [ 122.767418][ T6461] EXT4-fs (loop4): Free/Dirty block details [pid 5611] fstat(3 [pid 6462] <... futex resumed>) = 0 [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6461] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6448] <... sendfile resumed>) = 483328 [pid 6462] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60}, NULL, 8) = 0 [pid 5611] getdents64(3 [pid 6462] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6462] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5611] umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6462] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c68000 [pid 6462] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6462] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6463] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6462] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6462] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0}ci2-upstream-fs/strace-static-x86_64: Process 6464 attached => {parent_tid=[6464]}, 88) = 6464 [pid 6462] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6462] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6461] +++ killed by SIGBUS +++ [pid 6448] +++ killed by SIGBUS +++ [pid 6447] <... futex resumed>) = ? [pid 6464] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6462] <... futex resumed>) = 0 [pid 6464] <... rseq resumed>) = 0 [pid 6462] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6464] set_robust_list(0x7fef94c889a0, 24) = 0 [ 122.767430][ T6461] EXT4-fs (loop4): free_blocks=20480 [ 122.767443][ T6461] EXT4-fs (loop4): dirty_blocks=480 [ 122.767455][ T6461] EXT4-fs (loop4): Block reservation details [ 122.767466][ T6461] EXT4-fs (loop4): i_reserved_data_blocks=30 [ 122.810012][ T6463] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 122.811491][ T6463] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 576 with error 28 [pid 6464] rt_sigprocmask(SIG_SETMASK, [] [pid 6444] +++ killed by SIGBUS +++ [pid 6464] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6444, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6464] memfd_create("syzkaller", 0 [pid 5614] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 6464] <... memfd_create resumed>) = 3 [pid 6464] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fef8c868000 [pid 5614] <... restart_syscall resumed>) = 0 [pid 6464] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5614] umount2("./32", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5614] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6463] +++ killed by SIGBUS +++ [pid 5614] getdents64(3 [pid 6450] <... sendfile resumed>) = ? [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [ 122.811520][ T6463] EXT4-fs (loop0): This should not happen!! Data will be lost [ 122.811520][ T6463] [ 122.811534][ T6463] EXT4-fs (loop0): Total free blocks count 0 [ 122.811546][ T6463] EXT4-fs (loop0): Free/Dirty block details [ 122.811559][ T6463] EXT4-fs (loop0): free_blocks=20480 [ 122.811572][ T6463] EXT4-fs (loop0): dirty_blocks=576 [ 122.811583][ T6463] EXT4-fs (loop0): Block reservation details [ 122.811594][ T6463] EXT4-fs (loop0): i_reserved_data_blocks=36 [pid 5614] umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6450] +++ killed by SIGBUS +++ [pid 6447] +++ killed by SIGBUS +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6447, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5609] umount2("./32", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6464] <... write resumed>) = 524288 [pid 5609] getdents64(3 [pid 6464] munmap(0x7fef8c868000, 138412032 [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6464] <... munmap resumed>) = 0 [pid 5609] umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6464] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 122.891978][ T5611] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 122.893680][ T5612] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 122.946985][ T63] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 468 with max blocks 4 with error 28 [pid 6464] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6464] close(3) = 0 [pid 6464] close(4) = 0 [pid 6464] mkdir("./file1", 0777 [pid 5614] <... umount2 resumed>) = 0 [pid 5614] umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./32/file1" [pid 6464] <... mkdir resumed>) = 0 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 122.947015][ T63] EXT4-fs (loop4): This should not happen!! Data will be lost [ 122.947015][ T63] [ 122.979063][ T5614] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 5614] umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5612] <... umount2 resumed>) = 0 [pid 5611] <... umount2 resumed>) = 0 [pid 6464] mount("/dev/loop1", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5614] openat(AT_FDCWD, "./32/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5614] fstat(4 [pid 5612] umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5612] newfstatat(AT_FDCWD, "./33/file1" [pid 5611] newfstatat(AT_FDCWD, "./33/file1" [pid 5614] getdents64(4 [pid 5612] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] <... umount2 resumed>) = 0 [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5612] umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5614] getdents64(4 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5612] openat(AT_FDCWD, "./33/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5611] openat(AT_FDCWD, "./33/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5609] umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5614] close(4 [pid 5612] <... openat resumed>) = 4 [pid 5611] <... openat resumed>) = 4 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5614] <... close resumed>) = 0 [pid 5611] fstat(4 [pid 5612] fstat(4 [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] newfstatat(AT_FDCWD, "./32/file1" [pid 5614] rmdir("./32/file1" [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5611] getdents64(4 [pid 5609] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6464] <... mount resumed>) = 0 [pid 5614] <... rmdir resumed>) = 0 [pid 5612] getdents64(4 [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5609] umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6464] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5614] umount2("./32/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6464] <... openat resumed>) = 3 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6464] chdir("./file1" [pid 5614] newfstatat(AT_FDCWD, "./32/binderfs" [pid 6464] <... chdir resumed>) = 0 [pid 6464] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5614] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5611] getdents64(4 [pid 5609] openat(AT_FDCWD, "./32/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6464] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5614] unlink("./32/binderfs" [pid 6464] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... unlink resumed>) = 0 [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5609] <... openat resumed>) = 4 [pid 6464] <... futex resumed>) = 1 [pid 6462] <... futex resumed>) = 0 [pid 5614] getdents64(3 [pid 5611] close(4 [pid 6464] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6462] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5612] getdents64(4 [pid 5609] fstat(4 [pid 6464] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6462] <... futex resumed>) = 0 [pid 5614] close(3 [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5611] <... close resumed>) = 0 [pid 6464] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6462] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] <... close resumed>) = 0 [pid 5612] close(4 [ 123.006490][ T63] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 576 with max blocks 4 with error 28 [ 123.006522][ T63] EXT4-fs (loop0): This should not happen!! Data will be lost [ 123.006522][ T63] [ 123.045795][ T5609] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 5611] rmdir("./33/file1" [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5614] rmdir("./32" [pid 5612] <... close resumed>) = 0 [pid 5611] <... rmdir resumed>) = 0 [pid 5609] getdents64(4 [pid 5614] <... rmdir resumed>) = 0 [pid 5612] rmdir("./33/file1" [pid 5611] umount2("./33/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5614] mkdir("./33", 0777 [pid 5612] <... rmdir resumed>) = 0 [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5612] umount2("./33/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6464] <... openat resumed>) = 4 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] getdents64(4 [pid 5612] newfstatat(AT_FDCWD, "./33/binderfs" [pid 5611] newfstatat(AT_FDCWD, "./33/binderfs" [pid 5612] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5612] unlink("./33/binderfs" [pid 5611] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5612] <... unlink resumed>) = 0 [pid 5611] unlink("./33/binderfs" [pid 5609] close(4 [pid 6464] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... mkdir resumed>) = 0 [pid 5612] getdents64(3 [pid 5611] <... unlink resumed>) = 0 [pid 5609] <... close resumed>) = 0 [pid 6464] <... futex resumed>) = 1 [pid 6462] <... futex resumed>) = 0 [pid 5614] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5611] getdents64(3 [pid 5609] rmdir("./32/file1" [pid 6464] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6462] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... openat resumed>) = 3 [pid 5612] close(3 [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5609] <... rmdir resumed>) = 0 [pid 5612] <... close resumed>) = 0 [pid 5611] close(3 [pid 5609] umount2("./32/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6464] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6462] <... futex resumed>) = 0 [pid 5614] ioctl(3, LOOP_CLR_FD [pid 5612] rmdir("./33" [pid 5611] <... close resumed>) = 0 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6464] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6462] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] <... ioctl resumed>) = 0 [pid 5612] <... rmdir resumed>) = 0 [pid 5611] rmdir("./33" [pid 5609] newfstatat(AT_FDCWD, "./32/binderfs" [pid 6464] <... openat resumed>) = 5 [pid 5614] close(3 [pid 5612] mkdir("./34", 0777 [pid 5611] <... rmdir resumed>) = 0 [pid 5609] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5612] <... mkdir resumed>) = 0 [pid 5611] mkdir("./34", 0777 [pid 5609] unlink("./32/binderfs" [pid 6464] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5611] <... mkdir resumed>) = 0 [pid 5609] <... unlink resumed>) = 0 [pid 6464] <... futex resumed>) = 1 [pid 6462] <... futex resumed>) = 0 [pid 5612] <... openat resumed>) = 3 [pid 5611] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5609] getdents64(3 [pid 6464] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6462] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] ioctl(3, LOOP_CLR_FD [pid 5611] <... openat resumed>) = 3 [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6462] <... futex resumed>) = 0 [pid 5612] <... ioctl resumed>) = 0 [pid 5611] ioctl(3, LOOP_CLR_FD [pid 5609] close(3 [pid 6464] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6462] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] close(3 [pid 5611] <... ioctl resumed>) = 0 [pid 5609] <... close resumed>) = 0 [pid 6464] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 5611] close(3 [pid 5609] rmdir("./32" [pid 6464] <... openat resumed>) = 6 [pid 5609] <... rmdir resumed>) = 0 [pid 6464] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... close resumed>) = 0 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6464] <... futex resumed>) = 1 [pid 6462] <... futex resumed>) = 0 [pid 5609] mkdir("./33", 0777 [pid 6464] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6462] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6464] <... mmap resumed>) = 0x200000000000 [pid 6462] <... futex resumed>) = 0 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5609] <... mkdir resumed>) = 0 [pid 6462] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6464] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6462] <... futex resumed>) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6462] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5612] <... close resumed>) = 0 [pid 6462] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] <... openat resumed>) = 3 [pid 6464] sendfile(4, 5, NULL, 553647746 [pid 5612] rt_sigprocmask(SIG_BLOCK, ~[]ci2-upstream-fs/strace-static-x86_64: Process 6467 attached [pid 5609] ioctl(3, LOOP_CLR_FD [pid 6467] set_robust_list(0x5555748a66e0, 24 [pid 5614] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6467 [pid 5612] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6467] <... set_robust_list resumed>) = 0 [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5611] <... close resumed>) = 0 [pid 5609] <... ioctl resumed>) = 0 [pid 6467] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6468 attached [pid 6467] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5611] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5609] close(3 [pid 6467] chdir("./33" [pid 5612] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6468 [pid 6468] set_robust_list(0x5555748a66e0, 24 [pid 6467] <... chdir resumed>) = 0 [pid 5612] rt_sigprocmask(SIG_SETMASK, [] [pid 5611] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6468] <... set_robust_list resumed>) = 0 [pid 6467] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5612] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6468] rt_sigprocmask(SIG_SETMASK, [] [pid 5611] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6468] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6468] chdir("./34" [pid 6467] <... prctl resumed>) = 0 [pid 6467] setpgid(0, 0) = 0 [pid 6467] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6468] <... chdir resumed>) = 0 [pid 6467] <... openat resumed>) = 3 ci2-upstream-fs/strace-static-x86_64: Process 6469 attached [pid 6468] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6469] set_robust_list(0x5555748a66e0, 24 [pid 6468] <... prctl resumed>) = 0 [pid 6467] write(3, "1000", 4 [pid 6468] setpgid(0, 0 [pid 6467] <... write resumed>) = 4 [pid 5611] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6469 [pid 6469] <... set_robust_list resumed>) = 0 [pid 6468] <... setpgid resumed>) = 0 [pid 6467] close(3 [pid 5611] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] <... close resumed>) = 0 [pid 6469] rt_sigprocmask(SIG_SETMASK, [] [pid 6468] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6467] <... close resumed>) = 0 [pid 6469] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6468] <... openat resumed>) = 3 [pid 6467] symlink("/dev/binderfs", "./binderfs" [pid 5611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6462] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6462] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6469] chdir("./34" [pid 6468] write(3, "1000", 4 [pid 6462] <... futex resumed>) = 0 [pid 6469] <... chdir resumed>) = 0 [pid 6468] <... write resumed>) = 4 [pid 6462] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6469] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6468] close(3 [pid 6462] <... mmap resumed>) = 0x7fef94c47000 [pid 6469] <... prctl resumed>) = 0 [pid 6469] setpgid(0, 0 [pid 6468] <... close resumed>) = 0 [pid 6462] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6469] <... setpgid resumed>) = 0 [pid 6468] symlink("/dev/binderfs", "./binderfs" [pid 6469] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6462] <... mprotect resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6470 attached [pid 6468] <... symlink resumed>) = 0 [pid 6462] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6469] <... openat resumed>) = 3 [pid 5609] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6470 [pid 6462] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 6462] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 6471 attached [pid 6470] set_robust_list(0x5555748a66e0, 24 [pid 6469] write(3, "1000", 4 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6471] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6470] <... set_robust_list resumed>) = 0 [pid 6469] <... write resumed>) = 4 [pid 6468] write(1, "executing program\n", 18 [pid 6467] <... symlink resumed>) = 0 executing program [pid 6471] <... rseq resumed>) = 0 [pid 6470] rt_sigprocmask(SIG_SETMASK, [] [pid 6469] close(3 [pid 6468] <... write resumed>) = 18 [pid 6467] write(1, "executing program\n", 18 [pid 6462] <... clone3 resumed> => {parent_tid=[6471]}, 88) = 6471 [pid 6471] set_robust_list(0x7fef94c679a0, 24 [pid 6469] <... close resumed>) = 0 executing program [pid 6468] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6470] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6467] <... write resumed>) = 18 [pid 6462] rt_sigprocmask(SIG_SETMASK, [] [pid 6471] <... set_robust_list resumed>) = 0 [pid 6469] symlink("/dev/binderfs", "./binderfs" [pid 6468] <... futex resumed>) = 0 [pid 6470] chdir("./33" [pid 6471] rt_sigprocmask(SIG_SETMASK, [] [pid 6468] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6467] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6471] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6468] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6462] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6469] <... symlink resumed>) = 0 [pid 6467] <... futex resumed>) = 0 [pid 6468] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6467] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6471] futex(0x7fef94d63e58, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6470] <... chdir resumed>) = 0 [pid 6468] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6467] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6462] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6471] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6470] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6469] write(1, "executing program\n", 18 [pid 6468] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6467] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6462] <... futex resumed>) = 0 [pid 6470] <... prctl resumed>) = 0 [pid 6469] <... write resumed>) = 18 [pid 6468] <... mmap resumed>) = 0x7fef94c68000 [pid 6470] setpgid(0, 0 [pid 6469] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6470] <... setpgid resumed>) = 0 [pid 6469] <... futex resumed>) = 0 [pid 6468] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6467] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6462] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6470] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6467] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6469] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6468] <... mprotect resumed>) = 0 [pid 6467] <... mmap resumed>) = 0x7fef94c68000 [pid 6469] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6467] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6470] <... openat resumed>) = 3 [pid 6467] <... mprotect resumed>) = 0 [pid 6469] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6468] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6467] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6469] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6467] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6467] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0}ci2-upstream-fs/strace-static-x86_64: Process 6472 attached executing program [pid 6472] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 6467] <... clone3 resumed> => {parent_tid=[6472]}, 88) = 6472 [pid 6469] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6472] set_robust_list(0x7fef94c889a0, 24 [pid 6469] <... mmap resumed>) = 0x7fef94c68000 [pid 6468] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6467] rt_sigprocmask(SIG_SETMASK, [] [pid 6472] <... set_robust_list resumed>) = 0 [pid 6467] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6470] write(3, "1000", 4 [pid 6468] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6472] rt_sigprocmask(SIG_SETMASK, [] [pid 6470] <... write resumed>) = 4 [pid 6469] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6467] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6470] close(3ci2-upstream-fs/strace-static-x86_64: Process 6473 attached [pid 6472] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6470] <... close resumed>) = 0 [pid 6469] <... mprotect resumed>) = 0 [pid 6467] <... futex resumed>) = 0 [pid 6472] memfd_create("syzkaller", 0 [pid 6470] symlink("/dev/binderfs", "./binderfs" [pid 6469] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6468] <... clone3 resumed> => {parent_tid=[6473]}, 88) = 6473 [pid 6467] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6473] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6472] <... memfd_create resumed>) = 3 [pid 6470] <... symlink resumed>) = 0 [pid 6469] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6473] <... rseq resumed>) = 0 [pid 6472] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6469] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [ 123.267501][ T6471] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 123.285970][ T6471] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 476 with error 28 [ 123.286001][ T6471] EXT4-fs (loop1): This should not happen!! Data will be lost [ 123.286001][ T6471] [ 123.286014][ T6471] EXT4-fs (loop1): Total free blocks count 0 [pid 6468] rt_sigprocmask(SIG_SETMASK, []ci2-upstream-fs/strace-static-x86_64: Process 6474 attached [pid 6473] set_robust_list(0x7fef94c889a0, 24 [pid 6470] write(1, "executing program\n", 18 [pid 6472] <... mmap resumed>) = 0x7fef8c868000 [pid 6468] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6473] <... set_robust_list resumed>) = 0 [pid 6468] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6470] <... write resumed>) = 18 [pid 6474] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6473] rt_sigprocmask(SIG_SETMASK, [] [pid 6470] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6469] <... clone3 resumed> => {parent_tid=[6474]}, 88) = 6474 [pid 6468] <... futex resumed>) = 0 [pid 6474] <... rseq resumed>) = 0 [pid 6473] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6470] <... futex resumed>) = 0 [pid 6469] rt_sigprocmask(SIG_SETMASK, [] [pid 6468] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6474] set_robust_list(0x7fef94c889a0, 24 [pid 6473] memfd_create("syzkaller", 0 [pid 6470] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6469] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6462] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6474] <... set_robust_list resumed>) = 0 [pid 6473] <... memfd_create resumed>) = 3 [pid 6470] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6469] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6474] rt_sigprocmask(SIG_SETMASK, [] [pid 6473] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6472] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6470] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6469] <... futex resumed>) = 0 executing program [pid 6474] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6473] <... mmap resumed>) = 0x7fef8c868000 [pid 6470] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6469] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6474] memfd_create("syzkaller", 0 [pid 6470] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6474] <... memfd_create resumed>) = 3 [pid 6470] <... mmap resumed>) = 0x7fef94c68000 [pid 6474] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6470] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6474] <... mmap resumed>) = 0x7fef8c868000 [pid 6471] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6473] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6470] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6464] <... sendfile resumed>) = 487424 [pid 6472] <... write resumed>) = 524288 [pid 6470] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6472] munmap(0x7fef8c868000, 138412032 [pid 6470] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6472] <... munmap resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6475 attached [pid 6474] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6472] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6471] +++ killed by SIGBUS +++ [pid 6470] <... clone3 resumed> => {parent_tid=[6475]}, 88) = 6475 [pid 6464] +++ killed by SIGBUS +++ [pid 6472] <... openat resumed>) = 4 [pid 6475] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6472] ioctl(4, LOOP_SET_FD, 3 [pid 6470] rt_sigprocmask(SIG_SETMASK, [] [pid 6462] +++ killed by SIGBUS +++ [pid 6475] <... rseq resumed>) = 0 [pid 6472] <... ioctl resumed>) = 0 [pid 6470] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6475] set_robust_list(0x7fef94c889a0, 24 [pid 6470] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6475] <... set_robust_list resumed>) = 0 [pid 6470] <... futex resumed>) = 0 [pid 5610] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6462, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6475] rt_sigprocmask(SIG_SETMASK, [] [pid 6473] <... write resumed>) = 524288 [pid 6472] close(3 [pid 6470] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5610] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 6475] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6473] munmap(0x7fef8c868000, 138412032 [pid 6472] <... close resumed>) = 0 [pid 5610] <... restart_syscall resumed>) = 0 [pid 6475] memfd_create("syzkaller", 0 [pid 6473] <... munmap resumed>) = 0 [pid 6472] close(4 [pid 6474] <... write resumed>) = 524288 [pid 6475] <... memfd_create resumed>) = 3 [pid 6472] <... close resumed>) = 0 [ 123.286026][ T6471] EXT4-fs (loop1): Free/Dirty block details [ 123.286037][ T6471] EXT4-fs (loop1): free_blocks=20480 [ 123.286051][ T6471] EXT4-fs (loop1): dirty_blocks=480 [ 123.286061][ T6471] EXT4-fs (loop1): Block reservation details [ 123.286071][ T6471] EXT4-fs (loop1): i_reserved_data_blocks=30 [pid 6472] mkdir("./file1", 0777 [pid 6475] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6474] munmap(0x7fef8c868000, 138412032 [pid 6473] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6472] <... mkdir resumed>) = 0 [pid 5610] umount2("./32", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6475] <... mmap resumed>) = 0x7fef8c868000 [pid 6474] <... munmap resumed>) = 0 [pid 6473] <... openat resumed>) = 4 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6474] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6473] ioctl(4, LOOP_SET_FD, 3 [pid 6472] mount("/dev/loop4", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5610] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6474] <... openat resumed>) = 4 [pid 6473] <... ioctl resumed>) = 0 [pid 5610] <... openat resumed>) = 3 [pid 6474] ioctl(4, LOOP_SET_FD, 3 [pid 6473] close(3 [pid 5610] fstat(3 [pid 6475] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6474] <... ioctl resumed>) = 0 [pid 6473] <... close resumed>) = 0 [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6474] close(3 [pid 6473] close(4 [pid 5610] getdents64(3 [pid 6474] <... close resumed>) = 0 [pid 6473] <... close resumed>) = 0 [pid 6474] close(4 [pid 6473] mkdir("./file1", 0777 [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6474] <... close resumed>) = 0 [pid 6474] mkdir("./file1", 0777 [pid 6473] <... mkdir resumed>) = 0 [pid 5610] umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6474] <... mkdir resumed>) = 0 [pid 6473] mount("/dev/loop3", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6474] mount("/dev/loop2", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6475] <... write resumed>) = 524288 [pid 6472] <... mount resumed>) = 0 [pid 6475] munmap(0x7fef8c868000, 138412032 [pid 6472] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6475] <... munmap resumed>) = 0 [pid 6472] <... openat resumed>) = 3 [pid 6475] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6472] chdir("./file1" [pid 6475] <... openat resumed>) = 4 [pid 6472] <... chdir resumed>) = 0 [pid 6472] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6475] ioctl(4, LOOP_SET_FD, 3 [pid 6472] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6472] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6473] <... mount resumed>) = 0 [pid 6472] <... futex resumed>) = 1 [pid 6467] <... futex resumed>) = 0 [pid 6475] <... ioctl resumed>) = 0 [pid 6473] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6472] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6467] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6475] close(3 [pid 6473] <... openat resumed>) = 3 [pid 6472] <... openat resumed>) = 4 [pid 6467] <... futex resumed>) = 0 [pid 6475] <... close resumed>) = 0 [pid 6473] chdir("./file1" [pid 6467] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6475] close(4 [pid 6473] <... chdir resumed>) = 0 [pid 6472] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6475] <... close resumed>) = 0 [pid 6473] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6472] <... futex resumed>) = 1 [pid 6467] <... futex resumed>) = 0 [pid 6475] mkdir("./file1", 0777 [pid 6473] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6472] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6467] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6475] <... mkdir resumed>) = 0 [pid 6473] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6467] <... futex resumed>) = 0 [pid 6473] <... futex resumed>) = 1 [pid 6472] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6468] <... futex resumed>) = 0 [pid 6467] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6473] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6472] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [ 123.495957][ T5610] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6468] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6474] <... mount resumed>) = 0 [pid 6472] <... openat resumed>) = 5 [pid 6468] <... futex resumed>) = 0 [pid 6475] mount("/dev/loop0", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6472] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6468] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6467] <... futex resumed>) = 0 [pid 6474] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6472] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6467] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6472] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6474] <... openat resumed>) = 3 [pid 6473] <... openat resumed>) = 4 [pid 6472] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6467] <... futex resumed>) = 0 [pid 5610] <... umount2 resumed>) = 0 [pid 6467] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6474] chdir("./file1" [pid 6473] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6475] <... mount resumed>) = 0 [pid 6474] <... chdir resumed>) = 0 [pid 6473] <... futex resumed>) = 1 [pid 6472] <... openat resumed>) = 6 [pid 6468] <... futex resumed>) = 0 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6475] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6474] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6473] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6472] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6468] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] newfstatat(AT_FDCWD, "./32/file1" [pid 6475] <... openat resumed>) = 3 [pid 6474] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6473] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6472] <... futex resumed>) = 1 [pid 6468] <... futex resumed>) = 0 [pid 6467] <... futex resumed>) = 0 [pid 5610] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6475] chdir("./file1" [pid 6474] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6473] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6472] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6468] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6467] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6475] <... chdir resumed>) = 0 [pid 6474] <... futex resumed>) = 1 [pid 6473] <... openat resumed>) = 5 [pid 6472] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6469] <... futex resumed>) = 0 [pid 6467] <... futex resumed>) = 0 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6475] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6474] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6473] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6472] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6469] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6467] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] openat(AT_FDCWD, "./32/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6475] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6474] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6473] <... futex resumed>) = 1 [pid 6472] <... mmap resumed>) = 0x200000000000 [pid 6469] <... futex resumed>) = 0 [pid 6468] <... futex resumed>) = 0 [pid 5610] <... openat resumed>) = 4 [pid 6475] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6474] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6473] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6472] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6469] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6468] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] fstat(4 [pid 6475] <... futex resumed>) = 1 [pid 6474] <... openat resumed>) = 4 [pid 6473] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6472] <... futex resumed>) = 1 [pid 6470] <... futex resumed>) = 0 [pid 6468] <... futex resumed>) = 0 [pid 6467] <... futex resumed>) = 0 [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6475] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6474] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6473] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6472] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6470] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6468] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6467] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] getdents64(4 [pid 6475] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6474] <... futex resumed>) = 1 [pid 6472] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6470] <... futex resumed>) = 0 [pid 6469] <... futex resumed>) = 0 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6475] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6474] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6472] sendfile(4, 5, NULL, 553647746 [pid 6470] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6469] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6467] <... futex resumed>) = 0 [pid 5610] getdents64(4 [pid 6474] <... openat resumed>) = 5 [pid 6467] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6474] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6469] <... futex resumed>) = 0 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6474] <... futex resumed>) = 0 [pid 6469] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] close(4 [pid 6474] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6469] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5610] <... close resumed>) = 0 [pid 6469] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] rmdir("./32/file1" [pid 6474] <... futex resumed>) = 0 [pid 6469] <... futex resumed>) = 1 [pid 6474] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6469] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6473] <... openat resumed>) = 6 [pid 6474] <... openat resumed>) = 6 [pid 6474] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6473] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6474] <... futex resumed>) = 1 [pid 6473] <... futex resumed>) = 1 [pid 6469] <... futex resumed>) = 0 [pid 6468] <... futex resumed>) = 0 [pid 6468] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6469] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6468] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6475] <... openat resumed>) = 4 [pid 6474] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6473] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6469] <... futex resumed>) = 0 [pid 6469] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... rmdir resumed>) = 0 [pid 6475] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6474] <... mmap resumed>) = 0x200000000000 [pid 6473] <... mmap resumed>) = 0x200000000000 [pid 6475] <... futex resumed>) = 1 [pid 6474] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6473] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6470] <... futex resumed>) = 0 [pid 5610] umount2("./32/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6475] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6474] <... futex resumed>) = 1 [pid 6473] <... futex resumed>) = 1 [pid 6470] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6469] <... futex resumed>) = 0 [pid 6468] <... futex resumed>) = 0 [pid 6475] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6474] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6473] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6470] <... futex resumed>) = 0 [pid 6469] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6468] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6475] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6474] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6473] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6470] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6469] <... futex resumed>) = 0 [pid 6468] <... futex resumed>) = 0 [pid 5610] newfstatat(AT_FDCWD, "./32/binderfs" [pid 6475] <... openat resumed>) = 5 [pid 6474] sendfile(4, 5, NULL, 553647746 [pid 6473] sendfile(4, 5, NULL, 553647746 [pid 6469] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6468] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6475] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] unlink("./32/binderfs" [pid 6475] <... futex resumed>) = 1 [pid 6470] <... futex resumed>) = 0 [pid 5610] <... unlink resumed>) = 0 [pid 6475] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6470] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] getdents64(3 [pid 6475] <... openat resumed>) = 6 [pid 6470] <... futex resumed>) = 0 [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6470] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] close(3) = 0 [pid 6475] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] rmdir("./32" [pid 6475] <... futex resumed>) = 1 [pid 6470] <... futex resumed>) = 0 [pid 6475] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6470] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6467] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5610] <... rmdir resumed>) = 0 [pid 6467] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6475] <... mmap resumed>) = 0x200000000000 [pid 6470] <... futex resumed>) = 0 [pid 6467] <... futex resumed>) = 0 [pid 5610] mkdir("./33", 0777 [pid 6470] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6475] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6467] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5610] <... mkdir resumed>) = 0 [pid 6475] <... futex resumed>) = 1 [pid 6467] <... mmap resumed>) = 0x7fef94c47000 [pid 5610] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6467] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6475] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6470] <... futex resumed>) = 0 [pid 6467] <... mprotect resumed>) = 0 [pid 5610] <... openat resumed>) = 3 [pid 6467] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5610] ioctl(3, LOOP_CLR_FD [pid 6470] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6475] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6470] <... futex resumed>) = 0 [pid 6467] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5610] <... ioctl resumed>) = 0 [pid 6475] sendfile(4, 5, NULL, 553647746 [pid 6470] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6467] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5610] close(3ci2-upstream-fs/strace-static-x86_64: Process 6484 attached [pid 6467] <... clone3 resumed> => {parent_tid=[6484]}, 88) = 6484 [pid 6484] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6467] rt_sigprocmask(SIG_SETMASK, [] [pid 6484] <... rseq resumed>) = 0 [pid 6484] set_robust_list(0x7fef94c679a0, 24 [pid 6467] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6484] <... set_robust_list resumed>) = 0 [pid 6467] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6467] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6484] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5610] <... close resumed>) = 0 [pid 6469] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6468] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6469] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6468] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [ 123.748767][ T6484] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 123.767069][ T6484] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 800 with error 28 [ 123.767097][ T6484] EXT4-fs (loop4): This should not happen!! Data will be lost [ 123.767097][ T6484] [ 123.767110][ T6484] EXT4-fs (loop4): Total free blocks count 0 [pid 5610] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6469] <... futex resumed>) = 0 [pid 6468] <... futex resumed>) = 0 [pid 5610] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6470] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6469] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6467] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5610] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6470] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6469] <... mmap resumed>) = 0x7fef94c47000 [pid 6468] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6470] <... futex resumed>) = 0 [pid 6469] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6468] <... mmap resumed>) = 0x7fef94c47000 ci2-upstream-fs/strace-static-x86_64: Process 6485 attached [pid 6469] <... mprotect resumed>) = 0 [pid 6485] set_robust_list(0x5555748a66e0, 24 [pid 6470] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6468] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 5610] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6485 [pid 6485] <... set_robust_list resumed>) = 0 [pid 6470] <... mmap resumed>) = 0x7fef94c47000 [pid 6469] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6468] <... mprotect resumed>) = 0 [pid 6485] rt_sigprocmask(SIG_SETMASK, [] [pid 6470] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6468] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5610] rt_sigprocmask(SIG_SETMASK, [] [pid 6485] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6470] <... mprotect resumed>) = 0 [pid 6469] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6468] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6485] chdir("./33" [pid 6470] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6469] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6468] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 6486 attached [pid 6485] <... chdir resumed>) = 0 [pid 6470] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5610] <... rt_sigprocmask resumed>, NULL, 8) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6487 attached [pid 6486] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6485] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6470] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 6488 attached [pid 6487] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6486] <... rseq resumed>) = 0 [pid 6485] <... prctl resumed>) = 0 [pid 6469] <... clone3 resumed> => {parent_tid=[6486]}, 88) = 6486 [pid 6468] <... clone3 resumed> => {parent_tid=[6487]}, 88) = 6487 [pid 6488] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6487] <... rseq resumed>) = 0 [pid 6486] set_robust_list(0x7fef94c679a0, 24 [pid 6485] setpgid(0, 0 [pid 6470] <... clone3 resumed> => {parent_tid=[6488]}, 88) = 6488 [pid 6469] rt_sigprocmask(SIG_SETMASK, [] [pid 6468] rt_sigprocmask(SIG_SETMASK, [] [pid 6488] <... rseq resumed>) = 0 [pid 6487] set_robust_list(0x7fef94c679a0, 24 [pid 6486] <... set_robust_list resumed>) = 0 [pid 6485] <... setpgid resumed>) = 0 [pid 6470] rt_sigprocmask(SIG_SETMASK, [] [pid 6468] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6488] set_robust_list(0x7fef94c679a0, 24 [pid 6487] <... set_robust_list resumed>) = 0 [pid 6486] rt_sigprocmask(SIG_SETMASK, [] [pid 6485] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6470] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6469] <... rt_sigprocmask resumed>, NULL, 8) = 0 [ 123.767122][ T6484] EXT4-fs (loop4): Free/Dirty block details [ 123.767134][ T6484] EXT4-fs (loop4): free_blocks=20480 [ 123.767147][ T6484] EXT4-fs (loop4): dirty_blocks=800 [ 123.767157][ T6484] EXT4-fs (loop4): Block reservation details [ 123.767167][ T6484] EXT4-fs (loop4): i_reserved_data_blocks=50 [pid 6468] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6488] <... set_robust_list resumed>) = 0 [pid 6487] rt_sigprocmask(SIG_SETMASK, [] [pid 6486] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6485] <... openat resumed>) = 3 [pid 6470] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6469] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6468] <... futex resumed>) = 0 [pid 6488] rt_sigprocmask(SIG_SETMASK, [] [pid 6487] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6470] <... futex resumed>) = 0 [pid 6469] <... futex resumed>) = 0 [pid 6468] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6488] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6470] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6469] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6485] write(3, "1000", 4 [pid 6487] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6486] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6485] <... write resumed>) = 4 [pid 6474] <... sendfile resumed>) = 303104 [pid 6484] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6488] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6475] <... sendfile resumed>) = 839680 [pid 6473] <... sendfile resumed>) = 319488 [pid 6472] <... sendfile resumed>) = 823296 [ 123.884220][ T6474] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 123.887362][ T6487] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 123.888112][ T6487] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 308 with error 28 [ 123.888139][ T6487] EXT4-fs (loop3): This should not happen!! Data will be lost [ 123.888139][ T6487] [ 123.888153][ T6487] EXT4-fs (loop3): Total free blocks count 0 [ 123.888165][ T6487] EXT4-fs (loop3): Free/Dirty block details [ 123.888177][ T6487] EXT4-fs (loop3): free_blocks=20480 [ 123.888191][ T6487] EXT4-fs (loop3): dirty_blocks=320 [ 123.888204][ T6487] EXT4-fs (loop3): Block reservation details [ 123.888214][ T6487] EXT4-fs (loop3): i_reserved_data_blocks=20 [ 123.892071][ T6488] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 123.892807][ T6486] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 296 with error 28 [ 123.892832][ T6486] EXT4-fs (loop2): This should not happen!! Data will be lost [ 123.892832][ T6486] [ 123.892845][ T6486] EXT4-fs (loop2): Total free blocks count 0 [ 123.892857][ T6486] EXT4-fs (loop2): Free/Dirty block details [ 123.892869][ T6486] EXT4-fs (loop2): free_blocks=20480 [ 123.892882][ T6486] EXT4-fs (loop2): dirty_blocks=304 [pid 6485] close(3 [pid 6470] <... futex resumed>) = ? [pid 6469] <... futex resumed>) = ? [pid 6468] <... futex resumed>) = ? [pid 6488] +++ killed by SIGBUS +++ [pid 6487] +++ killed by SIGBUS +++ [pid 6486] +++ killed by SIGBUS +++ [pid 6485] <... close resumed>) = 0 [pid 6484] +++ killed by SIGBUS +++ [pid 6475] +++ killed by SIGBUS +++ [pid 6474] +++ killed by SIGBUS +++ [pid 6473] +++ killed by SIGBUS +++ [pid 6472] +++ killed by SIGBUS +++ [pid 6470] +++ killed by SIGBUS +++ [pid 6469] +++ killed by SIGBUS +++ [pid 6468] +++ killed by SIGBUS +++ [pid 6467] +++ killed by SIGBUS +++ [pid 6485] symlink("/dev/binderfs", "./binderfs" [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6467, si_uid=0, si_status=SIGBUS, si_utime=1 /* 0.01 s */, si_stime=14 /* 0.14 s */} --- [pid 5612] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6468, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5611] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6469, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6470, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6485] <... symlink resumed>) = 0 [pid 6485] write(1, "executing program\n", 18) = 18 executing program [pid 6485] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5611] umount2("./34", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6485] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 5614] umount2("./33", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6485] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6485] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 5614] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6485] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] <... openat resumed>) = 3 [pid 5611] <... openat resumed>) = 3 [pid 6485] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c68000 [pid 5614] fstat(3 [pid 5611] fstat(3 [pid 6485] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 123.892893][ T6486] EXT4-fs (loop2): Block reservation details [ 123.892904][ T6486] EXT4-fs (loop2): i_reserved_data_blocks=19 [ 123.895760][ T6488] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 820 with error 28 [ 123.895785][ T6488] EXT4-fs (loop0): This should not happen!! Data will be lost [ 123.895785][ T6488] [ 123.895798][ T6488] EXT4-fs (loop0): Total free blocks count 0 [ 123.895809][ T6488] EXT4-fs (loop0): Free/Dirty block details [ 123.895821][ T6488] EXT4-fs (loop0): free_blocks=20480 [pid 6485] <... mprotect resumed>) = 0 [pid 5614] getdents64(3 [pid 5611] getdents64(3 [pid 6485] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6485] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5614] umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6485] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 5609] umount2("./33", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5612] umount2("./34", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ci2-upstream-fs/strace-static-x86_64: Process 6489 attached [pid 6485] <... clone3 resumed> => {parent_tid=[6489]}, 88) = 6489 [pid 5609] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6489] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] <... openat resumed>) = 3 [pid 6485] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] fstat(3 [pid 5612] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6485] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6489] <... rseq resumed>) = 0 [pid 6485] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... openat resumed>) = 3 [pid 5609] getdents64(3 [pid 6489] set_robust_list(0x7fef94c889a0, 24 [pid 6485] <... futex resumed>) = 0 [pid 5612] fstat(3 [pid 6485] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6489] <... set_robust_list resumed>) = 0 [pid 5609] umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6489] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] getdents64(3 [pid 6489] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6489] memfd_create("syzkaller", 0 [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6489] <... memfd_create resumed>) = 3 [pid 5612] umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6489] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fef8c868000 [pid 6489] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6489] munmap(0x7fef8c868000, 138412032) = 0 [pid 6489] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6489] ioctl(4, LOOP_SET_FD, 3) = 0 [ 123.895834][ T6488] EXT4-fs (loop0): dirty_blocks=832 [ 123.895845][ T6488] EXT4-fs (loop0): Block reservation details [ 123.895856][ T6488] EXT4-fs (loop0): i_reserved_data_blocks=52 [pid 6489] close(3) = 0 [pid 6489] close(4) = 0 [ 124.135551][ T5611] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 124.138673][ T177] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 800 with max blocks 4 with error 28 [ 124.138703][ T177] EXT4-fs (loop4): This should not happen!! Data will be lost [ 124.138703][ T177] [ 124.162924][ T5614] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6489] mkdir("./file1", 0777 [pid 5611] <... umount2 resumed>) = 0 [pid 6489] <... mkdir resumed>) = 0 [pid 5611] umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6489] mount("/dev/loop1", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] newfstatat(AT_FDCWD, "./34/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5612] <... umount2 resumed>) = 0 [pid 5611] openat(AT_FDCWD, "./34/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5612] umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] <... openat resumed>) = 4 [pid 5611] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5611] getdents64(4 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5612] newfstatat(AT_FDCWD, "./34/file1" [pid 5611] getdents64(4, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5612] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5612] umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] close(4 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] <... close resumed>) = 0 [pid 5612] openat(AT_FDCWD, "./34/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5611] rmdir("./34/file1" [pid 5612] <... openat resumed>) = 4 [pid 5611] <... rmdir resumed>) = 0 [pid 5612] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5612] getdents64(4, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5612] getdents64(4 [pid 5611] umount2("./34/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5611] newfstatat(AT_FDCWD, "./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5612] close(4 [pid 5611] unlink("./34/binderfs" [pid 5612] <... close resumed>) = 0 [pid 5611] <... unlink resumed>) = 0 [ 124.174301][ T63] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 308 with max blocks 4 with error 28 [ 124.174331][ T63] EXT4-fs (loop3): This should not happen!! Data will be lost [ 124.174331][ T63] [ 124.190144][ T5612] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 124.203778][ T5609] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 5612] rmdir("./34/file1" [pid 5611] getdents64(3 [pid 5609] <... umount2 resumed>) = 0 [pid 5612] <... rmdir resumed>) = 0 [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5609] umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] close(3 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] <... close resumed>) = 0 [pid 5609] newfstatat(AT_FDCWD, "./33/file1" [pid 5612] umount2("./34/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] rmdir("./34" [pid 5609] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] <... rmdir resumed>) = 0 [pid 5612] newfstatat(AT_FDCWD, "./34/binderfs" [pid 5609] umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5612] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./33/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5612] unlink("./34/binderfs" [pid 5611] mkdir("./35", 0777 [pid 5609] <... openat resumed>) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] getdents64(4, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4 [pid 5614] <... umount2 resumed>) = 0 [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./33/file1" [pid 5614] umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./33/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6489] <... mount resumed>) = 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./33/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6489] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5614] <... openat resumed>) = 4 [pid 5614] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6489] <... openat resumed>) = 3 [pid 6489] chdir("./file1" [pid 5614] getdents64(4 [pid 6489] <... chdir resumed>) = 0 [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6489] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5614] getdents64(4 [pid 6489] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6489] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5614] close(4) = 0 [pid 5614] rmdir("./33/file1" [pid 6489] <... futex resumed>) = 1 [pid 6485] <... futex resumed>) = 0 [pid 6489] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6485] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6489] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6485] <... futex resumed>) = 0 [pid 6489] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6485] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6489] <... openat resumed>) = 4 [pid 5614] <... rmdir resumed>) = 0 [pid 5612] <... unlink resumed>) = 0 [pid 5611] <... mkdir resumed>) = 0 [pid 5609] <... rmdir resumed>) = 0 [pid 5614] umount2("./33/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5612] getdents64(3 [pid 5611] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6489] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5609] umount2("./33/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6489] <... futex resumed>) = 1 [pid 6485] <... futex resumed>) = 0 [pid 5614] newfstatat(AT_FDCWD, "./33/binderfs" [pid 5612] close(3 [pid 5611] <... openat resumed>) = 3 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6489] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6485] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5612] <... close resumed>) = 0 [pid 5611] ioctl(3, LOOP_CLR_FD [pid 5609] newfstatat(AT_FDCWD, "./33/binderfs" [pid 6485] <... futex resumed>) = 0 [pid 5614] unlink("./33/binderfs" [pid 6485] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] rmdir("./34" [pid 5611] <... ioctl resumed>) = 0 [pid 5609] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6489] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5612] <... rmdir resumed>) = 0 [pid 5611] close(3 [pid 5609] unlink("./33/binderfs" [pid 6489] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 5612] mkdir("./35", 0777 [pid 6489] <... openat resumed>) = 5 [pid 5614] <... unlink resumed>) = 0 [pid 5609] <... unlink resumed>) = 0 [pid 5612] <... mkdir resumed>) = 0 [pid 6489] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] getdents64(3 [pid 5611] <... close resumed>) = 0 [pid 5609] getdents64(3 [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5614] close(3) = 0 [pid 5614] rmdir("./33" [pid 6489] <... futex resumed>) = 1 [pid 6485] <... futex resumed>) = 0 [pid 5614] <... rmdir resumed>) = 0 [pid 5611] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6485] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6489] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6485] <... futex resumed>) = 0 [pid 5612] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5609] close(3 [pid 6485] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5614] mkdir("./34", 0777 [pid 5612] <... openat resumed>) = 3 [pid 5611] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5609] <... close resumed>) = 0 [pid 5609] rmdir("./33"ci2-upstream-fs/strace-static-x86_64: Process 6492 attached [pid 6492] set_robust_list(0x5555748a66e0, 24 [pid 5614] <... mkdir resumed>) = 0 [pid 5612] ioctl(3, LOOP_CLR_FD [pid 5609] <... rmdir resumed>) = 0 [pid 6492] <... set_robust_list resumed>) = 0 [pid 6492] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] <... ioctl resumed>) = 0 [pid 6492] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5612] close(3 [pid 6492] chdir("./35" [pid 5614] <... openat resumed>) = 3 [pid 5611] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6492 [pid 5609] mkdir("./34", 0777) = 0 [pid 5614] ioctl(3, LOOP_CLR_FD [pid 5611] rt_sigprocmask(SIG_SETMASK, [] [pid 6492] <... chdir resumed>) = 0 [pid 6489] <... openat resumed>) = 6 [pid 5612] <... close resumed>) = 0 [pid 5614] <... ioctl resumed>) = 0 [pid 5612] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5614] close(3 [pid 5611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5612] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6492] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6489] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6489] <... futex resumed>) = 1 [pid 6485] <... futex resumed>) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDWRci2-upstream-fs/strace-static-x86_64: Process 6493 attached [pid 6492] <... prctl resumed>) = 0 [pid 6489] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6485] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6493] set_robust_list(0x5555748a66e0, 24 [pid 6492] setpgid(0, 0 [pid 6485] <... futex resumed>) = 0 [pid 5612] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6493 [pid 6493] <... set_robust_list resumed>) = 0 [pid 6492] <... setpgid resumed>) = 0 [pid 6489] <... mmap resumed>) = 0x200000000000 [pid 6485] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] <... close resumed>) = 0 [pid 5609] <... openat resumed>) = 3 [pid 6493] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] rt_sigprocmask(SIG_SETMASK, [] [pid 6493] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6492] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6489] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] ioctl(3, LOOP_CLR_FD [pid 6493] chdir("./35" [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6493] <... chdir resumed>) = 0 [pid 6492] <... openat resumed>) = 3 [pid 6489] <... futex resumed>) = 1 [pid 6485] <... futex resumed>) = 0 [pid 5614] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5609] <... ioctl resumed>) = 0 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5609] close(3 [pid 6493] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6489] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6485] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6489] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6493] <... prctl resumed>) = 0 [pid 6489] sendfile(4, 5, NULL, 553647746 [pid 6485] <... futex resumed>) = 0 [pid 6493] setpgid(0, 0 [pid 6485] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6493] <... setpgid resumed>) = 0 [pid 6493] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECci2-upstream-fs/strace-static-x86_64: Process 6494 attached ) = 3 [pid 6493] write(3, "1000", 4 [pid 6494] set_robust_list(0x5555748a66e0, 24 [pid 6492] write(3, "1000", 4 [pid 5614] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6494 [pid 5609] <... close resumed>) = 0 [pid 6492] <... write resumed>) = 4 [pid 6494] <... set_robust_list resumed>) = 0 [pid 6493] <... write resumed>) = 4 [pid 6492] close(3 [pid 6494] rt_sigprocmask(SIG_SETMASK, [] [pid 6493] close(3 [pid 6492] <... close resumed>) = 0 [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 6494] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6493] <... close resumed>) = 0 [pid 6492] symlink("/dev/binderfs", "./binderfs" [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6494] chdir("./34" [pid 6493] symlink("/dev/binderfs", "./binderfs" [pid 6492] <... symlink resumed>) = 0 [pid 5609] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6494] <... chdir resumed>) = 0 [pid 6493] <... symlink resumed>) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6492] write(1, "executing program\n", 18 [pid 6494] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6493] write(1, "executing program\n", 18 [pid 6494] <... prctl resumed>) = 0 [pid 6493] <... write resumed>) = 18 [pid 6494] setpgid(0, 0 [pid 6493] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6494] <... setpgid resumed>) = 0 [pid 6493] <... futex resumed>) = 0 [pid 6492] <... write resumed>) = 18 executing program executing program [pid 6494] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6493] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6494] <... openat resumed>) = 3 [pid 6493] <... rt_sigaction resumed>, NULL, 8) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6495 attached [pid 6493] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6495] set_robust_list(0x5555748a66e0, 24 [pid 6494] write(3, "1000", 4 [pid 6493] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6492] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6495 [pid 6495] <... set_robust_list resumed>) = 0 [pid 6494] <... write resumed>) = 4 [pid 6493] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6492] <... futex resumed>) = 0 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 6495] rt_sigprocmask(SIG_SETMASK, [] [pid 6494] close(3 [pid 6493] <... mmap resumed>) = 0x7fef94c68000 [pid 6492] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6495] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6494] <... close resumed>) = 0 [pid 6493] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6492] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6495] chdir("./34" [pid 6494] symlink("/dev/binderfs", "./binderfs" [pid 6493] <... mprotect resumed>) = 0 [pid 6492] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6495] <... chdir resumed>) = 0 [pid 6493] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6495] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6494] <... symlink resumed>) = 0 [pid 6493] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6495] <... prctl resumed>) = 0 [pid 6495] setpgid(0, 0 [pid 6494] write(1, "executing program\n", 18 [pid 6493] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6495] <... setpgid resumed>) = 0 [pid 6492] <... rt_sigprocmask resumed>, NULL, 8) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6496 attached [pid 6495] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6494] <... write resumed>) = 18 executing program [pid 6492] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6496] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6495] <... openat resumed>) = 3 [pid 6494] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6493] <... clone3 resumed> => {parent_tid=[6496]}, 88) = 6496 [pid 6492] <... mmap resumed>) = 0x7fef94c68000 [pid 6496] <... rseq resumed>) = 0 [pid 6492] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6496] set_robust_list(0x7fef94c889a0, 24 [pid 6495] write(3, "1000", 4 [pid 6494] <... futex resumed>) = 0 [pid 6493] rt_sigprocmask(SIG_SETMASK, [] [pid 6492] <... mprotect resumed>) = 0 [pid 6496] <... set_robust_list resumed>) = 0 [pid 6495] <... write resumed>) = 4 [pid 6494] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6493] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6496] rt_sigprocmask(SIG_SETMASK, [] [pid 6495] close(3 [pid 6494] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6496] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6495] <... close resumed>) = 0 [pid 6494] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6493] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6496] memfd_create("syzkaller", 0 [pid 6495] symlink("/dev/binderfs", "./binderfs" [pid 6494] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6493] <... futex resumed>) = 0 [pid 6492] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6496] <... memfd_create resumed>) = 3 [pid 6495] <... symlink resumed>) = 0 [pid 6494] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6493] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6492] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6496] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6492] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0}ci2-upstream-fs/strace-static-x86_64: Process 6497 attached [pid 6496] <... mmap resumed>) = 0x7fef8c868000 [pid 6495] write(1, "executing program\n", 18 [pid 6494] <... mmap resumed>) = 0x7fef94c68000 [pid 6497] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6494] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6497] <... rseq resumed>) = 0 [pid 6495] <... write resumed>) = 18 [pid 6494] <... mprotect resumed>) = 0 executing program [pid 6497] set_robust_list(0x7fef94c889a0, 24 [pid 6495] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6497] <... set_robust_list resumed>) = 0 [pid 6495] <... futex resumed>) = 0 [pid 6494] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6492] <... clone3 resumed> => {parent_tid=[6497]}, 88) = 6497 [pid 6492] rt_sigprocmask(SIG_SETMASK, [] [pid 6497] rt_sigprocmask(SIG_SETMASK, [] [pid 6495] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6494] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6492] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6497] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6496] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6495] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6494] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0}ci2-upstream-fs/strace-static-x86_64: Process 6498 attached [pid 6497] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6495] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6492] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6485] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6495] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6498] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6497] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6495] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6492] <... futex resumed>) = 0 [pid 6485] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6498] <... rseq resumed>) = 0 [pid 6494] <... clone3 resumed> => {parent_tid=[6498]}, 88) = 6498 [pid 6492] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6498] set_robust_list(0x7fef94c889a0, 24 [pid 6497] memfd_create("syzkaller", 0 [pid 6495] <... mmap resumed>) = 0x7fef94c68000 [pid 6485] <... futex resumed>) = 0 [pid 6498] <... set_robust_list resumed>) = 0 [pid 6497] <... memfd_create resumed>) = 3 [pid 6495] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6494] rt_sigprocmask(SIG_SETMASK, [] [pid 6485] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6498] rt_sigprocmask(SIG_SETMASK, [] [pid 6497] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6495] <... mprotect resumed>) = 0 [pid 6494] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6485] <... mmap resumed>) = 0x7fef94c47000 [pid 6497] <... mmap resumed>) = 0x7fef8c868000 [pid 6495] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6485] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6498] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6495] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6494] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6485] <... mprotect resumed>) = 0 [pid 6498] memfd_create("syzkaller", 0 [pid 6496] <... write resumed>) = 524288 [pid 6495] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6494] <... futex resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6499 attached [pid 6498] <... memfd_create resumed>) = 3 [pid 6497] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6494] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6485] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6498] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6496] munmap(0x7fef8c868000, 138412032 [pid 6495] <... clone3 resumed> => {parent_tid=[6499]}, 88) = 6499 [pid 6485] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6499] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6498] <... mmap resumed>) = 0x7fef8c868000 [pid 6496] <... munmap resumed>) = 0 [pid 6495] rt_sigprocmask(SIG_SETMASK, [] [pid 6499] <... rseq resumed>) = 0 [pid 6485] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6499] set_robust_list(0x7fef94c889a0, 24) = 0 [pid 6499] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6495] <... rt_sigprocmask resumed>, NULL, 8) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6500 attached [pid 6499] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6495] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6499] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6496] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6495] <... futex resumed>) = 0 [pid 6485] <... clone3 resumed> => {parent_tid=[6500]}, 88) = 6500 [pid 6496] <... openat resumed>) = 4 [pid 6485] rt_sigprocmask(SIG_SETMASK, [] [pid 6495] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6485] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6499] memfd_create("syzkaller", 0 [pid 6496] ioctl(4, LOOP_SET_FD, 3 [pid 6485] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6500] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6499] <... memfd_create resumed>) = 3 [pid 6496] <... ioctl resumed>) = 0 [pid 6485] <... futex resumed>) = 0 [pid 6500] <... rseq resumed>) = 0 [pid 6499] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6485] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6500] set_robust_list(0x7fef94c679a0, 24 [pid 6499] <... mmap resumed>) = 0x7fef8c868000 [pid 6500] <... set_robust_list resumed>) = 0 [pid 6498] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6497] <... write resumed>) = 524288 [pid 6496] close(3 [pid 6500] rt_sigprocmask(SIG_SETMASK, [] [pid 6499] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6500] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6497] munmap(0x7fef8c868000, 138412032 [pid 6496] <... close resumed>) = 0 [pid 6496] close(4) = 0 [pid 6496] mkdir("./file1", 0777 [pid 6497] <... munmap resumed>) = 0 [pid 6496] <... mkdir resumed>) = 0 [pid 6497] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6498] <... write resumed>) = 524288 [pid 6497] <... openat resumed>) = 4 [pid 6497] ioctl(4, LOOP_SET_FD, 3 [pid 6496] mount("/dev/loop3", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6497] <... ioctl resumed>) = 0 [pid 6499] <... write resumed>) = 524288 [pid 6498] munmap(0x7fef8c868000, 138412032 [pid 6497] close(3 [pid 6485] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6499] munmap(0x7fef8c868000, 138412032 [pid 6498] <... munmap resumed>) = 0 [pid 6497] <... close resumed>) = 0 [pid 6499] <... munmap resumed>) = 0 [pid 6497] close(4) = 0 [pid 6499] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6498] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6497] mkdir("./file1", 0777) = 0 [ 124.545884][ T6489] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 124.551703][ T6500] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 464 with error 28 [ 124.551730][ T6500] EXT4-fs (loop1): This should not happen!! Data will be lost [ 124.551730][ T6500] [ 124.551744][ T6500] EXT4-fs (loop1): Total free blocks count 0 [ 124.551757][ T6500] EXT4-fs (loop1): Free/Dirty block details [pid 6499] <... openat resumed>) = 4 [pid 6498] <... openat resumed>) = 4 [pid 6497] mount("/dev/loop2", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6498] ioctl(4, LOOP_SET_FD, 3 [pid 6499] ioctl(4, LOOP_SET_FD, 3 [pid 6498] <... ioctl resumed>) = 0 [pid 6499] <... ioctl resumed>) = 0 [pid 6500] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6498] close(3 [pid 6499] close(3 [pid 6498] <... close resumed>) = 0 [pid 6499] <... close resumed>) = 0 [pid 6498] close(4 [pid 6499] close(4 [pid 6498] <... close resumed>) = 0 [pid 6499] <... close resumed>) = 0 [pid 6498] mkdir("./file1", 0777 [pid 6489] <... sendfile resumed>) = ? [pid 6500] +++ killed by SIGBUS +++ [pid 6499] mkdir("./file1", 0777 [pid 6498] <... mkdir resumed>) = 0 [pid 6499] <... mkdir resumed>) = 0 [pid 6498] mount("/dev/loop4", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6489] +++ killed by SIGBUS +++ [pid 6485] +++ killed by SIGBUS +++ [pid 6499] mount("/dev/loop0", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6497] <... mount resumed>) = 0 [pid 5610] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6485, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6497] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5610] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 6497] <... openat resumed>) = 3 [ 124.551769][ T6500] EXT4-fs (loop1): free_blocks=20480 [ 124.551782][ T6500] EXT4-fs (loop1): dirty_blocks=464 [ 124.551792][ T6500] EXT4-fs (loop1): Block reservation details [ 124.551802][ T6500] EXT4-fs (loop1): i_reserved_data_blocks=29 [pid 6497] chdir("./file1") = 0 [pid 6497] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5610] umount2("./33", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6497] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6497] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6492] <... futex resumed>) = 0 [pid 5610] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6497] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6492] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... openat resumed>) = 3 [pid 6497] <... futex resumed>) = 0 [pid 6492] <... futex resumed>) = 1 [pid 5610] fstat(3 [pid 6497] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6496] <... mount resumed>) = 0 [pid 6492] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5610] getdents64(3, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6497] <... openat resumed>) = 4 [pid 6496] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5610] umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6497] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6496] <... openat resumed>) = 3 [pid 6497] <... futex resumed>) = 1 [pid 6496] chdir("./file1" [pid 6492] <... futex resumed>) = 0 [pid 6497] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6496] <... chdir resumed>) = 0 [pid 6492] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6497] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6496] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6492] <... futex resumed>) = 0 [pid 6497] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6496] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6492] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6499] <... mount resumed>) = 0 [pid 6498] <... mount resumed>) = 0 [pid 6497] <... openat resumed>) = 5 [pid 6496] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6499] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6498] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6499] <... openat resumed>) = 3 [pid 6498] <... openat resumed>) = 3 [pid 6497] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6496] <... futex resumed>) = 1 [pid 6499] chdir("./file1" [pid 6498] chdir("./file1" [pid 6496] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6493] <... futex resumed>) = 0 [pid 6499] <... chdir resumed>) = 0 [pid 6498] <... chdir resumed>) = 0 [pid 6497] <... futex resumed>) = 1 [pid 6492] <... futex resumed>) = 0 [pid 6499] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6498] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6497] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6493] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6492] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6499] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6498] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6497] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6496] <... futex resumed>) = 0 [pid 6493] <... futex resumed>) = 1 [pid 6492] <... futex resumed>) = 0 [pid 6499] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6498] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6497] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6496] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6493] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6492] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6499] <... futex resumed>) = 1 [pid 6498] <... futex resumed>) = 1 [pid 6497] <... openat resumed>) = 6 [pid 6495] <... futex resumed>) = 0 [pid 6494] <... futex resumed>) = 0 [pid 6499] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6498] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6497] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6496] <... openat resumed>) = 4 [pid 6495] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6494] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6499] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6498] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6497] <... futex resumed>) = 1 [pid 6496] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6495] <... futex resumed>) = 0 [pid 6494] <... futex resumed>) = 0 [pid 6492] <... futex resumed>) = 0 [pid 6498] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6495] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6494] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6492] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6499] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6497] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6492] <... futex resumed>) = 0 [pid 6498] <... openat resumed>) = 4 [pid 6496] <... futex resumed>) = 1 [pid 6493] <... futex resumed>) = 0 [pid 6492] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6499] <... openat resumed>) = 4 [pid 6497] <... mmap resumed>) = 0x200000000000 [pid 6499] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6498] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6496] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6493] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... umount2 resumed>) = 0 [pid 6499] <... futex resumed>) = 1 [pid 6498] <... futex resumed>) = 1 [pid 6497] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6496] <... openat resumed>) = 5 [pid 6495] <... futex resumed>) = 0 [pid 6494] <... futex resumed>) = 0 [pid 6493] <... futex resumed>) = 0 [pid 5610] umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6499] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [ 124.743567][ T5610] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6498] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6497] <... futex resumed>) = 1 [pid 6496] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6495] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6494] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6493] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6492] <... futex resumed>) = 0 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6499] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6498] <... openat resumed>) = 5 [pid 6497] sendfile(4, 5, NULL, 553647746 [pid 6496] <... futex resumed>) = 0 [pid 6495] <... futex resumed>) = 0 [pid 6494] <... futex resumed>) = 0 [pid 6493] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6492] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] newfstatat(AT_FDCWD, "./33/file1" [pid 6499] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6498] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6496] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6495] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6494] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6493] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6492] <... futex resumed>) = 0 [pid 5610] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6499] <... openat resumed>) = 5 [pid 6498] <... futex resumed>) = 0 [pid 6496] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6494] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6493] <... futex resumed>) = 0 [pid 6492] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6499] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6498] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6496] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6494] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6493] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6499] <... futex resumed>) = 1 [pid 6495] <... futex resumed>) = 0 [pid 6499] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6498] <... openat resumed>) = 6 [pid 6496] <... openat resumed>) = 6 [pid 6495] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6494] <... futex resumed>) = 0 [pid 5610] openat(AT_FDCWD, "./33/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6499] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6499] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6495] <... futex resumed>) = 0 [pid 5610] <... openat resumed>) = 4 [pid 6498] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6494] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6499] <... openat resumed>) = 6 [pid 6498] <... futex resumed>) = 0 [pid 6495] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] fstat(4 [pid 6498] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6494] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6499] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6496] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6494] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6498] <... futex resumed>) = 0 [pid 6496] <... futex resumed>) = 1 [pid 6494] <... futex resumed>) = 1 [pid 6493] <... futex resumed>) = 0 [pid 6498] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6495] <... futex resumed>) = 0 [pid 6494] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6493] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6499] <... futex resumed>) = 1 [pid 5610] getdents64(4 [pid 6498] <... mmap resumed>) = 0x200000000000 [pid 6496] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6495] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6493] <... futex resumed>) = 0 [pid 6495] <... futex resumed>) = 0 [pid 6493] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6495] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6499] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6496] <... mmap resumed>) = 0x200000000000 [pid 5610] getdents64(4 [pid 6499] <... mmap resumed>) = 0x200000000000 [pid 6498] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6496] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6498] <... futex resumed>) = 1 [pid 6499] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6496] <... futex resumed>) = 1 [pid 6494] <... futex resumed>) = 0 [pid 6493] <... futex resumed>) = 0 [pid 5610] close(4 [pid 6499] <... futex resumed>) = 1 [pid 6498] sendfile(4, 5, NULL, 553647746 [pid 6496] sendfile(4, 5, NULL, 553647746 [pid 6495] <... futex resumed>) = 0 [pid 6494] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6493] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... close resumed>) = 0 [pid 6495] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6494] <... futex resumed>) = 0 [pid 6493] <... futex resumed>) = 0 [pid 5610] rmdir("./33/file1" [pid 6495] <... futex resumed>) = 0 [pid 6494] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6495] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6493] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... rmdir resumed>) = 0 [pid 6499] sendfile(4, 5, NULL, 553647746 [pid 5610] umount2("./33/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5610] newfstatat(AT_FDCWD, "./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5610] unlink("./33/binderfs") = 0 [pid 5610] getdents64(3, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5610] close(3) = 0 [pid 6492] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6492] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6492] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c47000 [pid 6492] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 5610] rmdir("./33" [pid 6492] <... mprotect resumed>) = 0 [pid 6492] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5610] <... rmdir resumed>) = 0 [pid 6492] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 6509 attached [pid 6509] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6492] <... clone3 resumed> => {parent_tid=[6509]}, 88) = 6509 [pid 6492] rt_sigprocmask(SIG_SETMASK, [] [pid 6509] <... rseq resumed>) = 0 [pid 6492] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6509] set_robust_list(0x7fef94c679a0, 24 [pid 6492] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6509] <... set_robust_list resumed>) = 0 [pid 6492] <... futex resumed>) = 0 [pid 5610] mkdir("./34", 0777 [pid 6509] rt_sigprocmask(SIG_SETMASK, [] [pid 6492] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6509] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] <... mkdir resumed>) = 0 [pid 5610] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5610] ioctl(3, LOOP_CLR_FD) = 0 [pid 6509] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6497] <... sendfile resumed>) = 438272 [pid 6495] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6494] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6493] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5610] close(3 [pid 6495] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6494] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6493] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6492] <... futex resumed>) = ? [pid 6497] +++ killed by SIGBUS +++ [pid 6495] <... futex resumed>) = 0 [pid 6494] <... futex resumed>) = 0 [pid 6493] <... futex resumed>) = 0 [pid 6495] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6494] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6493] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6495] <... mmap resumed>) = 0x7fef94c47000 [pid 6495] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6494] <... mmap resumed>) = 0x7fef94c47000 [pid 6493] <... mmap resumed>) = 0x7fef94c47000 [pid 6509] +++ killed by SIGBUS +++ [pid 6495] <... mprotect resumed>) = 0 [pid 6494] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6493] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6492] +++ killed by SIGBUS +++ [pid 6495] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6493] <... mprotect resumed>) = 0 [pid 6494] <... mprotect resumed>) = 0 [pid 5611] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6492, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6495] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6494] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6493] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6495] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6494] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6493] <... rt_sigprocmask resumed>, [], 8) = 0 [ 124.891604][ T6509] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 124.891950][ T6509] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 424 with error 28 [ 124.891975][ T6509] EXT4-fs (loop2): This should not happen!! Data will be lost [ 124.891975][ T6509] [ 124.891989][ T6509] EXT4-fs (loop2): Total free blocks count 0 [ 124.892001][ T6509] EXT4-fs (loop2): Free/Dirty block details [pid 6494] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6493] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 6510 attached ci2-upstream-fs/strace-static-x86_64: Process 6511 attached [pid 6510] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053ci2-upstream-fs/strace-static-x86_64: Process 6512 attached [pid 6511] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6510] <... rseq resumed>) = 0 [pid 6495] <... clone3 resumed> => {parent_tid=[6511]}, 88) = 6511 [pid 6493] <... clone3 resumed> => {parent_tid=[6510]}, 88) = 6510 [pid 5611] umount2("./35", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6512] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6511] <... rseq resumed>) = 0 [pid 6510] set_robust_list(0x7fef94c679a0, 24 [pid 6495] rt_sigprocmask(SIG_SETMASK, [] [pid 6494] <... clone3 resumed> => {parent_tid=[6512]}, 88) = 6512 [pid 6493] rt_sigprocmask(SIG_SETMASK, [] [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 124.892014][ T6509] EXT4-fs (loop2): free_blocks=20480 [ 124.892026][ T6509] EXT4-fs (loop2): dirty_blocks=432 [ 124.892038][ T6509] EXT4-fs (loop2): Block reservation details [ 124.892050][ T6509] EXT4-fs (loop2): i_reserved_data_blocks=27 [pid 5610] <... close resumed>) = 0 [pid 6512] <... rseq resumed>) = 0 [pid 6511] set_robust_list(0x7fef94c679a0, 24 [pid 6510] <... set_robust_list resumed>) = 0 [pid 6495] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6494] rt_sigprocmask(SIG_SETMASK, [] [pid 6493] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5611] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6495] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6493] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6511] <... set_robust_list resumed>) = 0 [pid 6495] <... futex resumed>) = 0 [pid 6494] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6493] <... futex resumed>) = 0 [pid 6512] set_robust_list(0x7fef94c679a0, 24 [pid 6510] rt_sigprocmask(SIG_SETMASK, [] [pid 6511] rt_sigprocmask(SIG_SETMASK, [] [pid 6495] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6493] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6512] <... set_robust_list resumed>) = 0 [pid 6511] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6510] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6494] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6512] rt_sigprocmask(SIG_SETMASK, [] [pid 5611] <... openat resumed>) = 3 [pid 6512] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6494] <... futex resumed>) = 0 [pid 5610] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6494] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] fstat(3 [pid 5610] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 6513 attached [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5611] getdents64(3, 0x5555748a7790 /* 4 entries */, 32768) = 112 [ 124.981461][ T5639] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 125.019105][ T6511] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 125.019321][ T6511] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 276 with error 28 [pid 5611] umount2("./35/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6513] set_robust_list(0x5555748a66e0, 24) = 0 [pid 5610] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6513 [pid 6513] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] rt_sigprocmask(SIG_SETMASK, [] [pid 6513] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6495] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6513] chdir("./34" [pid 6493] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6513] <... chdir resumed>) = 0 [pid 6510] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6513] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6496] <... sendfile resumed>) = 241664 [pid 6513] <... prctl resumed>) = 0 [pid 6511] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6513] setpgid(0, 0 [pid 6499] <... sendfile resumed>) = ? [pid 6513] <... setpgid resumed>) = 0 [pid 6496] +++ killed by SIGBUS +++ [pid 6513] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6511] +++ killed by SIGBUS +++ [pid 6513] <... openat resumed>) = 3 [pid 6494] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6513] write(3, "1000", 4 [pid 6510] +++ killed by SIGBUS +++ [pid 6493] +++ killed by SIGBUS +++ [pid 6513] <... write resumed>) = 4 [ 125.019345][ T6511] EXT4-fs (loop0): This should not happen!! Data will be lost [ 125.019345][ T6511] [ 125.019359][ T6511] EXT4-fs (loop0): Total free blocks count 0 [ 125.019371][ T6511] EXT4-fs (loop0): Free/Dirty block details [ 125.019383][ T6511] EXT4-fs (loop0): free_blocks=20480 [ 125.019395][ T6511] EXT4-fs (loop0): dirty_blocks=288 [ 125.019406][ T6511] EXT4-fs (loop0): Block reservation details [ 125.019417][ T6511] EXT4-fs (loop0): i_reserved_data_blocks=18 [pid 6513] close(3) = 0 [pid 5612] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6493, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6513] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5612] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 6499] +++ killed by SIGBUS +++ [pid 6495] +++ killed by SIGBUS +++ [pid 5612] <... restart_syscall resumed>) = 0 [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6495, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6513] write(1, "executing program\n", 18 [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 6513] <... write resumed>) = 18 [pid 6512] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- executing program [pid 5612] umount2("./35", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6513] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6513] <... futex resumed>) = 0 [pid 5612] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5609] <... restart_syscall resumed>) = 0 [pid 6513] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 5612] <... openat resumed>) = 3 [pid 6513] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 5612] fstat(3 [pid 6513] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] umount2("./34", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6513] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5612] getdents64(3 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6513] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5609] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6513] <... mmap resumed>) = 0x7fef94c68000 [pid 5612] umount2("./35/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6513] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 5609] <... openat resumed>) = 3 [pid 6513] <... mprotect resumed>) = 0 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6513] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6512] +++ killed by SIGBUS +++ [ 125.028521][ T6510] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 125.029061][ T6510] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 236 with error 28 [ 125.029085][ T6510] EXT4-fs (loop3): This should not happen!! Data will be lost [ 125.029085][ T6510] [ 125.029098][ T6510] EXT4-fs (loop3): Total free blocks count 0 [ 125.029110][ T6510] EXT4-fs (loop3): Free/Dirty block details [ 125.029122][ T6510] EXT4-fs (loop3): free_blocks=20480 [ 125.029135][ T6510] EXT4-fs (loop3): dirty_blocks=240 [pid 5609] getdents64(3 [pid 6513] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6498] <... sendfile resumed>) = ? [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOWci2-upstream-fs/strace-static-x86_64: Process 6514 attached [pid 6513] <... clone3 resumed> => {parent_tid=[6514]}, 88) = 6514 [pid 6513] rt_sigprocmask(SIG_SETMASK, [] [pid 6514] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6513] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6498] +++ killed by SIGBUS +++ [pid 6494] +++ killed by SIGBUS +++ [pid 6513] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6494, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6513] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5614] umount2("./34", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5614] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6514] <... rseq resumed>) = 0 [pid 5614] getdents64(3, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5614] umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6514] set_robust_list(0x7fef94c889a0, 24) = 0 [ 125.029147][ T6510] EXT4-fs (loop3): Block reservation details [ 125.029158][ T6510] EXT4-fs (loop3): i_reserved_data_blocks=15 [ 125.031074][ T6512] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 544 with error 28 [ 125.031101][ T6512] EXT4-fs (loop4): This should not happen!! Data will be lost [ 125.031101][ T6512] [ 125.031115][ T6512] EXT4-fs (loop4): Total free blocks count 0 [ 125.031126][ T6512] EXT4-fs (loop4): Free/Dirty block details [ 125.031139][ T6512] EXT4-fs (loop4): free_blocks=20480 [pid 6514] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6514] memfd_create("syzkaller", 0) = 3 [pid 6514] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fef8c868000 [ 125.031153][ T6512] EXT4-fs (loop4): dirty_blocks=544 [ 125.031164][ T6512] EXT4-fs (loop4): Block reservation details [ 125.031181][ T6512] EXT4-fs (loop4): i_reserved_data_blocks=34 [ 125.180316][ T5612] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 125.187995][ T63] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 424 with max blocks 4 with error 28 [ 125.188024][ T63] EXT4-fs (loop2): This should not happen!! Data will be lost [pid 6514] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5612] <... umount2 resumed>) = 0 [pid 5612] umount2("./35/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5612] newfstatat(AT_FDCWD, "./35/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5612] umount2("./35/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5612] openat(AT_FDCWD, "./35/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5612] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5612] getdents64(4, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5612] getdents64(4 [pid 6514] <... write resumed>) = 524288 [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5612] close(4) = 0 [pid 6514] munmap(0x7fef8c868000, 138412032 [pid 5612] rmdir("./35/file1" [pid 6514] <... munmap resumed>) = 0 [pid 5612] <... rmdir resumed>) = 0 [ 125.188024][ T63] [ 125.195202][ T63] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 276 with max blocks 4 with error 28 [ 125.195232][ T63] EXT4-fs (loop0): This should not happen!! Data will be lost [ 125.195232][ T63] [ 125.198717][ T5611] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 125.202643][ T5609] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6514] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5612] umount2("./35/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6514] <... openat resumed>) = 4 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6514] ioctl(4, LOOP_SET_FD, 3 [pid 5612] newfstatat(AT_FDCWD, "./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] <... umount2 resumed>) = 0 [pid 5612] unlink("./35/binderfs") = 0 [pid 5611] <... umount2 resumed>) = 0 [pid 5609] umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5612] getdents64(3 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5611] umount2("./35/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] newfstatat(AT_FDCWD, "./34/file1" [pid 5614] <... umount2 resumed>) = 0 [pid 5612] close(3 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5612] <... close resumed>) = 0 [pid 5612] rmdir("./35" [pid 5609] umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6514] <... ioctl resumed>) = 0 [pid 5614] umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] newfstatat(AT_FDCWD, "./35/file1" [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5612] <... rmdir resumed>) = 0 [pid 5611] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] openat(AT_FDCWD, "./34/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5612] mkdir("./36", 0777) = 0 [pid 5612] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6514] close(3 [pid 5614] newfstatat(AT_FDCWD, "./34/file1" [pid 5611] umount2("./35/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... openat resumed>) = 4 [pid 6514] <... close resumed>) = 0 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] fstat(4 [pid 6514] close(4 [pid 5614] umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5612] <... openat resumed>) = 3 [pid 5611] openat(AT_FDCWD, "./35/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6514] <... close resumed>) = 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5612] ioctl(3, LOOP_CLR_FD [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6514] mkdir("./file1", 0777 [pid 5611] <... openat resumed>) = 4 [pid 6514] <... mkdir resumed>) = 0 [pid 5609] getdents64(4 [pid 6514] mount("/dev/loop1", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5611] fstat(4 [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] getdents64(4 [pid 5611] getdents64(4 [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5614] openat(AT_FDCWD, "./34/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5612] <... ioctl resumed>) = 0 [pid 5614] fstat(4 [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5609] close(4 [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5611] getdents64(4 [pid 5609] <... close resumed>) = 0 [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5609] rmdir("./34/file1" [pid 5611] close(4 [pid 5614] getdents64(4, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5614] getdents64(4 [pid 5609] <... rmdir resumed>) = 0 [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5611] <... close resumed>) = 0 [pid 5609] umount2("./34/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5614] close(4 [pid 5612] close(3 [pid 5611] rmdir("./35/file1" [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 125.222455][ T5614] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 125.325370][ T6514] set_capacity_and_notify: 14 callbacks suppressed [ 125.325389][ T6514] loop1: detected capacity change from 0 to 1024 [pid 5614] <... close resumed>) = 0 [pid 5611] <... rmdir resumed>) = 0 [pid 5609] newfstatat(AT_FDCWD, "./34/binderfs" [pid 5614] rmdir("./34/file1" [pid 5611] umount2("./35/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] unlink("./34/binderfs" [pid 5611] newfstatat(AT_FDCWD, "./35/binderfs" [pid 5614] <... rmdir resumed>) = 0 [pid 5609] <... unlink resumed>) = 0 [pid 5611] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] getdents64(3 [pid 5614] umount2("./34/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5612] <... close resumed>) = 0 [pid 5611] unlink("./35/binderfs" [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5612] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5611] <... unlink resumed>) = 0 [pid 5612] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5614] newfstatat(AT_FDCWD, "./34/binderfs" [pid 5612] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5614] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6517 attached [pid 6514] <... mount resumed>) = 0 [pid 5614] unlink("./34/binderfs" [pid 5611] getdents64(3 [pid 5609] close(3 [pid 6517] set_robust_list(0x5555748a66e0, 24 [pid 6514] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6517] <... set_robust_list resumed>) = 0 [pid 5609] <... close resumed>) = 0 [pid 6517] rt_sigprocmask(SIG_SETMASK, [] [pid 6514] <... openat resumed>) = 3 [pid 5614] <... unlink resumed>) = 0 [pid 5611] close(3 [pid 5609] rmdir("./34" [pid 6517] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6514] chdir("./file1" [pid 5611] <... close resumed>) = 0 [pid 5612] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6517 [pid 6517] chdir("./36" [pid 6514] <... chdir resumed>) = 0 [pid 5612] rt_sigprocmask(SIG_SETMASK, [] [pid 5611] rmdir("./35" [pid 5609] <... rmdir resumed>) = 0 [pid 6517] <... chdir resumed>) = 0 [pid 6514] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5614] getdents64(3 [pid 5612] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5614] close(3) = 0 [pid 6517] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6514] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5614] rmdir("./34" [pid 5609] mkdir("./35", 0777 [pid 6517] <... prctl resumed>) = 0 [pid 6514] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6517] setpgid(0, 0 [pid 6514] <... futex resumed>) = 1 [pid 6513] <... futex resumed>) = 0 [pid 5614] <... rmdir resumed>) = 0 [pid 5609] <... mkdir resumed>) = 0 [pid 6517] <... setpgid resumed>) = 0 [pid 6514] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6513] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] mkdir("./35", 0777 [pid 6517] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6514] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6513] <... futex resumed>) = 0 [pid 5614] <... mkdir resumed>) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5614] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5614] ioctl(3, LOOP_CLR_FD) = 0 [pid 5614] close(3 [pid 6517] <... openat resumed>) = 3 [pid 6514] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6513] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] <... rmdir resumed>) = 0 [pid 5609] <... openat resumed>) = 3 [pid 5611] mkdir("./36", 0777) = 0 [pid 6514] <... openat resumed>) = 4 [pid 5611] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5609] ioctl(3, LOOP_CLR_FD [pid 5614] <... close resumed>) = 0 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5611] <... openat resumed>) = 3 [pid 6514] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... ioctl resumed>) = 0 [pid 6514] <... futex resumed>) = 1 [pid 6513] <... futex resumed>) = 0 [pid 5614] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5611] ioctl(3, LOOP_CLR_FD [pid 5609] close(3 [pid 6513] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... ioctl resumed>) = 0 [pid 5609] <... close resumed>) = 0 [pid 6513] <... futex resumed>) = 0 [pid 5611] close(3 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6517] write(3, "1000", 4 [pid 6513] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6517] <... write resumed>) = 4 [pid 6514] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 5609] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6517] close(3 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6517] <... close resumed>) = 0 [pid 6517] symlink("/dev/binderfs", "./binderfs" [pid 5614] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6518 [pid 6517] <... symlink resumed>) = 0 [pid 5614] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6518 attached [pid 6517] write(1, "executing program\n", 18 [pid 6514] <... openat resumed>) = 5 executing program ci2-upstream-fs/strace-static-x86_64: Process 6519 attached [pid 6517] <... write resumed>) = 18 [pid 6519] set_robust_list(0x5555748a66e0, 24 [pid 6517] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6514] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6517] <... futex resumed>) = 0 [pid 6517] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6519] <... set_robust_list resumed>) = 0 [pid 6514] <... futex resumed>) = 1 [pid 6513] <... futex resumed>) = 0 [pid 5609] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6519 [pid 6519] rt_sigprocmask(SIG_SETMASK, [] [pid 6514] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6513] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6519] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6517] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6514] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6513] <... futex resumed>) = 0 [pid 6519] chdir("./35" [pid 6517] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6514] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6513] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 6519] <... chdir resumed>) = 0 [pid 6518] set_robust_list(0x5555748a66e0, 24 [pid 6517] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6519] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6518] <... set_robust_list resumed>) = 0 [pid 6517] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6514] <... openat resumed>) = 6 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6519] <... prctl resumed>) = 0 [pid 6518] rt_sigprocmask(SIG_SETMASK, [] [pid 6517] <... mmap resumed>) = 0x7fef94c68000 [pid 6518] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6519] setpgid(0, 0 [pid 6518] chdir("./35" [pid 6517] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6514] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6519] <... setpgid resumed>) = 0 [pid 6518] <... chdir resumed>) = 0 [pid 6517] <... mprotect resumed>) = 0 [pid 6514] <... futex resumed>) = 1 [pid 6513] <... futex resumed>) = 0 [pid 5611] <... close resumed>) = 0 [pid 6519] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6518] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6517] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6514] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6513] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6519] <... openat resumed>) = 3 [pid 6518] <... prctl resumed>) = 0 [pid 6517] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6514] <... mmap resumed>) = 0x200000000000 [pid 6513] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6518] setpgid(0, 0 [pid 6517] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 5611] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6518] <... setpgid resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6520 attached [pid 6519] write(3, "1000", 4 [pid 6518] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6514] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6520] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6519] <... write resumed>) = 4 [pid 6518] <... openat resumed>) = 3 [pid 6517] <... clone3 resumed> => {parent_tid=[6520]}, 88) = 6520 [pid 6514] <... futex resumed>) = 1 [pid 6513] <... futex resumed>) = 0 [pid 6520] <... rseq resumed>) = 0 [pid 6519] close(3 [pid 6518] write(3, "1000", 4 [pid 6517] rt_sigprocmask(SIG_SETMASK, [] [pid 6514] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6513] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000ci2-upstream-fs/strace-static-x86_64: Process 6521 attached [pid 6520] set_robust_list(0x7fef94c889a0, 24 [pid 6519] <... close resumed>) = 0 [pid 6518] <... write resumed>) = 4 [pid 6517] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6514] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6513] <... futex resumed>) = 0 [pid 6521] set_robust_list(0x5555748a66e0, 24 [pid 6520] <... set_robust_list resumed>) = 0 [pid 6519] symlink("/dev/binderfs", "./binderfs" [pid 6518] close(3 [pid 6517] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6514] sendfile(4, 5, NULL, 553647746 [pid 6513] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6521] <... set_robust_list resumed>) = 0 [pid 6520] rt_sigprocmask(SIG_SETMASK, [] [pid 6519] <... symlink resumed>) = 0 [pid 6518] <... close resumed>) = 0 [pid 6517] <... futex resumed>) = 0 [pid 5611] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6521 [pid 6521] rt_sigprocmask(SIG_SETMASK, [] [pid 6518] symlink("/dev/binderfs", "./binderfs" [pid 5611] rt_sigprocmask(SIG_SETMASK, [] [pid 6521] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6520] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6518] <... symlink resumed>) = 0 [pid 6517] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6519] write(1, "executing program\n", 18 [pid 5611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6521] chdir("./36" [pid 6520] memfd_create("syzkaller", 0 [pid 6518] write(1, "executing program\n", 18) = 18 executing program executing program [pid 6521] <... chdir resumed>) = 0 [pid 6520] <... memfd_create resumed>) = 3 [pid 6519] <... write resumed>) = 18 [pid 6518] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6520] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6519] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6518] <... futex resumed>) = 0 [pid 6521] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6518] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6521] <... prctl resumed>) = 0 [pid 6521] setpgid(0, 0 [pid 6518] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6521] <... setpgid resumed>) = 0 [ 125.465491][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 125.465509][ T37] audit: type=1800 audit(1785844655.864:178): pid=6514 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop1" ino=15 res=0 errno=0 [pid 6520] <... mmap resumed>) = 0x7fef8c868000 [pid 6518] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6521] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6519] <... futex resumed>) = 0 [pid 6518] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6521] <... openat resumed>) = 3 [pid 6519] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6521] write(3, "1000", 4 [pid 6519] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6518] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6521] <... write resumed>) = 4 [pid 6519] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6518] <... mmap resumed>) = 0x7fef94c68000 [pid 6521] close(3 [pid 6518] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6521] <... close resumed>) = 0 [pid 6519] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6518] <... mprotect resumed>) = 0 [pid 6521] symlink("/dev/binderfs", "./binderfs" [pid 6520] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6519] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6521] <... symlink resumed>) = 0 [pid 6519] <... mmap resumed>) = 0x7fef94c68000 [pid 6518] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6518] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6519] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITEci2-upstream-fs/strace-static-x86_64: Process 6522 attached ) = 0 [pid 6513] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6521] write(1, "executing program\n", 18 [pid 6522] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6518] <... clone3 resumed> => {parent_tid=[6522]}, 88) = 6522 [pid 6513] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6522] <... rseq resumed>) = 0 [pid 6518] rt_sigprocmask(SIG_SETMASK, [] [pid 6513] <... futex resumed>) = 0 executing program [pid 6522] set_robust_list(0x7fef94c889a0, 24 [pid 6513] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6518] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6522] <... set_robust_list resumed>) = 0 [pid 6521] <... write resumed>) = 18 [pid 6519] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6513] <... mmap resumed>) = 0x7fef94c47000 [pid 6518] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6522] rt_sigprocmask(SIG_SETMASK, [] [pid 6521] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6519] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6518] <... futex resumed>) = 0 [pid 6513] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6522] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6521] <... futex resumed>) = 0 [pid 6520] <... write resumed>) = 524288 [pid 6519] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6518] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-upstream-fs/strace-static-x86_64: Process 6523 attached [pid 6522] memfd_create("syzkaller", 0 [pid 6521] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6513] <... mprotect resumed>) = 0 [pid 6523] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6522] <... memfd_create resumed>) = 3 [pid 6521] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6520] munmap(0x7fef8c868000, 138412032 [pid 6519] <... clone3 resumed> => {parent_tid=[6523]}, 88) = 6523 [pid 6513] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6523] <... rseq resumed>) = 0 [pid 6522] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6521] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6520] <... munmap resumed>) = 0 [pid 6519] rt_sigprocmask(SIG_SETMASK, [] [pid 6513] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6523] set_robust_list(0x7fef94c889a0, 24 [pid 6522] <... mmap resumed>) = 0x7fef8c868000 [pid 6521] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6520] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6519] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6513] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 6524 attached [pid 6523] <... set_robust_list resumed>) = 0 [pid 6521] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6520] <... openat resumed>) = 4 [pid 6519] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6521] <... mmap resumed>) = 0x7fef94c68000 [pid 6519] <... futex resumed>) = 0 [pid 6524] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6523] rt_sigprocmask(SIG_SETMASK, [] [pid 6520] ioctl(4, LOOP_SET_FD, 3 [pid 6513] <... clone3 resumed> => {parent_tid=[6524]}, 88) = 6524 [pid 6524] <... rseq resumed>) = 0 [pid 6523] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6513] rt_sigprocmask(SIG_SETMASK, [] [pid 6524] set_robust_list(0x7fef94c679a0, 24 [pid 6513] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6524] <... set_robust_list resumed>) = 0 [pid 6523] memfd_create("syzkaller", 0 [pid 6521] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6520] <... ioctl resumed>) = 0 [pid 6519] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6513] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6524] rt_sigprocmask(SIG_SETMASK, [] [pid 6523] <... memfd_create resumed>) = 3 [pid 6521] <... mprotect resumed>) = 0 [pid 6513] <... futex resumed>) = 0 [pid 6521] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6520] close(3 [pid 6524] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6523] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6520] <... close resumed>) = 0 [pid 6513] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6522] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6523] <... mmap resumed>) = 0x7fef8c868000 [pid 6521] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6520] close(4 [pid 6521] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6520] <... close resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6525 attached [pid 6520] mkdir("./file1", 0777 [pid 6525] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6521] <... clone3 resumed> => {parent_tid=[6525]}, 88) = 6525 [pid 6520] <... mkdir resumed>) = 0 [pid 6525] <... rseq resumed>) = 0 [pid 6521] rt_sigprocmask(SIG_SETMASK, [] [pid 6525] set_robust_list(0x7fef94c889a0, 24 [pid 6521] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6525] <... set_robust_list resumed>) = 0 [pid 6525] rt_sigprocmask(SIG_SETMASK, [] [pid 6521] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6525] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6520] mount("/dev/loop3", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6525] memfd_create("syzkaller", 0 [pid 6521] <... futex resumed>) = 0 [pid 6525] <... memfd_create resumed>) = 3 [pid 6521] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6525] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fef8c868000 [ 125.637890][ T6520] loop3: detected capacity change from 0 to 1024 [ 125.649824][ T6524] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 125.650500][ T6524] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 648 with error 28 [ 125.650526][ T6524] EXT4-fs (loop1): This should not happen!! Data will be lost [ 125.650526][ T6524] [pid 6523] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6525] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6513] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6522] <... write resumed>) = 524288 [pid 6522] munmap(0x7fef8c868000, 138412032) = 0 [pid 6524] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6522] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6514] <... sendfile resumed>) = 667648 [pid 6522] <... openat resumed>) = 4 [pid 6522] ioctl(4, LOOP_SET_FD, 3 [pid 6523] <... write resumed>) = 524288 [pid 6522] <... ioctl resumed>) = 0 [pid 6520] <... mount resumed>) = 0 [pid 6514] +++ killed by SIGBUS +++ [pid 6525] <... write resumed>) = 524288 [pid 6522] close(3) = 0 [ 125.650540][ T6524] EXT4-fs (loop1): Total free blocks count 0 [ 125.650552][ T6524] EXT4-fs (loop1): Free/Dirty block details [ 125.650564][ T6524] EXT4-fs (loop1): free_blocks=20480 [ 125.650577][ T6524] EXT4-fs (loop1): dirty_blocks=656 [ 125.650589][ T6524] EXT4-fs (loop1): Block reservation details [ 125.650600][ T6524] EXT4-fs (loop1): i_reserved_data_blocks=41 [pid 6522] close(4) = 0 [pid 6520] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6522] mkdir("./file1", 0777 [pid 6520] <... openat resumed>) = 3 [pid 6522] <... mkdir resumed>) = 0 [pid 6525] munmap(0x7fef8c868000, 138412032 [pid 6524] +++ killed by SIGBUS +++ [pid 6523] munmap(0x7fef8c868000, 138412032 [pid 6522] mount("/dev/loop4", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6520] chdir("./file1" [pid 6513] +++ killed by SIGBUS +++ [pid 6525] <... munmap resumed>) = 0 [pid 6523] <... munmap resumed>) = 0 [pid 6520] <... chdir resumed>) = 0 [pid 5610] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6513, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6525] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6523] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6520] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6525] <... openat resumed>) = 4 [pid 6523] <... openat resumed>) = 4 [pid 6520] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6525] ioctl(4, LOOP_SET_FD, 3 [pid 6523] ioctl(4, LOOP_SET_FD, 3 [pid 6520] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] umount2("./34", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6525] <... ioctl resumed>) = 0 [pid 6523] <... ioctl resumed>) = 0 [pid 6520] <... futex resumed>) = 1 [pid 6517] <... futex resumed>) = 0 [pid 6520] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6517] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6517] <... futex resumed>) = 0 [pid 5610] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6517] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... openat resumed>) = 3 [pid 5610] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5610] getdents64(3 [pid 6525] close(3 [pid 6523] close(3 [pid 6522] <... mount resumed>) = 0 [pid 6520] <... openat resumed>) = 4 [pid 6525] <... close resumed>) = 0 [pid 6523] <... close resumed>) = 0 [pid 6522] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6523] close(4 [pid 6522] <... openat resumed>) = 3 [ 125.747847][ T6522] loop4: detected capacity change from 0 to 1024 [ 125.772324][ T6523] loop0: detected capacity change from 0 to 1024 [ 125.772961][ T6525] loop2: detected capacity change from 0 to 1024 [pid 6520] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6525] close(4 [pid 6523] <... close resumed>) = 0 [pid 6522] chdir("./file1" [pid 6520] <... futex resumed>) = 1 [pid 6517] <... futex resumed>) = 0 [pid 6525] <... close resumed>) = 0 [pid 6523] mkdir("./file1", 0777 [pid 6522] <... chdir resumed>) = 0 [pid 6525] mkdir("./file1", 0777 [pid 6523] <... mkdir resumed>) = 0 [pid 6522] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6517] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6525] <... mkdir resumed>) = 0 [pid 6520] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6523] mount("/dev/loop0", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6525] mount("/dev/loop2", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6522] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6520] <... openat resumed>) = 5 [pid 6517] <... futex resumed>) = 0 [pid 6522] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6517] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6522] <... futex resumed>) = 1 [pid 6520] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6518] <... futex resumed>) = 0 [pid 6520] <... futex resumed>) = 1 [pid 6517] <... futex resumed>) = 0 [pid 6520] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6517] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6522] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6520] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6518] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6517] <... futex resumed>) = 0 [pid 6522] <... openat resumed>) = 4 [pid 6520] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6518] <... futex resumed>) = 0 [ 125.795738][ T37] audit: type=1800 audit(1785844656.184:179): pid=6520 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop3" ino=15 res=0 errno=0 [pid 6517] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6522] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6520] <... openat resumed>) = 6 [pid 6518] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6522] <... futex resumed>) = 0 [pid 6518] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6522] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6518] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6522] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6518] <... futex resumed>) = 0 [pid 6522] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6518] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6522] <... openat resumed>) = 5 [pid 6522] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6518] <... futex resumed>) = 0 [pid 6522] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6520] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6518] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6522] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6520] <... futex resumed>) = 1 [pid 6518] <... futex resumed>) = 0 [pid 6517] <... futex resumed>) = 0 [pid 6522] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6520] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6518] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6517] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6522] <... openat resumed>) = 6 [pid 6520] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6517] <... futex resumed>) = 0 [pid 6520] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6517] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6520] <... mmap resumed>) = 0x200000000000 [pid 6522] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6518] <... futex resumed>) = 0 [ 125.837280][ T37] audit: type=1800 audit(1785844656.234:180): pid=6522 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 125.865643][ T177] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 648 with max blocks 4 with error 28 [pid 6518] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6525] <... mount resumed>) = 0 [pid 6523] <... mount resumed>) = 0 [pid 6522] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6520] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6517] <... futex resumed>) = 0 [pid 6520] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6517] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6520] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6517] <... futex resumed>) = 0 [pid 6520] sendfile(4, 5, NULL, 553647746 [pid 6517] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6525] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6522] <... mmap resumed>) = 0x200000000000 [pid 6518] <... futex resumed>) = 0 [pid 6525] <... openat resumed>) = 3 [pid 6522] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6518] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6525] chdir("./file1" [pid 6523] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6522] <... futex resumed>) = 0 [pid 6518] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6525] <... chdir resumed>) = 0 [pid 6523] <... openat resumed>) = 3 [pid 6522] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6518] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6525] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6523] chdir("./file1" [pid 6522] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6518] <... futex resumed>) = 0 [pid 6525] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6523] <... chdir resumed>) = 0 [pid 6522] sendfile(4, 5, NULL, 553647746 [pid 6518] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6525] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6523] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6525] <... futex resumed>) = 1 [pid 6521] <... futex resumed>) = 0 [ 125.865674][ T177] EXT4-fs (loop1): This should not happen!! Data will be lost [ 125.865674][ T177] [ 125.890333][ T5610] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6525] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6521] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6523] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6521] <... futex resumed>) = 0 [pid 6517] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6517] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6523] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6521] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6517] <... futex resumed>) = 0 [pid 6517] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6525] <... openat resumed>) = 4 [pid 6523] <... futex resumed>) = 1 [pid 6517] <... mmap resumed>) = 0x7fef94c47000 [pid 6517] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6523] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6519] <... futex resumed>) = 0 [pid 6517] <... mprotect resumed>) = 0 [pid 6525] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6523] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6519] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6517] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6525] <... futex resumed>) = 1 [pid 6523] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6521] <... futex resumed>) = 0 [pid 6519] <... futex resumed>) = 0 [pid 5610] <... umount2 resumed>) = 0 [pid 6523] <... openat resumed>) = 4 [pid 6521] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6519] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6525] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6521] <... futex resumed>) = 0 [pid 6523] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6518] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6525] <... openat resumed>) = 5 [pid 6523] <... futex resumed>) = 1 [pid 6521] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6519] <... futex resumed>) = 0 [pid 6518] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] newfstatat(AT_FDCWD, "./34/file1" [pid 6519] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6518] <... futex resumed>) = 0 [pid 5610] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6525] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6523] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6519] <... futex resumed>) = 0 [pid 6518] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6517] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5610] umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6523] <... openat resumed>) = 5 [pid 6519] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6518] <... mmap resumed>) = 0x7fef94c47000 [pid 6517] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ci2-upstream-fs/strace-static-x86_64: Process 6534 attached [pid 6525] <... futex resumed>) = 1 [pid 6523] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6521] <... futex resumed>) = 0 [pid 6518] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6534] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6525] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6523] <... futex resumed>) = 1 [pid 6521] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6519] <... futex resumed>) = 0 [pid 6518] <... mprotect resumed>) = 0 [pid 6517] <... clone3 resumed> => {parent_tid=[6534]}, 88) = 6534 [pid 5610] openat(AT_FDCWD, "./34/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6534] <... rseq resumed>) = 0 [pid 6525] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6523] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6521] <... futex resumed>) = 0 [pid 6519] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6518] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6517] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] <... openat resumed>) = 4 [ 125.972724][ T37] audit: type=1800 audit(1785844656.374:181): pid=6525 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 125.990562][ T37] audit: type=1800 audit(1785844656.384:182): pid=6523 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop0" ino=15 res=0 errno=0 [pid 6534] set_robust_list(0x7fef94c679a0, 24 [pid 6525] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6523] <... openat resumed>) = 6 [pid 6521] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6519] <... futex resumed>) = 0 [pid 6518] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6517] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] fstat(4 [pid 6534] <... set_robust_list resumed>) = 0 [pid 6525] <... openat resumed>) = 6 [pid 6519] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6518] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6517] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6535 attached [pid 6534] rt_sigprocmask(SIG_SETMASK, [] [pid 6525] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6523] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6519] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6517] <... futex resumed>) = 0 [pid 5610] getdents64(4 [pid 6535] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6534] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6525] <... futex resumed>) = 1 [pid 6523] <... futex resumed>) = 0 [pid 6521] <... futex resumed>) = 0 [pid 6519] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6518] <... clone3 resumed> => {parent_tid=[6535]}, 88) = 6535 [pid 6535] <... rseq resumed>) = 0 [pid 6525] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6523] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6521] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6519] <... futex resumed>) = 0 [pid 6518] rt_sigprocmask(SIG_SETMASK, [] [pid 6517] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6525] <... mmap resumed>) = 0x200000000000 [pid 6523] <... mmap resumed>) = 0x200000000000 [pid 6521] <... futex resumed>) = 0 [pid 6519] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6518] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] getdents64(4 [pid 6525] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6523] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6521] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6525] <... futex resumed>) = 0 [pid 6521] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6518] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6525] sendfile(4, 5, NULL, 553647746 [pid 6523] <... futex resumed>) = 0 [pid 6521] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6519] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6518] <... futex resumed>) = 0 [pid 5610] close(4 [pid 6535] set_robust_list(0x7fef94c679a0, 24 [pid 6523] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6521] <... futex resumed>) = 0 [pid 6519] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6518] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6535] <... set_robust_list resumed>) = 0 [pid 6523] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6521] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6519] <... futex resumed>) = 0 [ 126.082942][ T6520] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 126.084179][ T6534] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1620 with error 28 [ 126.088287][ T6534] EXT4-fs (loop3): This should not happen!! Data will be lost [ 126.088287][ T6534] [ 126.088311][ T6534] EXT4-fs (loop3): Total free blocks count 0 [ 126.088324][ T6534] EXT4-fs (loop3): Free/Dirty block details [pid 5610] <... close resumed>) = 0 [pid 6535] rt_sigprocmask(SIG_SETMASK, [] [pid 6523] sendfile(4, 5, NULL, 553647746 [pid 6519] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] rmdir("./34/file1" [pid 6535] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6517] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5610] <... rmdir resumed>) = 0 [pid 5610] umount2("./34/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 126.088337][ T6534] EXT4-fs (loop3): free_blocks=20480 [ 126.088350][ T6534] EXT4-fs (loop3): dirty_blocks=1632 [ 126.088362][ T6534] EXT4-fs (loop3): Block reservation details [ 126.088373][ T6534] EXT4-fs (loop3): i_reserved_data_blocks=102 [ 126.151961][ T6535] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 126.155169][ T6535] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 340 with error 28 [pid 5610] newfstatat(AT_FDCWD, "./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6518] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5610] unlink("./34/binderfs" [pid 6521] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6521] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6519] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5610] <... unlink resumed>) = 0 [pid 6519] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6521] <... futex resumed>) = 0 [pid 6519] <... futex resumed>) = 0 [pid 6521] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6519] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5610] getdents64(3 [pid 6521] <... mmap resumed>) = 0x7fef94c47000 [pid 6519] <... mmap resumed>) = 0x7fef94c47000 [pid 6521] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6519] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6535] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6521] <... mprotect resumed>) = 0 [pid 6519] <... mprotect resumed>) = 0 [pid 6522] <... sendfile resumed>) = 348160 [pid 6521] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5610] close(3 [pid 6522] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6521] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6519] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6522] <... futex resumed>) = ? [pid 5610] <... close resumed>) = 0 [pid 6522] +++ killed by SIGBUS +++ [pid 6521] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6519] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5610] rmdir("./34"ci2-upstream-fs/strace-static-x86_64: Process 6536 attached [pid 6519] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6536] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6521] <... clone3 resumed> => {parent_tid=[6536]}, 88) = 6536 ci2-upstream-fs/strace-static-x86_64: Process 6537 attached [pid 6536] <... rseq resumed>) = 0 [pid 6535] +++ killed by SIGBUS +++ [pid 6521] rt_sigprocmask(SIG_SETMASK, [] [pid 6518] +++ killed by SIGBUS +++ [pid 6536] set_robust_list(0x7fef94c679a0, 24 [pid 6521] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6519] <... clone3 resumed> => {parent_tid=[6537]}, 88) = 6537 [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6518, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6537] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6536] <... set_robust_list resumed>) = 0 [pid 6521] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6519] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] <... rmdir resumed>) = 0 [pid 6537] <... rseq resumed>) = 0 [ 126.155199][ T6535] EXT4-fs (loop4): This should not happen!! Data will be lost [ 126.155199][ T6535] [ 126.155212][ T6535] EXT4-fs (loop4): Total free blocks count 0 [ 126.155225][ T6535] EXT4-fs (loop4): Free/Dirty block details [ 126.155237][ T6535] EXT4-fs (loop4): free_blocks=20480 [ 126.155249][ T6535] EXT4-fs (loop4): dirty_blocks=352 [ 126.155261][ T6535] EXT4-fs (loop4): Block reservation details [ 126.155272][ T6535] EXT4-fs (loop4): i_reserved_data_blocks=22 [pid 6536] rt_sigprocmask(SIG_SETMASK, [] [pid 6521] <... futex resumed>) = 0 [pid 6519] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] mkdir("./35", 0777 [pid 6537] set_robust_list(0x7fef94c679a0, 24 [pid 6536] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6521] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6519] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] umount2("./35", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] <... mkdir resumed>) = 0 [pid 6537] <... set_robust_list resumed>) = 0 [pid 6519] <... futex resumed>) = 0 [pid 6537] rt_sigprocmask(SIG_SETMASK, [] [pid 6519] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6537] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5610] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5614] <... openat resumed>) = 3 [pid 5610] <... openat resumed>) = 3 [pid 5614] fstat(3 [pid 5610] ioctl(3, LOOP_CLR_FD [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5610] <... ioctl resumed>) = 0 [pid 5614] getdents64(3 [pid 5610] close(3 [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5614] umount2("./35/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6521] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 126.281967][ T6536] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 126.282160][ T6536] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 560 with error 28 [ 126.282192][ T6536] EXT4-fs (loop2): This should not happen!! Data will be lost [ 126.282192][ T6536] [ 126.282204][ T6536] EXT4-fs (loop2): Total free blocks count 0 [ 126.282216][ T6536] EXT4-fs (loop2): Free/Dirty block details [pid 6534] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6537] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6523] <... sendfile resumed>) = 233472 [pid 6523] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6519] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5610] <... close resumed>) = 0 [pid 6523] <... futex resumed>) = 0 [pid 6523] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL) = ? [pid 5610] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6523] +++ killed by SIGBUS +++ [pid 5610] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5610] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 6538 attached [pid 6538] set_robust_list(0x5555748a66e0, 24) = 0 [pid 6537] +++ killed by SIGBUS +++ [pid 6520] <... sendfile resumed>) = ? [pid 6519] +++ killed by SIGBUS +++ [pid 6538] rt_sigprocmask(SIG_SETMASK, [] [pid 6534] +++ killed by SIGBUS +++ [pid 6520] +++ killed by SIGBUS +++ [ 126.282229][ T6536] EXT4-fs (loop2): free_blocks=20480 [ 126.282243][ T6536] EXT4-fs (loop2): dirty_blocks=560 [ 126.282253][ T6536] EXT4-fs (loop2): Block reservation details [ 126.282263][ T6536] EXT4-fs (loop2): i_reserved_data_blocks=35 [ 126.300158][ T6537] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 126.300724][ T6537] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 224 with error 28 [pid 6538] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6538 [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6519, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6538] chdir("./35" [pid 5610] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 6538] <... chdir resumed>) = 0 [pid 6517] +++ killed by SIGBUS +++ [pid 5610] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] <... restart_syscall resumed>) = 0 [pid 6538] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5612] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6517, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 6538] setpgid(0, 0 [pid 5612] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 6538] <... setpgid resumed>) = 0 [pid 5612] <... restart_syscall resumed>) = 0 [pid 6538] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5609] umount2("./35", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6538] <... openat resumed>) = 3 [pid 6538] write(3, "1000", 4 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6538] <... write resumed>) = 4 [pid 5612] umount2("./36", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6538] close(3 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5612] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5609] <... openat resumed>) = 3 [pid 6538] <... close resumed>) = 0 [pid 5612] <... openat resumed>) = 3 [pid 6538] symlink("/dev/binderfs", "./binderfs" [pid 5612] fstat(3 [pid 5609] fstat(3 [pid 6538] <... symlink resumed>) = 0 [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6538] write(1, "executing program\n", 18 [pid 5612] getdents64(3 [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6536] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6525] <... sendfile resumed>) = 577536 executing program [pid 6538] <... write resumed>) = 18 [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5609] getdents64(3 [pid 6538] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6536] +++ killed by SIGBUS +++ [pid 6525] +++ killed by SIGBUS +++ [pid 5612] umount2("./36/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6538] <... futex resumed>) = 0 [pid 6521] +++ killed by SIGBUS +++ [pid 5609] umount2("./35/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6538] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60}, NULL, 8) = 0 [pid 5611] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6521, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6538] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5611] umount2("./36", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6538] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6538] <... mmap resumed>) = 0x7fef94c68000 [pid 5611] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6538] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 5611] <... openat resumed>) = 3 [pid 6538] <... mprotect resumed>) = 0 [ 126.300749][ T6537] EXT4-fs (loop0): This should not happen!! Data will be lost [ 126.300749][ T6537] [ 126.300762][ T6537] EXT4-fs (loop0): Total free blocks count 0 [ 126.300774][ T6537] EXT4-fs (loop0): Free/Dirty block details [ 126.300786][ T6537] EXT4-fs (loop0): free_blocks=20480 [ 126.300799][ T6537] EXT4-fs (loop0): dirty_blocks=224 [ 126.300810][ T6537] EXT4-fs (loop0): Block reservation details [ 126.300822][ T6537] EXT4-fs (loop0): i_reserved_data_blocks=14 [pid 5611] fstat(3 [pid 6538] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6538] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6538] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 5611] getdents64(3ci2-upstream-fs/strace-static-x86_64: Process 6539 attached [pid 6539] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 6539] set_robust_list(0x7fef94c889a0, 24) = 0 [pid 6539] rt_sigprocmask(SIG_SETMASK, [] [pid 6538] <... clone3 resumed> => {parent_tid=[6539]}, 88) = 6539 [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6539] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6538] rt_sigprocmask(SIG_SETMASK, [] [ 126.474175][ T63] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 224 with max blocks 4 with error 28 [ 126.474207][ T63] EXT4-fs (loop0): This should not happen!! Data will be lost [ 126.474207][ T63] [ 126.483689][ T5614] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 126.491733][ T5612] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 5611] umount2("./36/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6539] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6538] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6538] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... umount2 resumed>) = 0 [pid 6538] <... futex resumed>) = 1 [pid 5609] umount2("./35/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6538] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6539] <... futex resumed>) = 0 [pid 5614] <... umount2 resumed>) = 0 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5614] umount2("./35/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6539] memfd_create("syzkaller", 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./35/file1" [pid 6539] <... memfd_create resumed>) = 3 [pid 5614] newfstatat(AT_FDCWD, "./35/file1" [pid 5609] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6539] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5612] <... umount2 resumed>) = 0 [pid 6539] <... mmap resumed>) = 0x7fef8c868000 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./35/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./35/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4 [pid 5612] umount2("./36/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5614] umount2("./35/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] getdents64(4 [pid 5614] openat(AT_FDCWD, "./35/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5612] newfstatat(AT_FDCWD, "./36/file1" [pid 6539] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5614] <... openat resumed>) = 4 [pid 5612] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] <... umount2 resumed>) = 0 [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5612] umount2("./36/file1", MNT_FORCE|UMOUNT_NOFOLLOW [ 126.494154][ T5609] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 126.552442][ T177] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 560 with max blocks 4 with error 28 [ 126.552473][ T177] EXT4-fs (loop2): This should not happen!! Data will be lost [pid 5614] fstat(4 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] umount2("./36/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5612] openat(AT_FDCWD, "./36/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5614] getdents64(4 [pid 5612] <... openat resumed>) = 4 [pid 5611] newfstatat(AT_FDCWD, "./36/file1" [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5611] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5612] fstat(4 [pid 5611] umount2("./36/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5614] getdents64(4 [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5609] getdents64(4 [pid 5614] close(4 [pid 5612] getdents64(4 [pid 5611] openat(AT_FDCWD, "./36/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5614] <... close resumed>) = 0 [pid 5612] getdents64(4 [pid 5611] <... openat resumed>) = 4 [pid 5614] rmdir("./35/file1" [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5611] fstat(4 [pid 5609] close(4 [pid 6539] <... write resumed>) = 524288 [pid 5609] <... close resumed>) = 0 [pid 6539] munmap(0x7fef8c868000, 138412032 [pid 5609] rmdir("./35/file1" [pid 6539] <... munmap resumed>) = 0 [pid 5612] close(4 [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5614] <... rmdir resumed>) = 0 [pid 5609] <... rmdir resumed>) = 0 [pid 5612] <... close resumed>) = 0 [pid 5611] getdents64(4 [pid 6539] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5612] rmdir("./36/file1" [pid 5609] umount2("./35/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6539] <... openat resumed>) = 4 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5609] newfstatat(AT_FDCWD, "./35/binderfs" [pid 6539] ioctl(4, LOOP_SET_FD, 3 [pid 5609] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] getdents64(4 [pid 6539] <... ioctl resumed>) = 0 [pid 5614] umount2("./35/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5612] <... rmdir resumed>) = 0 [pid 5609] unlink("./35/binderfs" [pid 6539] close(3 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6539] <... close resumed>) = 0 [pid 5614] newfstatat(AT_FDCWD, "./35/binderfs" [pid 5612] umount2("./36/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] close(4 [pid 5609] <... unlink resumed>) = 0 [pid 6539] close(4 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] <... close resumed>) = 0 [pid 5609] getdents64(3 [pid 5612] newfstatat(AT_FDCWD, "./36/binderfs" [pid 5611] rmdir("./36/file1" [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5612] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6539] <... close resumed>) = 0 [pid 5612] unlink("./36/binderfs" [pid 5611] <... rmdir resumed>) = 0 [pid 5609] close(3 [pid 6539] mkdir("./file1", 0777) = 0 [pid 5612] <... unlink resumed>) = 0 [pid 5611] umount2("./36/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... close resumed>) = 0 [pid 6539] mount("/dev/loop1", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5614] unlink("./35/binderfs" [pid 5612] getdents64(3 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] rmdir("./35" [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5611] newfstatat(AT_FDCWD, "./36/binderfs" [pid 5609] <... rmdir resumed>) = 0 [pid 5612] close(3 [pid 5611] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] mkdir("./36", 0777 [pid 5612] <... close resumed>) = 0 [pid 5611] unlink("./36/binderfs" [pid 5609] <... mkdir resumed>) = 0 [pid 5612] rmdir("./36" [pid 5611] <... unlink resumed>) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5614] <... unlink resumed>) = 0 [pid 5612] <... rmdir resumed>) = 0 [pid 5611] getdents64(3 [ 126.552473][ T177] [ 126.564171][ T5611] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 126.611116][ T6539] loop1: detected capacity change from 0 to 1024 [pid 5609] <... openat resumed>) = 3 [pid 5614] getdents64(3 [pid 5612] mkdir("./37", 0777 [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5609] ioctl(3, LOOP_CLR_FD [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5611] close(3 [pid 5614] close(3 [pid 5609] <... ioctl resumed>) = 0 [pid 5611] <... close resumed>) = 0 [pid 5609] close(3 [pid 5614] <... close resumed>) = 0 [pid 6539] <... mount resumed>) = 0 [pid 6539] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5614] rmdir("./35" [pid 5612] <... mkdir resumed>) = 0 [pid 5611] rmdir("./36" [pid 6539] chdir("./file1") = 0 [pid 6539] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5614] <... rmdir resumed>) = 0 [pid 5612] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5611] <... rmdir resumed>) = 0 [pid 5609] <... close resumed>) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6539] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] mkdir("./36", 0777 [pid 6539] <... futex resumed>) = 1 [pid 6538] <... futex resumed>) = 0 [pid 5611] mkdir("./37", 0777 [pid 5609] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6538] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... openat resumed>) = 3 [pid 6538] <... futex resumed>) = 0 [pid 6539] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 5614] <... mkdir resumed>) = 0 [pid 5612] ioctl(3, LOOP_CLR_FD [pid 5611] <... mkdir resumed>) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6538] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6539] <... openat resumed>) = 4 [pid 5614] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5612] <... ioctl resumed>) = 0 [pid 5611] openat(AT_FDCWD, "/dev/loop2", O_RDWRci2-upstream-fs/strace-static-x86_64: Process 6542 attached [pid 5614] <... openat resumed>) = 3 [pid 5612] close(3 [pid 5611] <... openat resumed>) = 3 [pid 6542] set_robust_list(0x5555748a66e0, 24 [pid 6539] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] ioctl(3, LOOP_CLR_FD [pid 6539] <... futex resumed>) = 1 [pid 6538] <... futex resumed>) = 0 [pid 5614] <... ioctl resumed>) = 0 [pid 5611] ioctl(3, LOOP_CLR_FD [pid 6539] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6538] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... ioctl resumed>) = 0 [pid 6542] <... set_robust_list resumed>) = 0 [pid 6538] <... futex resumed>) = 0 [pid 5609] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6542 [pid 6542] rt_sigprocmask(SIG_SETMASK, [] [pid 6539] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6538] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] close(3 [pid 5611] close(3 [pid 6542] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6539] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 5612] <... close resumed>) = 0 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 6542] chdir("./36" [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6542] <... chdir resumed>) = 0 [pid 6542] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5612] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6542] setpgid(0, 0 [pid 5612] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6542] <... setpgid resumed>) = 0 [pid 5612] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6542] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6539] <... openat resumed>) = 5 [pid 5614] <... close resumed>) = 0 [pid 6539] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6542] write(3, "1000", 4 [pid 6539] <... futex resumed>) = 1 [pid 6538] <... futex resumed>) = 0 [pid 5614] <... rt_sigprocmask resumed>, [], 8) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6543 attached [pid 6542] <... write resumed>) = 4 [pid 6539] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6538] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6543] set_robust_list(0x5555748a66e0, 24 [pid 6542] close(3 [pid 6539] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6538] <... futex resumed>) = 0 [pid 5612] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6543 ci2-upstream-fs/strace-static-x86_64: Process 6544 attached [pid 6543] <... set_robust_list resumed>) = 0 [pid 6542] <... close resumed>) = 0 [pid 6539] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6538] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] rt_sigprocmask(SIG_SETMASK, [] [pid 5611] <... close resumed>) = 0 [pid 6544] set_robust_list(0x5555748a66e0, 24 [pid 6543] rt_sigprocmask(SIG_SETMASK, [] [pid 6542] symlink("/dev/binderfs", "./binderfs" [pid 6539] <... openat resumed>) = 6 [pid 5614] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6544 [pid 5612] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6544] <... set_robust_list resumed>) = 0 [pid 6543] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6542] <... symlink resumed>) = 0 [pid 6539] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 5611] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6544] rt_sigprocmask(SIG_SETMASK, [] [pid 6543] chdir("./37" [pid 6542] write(1, "executing program\n", 18 [pid 6539] <... futex resumed>) = 1 [pid 6538] <... futex resumed>) = 0 executing program [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5611] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6544] <... rt_sigprocmask resumed>, NULL, 8) = 0 [ 126.703581][ T37] audit: type=1800 audit(1785844657.104:183): pid=6539 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop1" ino=15 res=0 errno=0 [pid 6543] <... chdir resumed>) = 0 [pid 6542] <... write resumed>) = 18 [pid 6539] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6538] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6544] chdir("./36" [pid 6543] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6542] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6539] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6538] <... futex resumed>) = 0 [pid 6538] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6543] <... prctl resumed>) = 0 [pid 6542] <... futex resumed>) = 0 [pid 6539] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6544] <... chdir resumed>) = 0 [pid 6543] setpgid(0, 0 [pid 6542] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6539] <... mmap resumed>) = 0x200000000000 [pid 6543] <... setpgid resumed>) = 0 [pid 6544] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6543] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6539] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000ci2-upstream-fs/strace-static-x86_64: Process 6545 attached [pid 6544] <... prctl resumed>) = 0 [pid 6542] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6545] set_robust_list(0x5555748a66e0, 24 [pid 6544] setpgid(0, 0 [pid 6543] <... openat resumed>) = 3 [pid 6542] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6539] <... futex resumed>) = 1 [pid 6538] <... futex resumed>) = 0 [pid 5611] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6545 [pid 6545] <... set_robust_list resumed>) = 0 [pid 6544] <... setpgid resumed>) = 0 [pid 6543] write(3, "1000", 4 [pid 6542] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6539] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6538] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] rt_sigprocmask(SIG_SETMASK, [] [pid 6545] rt_sigprocmask(SIG_SETMASK, [] [pid 6544] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6543] <... write resumed>) = 4 [pid 6542] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6539] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6538] <... futex resumed>) = 0 [pid 5611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6545] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6544] <... openat resumed>) = 3 [pid 6543] close(3 [pid 6542] <... mmap resumed>) = 0x7fef94c68000 [pid 6539] sendfile(4, 5, NULL, 553647746 [pid 6538] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6545] chdir("./37" [pid 6544] write(3, "1000", 4 [pid 6543] <... close resumed>) = 0 [pid 6542] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6545] <... chdir resumed>) = 0 [pid 6543] symlink("/dev/binderfs", "./binderfs" [pid 6544] <... write resumed>) = 4 [pid 6545] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6542] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6545] <... prctl resumed>) = 0 [pid 6544] close(3 [pid 6543] <... symlink resumed>) = 0 [pid 6542] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6545] setpgid(0, 0 [pid 6542] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0}ci2-upstream-fs/strace-static-x86_64: Process 6546 attached [pid 6545] <... setpgid resumed>) = 0 [pid 6545] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6542] <... clone3 resumed> => {parent_tid=[6546]}, 88) = 6546 [pid 6545] <... openat resumed>) = 3 [pid 6542] rt_sigprocmask(SIG_SETMASK, [] [pid 6545] write(3, "1000", 4 [pid 6542] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6546] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6545] <... write resumed>) = 4 [pid 6542] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6546] <... rseq resumed>) = 0 [pid 6545] close(3 [pid 6542] <... futex resumed>) = 0 [pid 6546] set_robust_list(0x7fef94c889a0, 24 [pid 6545] <... close resumed>) = 0 [pid 6544] <... close resumed>) = 0 [pid 6542] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6546] <... set_robust_list resumed>) = 0 [pid 6545] symlink("/dev/binderfs", "./binderfs" [pid 6546] rt_sigprocmask(SIG_SETMASK, [] [pid 6545] <... symlink resumed>) = 0 [pid 6546] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6545] write(1, "executing program\n", 18 [pid 6546] memfd_create("syzkaller", 0 [pid 6545] <... write resumed>) = 18 [pid 6546] <... memfd_create resumed>) = 3 [pid 6545] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6546] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6545] <... futex resumed>) = 0 [pid 6546] <... mmap resumed>) = 0x7fef8c868000 executing program [pid 6545] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6544] symlink("/dev/binderfs", "./binderfs" [pid 6543] write(1, "executing program\n", 18) = 18 [pid 6544] <... symlink resumed>) = 0 executing program [pid 6543] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6545] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6545] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6545] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6544] write(1, "executing program\n", 18 [pid 6543] <... futex resumed>) = 0 executing program [pid 6546] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6545] <... mmap resumed>) = 0x7fef94c68000 [pid 6544] <... write resumed>) = 18 [pid 6543] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6544] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6543] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6545] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6544] <... futex resumed>) = 0 [pid 6543] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6545] <... mprotect resumed>) = 0 [pid 6544] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6543] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6545] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6544] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6543] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6545] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6544] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6543] <... mmap resumed>) = 0x7fef94c68000 [pid 6545] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6544] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6543] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITEci2-upstream-fs/strace-static-x86_64: Process 6547 attached [pid 6544] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6543] <... mprotect resumed>) = 0 [pid 6547] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6545] <... clone3 resumed> => {parent_tid=[6547]}, 88) = 6547 [pid 6544] <... mmap resumed>) = 0x7fef94c68000 [pid 6543] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6547] <... rseq resumed>) = 0 [pid 6545] rt_sigprocmask(SIG_SETMASK, [] [pid 6544] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6543] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6538] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6545] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6544] <... mprotect resumed>) = 0 [pid 6543] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6538] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6547] set_robust_list(0x7fef94c889a0, 24 [pid 6545] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6538] <... futex resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6548 attached [pid 6547] <... set_robust_list resumed>) = 0 [pid 6546] <... write resumed>) = 524288 [pid 6545] <... futex resumed>) = 0 [pid 6544] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6538] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6548] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6544] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6543] <... clone3 resumed> => {parent_tid=[6548]}, 88) = 6548 [pid 6548] <... rseq resumed>) = 0 [pid 6547] rt_sigprocmask(SIG_SETMASK, [] [pid 6546] munmap(0x7fef8c868000, 138412032 [pid 6545] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6544] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6543] rt_sigprocmask(SIG_SETMASK, [] [pid 6538] <... mmap resumed>) = 0x7fef94c47000 ci2-upstream-fs/strace-static-x86_64: Process 6549 attached [pid 6548] set_robust_list(0x7fef94c889a0, 24 [pid 6547] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6546] <... munmap resumed>) = 0 [pid 6543] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6538] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6549] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6548] <... set_robust_list resumed>) = 0 [pid 6547] memfd_create("syzkaller", 0 [pid 6544] <... clone3 resumed> => {parent_tid=[6549]}, 88) = 6549 [pid 6543] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6538] <... mprotect resumed>) = 0 [pid 6549] <... rseq resumed>) = 0 [pid 6548] rt_sigprocmask(SIG_SETMASK, [] [pid 6547] <... memfd_create resumed>) = 3 [pid 6546] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6544] rt_sigprocmask(SIG_SETMASK, [] [pid 6543] <... futex resumed>) = 0 [pid 6549] set_robust_list(0x7fef94c889a0, 24 [pid 6548] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6547] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6546] <... openat resumed>) = 4 [pid 6544] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6543] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6538] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6549] <... set_robust_list resumed>) = 0 [pid 6548] memfd_create("syzkaller", 0 [pid 6547] <... mmap resumed>) = 0x7fef8c868000 [pid 6546] ioctl(4, LOOP_SET_FD, 3 [pid 6544] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6549] rt_sigprocmask(SIG_SETMASK, [] [pid 6548] <... memfd_create resumed>) = 3 [pid 6544] <... futex resumed>) = 0 [pid 6538] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6549] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6548] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6544] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6538] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 6550 attached [pid 6548] <... mmap resumed>) = 0x7fef8c868000 [pid 6547] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6549] memfd_create("syzkaller", 0 [pid 6550] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6549] <... memfd_create resumed>) = 3 [pid 6546] <... ioctl resumed>) = 0 [pid 6538] <... clone3 resumed> => {parent_tid=[6550]}, 88) = 6550 [pid 6550] <... rseq resumed>) = 0 [pid 6549] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6546] close(3 [pid 6550] set_robust_list(0x7fef94c679a0, 24 [pid 6549] <... mmap resumed>) = 0x7fef8c868000 [pid 6548] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6546] <... close resumed>) = 0 [pid 6538] rt_sigprocmask(SIG_SETMASK, [] [pid 6550] <... set_robust_list resumed>) = 0 [pid 6550] rt_sigprocmask(SIG_SETMASK, [] [pid 6546] close(4 [pid 6538] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6546] <... close resumed>) = 0 [pid 6550] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6538] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6549] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6546] mkdir("./file1", 0777 [pid 6538] <... futex resumed>) = 0 [ 126.906704][ T6546] loop0: detected capacity change from 0 to 1024 [pid 6546] <... mkdir resumed>) = 0 [pid 6546] mount("/dev/loop0", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6538] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6547] <... write resumed>) = 524288 [pid 6547] munmap(0x7fef8c868000, 138412032) = 0 [pid 6547] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 126.943657][ T6539] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 126.948289][ T6550] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 828 with error 28 [ 126.948320][ T6550] EXT4-fs (loop1): This should not happen!! Data will be lost [ 126.948320][ T6550] [ 126.948334][ T6550] EXT4-fs (loop1): Total free blocks count 0 [ 126.948347][ T6550] EXT4-fs (loop1): Free/Dirty block details [ 126.948359][ T6550] EXT4-fs (loop1): free_blocks=20480 [ 126.948372][ T6550] EXT4-fs (loop1): dirty_blocks=832 [pid 6547] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6547] close(3) = 0 [pid 6547] close(4) = 0 [pid 6546] <... mount resumed>) = 0 [pid 6547] mkdir("./file1", 0777) = 0 [pid 6538] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6547] mount("/dev/loop2", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6546] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6546] chdir("./file1") = 0 [pid 6546] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6548] <... write resumed>) = 524288 [pid 6546] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6549] <... write resumed>) = 524288 [pid 6548] munmap(0x7fef8c868000, 138412032 [pid 6546] <... futex resumed>) = 1 [pid 6542] <... futex resumed>) = 0 [pid 6549] munmap(0x7fef8c868000, 138412032 [pid 6548] <... munmap resumed>) = 0 [pid 6546] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6549] <... munmap resumed>) = 0 [pid 6542] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6549] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6550] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6548] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6546] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6542] <... futex resumed>) = 0 [pid 6539] <... sendfile resumed>) = 847872 [pid 6549] <... openat resumed>) = 4 [pid 6548] <... openat resumed>) = 4 [pid 6546] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [ 126.948385][ T6550] EXT4-fs (loop1): Block reservation details [ 126.948396][ T6550] EXT4-fs (loop1): i_reserved_data_blocks=52 [ 126.980754][ T6547] loop2: detected capacity change from 0 to 1024 [pid 6542] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6550] +++ killed by SIGBUS +++ [pid 6549] ioctl(4, LOOP_SET_FD, 3 [pid 6548] ioctl(4, LOOP_SET_FD, 3 [pid 6547] <... mount resumed>) = 0 [pid 6549] <... ioctl resumed>) = 0 [pid 6546] <... openat resumed>) = 4 [pid 6546] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6542] <... futex resumed>) = 0 [pid 6542] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6542] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6546] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC) = 5 [pid 6546] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6542] <... futex resumed>) = 0 [pid 6542] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6542] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6546] <... futex resumed>) = 1 [pid 6546] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000) = 6 [pid 6548] <... ioctl resumed>) = 0 [pid 6546] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6549] close(3 [pid 6548] close(3 [pid 6547] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6546] <... futex resumed>) = 1 [pid 6542] <... futex resumed>) = 0 [pid 6539] +++ killed by SIGBUS +++ [pid 6538] +++ killed by SIGBUS +++ [pid 6548] <... close resumed>) = 0 [pid 6542] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6538, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 6548] close(4 [pid 6542] <... futex resumed>) = 0 [pid 6542] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6549] <... close resumed>) = 0 [pid 6548] <... close resumed>) = 0 [pid 6547] <... openat resumed>) = 3 [pid 6546] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6549] close(4 [pid 6548] mkdir("./file1", 0777 [pid 6547] chdir("./file1" [pid 6546] <... mmap resumed>) = 0x200000000000 [pid 6549] <... close resumed>) = 0 [pid 6547] <... chdir resumed>) = 0 [pid 5610] umount2("./35", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6549] mkdir("./file1", 0777 [pid 6547] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6546] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6549] <... mkdir resumed>) = 0 [pid 6548] <... mkdir resumed>) = 0 [pid 6547] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6546] <... futex resumed>) = 1 [pid 6542] <... futex resumed>) = 0 [pid 5610] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6542] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6546] sendfile(4, 5, NULL, 553647746 [pid 6542] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... openat resumed>) = 3 [pid 6547] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] fstat(3 [pid 6547] <... futex resumed>) = 1 [pid 6547] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6545] <... futex resumed>) = 0 [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6549] mount("/dev/loop4", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6548] mount("/dev/loop3", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6545] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [ 127.060747][ T6549] loop4: detected capacity change from 0 to 1024 [ 127.061026][ T37] audit: type=1800 audit(1785844657.454:184): pid=6546 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 127.081780][ T6548] loop3: detected capacity change from 0 to 1024 [pid 5610] getdents64(3 [pid 6547] <... futex resumed>) = 0 [pid 6545] <... futex resumed>) = 1 [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6547] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6545] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] umount2("./35/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6547] <... openat resumed>) = 4 [pid 6547] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6545] <... futex resumed>) = 0 [pid 6545] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6547] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6545] <... futex resumed>) = 0 [pid 6547] <... openat resumed>) = 5 [pid 6545] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6547] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6545] <... futex resumed>) = 0 [pid 6547] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6545] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6542] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6545] <... futex resumed>) = 0 [pid 6542] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6545] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6542] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c47000 [pid 6542] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6547] <... openat resumed>) = 6 [pid 6542] <... mprotect resumed>) = 0 [pid 6542] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6547] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 127.151031][ T37] audit: type=1800 audit(1785844657.544:185): pid=6547 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop2" ino=15 res=0 errno=0 [pid 6542] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6547] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6545] <... futex resumed>) = 0 [pid 6542] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6545] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6557 attached [pid 6547] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6545] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6557] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 6547] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6542] <... clone3 resumed> => {parent_tid=[6557]}, 88) = 6557 [pid 6557] set_robust_list(0x7fef94c679a0, 24) = 0 [pid 6557] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6542] rt_sigprocmask(SIG_SETMASK, [] [pid 6557] futex(0x7fef94d63e58, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6542] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6542] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6557] <... futex resumed>) = 0 [pid 6542] <... futex resumed>) = 1 [pid 6542] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6548] <... mount resumed>) = 0 [pid 6547] <... mmap resumed>) = 0x200000000000 [pid 6548] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6547] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6548] chdir("./file1" [pid 6547] <... futex resumed>) = 1 [pid 6545] <... futex resumed>) = 0 [pid 6548] <... chdir resumed>) = 0 [pid 6547] sendfile(4, 5, NULL, 553647746 [pid 6545] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6548] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6545] <... futex resumed>) = 0 [pid 6548] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6545] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6548] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6543] <... futex resumed>) = 0 [pid 6548] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [ 127.211769][ T5610] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6543] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6548] <... openat resumed>) = 4 [pid 6543] <... futex resumed>) = 0 [pid 6543] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6548] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6543] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6548] <... futex resumed>) = 0 [pid 6548] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6549] <... mount resumed>) = 0 [pid 6543] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6548] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6543] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6549] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6548] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6549] <... openat resumed>) = 3 [pid 6548] <... openat resumed>) = 5 [pid 6548] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6549] chdir("./file1") = 0 [pid 6549] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6548] <... futex resumed>) = 1 [pid 6543] <... futex resumed>) = 0 [pid 6549] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6548] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6543] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6542] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6543] <... futex resumed>) = 0 [pid 6549] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6543] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6549] <... futex resumed>) = 1 [pid 6549] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6544] <... futex resumed>) = 0 [pid 5610] <... umount2 resumed>) = 0 [pid 6549] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6544] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6549] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6544] <... futex resumed>) = 0 [pid 5610] umount2("./35/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6549] <... openat resumed>) = 4 [pid 6544] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 127.252384][ T6546] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 127.272561][ T37] audit: type=1800 audit(1785844657.664:186): pid=6548 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 127.278342][ T6557] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 828 with error 28 [ 127.278373][ T6557] EXT4-fs (loop0): This should not happen!! Data will be lost [ 127.278373][ T6557] [pid 5610] newfstatat(AT_FDCWD, "./35/file1" [pid 6549] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6545] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6549] <... futex resumed>) = 1 [pid 6545] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6544] <... futex resumed>) = 0 [pid 5610] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6549] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6548] <... openat resumed>) = 6 [pid 6545] <... futex resumed>) = 0 [pid 6544] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] umount2("./35/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6548] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6545] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6549] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6548] <... futex resumed>) = 1 [pid 6545] <... mmap resumed>) = 0x7fef94c47000 [pid 6544] <... futex resumed>) = 0 [pid 6543] <... futex resumed>) = 0 [pid 5610] openat(AT_FDCWD, "./35/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6545] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6543] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... openat resumed>) = 4 [pid 6549] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6548] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6545] <... mprotect resumed>) = 0 [pid 6544] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6543] <... futex resumed>) = 0 [pid 5610] fstat(4 [pid 6549] <... openat resumed>) = 5 [pid 6548] <... mmap resumed>) = 0x200000000000 [pid 6545] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6543] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6549] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6548] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6545] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6543] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5610] getdents64(4 [pid 6549] <... futex resumed>) = 1 [pid 6548] <... futex resumed>) = 0 [pid 6545] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6544] <... futex resumed>) = 0 [pid 6543] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000ci2-upstream-fs/strace-static-x86_64: Process 6560 attached [pid 6549] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6548] sendfile(4, 5, NULL, 553647746 [pid 6544] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6543] <... futex resumed>) = 0 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [ 127.278387][ T6557] EXT4-fs (loop0): Total free blocks count 0 [ 127.278399][ T6557] EXT4-fs (loop0): Free/Dirty block details [ 127.278412][ T6557] EXT4-fs (loop0): free_blocks=20480 [ 127.278425][ T6557] EXT4-fs (loop0): dirty_blocks=832 [ 127.278436][ T6557] EXT4-fs (loop0): Block reservation details [ 127.278447][ T6557] EXT4-fs (loop0): i_reserved_data_blocks=52 [pid 6560] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6549] <... openat resumed>) = 6 [pid 6545] <... clone3 resumed> => {parent_tid=[6560]}, 88) = 6560 [pid 6544] <... futex resumed>) = 0 [pid 6543] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] getdents64(4 [pid 6560] <... rseq resumed>) = 0 [pid 6549] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6545] rt_sigprocmask(SIG_SETMASK, [] [pid 6544] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6560] set_robust_list(0x7fef94c679a0, 24 [pid 6549] <... futex resumed>) = 0 [pid 6545] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6544] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5610] close(4 [pid 6560] <... set_robust_list resumed>) = 0 [pid 6549] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6560] rt_sigprocmask(SIG_SETMASK, [] [pid 6549] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6544] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... close resumed>) = 0 [pid 6560] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6557] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6549] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6545] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6544] <... futex resumed>) = 0 [pid 5610] rmdir("./35/file1" [pid 6549] <... mmap resumed>) = 0x200000000000 [pid 6546] <... sendfile resumed>) = 847872 [pid 6545] <... futex resumed>) = 0 [pid 6544] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... rmdir resumed>) = 0 [pid 6549] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6546] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6545] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6549] <... futex resumed>) = 1 [pid 6546] +++ killed by SIGBUS +++ [pid 6544] <... futex resumed>) = 0 [pid 5610] umount2("./35/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6544] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6549] sendfile(4, 5, NULL, 553647746 [pid 6544] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] newfstatat(AT_FDCWD, "./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6557] +++ killed by SIGBUS +++ [pid 6542] +++ killed by SIGBUS +++ [pid 5610] unlink("./35/binderfs" [pid 6547] <... sendfile resumed>) = 294912 [pid 5610] <... unlink resumed>) = 0 [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6542, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=13 /* 0.13 s */} --- [ 127.317387][ T37] audit: type=1800 audit(1785844657.714:187): pid=6549 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 127.391065][ T6560] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 127.392310][ T6560] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 284 with error 28 [pid 6547] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 6560] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6547] <... futex resumed>) = 0 [pid 6543] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5610] getdents64(3 [pid 5609] <... restart_syscall resumed>) = 0 [pid 6545] <... futex resumed>) = ? [pid 6543] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6543] <... futex resumed>) = 0 [pid 5610] close(3 [pid 6547] +++ killed by SIGBUS +++ [pid 6543] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5610] <... close resumed>) = 0 [pid 6543] <... mmap resumed>) = 0x7fef94c47000 [pid 6543] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 5610] rmdir("./35" [pid 6543] <... mprotect resumed>) = 0 [pid 6543] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5610] <... rmdir resumed>) = 0 [pid 6543] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6560] +++ killed by SIGBUS +++ [pid 6545] +++ killed by SIGBUS +++ [pid 6543] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5609] umount2("./36", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] mkdir("./36", 0777ci2-upstream-fs/strace-static-x86_64: Process 6561 attached [pid 5611] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6545, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6543] <... clone3 resumed> => {parent_tid=[6561]}, 88) = 6561 [pid 5611] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6543] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] <... mkdir resumed>) = 0 [pid 6561] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6543] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5611] <... restart_syscall resumed>) = 0 [pid 5609] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6561] <... rseq resumed>) = 0 [pid 6543] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... openat resumed>) = 3 [pid 6543] <... futex resumed>) = 0 [pid 5610] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6561] set_robust_list(0x7fef94c679a0, 24 [pid 6543] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] umount2("./37", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] fstat(3 [pid 6561] <... set_robust_list resumed>) = 0 [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6561] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] getdents64(3 [pid 5610] <... openat resumed>) = 3 [pid 6544] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5611] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5610] ioctl(3, LOOP_CLR_FD [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5611] <... openat resumed>) = 3 [pid 5609] umount2("./36/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] <... ioctl resumed>) = 0 [pid 6544] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] close(3 [pid 6544] <... futex resumed>) = 0 [pid 5611] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5611] getdents64(3, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6544] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5610] <... close resumed>) = 0 [ 127.392338][ T6560] EXT4-fs (loop2): This should not happen!! Data will be lost [ 127.392338][ T6560] [ 127.392351][ T6560] EXT4-fs (loop2): Total free blocks count 0 [ 127.392363][ T6560] EXT4-fs (loop2): Free/Dirty block details [ 127.392376][ T6560] EXT4-fs (loop2): free_blocks=20480 [ 127.392389][ T6560] EXT4-fs (loop2): dirty_blocks=288 [ 127.392400][ T6560] EXT4-fs (loop2): Block reservation details [ 127.392411][ T6560] EXT4-fs (loop2): i_reserved_data_blocks=18 [pid 6561] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6548] <... sendfile resumed>) = 98304 [pid 6544] <... mmap resumed>) = 0x7fef94c47000 [pid 5611] umount2("./37/file1", MNT_FORCE|UMOUNT_NOFOLLOW [ 127.478187][ T6561] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 127.478408][ T6561] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 96 with error 28 [ 127.478430][ T6561] EXT4-fs (loop3): This should not happen!! Data will be lost [ 127.478430][ T6561] [ 127.478443][ T6561] EXT4-fs (loop3): Total free blocks count 0 [pid 5610] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6544] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6543] <... futex resumed>) = ? [pid 5610] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6548] +++ killed by SIGBUS +++ [pid 6544] <... mprotect resumed>) = 0 [pid 5610] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 127.478456][ T6561] EXT4-fs (loop3): Free/Dirty block details [ 127.478468][ T6561] EXT4-fs (loop3): free_blocks=20480 [ 127.478482][ T6561] EXT4-fs (loop3): dirty_blocks=96 [ 127.478493][ T6561] EXT4-fs (loop3): Block reservation details [ 127.478504][ T6561] EXT4-fs (loop3): i_reserved_data_blocks=6 [ 127.556430][ T63] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 284 with max blocks 4 with error 28 [ 127.556460][ T63] EXT4-fs (loop2): This should not happen!! Data will be lost [pid 6544] rt_sigprocmask(SIG_BLOCK, ~[]ci2-upstream-fs/strace-static-x86_64: Process 6562 attached [pid 6561] +++ killed by SIGBUS +++ [pid 6543] +++ killed by SIGBUS +++ [pid 6544] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5612] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6543, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6562] set_robust_list(0x5555748a66e0, 24 [pid 6544] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5610] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6562 [pid 6562] <... set_robust_list resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6563 attached [pid 6562] rt_sigprocmask(SIG_SETMASK, [] [pid 6544] <... clone3 resumed> => {parent_tid=[6563]}, 88) = 6563 [pid 5611] <... umount2 resumed>) = 0 [pid 5610] rt_sigprocmask(SIG_SETMASK, [] [pid 6562] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6544] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] umount2("./37", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] umount2("./37/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6562] chdir("./36" [pid 5610] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6562] <... chdir resumed>) = 0 [pid 6544] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6563] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6562] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6544] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... umount2 resumed>) = 0 [pid 6563] <... rseq resumed>) = 0 [pid 6562] <... prctl resumed>) = 0 [pid 6544] <... futex resumed>) = 0 [pid 5612] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5611] newfstatat(AT_FDCWD, "./37/file1" [pid 6563] set_robust_list(0x7fef94c679a0, 24 [pid 6562] setpgid(0, 0 [pid 6544] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6563] <... set_robust_list resumed>) = 0 [pid 6562] <... setpgid resumed>) = 0 [pid 5612] <... openat resumed>) = 3 [pid 5611] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./36/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6563] rt_sigprocmask(SIG_SETMASK, [] [pid 6562] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5612] fstat(3 [pid 6563] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6562] <... openat resumed>) = 3 [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5611] umount2("./37/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 127.556460][ T63] [ 127.564452][ T5611] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 127.567564][ T5609] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6562] write(3, "1000", 4 [pid 5612] getdents64(3 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./36/file1" [pid 6562] <... write resumed>) = 4 [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5611] openat(AT_FDCWD, "./37/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5609] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6562] close(3 [pid 5612] umount2("./37/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] <... openat resumed>) = 4 [pid 5609] umount2("./36/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6562] <... close resumed>) = 0 [pid 5611] fstat(4 [pid 6562] symlink("/dev/binderfs", "./binderfs" [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6562] <... symlink resumed>) = 0 [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] openat(AT_FDCWD, "./36/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6562] write(1, "executing program\n", 18 [pid 5611] getdents64(4 [pid 5609] <... openat resumed>) = 4 [pid 6562] <... write resumed>) = 18 [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5609] fstat(4 [pid 5611] getdents64(4, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6562] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] close(4 [pid 6562] <... futex resumed>) = 0 [pid 5611] <... close resumed>) = 0 [pid 5609] getdents64(4 [pid 6562] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 5611] rmdir("./37/file1" [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6562] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 5611] <... rmdir resumed>) = 0 [pid 5609] getdents64(4 [pid 6562] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6562] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5611] umount2("./37/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] close(4 [pid 6562] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6562] <... mmap resumed>) = 0x7fef94c68000 [pid 5611] newfstatat(AT_FDCWD, "./37/binderfs" [pid 5609] <... close resumed>) = 0 [pid 6562] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 5611] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] rmdir("./36/file1" [pid 6562] <... mprotect resumed>) = 0 [pid 6562] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5609] <... rmdir resumed>) = 0 [pid 6562] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6562] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 5611] unlink("./37/binderfs"ci2-upstream-fs/strace-static-x86_64: Process 6564 attached executing program ) = 0 [pid 5609] umount2("./36/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6562] <... clone3 resumed> => {parent_tid=[6564]}, 88) = 6564 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6564] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6562] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5611] getdents64(3 [pid 5609] newfstatat(AT_FDCWD, "./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6562] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6564] <... rseq resumed>) = 0 [pid 6562] <... futex resumed>) = 0 [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5609] unlink("./36/binderfs" [pid 6564] set_robust_list(0x7fef94c889a0, 24 [pid 6562] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5611] close(3 [pid 5609] <... unlink resumed>) = 0 [pid 6564] <... set_robust_list resumed>) = 0 [pid 6544] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5611] <... close resumed>) = 0 [pid 6564] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5611] rmdir("./37" [ 127.636536][ T6563] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 127.636747][ T6563] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1132 with error 28 [ 127.636769][ T6563] EXT4-fs (loop4): This should not happen!! Data will be lost [ 127.636769][ T6563] [ 127.636781][ T6563] EXT4-fs (loop4): Total free blocks count 0 [ 127.636794][ T6563] EXT4-fs (loop4): Free/Dirty block details [pid 5609] getdents64(3 [pid 6564] memfd_create("syzkaller", 0 [pid 5611] <... rmdir resumed>) = 0 [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6564] <... memfd_create resumed>) = 3 [pid 5611] mkdir("./38", 0777 [pid 5609] close(3) = 0 [pid 5609] rmdir("./36" [pid 6564] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fef8c868000 [pid 5609] <... rmdir resumed>) = 0 [pid 6564] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6563] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6564] <... write resumed>) = 524288 [pid 6549] <... sendfile resumed>) = ? [pid 5611] <... mkdir resumed>) = 0 [pid 5609] mkdir("./37", 0777 [pid 6563] +++ killed by SIGBUS +++ [ 127.636807][ T6563] EXT4-fs (loop4): free_blocks=20480 [ 127.636820][ T6563] EXT4-fs (loop4): dirty_blocks=1136 [ 127.636832][ T6563] EXT4-fs (loop4): Block reservation details [ 127.636842][ T6563] EXT4-fs (loop4): i_reserved_data_blocks=71 [pid 6564] munmap(0x7fef8c868000, 138412032 [pid 5612] <... umount2 resumed>) = 0 [pid 6564] <... munmap resumed>) = 0 [pid 6549] +++ killed by SIGBUS +++ [pid 6544] +++ killed by SIGBUS +++ [pid 5612] umount2("./37/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5609] <... mkdir resumed>) = 0 [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6544, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6564] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5612] newfstatat(AT_FDCWD, "./37/file1" [pid 5611] <... openat resumed>) = 3 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6564] <... openat resumed>) = 4 [pid 5612] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] ioctl(3, LOOP_CLR_FD [pid 5609] <... openat resumed>) = 3 [pid 6564] ioctl(4, LOOP_SET_FD, 3 [pid 5614] umount2("./36", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5612] umount2("./37/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] <... ioctl resumed>) = 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] ioctl(3, LOOP_CLR_FD [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5612] openat(AT_FDCWD, "./37/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5611] close(3 [pid 5609] <... ioctl resumed>) = 0 [pid 5612] <... openat resumed>) = 4 [pid 5614] <... openat resumed>) = 3 [pid 5609] close(3 [pid 5614] fstat(3 [pid 5612] fstat(4 [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5614] getdents64(3 [pid 5612] getdents64(4 [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5614] umount2("./36/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5612] getdents64(4, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5612] close(4) = 0 [pid 5612] rmdir("./37/file1" [pid 6564] <... ioctl resumed>) = 0 [pid 5612] <... rmdir resumed>) = 0 [pid 5612] umount2("./37/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6564] close(3 [pid 5612] newfstatat(AT_FDCWD, "./37/binderfs" [pid 6564] <... close resumed>) = 0 [pid 5612] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6564] close(4) = 0 [pid 5612] unlink("./37/binderfs" [pid 6564] mkdir("./file1", 0777 [pid 5612] <... unlink resumed>) = 0 [ 127.728933][ T5612] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 5612] getdents64(3, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5612] close(3) = 0 [pid 5612] rmdir("./37") = 0 [pid 5612] mkdir("./38", 0777 [pid 6564] <... mkdir resumed>) = 0 [pid 5611] <... close resumed>) = 0 [pid 5609] <... close resumed>) = 0 [pid 6564] mount("/dev/loop1", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5611] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5611] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5609] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5611] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 6565 attached [pid 5612] <... mkdir resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6566 attached [pid 6565] set_robust_list(0x5555748a66e0, 24 [pid 5612] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6565] <... set_robust_list resumed>) = 0 [pid 6566] set_robust_list(0x5555748a66e0, 24 [pid 6565] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] <... openat resumed>) = 3 [pid 6566] <... set_robust_list resumed>) = 0 [pid 6566] rt_sigprocmask(SIG_SETMASK, [] [pid 6565] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5612] ioctl(3, LOOP_CLR_FD [pid 6566] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6566] chdir("./37" [pid 6565] chdir("./38" [pid 5612] <... ioctl resumed>) = 0 [pid 5611] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6565 [pid 5609] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6566 [pid 6566] <... chdir resumed>) = 0 [pid 5612] close(3 [pid 5611] rt_sigprocmask(SIG_SETMASK, [] [pid 6566] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6565] <... chdir resumed>) = 0 [pid 5611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 6566] <... prctl resumed>) = 0 [pid 6565] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6566] setpgid(0, 0 [pid 6565] <... prctl resumed>) = 0 [pid 6566] <... setpgid resumed>) = 0 [pid 6565] setpgid(0, 0 [pid 5612] <... close resumed>) = 0 [pid 6565] <... setpgid resumed>) = 0 [pid 6566] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6565] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5612] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6566] <... openat resumed>) = 3 [pid 6565] <... openat resumed>) = 3 [pid 5612] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5612] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6565] write(3, "1000", 4ci2-upstream-fs/strace-static-x86_64: Process 6569 attached [pid 6566] write(3, "1000", 4 [pid 6565] <... write resumed>) = 4 [pid 6566] <... write resumed>) = 4 [pid 6565] close(3 [pid 5612] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6569 [pid 6566] close(3 [pid 6565] <... close resumed>) = 0 [pid 6569] set_robust_list(0x5555748a66e0, 24 [pid 6566] <... close resumed>) = 0 [pid 6565] symlink("/dev/binderfs", "./binderfs" [pid 5612] rt_sigprocmask(SIG_SETMASK, [] [pid 6569] <... set_robust_list resumed>) = 0 [pid 6566] symlink("/dev/binderfs", "./binderfs" [pid 6569] rt_sigprocmask(SIG_SETMASK, [] [pid 6566] <... symlink resumed>) = 0 [pid 6565] <... symlink resumed>) = 0 [pid 5612] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6569] <... rt_sigprocmask resumed>, NULL, 8) = 0 executing program [pid 6565] write(1, "executing program\n", 18 [pid 6569] chdir("./38" [pid 6566] write(1, "executing program\n", 18 [pid 6565] <... write resumed>) = 18 [pid 6564] <... mount resumed>) = 0 [pid 6569] <... chdir resumed>) = 0 [pid 6564] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6564] chdir("./file1") = 0 [pid 6564] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6564] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6562] <... futex resumed>) = 0 [pid 6562] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6562] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6566] <... write resumed>) = 18 [pid 6564] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6566] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 executing program [pid 6565] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6569] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6565] <... futex resumed>) = 0 [ 127.814804][ T5614] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6569] setpgid(0, 0 [pid 6566] <... futex resumed>) = 0 [pid 6565] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6569] <... setpgid resumed>) = 0 [pid 6566] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6565] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6564] <... openat resumed>) = 4 [pid 5614] <... umount2 resumed>) = 0 [pid 6569] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6566] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6565] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6564] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] umount2("./36/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6569] <... openat resumed>) = 3 [pid 6566] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6565] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6564] <... futex resumed>) = 1 [pid 6562] <... futex resumed>) = 0 [pid 6569] write(3, "1000", 4 [pid 6566] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6565] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6564] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6569] <... write resumed>) = 4 [pid 6566] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6562] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6564] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6569] close(3 [pid 6566] <... mmap resumed>) = 0x7fef94c68000 [pid 6565] <... mmap resumed>) = 0x7fef94c68000 [pid 6564] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 5614] newfstatat(AT_FDCWD, "./36/file1" [pid 6566] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6565] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6564] <... openat resumed>) = 5 [pid 6562] <... futex resumed>) = 0 [pid 6562] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6566] <... mprotect resumed>) = 0 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6565] <... mprotect resumed>) = 0 [pid 6564] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6562] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6566] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6565] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6564] <... futex resumed>) = 0 [pid 6562] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] umount2("./36/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6569] <... close resumed>) = 0 [pid 6566] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6565] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6564] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6562] <... futex resumed>) = 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6569] symlink("/dev/binderfs", "./binderfs" [pid 6566] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6565] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6564] <... openat resumed>) = 6 [pid 6562] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] openat(AT_FDCWD, "./36/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORYci2-upstream-fs/strace-static-x86_64: Process 6570 attached [pid 6564] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000ci2-upstream-fs/strace-static-x86_64: Process 6571 attached [pid 6570] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6569] <... symlink resumed>) = 0 [pid 6566] <... clone3 resumed> => {parent_tid=[6571]}, 88) = 6571 [pid 6565] <... clone3 resumed> => {parent_tid=[6570]}, 88) = 6570 [pid 5614] <... openat resumed>) = 4 [pid 6564] <... futex resumed>) = 1 [pid 6562] <... futex resumed>) = 0 [pid 6570] <... rseq resumed>) = 0 [pid 6569] write(1, "executing program\n", 18 [pid 6566] rt_sigprocmask(SIG_SETMASK, [] executing program [pid 6565] rt_sigprocmask(SIG_SETMASK, [] [pid 6564] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5614] fstat(4 [pid 6571] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6570] set_robust_list(0x7fef94c889a0, 24 [pid 6569] <... write resumed>) = 18 [pid 6566] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6565] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6564] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6562] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6571] <... rseq resumed>) = 0 [pid 6570] <... set_robust_list resumed>) = 0 [pid 6569] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6566] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6565] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6564] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6562] <... futex resumed>) = 0 [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6571] set_robust_list(0x7fef94c889a0, 24 [pid 6570] rt_sigprocmask(SIG_SETMASK, [] [pid 6569] <... futex resumed>) = 0 [pid 6566] <... futex resumed>) = 0 [pid 6565] <... futex resumed>) = 0 [pid 6564] <... mmap resumed>) = 0x200000000000 [pid 6562] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] getdents64(4 [pid 6571] <... set_robust_list resumed>) = 0 [pid 6570] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6569] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6566] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6565] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6571] rt_sigprocmask(SIG_SETMASK, [] [pid 6569] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6570] memfd_create("syzkaller", 0 [pid 5614] getdents64(4 [pid 6571] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6569] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6564] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6571] memfd_create("syzkaller", 0 [pid 6570] <... memfd_create resumed>) = 3 [pid 6569] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6564] <... futex resumed>) = 1 [pid 6562] <... futex resumed>) = 0 [pid 6571] <... memfd_create resumed>) = 3 [pid 6570] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6569] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6564] sendfile(4, 5, NULL, 553647746 [pid 6562] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] close(4 [pid 6571] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6570] <... mmap resumed>) = 0x7fef8c868000 [pid 6562] <... futex resumed>) = 0 [pid 6571] <... mmap resumed>) = 0x7fef8c868000 [pid 6569] <... mmap resumed>) = 0x7fef94c68000 [pid 5614] <... close resumed>) = 0 [pid 5614] rmdir("./36/file1" [pid 6562] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6569] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5614] <... rmdir resumed>) = 0 [pid 6569] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6571] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6570] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5614] umount2("./36/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./36/binderfs" [pid 6569] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6569] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 5614] unlink("./36/binderfs"ci2-upstream-fs/strace-static-x86_64: Process 6572 attached ) = 0 [pid 5614] getdents64(3, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6569] <... clone3 resumed> => {parent_tid=[6572]}, 88) = 6572 [pid 6572] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5614] close(3 [pid 6569] rt_sigprocmask(SIG_SETMASK, [] [pid 6572] <... rseq resumed>) = 0 [pid 6569] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] <... close resumed>) = 0 [pid 6572] set_robust_list(0x7fef94c889a0, 24 [pid 6569] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] rmdir("./36" [pid 6569] <... futex resumed>) = 0 [pid 6569] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6572] <... set_robust_list resumed>) = 0 [pid 6572] rt_sigprocmask(SIG_SETMASK, [] [pid 6571] <... write resumed>) = 524288 [pid 6572] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6571] munmap(0x7fef8c868000, 138412032 [pid 6570] <... write resumed>) = 524288 [pid 6562] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6572] memfd_create("syzkaller", 0 [pid 6562] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6572] <... memfd_create resumed>) = 3 [pid 6562] <... futex resumed>) = 0 [pid 6562] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6572] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6571] <... munmap resumed>) = 0 [pid 5614] <... rmdir resumed>) = 0 [pid 6572] <... mmap resumed>) = 0x7fef8c868000 [pid 6571] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6570] munmap(0x7fef8c868000, 138412032 [pid 6562] <... mmap resumed>) = 0x7fef94c47000 [pid 6570] <... munmap resumed>) = 0 [pid 6562] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6571] <... openat resumed>) = 4 [pid 6571] ioctl(4, LOOP_SET_FD, 3 [pid 6562] <... mprotect resumed>) = 0 [pid 5614] mkdir("./37", 0777 [pid 6570] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6562] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5614] <... mkdir resumed>) = 0 [pid 6571] <... ioctl resumed>) = 0 [pid 6570] <... openat resumed>) = 4 [pid 6562] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6562] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 6573 attached [pid 6570] ioctl(4, LOOP_SET_FD, 3 [pid 5614] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6573] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6572] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6571] close(3 [pid 6562] <... clone3 resumed> => {parent_tid=[6573]}, 88) = 6573 [pid 5614] <... openat resumed>) = 3 [pid 6573] <... rseq resumed>) = 0 [pid 6571] <... close resumed>) = 0 [pid 6571] close(4) = 0 [pid 6571] mkdir("./file1", 0777 [pid 6573] set_robust_list(0x7fef94c679a0, 24 [pid 6571] <... mkdir resumed>) = 0 [pid 6562] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] ioctl(3, LOOP_CLR_FD [pid 6571] mount("/dev/loop0", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6562] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] <... ioctl resumed>) = 0 [pid 6573] <... set_robust_list resumed>) = 0 [pid 6573] rt_sigprocmask(SIG_SETMASK, [] [pid 6562] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] close(3 [pid 6573] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6562] <... futex resumed>) = 0 [pid 6562] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] <... close resumed>) = 0 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6573] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 5614] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6564] <... sendfile resumed>) = 294912 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6562] <... futex resumed>) = ? [pid 6564] +++ killed by SIGBUS +++ [pid 5614] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6576 [pid 5614] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6573] +++ killed by SIGBUS +++ [pid 6562] +++ killed by SIGBUS +++ ci2-upstream-fs/strace-static-x86_64: Process 6576 attached [pid 5610] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6562, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4 /* 0.04 s */} --- [ 128.045492][ T6573] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 128.047635][ T6573] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 284 with error 28 [ 128.047665][ T6573] EXT4-fs (loop1): This should not happen!! Data will be lost [ 128.047665][ T6573] [ 128.047677][ T6573] EXT4-fs (loop1): Total free blocks count 0 [pid 6572] <... write resumed>) = 524288 [pid 6576] set_robust_list(0x5555748a66e0, 24 [pid 6571] <... mount resumed>) = 0 [pid 6576] <... set_robust_list resumed>) = 0 [pid 6572] munmap(0x7fef8c868000, 138412032 [pid 6571] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6576] rt_sigprocmask(SIG_SETMASK, [] [pid 6571] <... openat resumed>) = 3 [pid 5610] umount2("./36", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6576] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6572] <... munmap resumed>) = 0 [pid 6571] chdir("./file1" [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6576] chdir("./37") = 0 [pid 6571] <... chdir resumed>) = 0 [pid 5610] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6576] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6572] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6571] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5610] <... openat resumed>) = 3 [pid 6576] <... prctl resumed>) = 0 [pid 6572] <... openat resumed>) = 4 [pid 6571] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6576] setpgid(0, 0) = 0 [pid 6576] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6572] ioctl(4, LOOP_SET_FD, 3 [pid 6571] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6576] <... openat resumed>) = 3 [pid 6572] <... ioctl resumed>) = 0 [pid 6571] <... futex resumed>) = 1 [pid 6566] <... futex resumed>) = 0 [pid 5610] fstat(3 [pid 6566] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6576] write(3, "1000", 4 [pid 6571] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6566] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6576] <... write resumed>) = 4 [pid 6572] close(3 [pid 5610] getdents64(3 [pid 6576] close(3 [pid 6572] <... close resumed>) = 0 [pid 6570] <... ioctl resumed>) = 0 [pid 6576] <... close resumed>) = 0 [pid 6572] close(4 [pid 6570] close(3 [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6572] <... close resumed>) = 0 [pid 6570] <... close resumed>) = 0 [pid 6576] symlink("/dev/binderfs", "./binderfs" [pid 6572] mkdir("./file1", 0777 [pid 6570] close(4 [pid 5610] umount2("./36/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6576] <... symlink resumed>) = 0 [pid 6572] <... mkdir resumed>) = 0 [pid 6571] <... openat resumed>) = 4 [pid 6576] write(1, "executing program\n", 18 [pid 6572] mount("/dev/loop3", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6571] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6576] <... write resumed>) = 18 [pid 6571] <... futex resumed>) = 1 [pid 6570] <... close resumed>) = 0 [pid 6566] <... futex resumed>) = 0 executing program [pid 6576] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6570] mkdir("./file1", 0777 [pid 6566] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6576] <... futex resumed>) = 0 [pid 6571] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6570] <... mkdir resumed>) = 0 [pid 6566] <... futex resumed>) = 0 [pid 6571] <... openat resumed>) = 5 [pid 6576] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6566] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6576] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6571] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6576] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6570] mount("/dev/loop2", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6571] <... futex resumed>) = 1 [pid 6566] <... futex resumed>) = 0 [ 128.047689][ T6573] EXT4-fs (loop1): Free/Dirty block details [ 128.047701][ T6573] EXT4-fs (loop1): free_blocks=20480 [ 128.047715][ T6573] EXT4-fs (loop1): dirty_blocks=288 [ 128.047725][ T6573] EXT4-fs (loop1): Block reservation details [ 128.047735][ T6573] EXT4-fs (loop1): i_reserved_data_blocks=18 [pid 6576] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6571] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6566] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6571] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6566] <... futex resumed>) = 0 [pid 6576] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6571] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6566] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6576] <... mmap resumed>) = 0x7fef94c68000 [pid 6571] <... openat resumed>) = 6 [pid 6576] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6571] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6576] <... mprotect resumed>) = 0 [pid 6571] <... futex resumed>) = 1 [pid 6566] <... futex resumed>) = 0 [pid 6571] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6566] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6576] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6571] <... mmap resumed>) = 0x200000000000 [pid 6566] <... futex resumed>) = 0 [pid 6576] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6571] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6566] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6576] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6571] <... futex resumed>) = 0 [pid 6566] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) ci2-upstream-fs/strace-static-x86_64: Process 6579 attached [pid 6571] sendfile(4, 5, NULL, 553647746 [pid 6566] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6576] <... clone3 resumed> => {parent_tid=[6579]}, 88) = 6579 [pid 6566] <... futex resumed>) = 0 [pid 6576] rt_sigprocmask(SIG_SETMASK, [] [pid 6566] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6576] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6576] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6576] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6579] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 6579] set_robust_list(0x7fef94c889a0, 24) = 0 [pid 6579] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6579] memfd_create("syzkaller", 0) = 3 [pid 6579] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fef8c868000 [pid 6579] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [ 128.162771][ T13] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 284 with max blocks 4 with error 28 [ 128.162803][ T13] EXT4-fs (loop1): This should not happen!! Data will be lost [ 128.162803][ T13] [ 128.170115][ T5610] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6579] munmap(0x7fef8c868000, 138412032) = 0 [pid 6579] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6572] <... mount resumed>) = 0 [pid 6566] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6579] <... openat resumed>) = 4 [pid 6572] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6566] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6579] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6572] <... openat resumed>) = 3 [pid 6566] <... futex resumed>) = 0 [pid 5610] <... umount2 resumed>) = 0 [pid 6579] close(3 [pid 6572] chdir("./file1" [pid 6570] <... mount resumed>) = 0 [pid 6566] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6572] <... chdir resumed>) = 0 [pid 6566] <... mmap resumed>) = 0x7fef94c47000 [pid 6579] <... close resumed>) = 0 [pid 6572] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6566] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6572] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6566] <... mprotect resumed>) = 0 [pid 5610] umount2("./36/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6579] close(4 [pid 6566] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6572] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6570] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6579] <... close resumed>) = 0 [pid 6572] <... futex resumed>) = 1 [pid 6570] <... openat resumed>) = 3 [pid 6569] <... futex resumed>) = 0 [pid 6566] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5610] newfstatat(AT_FDCWD, "./36/file1" [pid 6579] mkdir("./file1", 0777 [pid 6572] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6570] chdir("./file1" [pid 6569] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6566] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5610] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6582 attached [pid 6579] <... mkdir resumed>) = 0 [pid 6572] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6570] <... chdir resumed>) = 0 [pid 6569] <... futex resumed>) = 0 [pid 5610] umount2("./36/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6582] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6579] mount("/dev/loop4", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6572] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6570] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6569] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6566] <... clone3 resumed> => {parent_tid=[6582]}, 88) = 6582 [pid 6582] <... rseq resumed>) = 0 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6582] set_robust_list(0x7fef94c679a0, 24 [pid 6570] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6566] rt_sigprocmask(SIG_SETMASK, [] [pid 6582] <... set_robust_list resumed>) = 0 [pid 6582] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] openat(AT_FDCWD, "./36/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6582] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6570] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6566] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] <... openat resumed>) = 4 [pid 6582] futex(0x7fef94d63e58, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6566] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] fstat(4 [pid 6570] <... futex resumed>) = 1 [pid 6565] <... futex resumed>) = 0 [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6566] <... futex resumed>) = 0 [pid 6565] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] getdents64(4 [pid 6570] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6582] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6572] <... openat resumed>) = 4 [pid 6566] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6565] <... futex resumed>) = 0 [pid 6572] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6570] <... openat resumed>) = 4 [pid 6565] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6572] <... futex resumed>) = 1 [pid 6570] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6569] <... futex resumed>) = 0 [pid 6565] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5610] getdents64(4 [pid 6572] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6565] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6569] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6569] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6572] <... futex resumed>) = 0 [pid 6572] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6565] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6572] <... openat resumed>) = 5 [ 128.331998][ T6582] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 128.333441][ T6582] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 260 with error 28 [ 128.333468][ T6582] EXT4-fs (loop0): This should not happen!! Data will be lost [ 128.333468][ T6582] [ 128.333480][ T6582] EXT4-fs (loop0): Total free blocks count 0 [ 128.333492][ T6582] EXT4-fs (loop0): Free/Dirty block details [pid 6582] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6572] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6569] <... futex resumed>) = 0 [pid 6572] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6569] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6572] <... openat resumed>) = 6 [pid 6569] <... futex resumed>) = 0 [pid 6571] <... sendfile resumed>) = 266240 [pid 6570] <... futex resumed>) = 1 [pid 6569] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] close(4 [pid 6570] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6572] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... close resumed>) = 0 [pid 6565] <... futex resumed>) = 0 [pid 6572] <... futex resumed>) = 1 [pid 6570] <... openat resumed>) = 5 [pid 6569] <... futex resumed>) = 0 [pid 6566] <... futex resumed>) = ? [pid 6582] +++ killed by SIGBUS +++ [pid 6572] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6571] +++ killed by SIGBUS +++ [pid 6569] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6572] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6569] <... futex resumed>) = 0 [pid 6572] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6569] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6565] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=26000000} [pid 6572] <... mmap resumed>) = 0x200000000000 [pid 6566] +++ killed by SIGBUS +++ [pid 6572] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6569] <... futex resumed>) = 0 [pid 5610] rmdir("./36/file1" [pid 6572] sendfile(4, 5, NULL, 553647746 [pid 6569] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6569] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... rmdir resumed>) = 0 [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6566, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6570] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6570] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6565] <... futex resumed>) = 0 [pid 5610] umount2("./36/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] umount2("./37", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6565] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6565] <... futex resumed>) = 1 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6570] <... futex resumed>) = 0 [pid 5609] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6570] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 5610] newfstatat(AT_FDCWD, "./36/binderfs" [pid 6570] <... openat resumed>) = 6 [pid 6565] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] <... openat resumed>) = 3 [pid 6579] <... mount resumed>) = 0 [pid 6570] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] unlink("./36/binderfs" [pid 5609] fstat(3 [pid 6579] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6570] <... futex resumed>) = 1 [pid 6565] <... futex resumed>) = 0 [pid 5610] <... unlink resumed>) = 0 [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6565] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6579] <... openat resumed>) = 3 [pid 6570] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6565] <... futex resumed>) = 0 [pid 5610] getdents64(3 [pid 5609] getdents64(3 [pid 6565] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6579] chdir("./file1" [pid 6570] <... mmap resumed>) = 0x200000000000 [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6579] <... chdir resumed>) = 0 [pid 5609] umount2("./37/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6579] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6570] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] close(3 [pid 6579] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6570] <... futex resumed>) = 1 [pid 6565] <... futex resumed>) = 0 [pid 6579] <... futex resumed>) = 1 [pid 5610] <... close resumed>) = 0 [pid 6570] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6565] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6579] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5610] rmdir("./36" [pid 6570] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6565] <... futex resumed>) = 0 [ 128.333502][ T6582] EXT4-fs (loop0): free_blocks=20480 [ 128.333513][ T6582] EXT4-fs (loop0): dirty_blocks=272 [ 128.333523][ T6582] EXT4-fs (loop0): Block reservation details [ 128.333533][ T6582] EXT4-fs (loop0): i_reserved_data_blocks=17 [pid 6576] <... futex resumed>) = 0 [pid 6570] sendfile(4, 5, NULL, 553647746 [pid 6569] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6565] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... rmdir resumed>) = 0 [pid 6576] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6569] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6576] <... futex resumed>) = 1 [pid 6569] <... futex resumed>) = 0 [pid 6576] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6569] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6579] <... futex resumed>) = 0 [pid 6569] <... mmap resumed>) = 0x7fef94c47000 [pid 5610] mkdir("./37", 0777 [pid 6569] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 5610] <... mkdir resumed>) = 0 [pid 6579] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6569] <... mprotect resumed>) = 0 [pid 5610] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6569] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5610] <... openat resumed>) = 3 [pid 5610] ioctl(3, LOOP_CLR_FD) = 0 [pid 6579] <... openat resumed>) = 4 [pid 6569] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5610] close(3 [pid 6569] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6579] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000ci2-upstream-fs/strace-static-x86_64: Process 6585 attached ) = 1 [pid 6576] <... futex resumed>) = 0 [pid 6579] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6576] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6569] <... clone3 resumed> => {parent_tid=[6585]}, 88) = 6585 [pid 6585] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6579] <... openat resumed>) = 5 [pid 6576] <... futex resumed>) = 0 [pid 6569] rt_sigprocmask(SIG_SETMASK, [] [pid 6576] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6569] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6585] <... rseq resumed>) = 0 [pid 6569] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6579] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6585] set_robust_list(0x7fef94c679a0, 24) = 0 [pid 6579] <... futex resumed>) = 1 [pid 6576] <... futex resumed>) = 0 [pid 6569] <... futex resumed>) = 0 [pid 6585] rt_sigprocmask(SIG_SETMASK, [] [pid 6579] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6576] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6569] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6565] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5610] <... close resumed>) = 0 [pid 6585] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6576] <... futex resumed>) = 0 [pid 6565] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6565] <... futex resumed>) = 0 [pid 6579] <... openat resumed>) = 6 [pid 6576] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6565] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5610] <... rt_sigprocmask resumed>, [], 8) = 0 [ 128.483908][ T5609] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6579] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6576] <... futex resumed>) = 0 [pid 6565] <... mmap resumed>) = 0x7fef94c47000 [pid 5610] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6565] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6576] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6565] <... mprotect resumed>) = 0 [pid 6579] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6576] <... futex resumed>) = 0 [pid 6579] <... mmap resumed>) = 0x200000000000 [pid 6576] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6579] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [ 128.534882][ T6585] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 128.535100][ T6585] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 212 with error 28 [ 128.535124][ T6585] EXT4-fs (loop3): This should not happen!! Data will be lost [ 128.535124][ T6585] [ 128.535138][ T6585] EXT4-fs (loop3): Total free blocks count 0 [ 128.535151][ T6585] EXT4-fs (loop3): Free/Dirty block details [pid 6565] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6579] <... futex resumed>) = 0 [pid 6576] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6579] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6576] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6565] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6585] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6579] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6576] <... futex resumed>) = 0 [pid 6569] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6565] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6579] sendfile(4, 5, NULL, 553647746 [pid 6576] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6572] <... sendfile resumed>) = 221184 ci2-upstream-fs/strace-static-x86_64: Process 6586 attached [pid 6572] +++ killed by SIGBUS +++ [pid 6586] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5609] <... umount2 resumed>) = 0 [pid 6586] <... rseq resumed>) = 0 [pid 5609] umount2("./37/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6586] set_robust_list(0x7fef94c679a0, 24 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6586] <... set_robust_list resumed>) = 0 [pid 5609] newfstatat(AT_FDCWD, "./37/file1" [pid 6586] rt_sigprocmask(SIG_SETMASK, [] [pid 6585] +++ killed by SIGBUS +++ [pid 6569] +++ killed by SIGBUS +++ [pid 5609] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6587 attached [pid 6586] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6565] <... clone3 resumed> => {parent_tid=[6586]}, 88) = 6586 [pid 5612] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6569, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5609] umount2("./37/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6586] futex(0x7fef94d63e58, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6565] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6587 [pid 6565] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] openat(AT_FDCWD, "./37/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5610] rt_sigprocmask(SIG_SETMASK, [] [pid 6587] set_robust_list(0x5555748a66e0, 24 [pid 6565] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] umount2("./38", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... openat resumed>) = 4 [pid 6565] <... futex resumed>) = 1 [pid 5610] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6587] <... set_robust_list resumed>) = 0 [pid 6586] <... futex resumed>) = 0 [pid 6565] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 128.535165][ T6585] EXT4-fs (loop3): free_blocks=20480 [ 128.535178][ T6585] EXT4-fs (loop3): dirty_blocks=224 [ 128.535189][ T6585] EXT4-fs (loop3): Block reservation details [ 128.535200][ T6585] EXT4-fs (loop3): i_reserved_data_blocks=14 [pid 5609] fstat(4 [pid 6587] rt_sigprocmask(SIG_SETMASK, [] [pid 6576] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5612] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6587] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6576] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6587] chdir("./37" [pid 6576] <... futex resumed>) = 0 [pid 6587] <... chdir resumed>) = 0 [pid 6576] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5612] <... openat resumed>) = 3 [pid 5609] getdents64(4 [pid 6587] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6576] <... mmap resumed>) = 0x7fef94c47000 [pid 5612] fstat(3 [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6587] <... prctl resumed>) = 0 [pid 6576] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] getdents64(4 [pid 6587] setpgid(0, 0 [pid 6576] <... mprotect resumed>) = 0 [pid 5612] getdents64(3 [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6587] <... setpgid resumed>) = 0 [pid 6576] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5609] close(4 [pid 6587] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6576] <... rt_sigprocmask resumed>, [], 8) = 0 [ 128.632509][ T6570] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 128.632880][ T6586] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 628 with error 28 [ 128.632904][ T6586] EXT4-fs (loop2): This should not happen!! Data will be lost [ 128.632904][ T6586] [ 128.632917][ T6586] EXT4-fs (loop2): Total free blocks count 0 [ 128.632928][ T6586] EXT4-fs (loop2): Free/Dirty block details [pid 5612] umount2("./38/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... close resumed>) = 0 [pid 6587] <... openat resumed>) = 3 [pid 6576] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6565] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ci2-upstream-fs/strace-static-x86_64: Process 6588 attached [pid 6587] write(3, "1000", 4 [pid 6576] <... clone3 resumed> => {parent_tid=[6588]}, 88) = 6588 [pid 5609] rmdir("./37/file1" [pid 6588] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6587] <... write resumed>) = 4 [pid 6576] rt_sigprocmask(SIG_SETMASK, [] [pid 6587] close(3 [pid 5609] <... rmdir resumed>) = 0 [pid 6588] <... rseq resumed>) = 0 [pid 6587] <... close resumed>) = 0 [pid 6576] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6588] set_robust_list(0x7fef94c679a0, 24) = 0 [pid 6587] symlink("/dev/binderfs", "./binderfs" [pid 6576] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] umount2("./37/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6576] <... futex resumed>) = 0 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6587] <... symlink resumed>) = 0 [pid 6576] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] newfstatat(AT_FDCWD, "./37/binderfs" [pid 6588] rt_sigprocmask(SIG_SETMASK, [] [pid 6587] write(1, "executing program\n", 18 [pid 5609] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6588] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6587] <... write resumed>) = 18 executing program [pid 5609] unlink("./37/binderfs" [pid 6587] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6570] <... sendfile resumed>) = 643072 [pid 5609] <... unlink resumed>) = 0 [pid 6570] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6587] <... futex resumed>) = 0 [ 128.632939][ T6586] EXT4-fs (loop2): free_blocks=20480 [ 128.632951][ T6586] EXT4-fs (loop2): dirty_blocks=640 [ 128.632962][ T6586] EXT4-fs (loop2): Block reservation details [ 128.632972][ T6586] EXT4-fs (loop2): i_reserved_data_blocks=40 [pid 5609] getdents64(3 [pid 6587] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6587] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6570] <... futex resumed>) = 0 [pid 5609] close(3) = 0 [pid 6587] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6587] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5609] rmdir("./37" [pid 6587] <... mmap resumed>) = 0x7fef94c68000 [pid 6570] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5609] <... rmdir resumed>) = 0 [pid 6587] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6587] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] mkdir("./38", 0777 [pid 6587] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6586] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 5609] <... mkdir resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6589 attached [pid 6576] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6589] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6587] <... clone3 resumed> => {parent_tid=[6589]}, 88) = 6589 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6589] <... rseq resumed>) = 0 [pid 6587] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] <... openat resumed>) = 3 [pid 6589] set_robust_list(0x7fef94c889a0, 24 [pid 6587] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] ioctl(3, LOOP_CLR_FD [pid 6589] <... set_robust_list resumed>) = 0 [pid 6587] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6570] <... futex resumed>) = ? [ 128.722135][ T177] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 212 with max blocks 4 with error 28 [ 128.722168][ T177] EXT4-fs (loop3): This should not happen!! Data will be lost [ 128.722168][ T177] [ 128.723639][ T5612] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 128.728439][ T6588] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 128.730067][ T6588] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 384 with error 28 [pid 6589] rt_sigprocmask(SIG_SETMASK, [] [pid 6587] <... futex resumed>) = 0 [pid 6588] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6586] +++ killed by SIGBUS +++ [pid 6579] <... sendfile resumed>) = 393216 [pid 6570] +++ killed by SIGBUS +++ [pid 5612] <... umount2 resumed>) = 0 [pid 5609] <... ioctl resumed>) = 0 [pid 6589] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6587] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6589] memfd_create("syzkaller", 0 [pid 5612] umount2("./38/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] close(3 [pid 6589] <... memfd_create resumed>) = 3 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6589] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6588] +++ killed by SIGBUS +++ [pid 6579] +++ killed by SIGBUS +++ [pid 5612] newfstatat(AT_FDCWD, "./38/file1" [pid 6589] <... mmap resumed>) = 0x7fef8c868000 [pid 6576] +++ killed by SIGBUS +++ [pid 5612] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6565] +++ killed by SIGBUS +++ [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6576, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5612] umount2("./38/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... close resumed>) = 0 [pid 6589] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5614] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5614] <... restart_syscall resumed>) = 0 [pid 5612] openat(AT_FDCWD, "./38/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5611] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6565, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5612] <... openat resumed>) = 4 [pid 5612] fstat(4 [pid 5614] umount2("./37", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5612] getdents64(4 [pid 5611] umount2("./38", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5614] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5614] <... openat resumed>) = 3 [pid 5612] getdents64(4 [pid 5611] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5614] fstat(3 [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5612] close(4 [pid 5611] <... openat resumed>) = 3 [pid 5614] getdents64(3 [pid 5612] <... close resumed>) = 0 [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5612] rmdir("./38/file1" [pid 6589] <... write resumed>) = 524288 [pid 5614] umount2("./37/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] fstat(3 [pid 5609] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6590 [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5611] getdents64(3 [pid 5609] rt_sigprocmask(SIG_SETMASK, []ci2-upstream-fs/strace-static-x86_64: Process 6590 attached , NULL, 8) = 0 [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5611] umount2("./38/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6590] set_robust_list(0x5555748a66e0, 24) = 0 [pid 6589] munmap(0x7fef8c868000, 138412032 [pid 6590] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6589] <... munmap resumed>) = 0 [pid 6590] chdir("./38" [ 128.730097][ T6588] EXT4-fs (loop4): This should not happen!! Data will be lost [ 128.730097][ T6588] [ 128.730111][ T6588] EXT4-fs (loop4): Total free blocks count 0 [ 128.730136][ T6588] EXT4-fs (loop4): Free/Dirty block details [ 128.730149][ T6588] EXT4-fs (loop4): free_blocks=20480 [ 128.730163][ T6588] EXT4-fs (loop4): dirty_blocks=384 [ 128.730175][ T6588] EXT4-fs (loop4): Block reservation details [ 128.730186][ T6588] EXT4-fs (loop4): i_reserved_data_blocks=24 [pid 6589] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6589] ioctl(4, LOOP_SET_FD, 3 [pid 6590] <... chdir resumed>) = 0 [pid 6590] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5612] <... rmdir resumed>) = 0 [pid 6590] setpgid(0, 0 [pid 5612] umount2("./38/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6590] <... setpgid resumed>) = 0 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6590] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5612] newfstatat(AT_FDCWD, "./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6590] <... openat resumed>) = 3 [pid 6589] <... ioctl resumed>) = 0 [pid 6589] close(3) = 0 [pid 6590] write(3, "1000", 4 [pid 5612] unlink("./38/binderfs" [pid 6590] <... write resumed>) = 4 [pid 6590] close(3 [pid 5612] <... unlink resumed>) = 0 [pid 6590] <... close resumed>) = 0 [pid 6589] close(4 [pid 6590] symlink("/dev/binderfs", "./binderfs" [pid 6589] <... close resumed>) = 0 [pid 6589] mkdir("./file1", 0777 [pid 6590] <... symlink resumed>) = 0 [pid 6589] <... mkdir resumed>) = 0 [pid 5612] getdents64(3 [pid 6589] mount("/dev/loop1", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5612] close(3 [pid 6590] write(1, "executing program\n", 18 [pid 5612] <... close resumed>) = 0 [pid 6590] <... write resumed>) = 18 [pid 5612] rmdir("./38" executing program [pid 6590] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... rmdir resumed>) = 0 [pid 6590] <... futex resumed>) = 0 [pid 6590] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60}, NULL, 8) = 0 [pid 6590] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 5612] mkdir("./39", 0777 [pid 6590] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6590] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c68000 [pid 5612] <... mkdir resumed>) = 0 [pid 6590] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6590] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5612] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 6590] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5612] ioctl(3, LOOP_CLR_FD [pid 6590] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 5612] <... ioctl resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6591 attached [pid 5612] close(3 [pid 6591] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6590] <... clone3 resumed> => {parent_tid=[6591]}, 88) = 6591 [pid 6591] <... rseq resumed>) = 0 [pid 6590] rt_sigprocmask(SIG_SETMASK, [] [pid 6591] set_robust_list(0x7fef94c889a0, 24 [pid 6590] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6591] <... set_robust_list resumed>) = 0 [pid 6590] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6591] rt_sigprocmask(SIG_SETMASK, [] [pid 6590] <... futex resumed>) = 0 [pid 6591] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6590] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6591] memfd_create("syzkaller", 0) = 3 [pid 6591] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fef8c868000 [ 128.900757][ T5614] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 128.901587][ T5611] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6591] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6589] <... mount resumed>) = 0 [pid 5612] <... close resumed>) = 0 [pid 6589] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5612] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6589] chdir("./file1" [pid 5612] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6589] <... chdir resumed>) = 0 [pid 5612] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6589] openat(AT_FDCWD, "/dev/loop1", O_RDWRci2-upstream-fs/strace-static-x86_64: Process 6594 attached ) = -1 EBUSY (Device or resource busy) [pid 6589] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6594 [pid 6587] <... futex resumed>) = 0 [pid 6594] set_robust_list(0x5555748a66e0, 24 [pid 6589] <... futex resumed>) = 1 [pid 6587] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... umount2 resumed>) = 0 [pid 5612] rt_sigprocmask(SIG_SETMASK, [] [pid 6589] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6587] <... futex resumed>) = 0 [pid 5612] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6587] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6594] <... set_robust_list resumed>) = 0 [pid 6594] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6589] <... openat resumed>) = 4 [pid 5614] umount2("./37/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] <... umount2 resumed>) = 0 [pid 6594] chdir("./39" [pid 6589] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6594] <... chdir resumed>) = 0 [pid 6589] <... futex resumed>) = 1 [pid 6587] <... futex resumed>) = 0 [pid 5614] newfstatat(AT_FDCWD, "./37/file1" [pid 6594] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6589] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6587] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] umount2("./38/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6594] <... prctl resumed>) = 0 [pid 6591] <... write resumed>) = 524288 [pid 6589] <... openat resumed>) = 5 [pid 6587] <... futex resumed>) = 0 [pid 5614] umount2("./37/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6594] setpgid(0, 0 [pid 6591] munmap(0x7fef8c868000, 138412032 [pid 6589] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6587] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] newfstatat(AT_FDCWD, "./38/file1" [pid 6594] <... setpgid resumed>) = 0 [pid 6591] <... munmap resumed>) = 0 [pid 6589] <... futex resumed>) = 0 [pid 6587] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5614] openat(AT_FDCWD, "./37/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5611] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6594] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6591] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6589] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6587] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... openat resumed>) = 4 [pid 5611] umount2("./38/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6594] <... openat resumed>) = 3 [pid 6591] <... openat resumed>) = 4 [pid 6589] <... openat resumed>) = 6 [pid 6587] <... futex resumed>) = 0 [pid 5614] fstat(4 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6591] ioctl(4, LOOP_SET_FD, 3 [pid 6587] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5611] openat(AT_FDCWD, "./38/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6594] write(3, "1000", 4 [pid 6589] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] getdents64(4 [pid 5611] <... openat resumed>) = 4 [pid 6591] <... ioctl resumed>) = 0 [pid 6591] close(3 [pid 6589] <... futex resumed>) = 1 [pid 6587] <... futex resumed>) = 0 [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5611] fstat(4 [pid 6594] <... write resumed>) = 4 [pid 6591] <... close resumed>) = 0 [pid 6589] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6587] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] getdents64(4 [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6594] close(3 [pid 6591] close(4 [pid 6589] <... mmap resumed>) = 0x200000000000 [pid 6587] <... futex resumed>) = 0 [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5611] getdents64(4 [pid 6594] <... close resumed>) = 0 [pid 6591] <... close resumed>) = 0 [pid 6589] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6587] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] close(4 [pid 6594] symlink("/dev/binderfs", "./binderfs" [pid 6589] <... futex resumed>) = 0 [pid 5614] <... close resumed>) = 0 [pid 6594] <... symlink resumed>) = 0 [pid 6589] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5614] rmdir("./37/file1" [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 executing program [pid 6594] write(1, "executing program\n", 18 [pid 5614] <... rmdir resumed>) = 0 [pid 5611] getdents64(4 [pid 6594] <... write resumed>) = 18 [pid 6591] mkdir("./file1", 0777 [pid 6587] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6594] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6591] <... mkdir resumed>) = 0 [pid 6587] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] umount2("./37/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6594] <... futex resumed>) = 0 [pid 6591] mount("/dev/loop0", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6589] <... futex resumed>) = 0 [pid 6587] <... futex resumed>) = 1 [pid 5611] close(4 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6594] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6589] sendfile(4, 5, NULL, 553647746 [pid 6587] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] newfstatat(AT_FDCWD, "./37/binderfs" [pid 5611] <... close resumed>) = 0 [pid 6594] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 5611] rmdir("./38/file1" [pid 6594] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 5614] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] <... rmdir resumed>) = 0 [pid 6594] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] unlink("./37/binderfs" [pid 6594] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c68000 [pid 5614] <... unlink resumed>) = 0 [pid 6594] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 5611] umount2("./38/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6594] <... mprotect resumed>) = 0 [pid 5614] getdents64(3 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6594] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5611] newfstatat(AT_FDCWD, "./38/binderfs" [pid 5614] close(3 [pid 6594] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5614] <... close resumed>) = 0 [pid 5611] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6594] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 5614] rmdir("./37" [pid 5611] unlink("./38/binderfs" [pid 5614] <... rmdir resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6597 attached [pid 5611] <... unlink resumed>) = 0 [pid 6597] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6594] <... clone3 resumed> => {parent_tid=[6597]}, 88) = 6597 [pid 6597] <... rseq resumed>) = 0 [pid 5614] mkdir("./38", 0777 [pid 5611] getdents64(3 [pid 6597] set_robust_list(0x7fef94c889a0, 24 [pid 6594] rt_sigprocmask(SIG_SETMASK, [] [pid 6597] <... set_robust_list resumed>) = 0 [pid 6594] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6597] rt_sigprocmask(SIG_SETMASK, [] [pid 6594] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6594] <... futex resumed>) = 0 [pid 6591] <... mount resumed>) = 0 [pid 5614] <... mkdir resumed>) = 0 [pid 5611] close(3 [pid 6597] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6594] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6597] memfd_create("syzkaller", 0 [pid 5611] <... close resumed>) = 0 [pid 6591] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5614] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5611] rmdir("./38" [pid 6597] <... memfd_create resumed>) = 3 [pid 6591] <... openat resumed>) = 3 [pid 5614] <... openat resumed>) = 3 [pid 5611] <... rmdir resumed>) = 0 [pid 6597] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6591] chdir("./file1" [pid 5614] ioctl(3, LOOP_CLR_FD [pid 5611] mkdir("./39", 0777 [pid 6597] <... mmap resumed>) = 0x7fef8c868000 [pid 6591] <... chdir resumed>) = 0 [pid 5614] <... ioctl resumed>) = 0 [pid 6591] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5614] close(3 [pid 6591] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5611] <... mkdir resumed>) = 0 [pid 5611] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6591] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6591] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6590] <... futex resumed>) = 0 [pid 6597] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6590] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... close resumed>) = 0 [pid 5611] <... openat resumed>) = 3 [pid 6590] <... futex resumed>) = 1 [pid 5611] ioctl(3, LOOP_CLR_FD [pid 6590] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6591] <... futex resumed>) = 0 [pid 5611] <... ioctl resumed>) = 0 [pid 5611] close(3 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 6598 attached [pid 6597] <... write resumed>) = 524288 [pid 6591] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6587] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6597] munmap(0x7fef8c868000, 138412032 [pid 6587] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6598 [pid 6598] set_robust_list(0x5555748a66e0, 24 [pid 6587] <... futex resumed>) = 0 [pid 5611] <... close resumed>) = 0 [pid 6587] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6598] <... set_robust_list resumed>) = 0 [pid 6597] <... munmap resumed>) = 0 [pid 6591] <... openat resumed>) = 4 [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 6598] rt_sigprocmask(SIG_SETMASK, [] [pid 6591] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6587] <... mmap resumed>) = 0x7fef94c47000 [pid 5611] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6598] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6597] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6591] <... futex resumed>) = 1 [pid 6590] <... futex resumed>) = 0 [pid 6587] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6598] chdir("./38" [pid 6597] <... openat resumed>) = 4 [pid 6591] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6590] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6587] <... mprotect resumed>) = 0 [pid 5611] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6598] <... chdir resumed>) = 0 [pid 6597] ioctl(4, LOOP_SET_FD, 3 [pid 6591] <... openat resumed>) = 5 [pid 6590] <... futex resumed>) = 0 [pid 6587] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6598] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6591] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6590] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6587] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5611] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6598] <... prctl resumed>) = 0 [pid 6587] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6598] setpgid(0, 0 [pid 6590] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6598] <... setpgid resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6599 attached [pid 6590] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6591] <... futex resumed>) = 0 [pid 6590] <... futex resumed>) = 0 [pid 6587] <... clone3 resumed> => {parent_tid=[6599]}, 88) = 6599 [pid 6591] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6590] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6587] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6591] <... openat resumed>) = 6 [pid 6598] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6587] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6599] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6591] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6587] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6598] <... openat resumed>) = 3 [pid 6599] <... rseq resumed>) = 0 [pid 6599] set_robust_list(0x7fef94c679a0, 24 [pid 6598] write(3, "1000", 4 [pid 6591] <... futex resumed>) = 1 [pid 6590] <... futex resumed>) = 0 [pid 6599] <... set_robust_list resumed>) = 0 [pid 6598] <... write resumed>) = 4 [pid 6591] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6590] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6599] rt_sigprocmask(SIG_SETMASK, [] [pid 6598] close(3 [pid 6591] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) ci2-upstream-fs/strace-static-x86_64: Process 6600 attached [pid 6599] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6598] <... close resumed>) = 0 [pid 6591] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6590] <... futex resumed>) = 0 [pid 6598] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6590] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6600 [pid 6600] set_robust_list(0x5555748a66e0, 24 [pid 6598] write(1, "executing program\n", 18 [pid 6597] <... ioctl resumed>) = 0 [pid 6591] <... mmap resumed>) = 0x200000000000 [pid 6600] <... set_robust_list resumed>) = 0 [pid 6598] <... write resumed>) = 18 executing program [pid 5611] rt_sigprocmask(SIG_SETMASK, [] [pid 6600] rt_sigprocmask(SIG_SETMASK, [] [pid 6598] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6591] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6600] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6599] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6598] <... futex resumed>) = 0 [pid 6597] close(3 [pid 6591] <... futex resumed>) = 1 [pid 6590] <... futex resumed>) = 0 [pid 6589] <... sendfile resumed>) = ? [pid 6600] chdir("./39" [pid 6598] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6591] sendfile(4, 5, NULL, 553647746 [pid 6590] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6587] <... futex resumed>) = ? [pid 6599] +++ killed by SIGBUS +++ [pid 6600] <... chdir resumed>) = 0 [pid 6598] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6597] <... close resumed>) = 0 [pid 6590] <... futex resumed>) = 0 [pid 6600] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6598] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6597] close(4 [pid 6590] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6589] +++ killed by SIGBUS +++ [pid 6587] +++ killed by SIGBUS +++ [pid 6600] <... prctl resumed>) = 0 [pid 6598] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6587, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6597] <... close resumed>) = 0 [pid 5610] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 6600] setpgid(0, 0 [pid 6598] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6600] <... setpgid resumed>) = 0 [pid 6600] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6598] <... mmap resumed>) = 0x7fef94c68000 [pid 6597] mkdir("./file1", 0777 [pid 6600] <... openat resumed>) = 3 [pid 6598] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 5610] <... restart_syscall resumed>) = 0 [pid 6597] <... mkdir resumed>) = 0 [pid 6600] write(3, "1000", 4) = 4 [pid 6598] <... mprotect resumed>) = 0 [pid 5610] umount2("./37", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6600] close(3 [pid 6598] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6600] <... close resumed>) = 0 [pid 5610] fstat(3 [pid 6600] symlink("/dev/binderfs", "./binderfs" [pid 6598] <... rt_sigprocmask resumed>, [], 8) = 0 [ 129.162410][ T6599] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 129.164483][ T6599] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 348 with error 28 [ 129.164514][ T6599] EXT4-fs (loop1): This should not happen!! Data will be lost [ 129.164514][ T6599] [ 129.164528][ T6599] EXT4-fs (loop1): Total free blocks count 0 [ 129.164541][ T6599] EXT4-fs (loop1): Free/Dirty block details [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6600] <... symlink resumed>) = 0 [pid 6598] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0}ci2-upstream-fs/strace-static-x86_64: Process 6601 attached [pid 5610] getdents64(3 [pid 6601] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6600] write(1, "executing program\n", 18 [pid 6598] <... clone3 resumed> => {parent_tid=[6601]}, 88) = 6601 executing program [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6601] <... rseq resumed>) = 0 [pid 6600] <... write resumed>) = 18 [pid 6598] rt_sigprocmask(SIG_SETMASK, [] [pid 6600] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6601] set_robust_list(0x7fef94c889a0, 24 [pid 6600] <... futex resumed>) = 0 [pid 6598] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] umount2("./37/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6601] <... set_robust_list resumed>) = 0 [pid 6600] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6598] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6601] rt_sigprocmask(SIG_SETMASK, [] [pid 6600] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6601] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6600] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6598] <... futex resumed>) = 0 [pid 6600] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6598] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6601] memfd_create("syzkaller", 0 [pid 6600] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6601] <... memfd_create resumed>) = 3 [pid 6600] <... mmap resumed>) = 0x7fef94c68000 [pid 6601] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fef8c868000 [pid 6600] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6597] mount("/dev/loop3", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6600] <... mprotect resumed>) = 0 [pid 6600] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6590] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6590] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6600] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6600] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6590] <... futex resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6604 attached [pid 6601] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6590] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6604] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 6604] set_robust_list(0x7fef94c889a0, 24) = 0 [pid 6604] rt_sigprocmask(SIG_SETMASK, [] [pid 6600] <... clone3 resumed> => {parent_tid=[6604]}, 88) = 6604 [ 129.164554][ T6599] EXT4-fs (loop1): free_blocks=20480 [ 129.164568][ T6599] EXT4-fs (loop1): dirty_blocks=352 [ 129.164579][ T6599] EXT4-fs (loop1): Block reservation details [ 129.164590][ T6599] EXT4-fs (loop1): i_reserved_data_blocks=22 [pid 6590] <... mmap resumed>) = 0x7fef94c47000 [pid 6604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6601] <... write resumed>) = 524288 [pid 6604] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6601] munmap(0x7fef8c868000, 138412032 [pid 6600] rt_sigprocmask(SIG_SETMASK, [] [pid 6597] <... mount resumed>) = 0 [pid 6590] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6601] <... munmap resumed>) = 0 [pid 6600] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6601] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6590] <... mprotect resumed>) = 0 [pid 6600] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6597] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6604] <... futex resumed>) = 0 [pid 6600] <... futex resumed>) = 1 [pid 6597] <... openat resumed>) = 3 [pid 6590] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6604] memfd_create("syzkaller", 0 [pid 6600] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6597] chdir("./file1" [pid 6590] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6604] <... memfd_create resumed>) = 3 [pid 6601] <... openat resumed>) = 4 [pid 6597] <... chdir resumed>) = 0 [pid 6590] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6604] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6601] ioctl(4, LOOP_SET_FD, 3 [pid 6597] openat(AT_FDCWD, "/dev/loop3", O_RDWRci2-upstream-fs/strace-static-x86_64: Process 6605 attached [pid 6604] <... mmap resumed>) = 0x7fef8c868000 [pid 6597] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6601] <... ioctl resumed>) = 0 [pid 6590] <... clone3 resumed> => {parent_tid=[6605]}, 88) = 6605 [pid 6605] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 6597] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6590] rt_sigprocmask(SIG_SETMASK, [] [pid 6605] set_robust_list(0x7fef94c679a0, 24 [pid 6601] close(3 [pid 6597] <... futex resumed>) = 1 [pid 6605] <... set_robust_list resumed>) = 0 [pid 6601] <... close resumed>) = 0 [pid 6597] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6594] <... futex resumed>) = 0 [pid 6590] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6605] rt_sigprocmask(SIG_SETMASK, [] [pid 6601] close(4 [pid 6605] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6601] <... close resumed>) = 0 [pid 6597] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6594] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [ 129.280827][ T5610] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6590] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6604] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6601] mkdir("./file1", 0777 [pid 6597] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6594] <... futex resumed>) = 0 [pid 6590] <... futex resumed>) = 0 [pid 6601] <... mkdir resumed>) = 0 [pid 6597] <... openat resumed>) = 4 [pid 6594] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6590] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6601] mount("/dev/loop4", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6597] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6594] <... futex resumed>) = 0 [pid 6597] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6594] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6597] <... openat resumed>) = 5 [pid 6597] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6594] <... futex resumed>) = 0 [pid 6594] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6597] <... futex resumed>) = 0 [pid 6594] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6597] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [ 129.335920][ T6605] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 129.336171][ T6605] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 540 with error 28 [ 129.336195][ T6605] EXT4-fs (loop0): This should not happen!! Data will be lost [ 129.336195][ T6605] [ 129.336208][ T6605] EXT4-fs (loop0): Total free blocks count 0 [ 129.336220][ T6605] EXT4-fs (loop0): Free/Dirty block details [pid 6594] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6597] <... openat resumed>) = 6 [pid 6594] <... futex resumed>) = 0 [pid 6594] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6604] <... write resumed>) = 524288 [pid 6590] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6604] munmap(0x7fef8c868000, 138412032 [pid 6597] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... umount2 resumed>) = 0 [pid 6604] <... munmap resumed>) = 0 [pid 6597] <... futex resumed>) = 1 [pid 6594] <... futex resumed>) = 0 [pid 5610] umount2("./37/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6597] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6594] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6594] <... futex resumed>) = 0 [pid 5610] newfstatat(AT_FDCWD, "./37/file1" [pid 6605] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6604] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6597] <... mmap resumed>) = 0x200000000000 [pid 6594] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6591] <... sendfile resumed>) = 557056 [pid 5610] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6604] <... openat resumed>) = 4 [pid 6597] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6591] +++ killed by SIGBUS +++ [pid 5610] umount2("./37/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6604] ioctl(4, LOOP_SET_FD, 3 [pid 6597] <... futex resumed>) = 1 [pid 6594] <... futex resumed>) = 0 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6597] sendfile(4, 5, NULL, 553647746 [pid 6594] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] openat(AT_FDCWD, "./37/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6605] +++ killed by SIGBUS +++ [pid 6590] +++ killed by SIGBUS +++ [ 129.336233][ T6605] EXT4-fs (loop0): free_blocks=20480 [ 129.336246][ T6605] EXT4-fs (loop0): dirty_blocks=544 [ 129.336258][ T6605] EXT4-fs (loop0): Block reservation details [ 129.336269][ T6605] EXT4-fs (loop0): i_reserved_data_blocks=34 [pid 6594] <... futex resumed>) = 0 [pid 5610] <... openat resumed>) = 4 [pid 6604] <... ioctl resumed>) = 0 [pid 6601] <... mount resumed>) = 0 [pid 6594] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] fstat(4 [pid 6604] close(3 [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6590, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6604] <... close resumed>) = 0 [pid 6601] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5610] getdents64(4 [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 6604] close(4 [pid 6601] <... openat resumed>) = 3 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5609] <... restart_syscall resumed>) = 0 [pid 6604] <... close resumed>) = 0 [pid 6601] chdir("./file1" [pid 5610] getdents64(4 [pid 6604] mkdir("./file1", 0777 [pid 6601] <... chdir resumed>) = 0 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5610] close(4) = 0 [pid 6604] <... mkdir resumed>) = 0 [pid 6601] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5610] rmdir("./37/file1" [pid 5609] umount2("./38", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6601] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6604] mount("/dev/loop2", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6601] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6601] <... futex resumed>) = 1 [pid 6598] <... futex resumed>) = 0 [pid 6601] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6598] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... openat resumed>) = 3 [pid 6601] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6598] <... futex resumed>) = 0 [pid 5609] fstat(3 [pid 6601] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6598] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5610] <... rmdir resumed>) = 0 [pid 5609] getdents64(3, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./38/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] umount2("./37/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5610] newfstatat(AT_FDCWD, "./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5610] unlink("./37/binderfs") = 0 [pid 5610] getdents64(3 [pid 6601] <... openat resumed>) = 4 [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6601] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6598] <... futex resumed>) = 0 [pid 6601] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6598] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6594] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5610] close(3 [pid 6598] <... futex resumed>) = 0 [pid 6594] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... close resumed>) = 0 [pid 6601] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6598] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6594] <... futex resumed>) = 0 [pid 5610] rmdir("./37" [pid 6601] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6594] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5610] <... rmdir resumed>) = 0 [pid 6601] <... openat resumed>) = 5 [pid 6594] <... mmap resumed>) = 0x7fef94c47000 [pid 6594] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 5610] mkdir("./38", 0777 [pid 6594] <... mprotect resumed>) = 0 [pid 6594] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5610] <... mkdir resumed>) = 0 [pid 6594] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6594] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 6610 attached [pid 5610] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6594] <... clone3 resumed> => {parent_tid=[6610]}, 88) = 6610 [pid 5610] <... openat resumed>) = 3 [pid 6610] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6594] rt_sigprocmask(SIG_SETMASK, [] [pid 6601] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6610] <... rseq resumed>) = 0 [pid 6601] <... futex resumed>) = 1 [pid 6598] <... futex resumed>) = 0 [pid 6594] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6601] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6598] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6610] set_robust_list(0x7fef94c679a0, 24 [pid 6594] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] ioctl(3, LOOP_CLR_FD [pid 6610] <... set_robust_list resumed>) = 0 [pid 6610] rt_sigprocmask(SIG_SETMASK, [] [pid 6594] <... futex resumed>) = 0 [pid 5610] <... ioctl resumed>) = 0 [pid 6610] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6594] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6601] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6598] <... futex resumed>) = 0 [pid 5610] close(3 [pid 6601] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000) = 6 [ 129.516468][ T177] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 540 with max blocks 4 with error 28 [ 129.516500][ T177] EXT4-fs (loop0): This should not happen!! Data will be lost [ 129.516500][ T177] [ 129.548191][ T5609] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6601] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6598] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6601] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6598] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6601] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6598] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6598] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6601] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 6604] <... mount resumed>) = 0 [pid 6601] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... close resumed>) = 0 [pid 6601] <... futex resumed>) = 1 [pid 6598] <... futex resumed>) = 0 [pid 6604] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6601] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6598] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6604] <... openat resumed>) = 3 [pid 6601] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6604] chdir("./file1" [pid 5610] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6604] <... chdir resumed>) = 0 [pid 6601] sendfile(4, 5, NULL, 553647746 [pid 6598] <... futex resumed>) = 0 [pid 6604] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6598] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6594] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6604] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 129.561535][ T6610] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 129.561731][ T6610] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 460 with error 28 [ 129.561753][ T6610] EXT4-fs (loop3): This should not happen!! Data will be lost [ 129.561753][ T6610] [ 129.561767][ T6610] EXT4-fs (loop3): Total free blocks count 0 [ 129.561779][ T6610] EXT4-fs (loop3): Free/Dirty block details [ 129.561792][ T6610] EXT4-fs (loop3): free_blocks=20480 [pid 5610] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6604] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6600] <... futex resumed>) = 0 [pid 6604] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6600] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6611 attached [pid 6600] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6611] set_robust_list(0x5555748a66e0, 24 [pid 6610] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 5610] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6611 [pid 6611] <... set_robust_list resumed>) = 0 [pid 5610] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6611] rt_sigprocmask(SIG_SETMASK, [] [pid 6604] <... openat resumed>) = 4 [pid 6611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6604] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6597] <... sendfile resumed>) = ? [pid 6611] chdir("./38" [pid 6610] +++ killed by SIGBUS +++ [pid 6604] <... futex resumed>) = 1 [pid 6600] <... futex resumed>) = 0 [pid 6597] +++ killed by SIGBUS +++ [pid 6600] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6611] <... chdir resumed>) = 0 [ 129.561812][ T6610] EXT4-fs (loop3): dirty_blocks=464 [ 129.561823][ T6610] EXT4-fs (loop3): Block reservation details [ 129.561834][ T6610] EXT4-fs (loop3): i_reserved_data_blocks=29 [pid 6604] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6611] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6604] <... openat resumed>) = 5 [pid 6600] <... futex resumed>) = 0 [pid 6598] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6594] +++ killed by SIGBUS +++ [pid 5609] <... umount2 resumed>) = 0 [pid 6598] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6594, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6600] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6598] <... futex resumed>) = 0 [pid 5609] umount2("./38/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6598] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6611] <... prctl resumed>) = 0 [pid 6604] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6598] <... mmap resumed>) = 0x7fef94c47000 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6611] setpgid(0, 0 [pid 6604] <... futex resumed>) = 1 [pid 6600] <... futex resumed>) = 0 [pid 6598] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 5612] umount2("./39", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] newfstatat(AT_FDCWD, "./38/file1" [pid 6611] <... setpgid resumed>) = 0 [pid 6604] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6600] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6598] <... mprotect resumed>) = 0 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6611] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6604] <... openat resumed>) = 6 [pid 6600] <... futex resumed>) = 0 [pid 6598] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5612] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5609] umount2("./38/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6611] <... openat resumed>) = 3 [pid 6604] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6600] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6598] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5612] <... openat resumed>) = 3 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6611] write(3, "1000", 4 [pid 6604] <... futex resumed>) = 0 [pid 6600] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6598] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5612] fstat(3 [pid 6611] <... write resumed>) = 4 [pid 6604] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6600] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] openat(AT_FDCWD, "./38/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORYci2-upstream-fs/strace-static-x86_64: Process 6612 attached [pid 6611] close(3 [pid 6604] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6600] <... futex resumed>) = 0 [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6612] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6611] <... close resumed>) = 0 [pid 6604] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6600] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6598] <... clone3 resumed> => {parent_tid=[6612]}, 88) = 6612 [pid 5609] <... openat resumed>) = 4 [pid 6612] <... rseq resumed>) = 0 [pid 6611] symlink("/dev/binderfs", "./binderfs" [pid 6604] <... mmap resumed>) = 0x200000000000 [pid 6598] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] getdents64(3 [pid 6612] set_robust_list(0x7fef94c679a0, 24 [pid 6611] <... symlink resumed>) = 0 [pid 6604] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6598] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] fstat(4 [pid 6612] <... set_robust_list resumed>) = 0 executing program [pid 6611] write(1, "executing program\n", 18 [pid 6604] <... futex resumed>) = 1 [pid 6600] <... futex resumed>) = 0 [pid 6598] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6612] rt_sigprocmask(SIG_SETMASK, [] [pid 6611] <... write resumed>) = 18 [pid 6604] sendfile(4, 5, NULL, 553647746 [pid 6600] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6598] <... futex resumed>) = 0 [pid 5612] umount2("./39/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] getdents64(4 [pid 6612] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6611] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6600] <... futex resumed>) = 0 [pid 6598] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6611] <... futex resumed>) = 0 [pid 6600] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6611] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 5609] getdents64(4 [pid 6611] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6611] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 5609] close(4 [pid 6611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6611] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5609] <... close resumed>) = 0 [pid 6611] <... mmap resumed>) = 0x7fef94c68000 [pid 5609] rmdir("./38/file1" [pid 6611] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 5609] <... rmdir resumed>) = 0 [pid 6611] <... mprotect resumed>) = 0 [pid 6611] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6611] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0}ci2-upstream-fs/strace-static-x86_64: Process 6613 attached [pid 5609] umount2("./38/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6611] <... clone3 resumed> => {parent_tid=[6613]}, 88) = 6613 [pid 6613] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6613] <... rseq resumed>) = 0 [pid 6611] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] newfstatat(AT_FDCWD, "./38/binderfs" [pid 6613] set_robust_list(0x7fef94c889a0, 24 [pid 6611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6613] <... set_robust_list resumed>) = 0 [pid 6611] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] unlink("./38/binderfs" [pid 6613] rt_sigprocmask(SIG_SETMASK, [] [pid 6611] <... futex resumed>) = 0 [ 129.753626][ T6612] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 129.754536][ T6612] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1480 with error 28 [ 129.754589][ T6612] EXT4-fs (loop4): This should not happen!! Data will be lost [ 129.754589][ T6612] [ 129.754602][ T6612] EXT4-fs (loop4): Total free blocks count 0 [ 129.754614][ T6612] EXT4-fs (loop4): Free/Dirty block details [pid 6613] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6611] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6598] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6600] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5609] <... unlink resumed>) = 0 [pid 6613] memfd_create("syzkaller", 0 [pid 6600] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6613] <... memfd_create resumed>) = 3 [pid 6600] <... futex resumed>) = 0 [pid 5609] getdents64(3 [pid 6613] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6600] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6613] <... mmap resumed>) = 0x7fef8c868000 [pid 6600] <... mmap resumed>) = 0x7fef94c47000 [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6600] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 5609] close(3 [pid 6600] <... mprotect resumed>) = 0 [pid 5609] <... close resumed>) = 0 [pid 6613] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6600] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] rmdir("./38") = 0 [pid 6600] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 6614 attached [pid 5609] mkdir("./39", 0777 [pid 6614] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6600] <... clone3 resumed> => {parent_tid=[6614]}, 88) = 6614 [pid 6614] <... rseq resumed>) = 0 [ 129.754625][ T6612] EXT4-fs (loop4): free_blocks=20480 [ 129.754638][ T6612] EXT4-fs (loop4): dirty_blocks=1488 [ 129.754649][ T6612] EXT4-fs (loop4): Block reservation details [ 129.754659][ T6612] EXT4-fs (loop4): i_reserved_data_blocks=93 [ 129.793511][ T177] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 460 with max blocks 4 with error 28 [ 129.793542][ T177] EXT4-fs (loop3): This should not happen!! Data will be lost [ 129.793542][ T177] [pid 6600] rt_sigprocmask(SIG_SETMASK, [] [pid 6614] set_robust_list(0x7fef94c679a0, 24 [pid 6600] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6614] <... set_robust_list resumed>) = 0 [pid 6600] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6614] rt_sigprocmask(SIG_SETMASK, [] [pid 6600] <... futex resumed>) = 0 [pid 6614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [ 129.809563][ T5612] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6600] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] <... mkdir resumed>) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6613] <... write resumed>) = 524288 [pid 6601] <... sendfile resumed>) = 1515520 [pid 5609] <... openat resumed>) = 3 [pid 6601] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] ioctl(3, LOOP_CLR_FD [pid 6613] munmap(0x7fef8c868000, 138412032 [pid 6612] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6601] <... futex resumed>) = 0 [pid 5609] <... ioctl resumed>) = 0 [pid 6613] <... munmap resumed>) = 0 [pid 6601] +++ killed by SIGBUS +++ [pid 5609] close(3 [pid 6614] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 5612] <... umount2 resumed>) = 0 [pid 6613] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5612] umount2("./39/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6613] <... openat resumed>) = 4 [pid 6612] +++ killed by SIGBUS +++ [pid 6604] <... sendfile resumed>) = ? [pid 6600] <... futex resumed>) = ? [pid 6598] +++ killed by SIGBUS +++ [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6613] ioctl(4, LOOP_SET_FD, 3 [pid 6604] +++ killed by SIGBUS +++ [pid 5612] newfstatat(AT_FDCWD, "./39/file1" [pid 6613] <... ioctl resumed>) = 0 [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6598, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5612] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] <... close resumed>) = 0 [pid 5614] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [ 129.875323][ T6614] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 129.876819][ T6614] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 204 with error 28 [ 129.876848][ T6614] EXT4-fs (loop2): This should not happen!! Data will be lost [ 129.876848][ T6614] [ 129.876862][ T6614] EXT4-fs (loop2): Total free blocks count 0 [ 129.876875][ T6614] EXT4-fs (loop2): Free/Dirty block details [pid 5612] umount2("./39/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5614] <... restart_syscall resumed>) = 0 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5612] openat(AT_FDCWD, "./39/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5609] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6613] close(3 [pid 5612] <... openat resumed>) = 4 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6614] +++ killed by SIGBUS +++ [pid 6613] <... close resumed>) = 0 [pid 6600] +++ killed by SIGBUS +++ [pid 5612] fstat(4 [pid 5614] umount2("./38", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6613] close(4 [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6600, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=7 /* 0.07 s */} --- ci2-upstream-fs/strace-static-x86_64: Process 6615 attached [pid 6613] <... close resumed>) = 0 [pid 5614] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5612] getdents64(4 [pid 5611] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 6615] set_robust_list(0x5555748a66e0, 24 [pid 6613] mkdir("./file1", 0777 [pid 5614] <... openat resumed>) = 3 [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6615] <... set_robust_list resumed>) = 0 [pid 6613] <... mkdir resumed>) = 0 [pid 5614] fstat(3 [pid 5612] getdents64(4 [pid 5611] <... restart_syscall resumed>) = 0 [pid 5609] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6615 [pid 6615] rt_sigprocmask(SIG_SETMASK, [] [pid 6613] mount("/dev/loop1", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 6615] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] getdents64(3 [pid 5612] close(4 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6615] chdir("./39" [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5612] <... close resumed>) = 0 [pid 5611] umount2("./39", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6615] <... chdir resumed>) = 0 [pid 5614] umount2("./38/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5612] rmdir("./39/file1" [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6615] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5611] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6615] setpgid(0, 0) = 0 [pid 5611] <... openat resumed>) = 3 [pid 6615] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5611] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5611] getdents64(3, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5611] umount2("./39/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6613] <... mount resumed>) = 0 [pid 6613] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6613] chdir("./file1") = 0 [pid 6613] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5612] <... rmdir resumed>) = 0 [pid 6615] <... openat resumed>) = 3 [pid 5612] umount2("./39/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6615] write(3, "1000", 4) = 4 [pid 6615] close(3) = 0 [pid 6613] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6615] symlink("/dev/binderfs", "./binderfs" [pid 6613] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 129.876887][ T6614] EXT4-fs (loop2): free_blocks=20480 [ 129.876901][ T6614] EXT4-fs (loop2): dirty_blocks=208 [ 129.876913][ T6614] EXT4-fs (loop2): Block reservation details [ 129.876924][ T6614] EXT4-fs (loop2): i_reserved_data_blocks=13 [pid 6615] <... symlink resumed>) = 0 [pid 6613] <... futex resumed>) = 1 [pid 6611] <... futex resumed>) = 0 [pid 5612] newfstatat(AT_FDCWD, "./39/binderfs" [pid 6611] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6613] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6611] <... futex resumed>) = 0 [pid 5612] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6615] write(1, "executing program\n", 18 executing program [pid 6611] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6615] <... write resumed>) = 18 [pid 5612] unlink("./39/binderfs" [pid 6615] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5612] <... unlink resumed>) = 0 [pid 6615] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 5612] getdents64(3 [pid 6615] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6615] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6615] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6615] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c68000 [pid 6615] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6613] <... openat resumed>) = 4 [pid 5612] close(3 [pid 6615] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6613] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... close resumed>) = 0 [pid 5612] rmdir("./39") = 0 [pid 6613] <... futex resumed>) = 1 [pid 6613] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6615] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6615] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 5612] mkdir("./40", 0777) = 0 [pid 6615] <... clone3 resumed> => {parent_tid=[6618]}, 88) = 6618 [pid 6615] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6611] <... futex resumed>) = 0 [pid 6611] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6613] <... futex resumed>) = 0 [pid 6611] <... futex resumed>) = 1 [pid 6613] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC) = 5 [pid 6615] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000ci2-upstream-fs/strace-static-x86_64: Process 6618 attached ) = 0 [pid 5612] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6615] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6611] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... openat resumed>) = 3 [pid 6613] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6611] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5612] ioctl(3, LOOP_CLR_FD [pid 6611] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... ioctl resumed>) = 0 [pid 6618] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6613] <... futex resumed>) = 0 [pid 6611] <... futex resumed>) = 0 [pid 5612] close(3 [pid 5611] <... umount2 resumed>) = 0 [pid 6618] <... rseq resumed>) = 0 [pid 6613] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6611] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] umount2("./39/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6618] set_robust_list(0x7fef94c889a0, 24 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6618] <... set_robust_list resumed>) = 0 [pid 6613] <... openat resumed>) = 6 [pid 5611] newfstatat(AT_FDCWD, "./39/file1" [pid 6618] rt_sigprocmask(SIG_SETMASK, [] [pid 6613] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6618] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6613] <... futex resumed>) = 1 [pid 6611] <... futex resumed>) = 0 [pid 5611] umount2("./39/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6618] memfd_create("syzkaller", 0 [pid 6613] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6611] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6618] <... memfd_create resumed>) = 3 [pid 6613] <... mmap resumed>) = 0x200000000000 [pid 6611] <... futex resumed>) = 0 [pid 6618] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5611] openat(AT_FDCWD, "./39/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6618] <... mmap resumed>) = 0x7fef8c868000 [pid 6613] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6611] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] <... openat resumed>) = 4 [pid 6613] <... futex resumed>) = 0 [pid 6611] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5612] <... close resumed>) = 0 [pid 6618] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5611] fstat(4 [pid 6613] sendfile(4, 5, NULL, 553647746 [pid 6611] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6611] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5611] getdents64(4 [pid 5612] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5612] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 130.012124][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 204 with max blocks 4 with error 28 [ 130.012154][ T12] EXT4-fs (loop2): This should not happen!! Data will be lost [ 130.012154][ T12] [ 130.020447][ T5611] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 5611] getdents64(4ci2-upstream-fs/strace-static-x86_64: Process 6619 attached , 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6619] set_robust_list(0x5555748a66e0, 24 [pid 5611] close(4 [pid 6619] <... set_robust_list resumed>) = 0 [pid 5611] <... close resumed>) = 0 [pid 6619] rt_sigprocmask(SIG_SETMASK, [] [pid 5611] rmdir("./39/file1" [pid 6619] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6619] chdir("./40" [pid 5612] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6619 [pid 5611] <... rmdir resumed>) = 0 [pid 6619] <... chdir resumed>) = 0 [pid 6618] <... write resumed>) = 524288 [pid 6619] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5612] rt_sigprocmask(SIG_SETMASK, [] [pid 6619] <... prctl resumed>) = 0 [pid 5612] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5611] umount2("./39/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6619] setpgid(0, 0 [pid 6618] munmap(0x7fef8c868000, 138412032 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6619] <... setpgid resumed>) = 0 [pid 6618] <... munmap resumed>) = 0 [pid 5611] newfstatat(AT_FDCWD, "./39/binderfs" [pid 6619] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6618] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6611] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5611] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6619] <... openat resumed>) = 3 [pid 6618] <... openat resumed>) = 4 [pid 6611] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] unlink("./39/binderfs" [pid 6619] write(3, "1000", 4 [pid 6618] ioctl(4, LOOP_SET_FD, 3 [pid 6611] <... futex resumed>) = 0 [pid 5611] <... unlink resumed>) = 0 [pid 6619] <... write resumed>) = 4 [pid 6611] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6619] close(3 [pid 6611] <... mmap resumed>) = 0x7fef94c47000 [pid 5611] getdents64(3 [pid 6619] <... close resumed>) = 0 [pid 6611] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6619] symlink("/dev/binderfs", "./binderfs" [pid 6611] <... mprotect resumed>) = 0 [pid 5611] close(3 [pid 6619] <... symlink resumed>) = 0 [pid 6611] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5611] <... close resumed>) = 0 [pid 6619] write(1, "executing program\n", 18 [pid 6611] <... rt_sigprocmask resumed>, [], 8) = 0 executing program [pid 5611] rmdir("./39" [pid 6619] <... write resumed>) = 18 [ 130.124918][ T5614] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6611] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6619] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6618] <... ioctl resumed>) = 0 [pid 5611] <... rmdir resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6620 attached [pid 6619] <... futex resumed>) = 0 [pid 6619] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60}, NULL, 8) = 0 [pid 6619] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6611] <... clone3 resumed> => {parent_tid=[6620]}, 88) = 6620 [pid 6620] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6619] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6618] close(3 [pid 6611] rt_sigprocmask(SIG_SETMASK, [] [pid 6620] <... rseq resumed>) = 0 [pid 6619] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5611] mkdir("./40", 0777 [pid 6620] set_robust_list(0x7fef94c679a0, 24 [pid 6619] <... mmap resumed>) = 0x7fef94c68000 [pid 6618] <... close resumed>) = 0 [pid 6611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5611] <... mkdir resumed>) = 0 [pid 6620] <... set_robust_list resumed>) = 0 [pid 6619] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6618] close(4 [pid 6611] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6620] rt_sigprocmask(SIG_SETMASK, [] [pid 6619] <... mprotect resumed>) = 0 [pid 5611] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6619] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6620] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6619] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6618] <... close resumed>) = 0 [pid 6619] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0}ci2-upstream-fs/strace-static-x86_64: Process 6621 attached [pid 6618] mkdir("./file1", 0777 [pid 6611] <... futex resumed>) = 0 [pid 5611] <... openat resumed>) = 3 [pid 6619] <... clone3 resumed> => {parent_tid=[6621]}, 88) = 6621 [pid 6618] <... mkdir resumed>) = 0 [pid 6611] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] ioctl(3, LOOP_CLR_FD [pid 6619] rt_sigprocmask(SIG_SETMASK, [] [pid 6618] mount("/dev/loop0", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5614] <... umount2 resumed>) = 0 [pid 5611] <... ioctl resumed>) = 0 [pid 6619] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5611] close(3 [pid 6621] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6619] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] umount2("./38/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6621] <... rseq resumed>) = 0 [pid 6619] <... futex resumed>) = 0 [pid 6621] set_robust_list(0x7fef94c889a0, 24 [pid 6619] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6621] <... set_robust_list resumed>) = 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6621] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5614] newfstatat(AT_FDCWD, "./38/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] umount2("./38/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./38/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6621] memfd_create("syzkaller", 0 [pid 5614] <... openat resumed>) = 4 [ 130.228247][ T6620] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 130.228433][ T6620] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 748 with error 28 [ 130.228455][ T6620] EXT4-fs (loop1): This should not happen!! Data will be lost [ 130.228455][ T6620] [ 130.228483][ T6620] EXT4-fs (loop1): Total free blocks count 0 [ 130.228495][ T6620] EXT4-fs (loop1): Free/Dirty block details [pid 6621] <... memfd_create resumed>) = 3 [pid 5614] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5614] getdents64(4, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5614] getdents64(4 [pid 6611] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5614] close(4) = 0 [pid 5614] rmdir("./38/file1" [pid 6621] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5614] <... rmdir resumed>) = 0 [pid 5611] <... close resumed>) = 0 [pid 6621] <... mmap resumed>) = 0x7fef8c868000 [pid 5614] umount2("./38/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6621] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5614] newfstatat(AT_FDCWD, "./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./38/binderfs" [pid 5611] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5614] <... unlink resumed>) = 0 [pid 5614] getdents64(3, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6621] <... write resumed>) = 524288 [pid 6618] <... mount resumed>) = 0 [pid 6621] munmap(0x7fef8c868000, 138412032ci2-upstream-fs/strace-static-x86_64: Process 6624 attached ) = 0 [pid 5614] close(3 [pid 5611] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6624 [ 130.228508][ T6620] EXT4-fs (loop1): free_blocks=20480 [ 130.228522][ T6620] EXT4-fs (loop1): dirty_blocks=768 [ 130.228533][ T6620] EXT4-fs (loop1): Block reservation details [ 130.228544][ T6620] EXT4-fs (loop1): i_reserved_data_blocks=47 [pid 5614] <... close resumed>) = 0 [pid 6621] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5611] rt_sigprocmask(SIG_SETMASK, [] [pid 6624] set_robust_list(0x5555748a66e0, 24 [pid 6621] <... openat resumed>) = 4 [pid 6620] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6618] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5614] rmdir("./38" [pid 6621] ioctl(4, LOOP_SET_FD, 3 [pid 6624] <... set_robust_list resumed>) = 0 [pid 6621] <... ioctl resumed>) = 0 [pid 6618] <... openat resumed>) = 3 [pid 6613] <... sendfile resumed>) = 765952 [pid 5614] <... rmdir resumed>) = 0 [pid 6624] rt_sigprocmask(SIG_SETMASK, [] [pid 6621] close(3 [pid 6618] chdir("./file1" [pid 6613] +++ killed by SIGBUS +++ [pid 5611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6624] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6618] <... chdir resumed>) = 0 [pid 5614] mkdir("./39", 0777 [pid 6624] chdir("./40" [pid 6618] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5614] <... mkdir resumed>) = 0 [pid 6624] <... chdir resumed>) = 0 [pid 6620] +++ killed by SIGBUS +++ [pid 6611] +++ killed by SIGBUS +++ [pid 6621] <... close resumed>) = 0 [pid 6624] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6621] close(4 [pid 6618] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5614] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6624] <... prctl resumed>) = 0 [pid 6621] <... close resumed>) = 0 [pid 6618] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... openat resumed>) = 3 [pid 5610] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6611, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 6621] mkdir("./file1", 0777 [pid 6624] setpgid(0, 0 [pid 6621] <... mkdir resumed>) = 0 [pid 6618] <... futex resumed>) = 1 [pid 6615] <... futex resumed>) = 0 [pid 5614] ioctl(3, LOOP_CLR_FD [pid 5610] umount2("./38", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6624] <... setpgid resumed>) = 0 [pid 6621] mount("/dev/loop3", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6618] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6615] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... ioctl resumed>) = 0 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6624] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6618] <... openat resumed>) = 4 [pid 6615] <... futex resumed>) = 0 [pid 5614] close(3 [pid 5610] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6624] <... openat resumed>) = 3 [pid 6618] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6615] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... openat resumed>) = 3 [pid 6618] <... futex resumed>) = 0 [pid 6615] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5610] fstat(3 [pid 6624] write(3, "1000", 4 [pid 6618] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6615] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6618] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6615] <... futex resumed>) = 0 [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6624] <... write resumed>) = 4 [pid 6618] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6624] close(3 [pid 6618] <... openat resumed>) = 5 [ 130.347467][ T6621] set_capacity_and_notify: 12 callbacks suppressed [ 130.347484][ T6621] loop3: detected capacity change from 0 to 1024 [pid 6615] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] getdents64(3 [pid 6624] <... close resumed>) = 0 [pid 6618] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6615] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6624] symlink("/dev/binderfs", "./binderfs" [pid 6618] <... futex resumed>) = 0 [pid 6615] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] umount2("./38/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6615] <... futex resumed>) = 0 [pid 6618] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6615] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6618] <... openat resumed>) = 6 [pid 5614] <... close resumed>) = 0 [pid 6618] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6618] <... futex resumed>) = 1 [pid 6615] <... futex resumed>) = 0 [pid 5614] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6624] <... symlink resumed>) = 0 [pid 6618] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6615] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6615] <... futex resumed>) = 0 [pid 6621] <... mount resumed>) = 0 [pid 6624] write(1, "executing program\n", 18 [pid 6618] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) executing program [pid 6615] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6624] <... write resumed>) = 18 [pid 6621] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORYci2-upstream-fs/strace-static-x86_64: Process 6627 attached [pid 6624] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6621] <... openat resumed>) = 3 [pid 6618] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6624] <... futex resumed>) = 0 [pid 6621] chdir("./file1" [pid 6618] <... mmap resumed>) = 0x200000000000 [pid 5614] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6627 [pid 6627] set_robust_list(0x5555748a66e0, 24 [pid 6624] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6621] <... chdir resumed>) = 0 [pid 5614] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6624] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6618] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6621] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6627] <... set_robust_list resumed>) = 0 [pid 6624] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6618] <... futex resumed>) = 1 [pid 6615] <... futex resumed>) = 0 [pid 6627] rt_sigprocmask(SIG_SETMASK, [] [pid 6621] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6615] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6624] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6621] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6618] sendfile(4, 5, NULL, 553647746 [pid 6627] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6615] <... futex resumed>) = 0 [pid 6624] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6619] <... futex resumed>) = 0 [pid 6627] chdir("./39" [pid 6624] <... mmap resumed>) = 0x7fef94c68000 [pid 6621] <... futex resumed>) = 1 [pid 6619] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6615] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6624] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6619] <... futex resumed>) = 0 [pid 6624] <... mprotect resumed>) = 0 [pid 6619] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6621] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6624] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6627] <... chdir resumed>) = 0 [pid 6624] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6621] <... openat resumed>) = 4 [pid 6627] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6624] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6621] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6627] <... prctl resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6628 attached [pid 6627] setpgid(0, 0 [pid 6621] <... futex resumed>) = 1 [pid 6619] <... futex resumed>) = 0 [pid 6628] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6627] <... setpgid resumed>) = 0 [pid 6624] <... clone3 resumed> => {parent_tid=[6628]}, 88) = 6628 [pid 6621] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6619] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6627] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6628] <... rseq resumed>) = 0 [pid 6624] rt_sigprocmask(SIG_SETMASK, [] [pid 6621] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6619] <... futex resumed>) = 0 [pid 6619] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6624] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6628] set_robust_list(0x7fef94c889a0, 24 [pid 6627] <... openat resumed>) = 3 [pid 6621] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6624] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6628] <... set_robust_list resumed>) = 0 [pid 6627] write(3, "1000", 4 [pid 6624] <... futex resumed>) = 0 [pid 6621] <... openat resumed>) = 5 [pid 6628] rt_sigprocmask(SIG_SETMASK, [] [pid 6627] <... write resumed>) = 4 [pid 6628] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6624] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6627] close(3 [pid 6621] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6628] memfd_create("syzkaller", 0 [pid 6627] <... close resumed>) = 0 [pid 6621] <... futex resumed>) = 1 [pid 6619] <... futex resumed>) = 0 [pid 6628] <... memfd_create resumed>) = 3 [pid 6627] symlink("/dev/binderfs", "./binderfs" [pid 6621] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6619] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6628] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fef8c868000 [pid 6627] <... symlink resumed>) = 0 [pid 6621] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6619] <... futex resumed>) = 0 [pid 6619] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6627] write(1, "executing program\n", 18 [pid 6621] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6627] <... write resumed>) = 18 executing program [pid 6627] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6621] <... openat resumed>) = 6 [pid 6627] <... futex resumed>) = 0 [pid 6627] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60}, NULL, 8) = 0 [pid 6627] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6621] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6615] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6627] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6621] <... futex resumed>) = 1 [pid 6628] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6619] <... futex resumed>) = 0 [pid 6615] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6619] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6615] <... futex resumed>) = 0 [pid 6627] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6621] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6619] <... futex resumed>) = 0 [pid 6615] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5610] <... umount2 resumed>) = 0 [pid 6627] <... mmap resumed>) = 0x7fef94c68000 [pid 6621] <... mmap resumed>) = 0x200000000000 [pid 6619] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6615] <... mmap resumed>) = 0x7fef94c47000 [pid 5610] umount2("./38/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6628] <... write resumed>) = 524288 [pid 6627] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6621] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6619] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6615] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6628] munmap(0x7fef8c868000, 138412032 [pid 6627] <... mprotect resumed>) = 0 [pid 6621] <... futex resumed>) = 0 [pid 6619] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6615] <... mprotect resumed>) = 0 [pid 5610] newfstatat(AT_FDCWD, "./38/file1" [pid 6627] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6621] sendfile(4, 5, NULL, 553647746 [pid 6619] <... futex resumed>) = 0 [ 130.458897][ T5610] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6615] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5610] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6628] <... munmap resumed>) = 0 [pid 6627] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6619] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6615] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5610] umount2("./38/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6628] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6627] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6615] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ci2-upstream-fs/strace-static-x86_64: Process 6630 attached ci2-upstream-fs/strace-static-x86_64: Process 6629 attached [pid 6628] <... openat resumed>) = 4 [pid 5610] openat(AT_FDCWD, "./38/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6630] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6629] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6627] <... clone3 resumed> => {parent_tid=[6629]}, 88) = 6629 [pid 6615] <... clone3 resumed> => {parent_tid=[6630]}, 88) = 6630 [pid 5610] <... openat resumed>) = 4 [pid 6630] <... rseq resumed>) = 0 [pid 6628] ioctl(4, LOOP_SET_FD, 3 [pid 6627] rt_sigprocmask(SIG_SETMASK, [] [pid 6615] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] fstat(4 [pid 6629] <... rseq resumed>) = 0 [pid 6630] set_robust_list(0x7fef94c679a0, 24 [pid 6628] <... ioctl resumed>) = 0 [pid 6629] set_robust_list(0x7fef94c889a0, 24 [pid 6627] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6615] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6630] <... set_robust_list resumed>) = 0 [pid 6629] <... set_robust_list resumed>) = 0 [pid 6615] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] getdents64(4 [pid 6627] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6630] rt_sigprocmask(SIG_SETMASK, [] [pid 6629] rt_sigprocmask(SIG_SETMASK, [] [pid 6627] <... futex resumed>) = 0 [pid 6615] <... futex resumed>) = 0 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6630] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6629] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6628] close(3 [pid 6627] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6615] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] getdents64(4 [pid 6629] memfd_create("syzkaller", 0 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6629] <... memfd_create resumed>) = 3 [pid 5610] close(4) = 0 [pid 5610] rmdir("./38/file1") = 0 [pid 5610] umount2("./38/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6629] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6628] <... close resumed>) = 0 [pid 6628] close(4 [pid 6629] <... mmap resumed>) = 0x7fef8c868000 [pid 6628] <... close resumed>) = 0 [pid 6628] mkdir("./file1", 0777 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6628] <... mkdir resumed>) = 0 [pid 6628] mount("/dev/loop2", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5610] newfstatat(AT_FDCWD, "./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 130.533903][ T6628] loop2: detected capacity change from 0 to 1024 [ 130.544024][ T6630] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 130.563787][ T6630] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 580 with error 28 [pid 5610] unlink("./38/binderfs" [pid 6619] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5610] <... unlink resumed>) = 0 [pid 6619] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5610] getdents64(3 [pid 6619] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6615] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6619] <... mmap resumed>) = 0x7fef94c47000 [pid 5610] close(3 [pid 6619] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 5610] <... close resumed>) = 0 [pid 6619] <... mprotect resumed>) = 0 [pid 6619] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5610] rmdir("./38" [pid 6619] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5610] <... rmdir resumed>) = 0 [pid 6619] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 6633 attached [pid 5610] mkdir("./39", 0777 [pid 6633] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6619] <... clone3 resumed> => {parent_tid=[6633]}, 88) = 6633 [pid 5610] <... mkdir resumed>) = 0 [pid 6633] <... rseq resumed>) = 0 [pid 6619] rt_sigprocmask(SIG_SETMASK, [] [pid 6633] set_robust_list(0x7fef94c679a0, 24 [pid 6619] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6633] <... set_robust_list resumed>) = 0 [pid 6629] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6619] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6633] rt_sigprocmask(SIG_SETMASK, [] [pid 6630] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6619] <... futex resumed>) = 0 [pid 6618] <... sendfile resumed>) = 598016 [pid 6615] ???( [pid 6633] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6628] <... mount resumed>) = 0 [ 130.563816][ T6630] EXT4-fs (loop0): This should not happen!! Data will be lost [ 130.563816][ T6630] [ 130.563830][ T6630] EXT4-fs (loop0): Total free blocks count 0 [ 130.563842][ T6630] EXT4-fs (loop0): Free/Dirty block details [ 130.563853][ T6630] EXT4-fs (loop0): free_blocks=20480 [ 130.563866][ T6630] EXT4-fs (loop0): dirty_blocks=592 [ 130.563877][ T6630] EXT4-fs (loop0): Block reservation details [ 130.563886][ T6630] EXT4-fs (loop0): i_reserved_data_blocks=37 [pid 6619] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... openat resumed>) = 3 [pid 6630] +++ killed by SIGBUS +++ [pid 6629] <... write resumed>) = 524288 [pid 6628] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5610] ioctl(3, LOOP_CLR_FD [pid 6629] munmap(0x7fef8c868000, 138412032 [pid 6628] <... openat resumed>) = 3 [pid 6618] +++ killed by SIGBUS +++ [pid 6629] <... munmap resumed>) = 0 [pid 6628] chdir("./file1" [pid 6629] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6628] <... chdir resumed>) = 0 [pid 5610] <... ioctl resumed>) = 0 [pid 6629] <... openat resumed>) = 4 [pid 6628] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5610] close(3 [pid 6629] ioctl(4, LOOP_SET_FD, 3 [pid 6628] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6628] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6633] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6628] <... futex resumed>) = 1 [pid 6628] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6624] <... futex resumed>) = 0 [pid 6621] <... sendfile resumed>) = 282624 [pid 6628] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6624] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6619] <... futex resumed>) = ? [pid 6628] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6624] <... futex resumed>) = 0 [pid 6624] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6621] +++ killed by SIGBUS +++ [pid 6628] <... openat resumed>) = 4 [ 130.640251][ T6633] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 130.641525][ T6633] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 272 with error 28 [ 130.641554][ T6633] EXT4-fs (loop3): This should not happen!! Data will be lost [ 130.641554][ T6633] [ 130.641567][ T6633] EXT4-fs (loop3): Total free blocks count 0 [ 130.641579][ T6633] EXT4-fs (loop3): Free/Dirty block details [pid 6628] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6624] <... futex resumed>) = 0 [pid 6633] +++ killed by SIGBUS +++ [pid 6628] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6619] +++ killed by SIGBUS +++ [pid 6624] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6629] <... ioctl resumed>) = 0 [pid 6628] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6628] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6624] <... futex resumed>) = 0 [pid 5612] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6619, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5610] <... close resumed>) = 0 [pid 6629] close(3 [pid 6628] <... openat resumed>) = 5 [pid 6624] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 5610] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6629] <... close resumed>) = 0 [pid 5612] <... restart_syscall resumed>) = 0 [pid 5610] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6629] close(4 [pid 6628] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 6634 attached [pid 6629] <... close resumed>) = 0 [pid 6628] <... futex resumed>) = 1 [pid 6624] <... futex resumed>) = 0 [pid 6629] mkdir("./file1", 0777 [pid 6628] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6624] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6634] set_robust_list(0x5555748a66e0, 24 [pid 6629] <... mkdir resumed>) = 0 [pid 6628] <... openat resumed>) = 6 [pid 6624] <... futex resumed>) = 0 [pid 6615] +++ killed by SIGBUS +++ [pid 5612] umount2("./40", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6634] <... set_robust_list resumed>) = 0 [pid 6629] mount("/dev/loop4", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6628] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6624] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 130.641591][ T6633] EXT4-fs (loop3): free_blocks=20480 [ 130.641604][ T6633] EXT4-fs (loop3): dirty_blocks=272 [ 130.641615][ T6633] EXT4-fs (loop3): Block reservation details [ 130.641627][ T6633] EXT4-fs (loop3): i_reserved_data_blocks=17 [ 130.674853][ T6629] loop4: detected capacity change from 0 to 1024 [ 130.687866][ T37] kauditd_printk_skb: 13 callbacks suppressed [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6615, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6634] rt_sigprocmask(SIG_SETMASK, [] [pid 6628] <... futex resumed>) = 0 [pid 6624] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5612] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6634] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6628] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5612] <... openat resumed>) = 3 [pid 5610] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6634 [pid 6634] chdir("./39" [pid 5612] fstat(3 [pid 5610] rt_sigprocmask(SIG_SETMASK, [] [pid 6624] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5610] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6634] <... chdir resumed>) = 0 [pid 5609] umount2("./39", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6634] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6628] <... futex resumed>) = 0 [pid 6624] <... futex resumed>) = 1 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6634] <... prctl resumed>) = 0 [pid 6628] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6634] setpgid(0, 0 [pid 6624] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] getdents64(3 [pid 5609] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6634] <... setpgid resumed>) = 0 [pid 6628] <... mmap resumed>) = 0x200000000000 [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6634] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6628] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... openat resumed>) = 3 [pid 6634] <... openat resumed>) = 3 [pid 6628] <... futex resumed>) = 1 [pid 6624] <... futex resumed>) = 0 [pid 5612] umount2("./40/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] fstat(3 [pid 6634] write(3, "1000", 4 [pid 6628] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6624] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6634] <... write resumed>) = 4 [pid 6628] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6624] <... futex resumed>) = 0 [pid 6634] close(3 [pid 6628] sendfile(4, 5, NULL, 553647746 [pid 6624] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] getdents64(3 [pid 6634] <... close resumed>) = 0 [pid 6629] <... mount resumed>) = 0 [ 130.687884][ T37] audit: type=1800 audit(1785844661.084:201): pid=6628 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop2" ino=15 res=0 errno=0 [pid 6634] symlink("/dev/binderfs", "./binderfs" [pid 6629] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6629] <... openat resumed>) = 3 [pid 6634] <... symlink resumed>) = 0 [pid 6629] chdir("./file1" [pid 5609] umount2("./39/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6629] <... chdir resumed>) = 0 [pid 6634] write(1, "executing program\n", 18) = 18 [pid 6629] openat(AT_FDCWD, "/dev/loop4", O_RDWR executing program [pid 6634] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6629] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6634] <... futex resumed>) = 0 [pid 6629] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6634] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60}, NULL, 8) = 0 [pid 6629] <... futex resumed>) = 1 [pid 6627] <... futex resumed>) = 0 [pid 6634] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6627] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6634] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6629] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6627] <... futex resumed>) = 0 [pid 6627] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6634] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c68000 [pid 6634] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6629] <... openat resumed>) = 4 [pid 6634] <... mprotect resumed>) = 0 [pid 6629] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6634] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6629] <... futex resumed>) = 1 [pid 6627] <... futex resumed>) = 0 [pid 6634] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6629] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6627] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6627] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6629] <... openat resumed>) = 5 [pid 6634] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0}ci2-upstream-fs/strace-static-x86_64: Process 6637 attached => {parent_tid=[6637]}, 88) = 6637 [pid 6637] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6634] rt_sigprocmask(SIG_SETMASK, [] [pid 6637] <... rseq resumed>) = 0 [pid 6634] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6637] set_robust_list(0x7fef94c889a0, 24 [pid 6634] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6637] <... set_robust_list resumed>) = 0 [pid 6634] <... futex resumed>) = 0 [pid 6637] rt_sigprocmask(SIG_SETMASK, [] [pid 6634] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6637] memfd_create("syzkaller", 0) = 3 [pid 6637] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fef8c868000 [pid 6624] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6629] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6624] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6629] <... futex resumed>) = 1 [pid 6627] <... futex resumed>) = 0 [pid 6624] <... futex resumed>) = 0 [pid 6629] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6627] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6624] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6627] <... futex resumed>) = 0 [pid 6624] <... mmap resumed>) = 0x7fef94c47000 [pid 6629] <... openat resumed>) = 6 [pid 6627] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6624] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6629] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6624] <... mprotect resumed>) = 0 [ 130.803387][ T37] audit: type=1800 audit(1785844661.204:202): pid=6629 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 130.804028][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 272 with max blocks 4 with error 28 [ 130.804056][ T12] EXT4-fs (loop3): This should not happen!! Data will be lost [ 130.804056][ T12] [pid 6637] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6624] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6629] <... futex resumed>) = 1 [pid 6624] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6629] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6624] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 6638 attached [pid 6638] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6624] <... clone3 resumed> => {parent_tid=[6638]}, 88) = 6638 [pid 6638] <... rseq resumed>) = 0 [pid 6627] <... futex resumed>) = 0 [pid 6638] set_robust_list(0x7fef94c679a0, 24) = 0 [pid 6627] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6624] rt_sigprocmask(SIG_SETMASK, [] [pid 6638] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6629] <... futex resumed>) = 0 [pid 6627] <... futex resumed>) = 1 [pid 6624] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6629] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6627] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6624] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6629] <... mmap resumed>) = 0x200000000000 [pid 6629] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6624] <... futex resumed>) = 0 [pid 6629] <... futex resumed>) = 1 [pid 6627] <... futex resumed>) = 0 [pid 6624] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6637] <... write resumed>) = 524288 [pid 5612] <... umount2 resumed>) = 0 [pid 6637] munmap(0x7fef8c868000, 138412032 [pid 6629] sendfile(4, 5, NULL, 553647746 [pid 6627] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] umount2("./40/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6637] <... munmap resumed>) = 0 [pid 6627] <... futex resumed>) = 0 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6637] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6627] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6637] <... openat resumed>) = 4 [pid 5612] newfstatat(AT_FDCWD, "./40/file1" [ 130.808290][ T5612] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 130.878388][ T63] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 580 with max blocks 4 with error 28 [ 130.878421][ T63] EXT4-fs (loop0): This should not happen!! Data will be lost [ 130.878421][ T63] [pid 6637] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5612] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6637] close(3 [pid 5612] umount2("./40/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6637] <... close resumed>) = 0 [pid 5612] openat(AT_FDCWD, "./40/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6637] close(4 [pid 5612] <... openat resumed>) = 4 [pid 6637] <... close resumed>) = 0 [pid 5612] fstat(4 [pid 6637] mkdir("./file1", 0777) = 0 [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5612] getdents64(4 [pid 6637] mount("/dev/loop1", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5612] getdents64(4, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5612] close(4 [pid 6624] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5612] <... close resumed>) = 0 [pid 5612] rmdir("./40/file1") = 0 [pid 5612] umount2("./40/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6627] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6627] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [ 130.891041][ T5609] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 130.901965][ T6638] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 130.902159][ T6638] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 352 with error 28 [ 130.902181][ T6638] EXT4-fs (loop2): This should not happen!! Data will be lost [ 130.902181][ T6638] [ 130.902194][ T6638] EXT4-fs (loop2): Total free blocks count 0 [pid 5612] newfstatat(AT_FDCWD, "./40/binderfs" [pid 6627] <... futex resumed>) = 0 [pid 5612] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] <... umount2 resumed>) = 0 [pid 6627] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5612] unlink("./40/binderfs" [pid 6627] <... mmap resumed>) = 0x7fef94c47000 [pid 5612] <... unlink resumed>) = 0 [pid 6627] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5612] getdents64(3 [pid 5609] umount2("./39/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6627] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6627] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5612] close(3 [pid 6627] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5612] <... close resumed>) = 0 [pid 5609] newfstatat(AT_FDCWD, "./39/file1" [pid 6638] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6628] <... sendfile resumed>) = 364544 ci2-upstream-fs/strace-static-x86_64: Process 6641 attached [pid 6637] <... mount resumed>) = 0 [pid 5612] rmdir("./40" [pid 5609] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6641] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6638] +++ killed by SIGBUS +++ [pid 6637] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6628] +++ killed by SIGBUS +++ [pid 6627] <... clone3 resumed> => {parent_tid=[6641]}, 88) = 6641 [pid 5612] <... rmdir resumed>) = 0 [pid 5609] umount2("./39/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6641] <... rseq resumed>) = 0 [pid 6637] <... openat resumed>) = 3 [pid 6627] rt_sigprocmask(SIG_SETMASK, [] [pid 6624] +++ killed by SIGBUS +++ [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6641] set_robust_list(0x7fef94c679a0, 24 [pid 6637] chdir("./file1" [pid 6627] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5612] mkdir("./41", 0777 [pid 5609] openat(AT_FDCWD, "./39/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6641] <... set_robust_list resumed>) = 0 [pid 6637] <... chdir resumed>) = 0 [pid 6627] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6624, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5609] <... openat resumed>) = 4 [pid 6641] rt_sigprocmask(SIG_SETMASK, [] [pid 6637] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6627] <... futex resumed>) = 0 [pid 5612] <... mkdir resumed>) = 0 [pid 5611] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 5609] fstat(4 [pid 6641] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6637] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 130.902204][ T6638] EXT4-fs (loop2): Free/Dirty block details [ 130.902225][ T6638] EXT4-fs (loop2): free_blocks=20480 [ 130.902235][ T6638] EXT4-fs (loop2): dirty_blocks=352 [ 130.902245][ T6638] EXT4-fs (loop2): Block reservation details [ 130.902256][ T6638] EXT4-fs (loop2): i_reserved_data_blocks=22 [ 130.904016][ T6637] loop1: detected capacity change from 0 to 1024 [pid 6627] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 131.019467][ T6641] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 131.019673][ T6641] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 192 with error 28 [ 131.048476][ T6641] EXT4-fs (loop4): This should not happen!! Data will be lost [ 131.048476][ T6641] [ 131.048500][ T6641] EXT4-fs (loop4): Total free blocks count 0 [ 131.048515][ T6641] EXT4-fs (loop4): Free/Dirty block details [pid 6637] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... restart_syscall resumed>) = 0 [pid 6637] <... futex resumed>) = 1 [pid 6634] <... futex resumed>) = 0 [pid 5612] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5609] getdents64(4 [pid 6641] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6629] <... sendfile resumed>) = 196608 [pid 6627] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6637] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6634] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... openat resumed>) = 3 [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6641] +++ killed by SIGBUS +++ [pid 6637] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6634] <... futex resumed>) = 0 [pid 6629] +++ killed by SIGBUS +++ [pid 5611] umount2("./40", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6637] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] getdents64(4 [pid 6637] <... openat resumed>) = 4 [pid 6634] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] ioctl(3, LOOP_CLR_FD [pid 5611] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5612] <... ioctl resumed>) = 0 [ 131.048528][ T6641] EXT4-fs (loop4): free_blocks=20480 [ 131.048542][ T6641] EXT4-fs (loop4): dirty_blocks=192 [ 131.048554][ T6641] EXT4-fs (loop4): Block reservation details [ 131.048565][ T6641] EXT4-fs (loop4): i_reserved_data_blocks=12 [pid 5612] close(3 [pid 5609] close(4 [pid 5611] <... openat resumed>) = 3 [pid 5609] <... close resumed>) = 0 [pid 5609] rmdir("./39/file1" [pid 5611] fstat(3 [pid 5609] <... rmdir resumed>) = 0 [pid 6637] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5611] getdents64(3 [pid 6637] <... futex resumed>) = 1 [pid 6634] <... futex resumed>) = 0 [pid 6627] +++ killed by SIGBUS +++ [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./39/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6637] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6634] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6627, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5612] <... close resumed>) = 0 [pid 5611] umount2("./40/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6637] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6634] <... futex resumed>) = 0 [pid 6637] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6634] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] newfstatat(AT_FDCWD, "./39/binderfs" [pid 6637] <... openat resumed>) = 5 [pid 5612] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6637] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] umount2("./39", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5612] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5609] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6637] <... futex resumed>) = 1 [pid 6634] <... futex resumed>) = 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5612] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6637] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6634] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5609] unlink("./39/binderfs"ci2-upstream-fs/strace-static-x86_64: Process 6642 attached [pid 6637] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6634] <... futex resumed>) = 0 [pid 5614] <... openat resumed>) = 3 [pid 5609] <... unlink resumed>) = 0 [pid 6637] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6634] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] fstat(3 [pid 6642] set_robust_list(0x5555748a66e0, 24 [pid 5612] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6642 [pid 5609] getdents64(3 [pid 6642] <... set_robust_list resumed>) = 0 [pid 6637] <... openat resumed>) = 6 [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5612] rt_sigprocmask(SIG_SETMASK, [] [pid 6642] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6642] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] getdents64(3 [pid 5612] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] close(3 [pid 6637] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... close resumed>) = 0 [pid 6642] chdir("./41" [pid 6637] <... futex resumed>) = 1 [pid 6634] <... futex resumed>) = 0 [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5609] rmdir("./39" [pid 6637] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6634] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] umount2("./39/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... rmdir resumed>) = 0 [pid 6642] <... chdir resumed>) = 0 [pid 6637] <... mmap resumed>) = 0x200000000000 [pid 6634] <... futex resumed>) = 0 [pid 6642] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6634] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6642] <... prctl resumed>) = 0 [pid 6642] setpgid(0, 0 [pid 6637] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] mkdir("./40", 0777 [pid 6642] <... setpgid resumed>) = 0 [pid 6642] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6637] <... futex resumed>) = 1 [pid 6634] <... futex resumed>) = 0 [pid 5609] <... mkdir resumed>) = 0 [pid 6642] <... openat resumed>) = 3 [pid 6637] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6634] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6634] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6637] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6637] sendfile(4, 5, NULL, 553647746 [pid 6642] write(3, "1000", 4 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6642] <... write resumed>) = 4 [pid 5609] <... openat resumed>) = 3 [pid 6642] close(3 [pid 5609] ioctl(3, LOOP_CLR_FD [pid 6642] <... close resumed>) = 0 [pid 6642] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5609] <... ioctl resumed>) = 0 [ 131.095356][ T37] audit: type=1800 audit(1785844661.494:203): pid=6637 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop1" ino=15 res=0 errno=0 [pid 5609] close(3 executing program [pid 6642] write(1, "executing program\n", 18) = 18 [pid 6642] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6642] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60}, NULL, 8) = 0 [pid 6642] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6642] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c68000 [pid 6642] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6642] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6642] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0}ci2-upstream-fs/strace-static-x86_64: Process 6643 attached => {parent_tid=[6643]}, 88) = 6643 [pid 6642] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] <... close resumed>) = 0 [pid 6642] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6643] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6642] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 131.150170][ T177] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 352 with max blocks 4 with error 28 [ 131.150209][ T177] EXT4-fs (loop2): This should not happen!! Data will be lost [ 131.150209][ T177] [ 131.175529][ T5611] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6643] <... rseq resumed>) = 0 [pid 6642] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 6644 attached [pid 6643] set_robust_list(0x7fef94c889a0, 24) = 0 [pid 6643] rt_sigprocmask(SIG_SETMASK, [] [pid 6644] set_robust_list(0x5555748a66e0, 24 [pid 6643] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6634] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6643] memfd_create("syzkaller", 0 [pid 6644] <... set_robust_list resumed>) = 0 [pid 6634] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6644] rt_sigprocmask(SIG_SETMASK, [] [pid 6643] <... memfd_create resumed>) = 3 [pid 6634] <... futex resumed>) = 0 [pid 6644] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6643] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6634] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6643] <... mmap resumed>) = 0x7fef8c868000 [pid 6634] <... mmap resumed>) = 0x7fef94c47000 [pid 6644] chdir("./40" [pid 6634] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6644] <... chdir resumed>) = 0 [pid 6634] <... mprotect resumed>) = 0 [pid 6644] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6634] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6644] <... prctl resumed>) = 0 [pid 6634] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6644] setpgid(0, 0 [pid 6634] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 6645 attached [pid 6644] <... setpgid resumed>) = 0 [pid 6644] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6634] <... clone3 resumed> => {parent_tid=[6645]}, 88) = 6645 [pid 6634] rt_sigprocmask(SIG_SETMASK, [] [pid 6644] <... openat resumed>) = 3 [pid 6634] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6645] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6634] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6645] <... rseq resumed>) = 0 [pid 6644] write(3, "1000", 4 [pid 6643] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6634] <... futex resumed>) = 0 [pid 5609] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6644 [pid 6645] set_robust_list(0x7fef94c679a0, 24) = 0 [pid 6644] <... write resumed>) = 4 [pid 6634] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 6644] close(3 [pid 6645] rt_sigprocmask(SIG_SETMASK, [] [pid 6644] <... close resumed>) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6645] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6644] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6644] write(1, "executing program\n", 18) = 18 executing program [pid 6644] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6644] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60}, NULL, 8) = 0 [pid 6644] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6644] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c68000 [pid 6644] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6644] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6643] <... write resumed>) = 524288 [pid 6644] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0}ci2-upstream-fs/strace-static-x86_64: Process 6646 attached [pid 6646] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6643] munmap(0x7fef8c868000, 138412032 [pid 6644] <... clone3 resumed> => {parent_tid=[6646]}, 88) = 6646 [pid 6637] <... sendfile resumed>) = 204800 [pid 6646] <... rseq resumed>) = 0 [pid 6645] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6644] rt_sigprocmask(SIG_SETMASK, [] [pid 6643] <... munmap resumed>) = 0 [pid 6637] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6646] set_robust_list(0x7fef94c889a0, 24 [pid 6644] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6646] <... set_robust_list resumed>) = 0 [pid 6644] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6637] <... futex resumed>) = ? [pid 6634] <... futex resumed>) = ? [pid 6646] rt_sigprocmask(SIG_SETMASK, [] [pid 6645] +++ killed by SIGBUS +++ [pid 6644] <... futex resumed>) = 0 [pid 6643] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6637] +++ killed by SIGBUS +++ [pid 6646] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6644] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6646] memfd_create("syzkaller", 0 [pid 6643] <... openat resumed>) = 4 [ 131.184005][ T5614] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 131.219912][ T6645] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 131.220109][ T6645] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 200 with error 28 [pid 6646] <... memfd_create resumed>) = 3 [pid 6646] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6643] ioctl(4, LOOP_SET_FD, 3 [pid 6634] +++ killed by SIGBUS +++ [pid 6646] <... mmap resumed>) = 0x7fef8c868000 [pid 5610] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6634, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5610] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 6646] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5610] <... restart_syscall resumed>) = 0 [pid 6643] <... ioctl resumed>) = 0 [pid 6643] close(3) = 0 [pid 6643] close(4) = 0 [pid 6643] mkdir("./file1", 0777 [pid 5610] umount2("./39", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5610] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5610] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5610] getdents64(3, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5610] umount2("./39/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6646] <... write resumed>) = 524288 [pid 6643] <... mkdir resumed>) = 0 [pid 5614] <... umount2 resumed>) = 0 [pid 5611] <... umount2 resumed>) = 0 [pid 6643] mount("/dev/loop3", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5611] umount2("./40/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5614] umount2("./39/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6646] munmap(0x7fef8c868000, 138412032 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] newfstatat(AT_FDCWD, "./40/file1" [pid 6646] <... munmap resumed>) = 0 [pid 5614] newfstatat(AT_FDCWD, "./39/file1" [pid 5611] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] umount2("./40/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5614] umount2("./39/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] openat(AT_FDCWD, "./40/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6646] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5614] openat(AT_FDCWD, "./39/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5611] <... openat resumed>) = 4 [ 131.220137][ T6645] EXT4-fs (loop1): This should not happen!! Data will be lost [ 131.220137][ T6645] [ 131.220151][ T6645] EXT4-fs (loop1): Total free blocks count 0 [ 131.220163][ T6645] EXT4-fs (loop1): Free/Dirty block details [ 131.220176][ T6645] EXT4-fs (loop1): free_blocks=20480 [ 131.220198][ T6645] EXT4-fs (loop1): dirty_blocks=208 [ 131.220210][ T6645] EXT4-fs (loop1): Block reservation details [ 131.220221][ T6645] EXT4-fs (loop1): i_reserved_data_blocks=13 [ 131.276785][ T6643] loop3: detected capacity change from 0 to 1024 [pid 6646] <... openat resumed>) = 4 [pid 5614] <... openat resumed>) = 4 [pid 5611] fstat(4 [pid 6646] ioctl(4, LOOP_SET_FD, 3 [pid 5614] fstat(4 [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6646] <... ioctl resumed>) = 0 [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5611] getdents64(4, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5611] getdents64(4 [pid 5614] getdents64(4 [pid 6646] close(3 [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6646] <... close resumed>) = 0 [pid 5614] getdents64(4 [pid 5611] close(4 [pid 6646] close(4 [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5611] <... close resumed>) = 0 [pid 6646] <... close resumed>) = 0 [pid 5614] close(4 [pid 5611] rmdir("./40/file1" [pid 6646] mkdir("./file1", 0777 [pid 5614] <... close resumed>) = 0 [pid 6646] <... mkdir resumed>) = 0 [pid 5614] rmdir("./39/file1" [pid 5611] <... rmdir resumed>) = 0 [pid 5611] umount2("./40/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5611] newfstatat(AT_FDCWD, "./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6646] mount("/dev/loop0", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5611] unlink("./40/binderfs") = 0 [pid 5611] getdents64(3, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5611] close(3) = 0 [pid 5611] rmdir("./40") = 0 [pid 5614] <... rmdir resumed>) = 0 [pid 5614] umount2("./39/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5611] mkdir("./41", 0777 [pid 6643] <... mount resumed>) = 0 [pid 5614] newfstatat(AT_FDCWD, "./39/binderfs" [pid 6643] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5614] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6643] <... openat resumed>) = 3 [pid 5614] unlink("./39/binderfs") = 0 [pid 6643] chdir("./file1" [pid 5614] getdents64(3 [pid 5611] <... mkdir resumed>) = 0 [pid 6643] <... chdir resumed>) = 0 [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6643] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5614] close(3 [pid 6643] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5614] <... close resumed>) = 0 [pid 5614] rmdir("./39" [pid 6643] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... rmdir resumed>) = 0 [pid 6643] <... futex resumed>) = 1 [pid 6642] <... futex resumed>) = 0 [pid 6643] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6642] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6642] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] mkdir("./40", 0777) = 0 [ 131.330924][ T6646] loop0: detected capacity change from 0 to 1024 [ 131.357651][ T5610] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 5614] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6643] <... openat resumed>) = 4 [pid 5611] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5614] <... openat resumed>) = 3 [pid 5614] ioctl(3, LOOP_CLR_FD) = 0 [pid 5614] close(3 [pid 5611] <... openat resumed>) = 3 [pid 5611] ioctl(3, LOOP_CLR_FD) = 0 [pid 5611] close(3 [pid 6643] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6642] <... futex resumed>) = 0 [pid 6643] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6642] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6643] <... openat resumed>) = 5 [pid 6642] <... futex resumed>) = 0 [pid 5614] <... close resumed>) = 0 [pid 5611] <... close resumed>) = 0 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5611] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5611] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5614] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6642] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6643] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6642] <... futex resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6652 attached ci2-upstream-fs/strace-static-x86_64: Process 6651 attached [pid 6646] <... mount resumed>) = 0 [pid 6643] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6642] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6651 [pid 5610] <... umount2 resumed>) = 0 [pid 6651] set_robust_list(0x5555748a66e0, 24 [pid 6646] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6651] <... set_robust_list resumed>) = 0 [pid 6646] <... openat resumed>) = 3 [pid 6643] <... openat resumed>) = 6 [pid 6642] <... futex resumed>) = 0 [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 5611] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6652 [pid 5610] umount2("./39/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6652] set_robust_list(0x5555748a66e0, 24 [pid 6651] rt_sigprocmask(SIG_SETMASK, [] [pid 6646] chdir("./file1" [ 131.380631][ T37] audit: type=1800 audit(1785844661.774:204): pid=6643 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop3" ino=15 res=0 errno=0 [pid 6643] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6642] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6652] <... set_robust_list resumed>) = 0 [pid 6651] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6646] <... chdir resumed>) = 0 [pid 6643] <... futex resumed>) = 0 [pid 6642] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5611] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6652] rt_sigprocmask(SIG_SETMASK, [] [pid 6651] chdir("./40" [pid 6646] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6643] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6652] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6651] <... chdir resumed>) = 0 [pid 6646] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6643] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6642] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] newfstatat(AT_FDCWD, "./39/file1" [pid 6652] chdir("./41" [pid 6651] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6646] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6643] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6642] <... futex resumed>) = 0 [pid 5610] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6652] <... chdir resumed>) = 0 [pid 6651] <... prctl resumed>) = 0 [pid 6646] <... futex resumed>) = 1 [pid 6644] <... futex resumed>) = 0 [pid 6643] <... mmap resumed>) = 0x200000000000 [pid 6642] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] umount2("./39/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6652] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6651] setpgid(0, 0 [pid 6646] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6644] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6643] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6642] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6652] <... prctl resumed>) = 0 [pid 6651] <... setpgid resumed>) = 0 [pid 6646] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6644] <... futex resumed>) = 0 [pid 6643] <... futex resumed>) = 0 [pid 6642] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6652] setpgid(0, 0 [pid 6651] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6646] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6644] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6643] sendfile(4, 5, NULL, 553647746 [pid 6642] <... futex resumed>) = 0 [pid 5610] openat(AT_FDCWD, "./39/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6652] <... setpgid resumed>) = 0 [pid 6651] <... openat resumed>) = 3 [pid 5610] <... openat resumed>) = 4 [pid 5610] fstat(4 [pid 6651] write(3, "1000", 4 [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6651] <... write resumed>) = 4 [pid 5610] getdents64(4 [pid 6651] close(3 [pid 6652] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6651] <... close resumed>) = 0 [pid 6642] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6651] symlink("/dev/binderfs", "./binderfs" [pid 5610] getdents64(4 [pid 6652] <... openat resumed>) = 3 [pid 6651] <... symlink resumed>) = 0 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5610] close(4 [pid 6652] write(3, "1000", 4 [pid 6651] write(1, "executing program\n", 18 [pid 5610] <... close resumed>) = 0 [pid 6651] <... write resumed>) = 18 executing program [pid 5610] rmdir("./39/file1" [pid 6652] <... write resumed>) = 4 [pid 6651] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... rmdir resumed>) = 0 [pid 6652] close(3) = 0 [pid 6651] <... futex resumed>) = 0 [pid 5610] umount2("./39/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6651] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6652] symlink("/dev/binderfs", "./binderfs" [pid 6651] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6646] <... openat resumed>) = 4 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6652] <... symlink resumed>) = 0 [pid 6652] write(1, "executing program\n", 18) = 18 [pid 6652] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6646] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6652] <... futex resumed>) = 0 executing program [pid 6646] <... futex resumed>) = 1 [pid 6644] <... futex resumed>) = 0 [pid 6652] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6651] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6646] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6644] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] newfstatat(AT_FDCWD, "./39/binderfs" [pid 6652] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6651] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6646] <... openat resumed>) = 5 [pid 6644] <... futex resumed>) = 0 [pid 5610] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6652] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6644] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6651] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6646] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6644] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6642] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6651] <... mmap resumed>) = 0x7fef94c68000 [pid 5610] unlink("./39/binderfs" [pid 6652] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6646] <... futex resumed>) = 0 [pid 6644] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6642] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6652] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6646] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6642] <... futex resumed>) = 0 [pid 6652] <... mmap resumed>) = 0x7fef94c68000 [pid 6646] <... openat resumed>) = 6 [pid 6644] <... futex resumed>) = 0 [pid 6642] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6652] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6646] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6644] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6642] <... mmap resumed>) = 0x7fef94c47000 [pid 6652] <... mprotect resumed>) = 0 [pid 6646] <... futex resumed>) = 0 [pid 6644] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6642] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6652] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6651] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6646] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6644] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6642] <... mprotect resumed>) = 0 [pid 6652] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6651] <... mprotect resumed>) = 0 [pid 6646] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6644] <... futex resumed>) = 0 [pid 6642] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6652] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6651] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6646] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6644] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6642] <... rt_sigprocmask resumed>, [], 8) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6653 attached [pid 6646] <... mmap resumed>) = 0x200000000000 [pid 6642] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6651] <... rt_sigprocmask resumed>, [], 8) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6654 attached [pid 6652] <... clone3 resumed> => {parent_tid=[6653]}, 88) = 6653 [pid 6651] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6646] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... unlink resumed>) = 0 [pid 6652] rt_sigprocmask(SIG_SETMASK, [] [pid 6646] <... futex resumed>) = 1 [pid 6644] <... futex resumed>) = 0 [pid 6642] <... clone3 resumed> => {parent_tid=[6654]}, 88) = 6654 ci2-upstream-fs/strace-static-x86_64: Process 6655 attached [pid 6653] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6652] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6646] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6644] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6642] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] getdents64(3 [pid 6655] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6654] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6642] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6644] <... futex resumed>) = 0 [ 131.526449][ T37] audit: type=1800 audit(1785844661.924:205): pid=6646 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop0" ino=15 res=0 errno=0 [pid 6655] <... rseq resumed>) = 0 [pid 6654] <... rseq resumed>) = 0 [pid 6653] <... rseq resumed>) = 0 [pid 6652] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6646] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6644] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6642] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6651] <... clone3 resumed> => {parent_tid=[6655]}, 88) = 6655 [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6655] set_robust_list(0x7fef94c889a0, 24 [pid 6654] set_robust_list(0x7fef94c679a0, 24 [pid 6653] set_robust_list(0x7fef94c889a0, 24 [pid 6652] <... futex resumed>) = 0 [pid 6646] sendfile(4, 5, NULL, 553647746 [pid 6642] <... futex resumed>) = 0 [pid 6655] <... set_robust_list resumed>) = 0 [pid 6654] <... set_robust_list resumed>) = 0 [pid 6653] <... set_robust_list resumed>) = 0 [pid 6652] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6651] rt_sigprocmask(SIG_SETMASK, [] [pid 6642] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] close(3 [pid 6655] rt_sigprocmask(SIG_SETMASK, [] [pid 6654] rt_sigprocmask(SIG_SETMASK, [] [pid 6653] rt_sigprocmask(SIG_SETMASK, [] [pid 6651] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6655] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6654] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6653] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6651] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... close resumed>) = 0 [pid 6653] memfd_create("syzkaller", 0 [pid 6651] <... futex resumed>) = 0 [pid 5610] rmdir("./39" [pid 6655] memfd_create("syzkaller", 0 [pid 6653] <... memfd_create resumed>) = 3 [pid 6651] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6655] <... memfd_create resumed>) = 3 [pid 6653] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5610] <... rmdir resumed>) = 0 [pid 6653] <... mmap resumed>) = 0x7fef8c868000 [pid 6655] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fef8c868000 [pid 5610] mkdir("./40", 0777) = 0 [pid 6653] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6655] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5610] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5610] ioctl(3, LOOP_CLR_FD [pid 6654] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6644] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6642] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5610] <... ioctl resumed>) = 0 [ 131.602691][ T6654] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 131.606588][ T6654] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 284 with error 28 [ 131.606620][ T6654] EXT4-fs (loop3): This should not happen!! Data will be lost [ 131.606620][ T6654] [ 131.606634][ T6654] EXT4-fs (loop3): Total free blocks count 0 [ 131.606652][ T6654] EXT4-fs (loop3): Free/Dirty block details [pid 6644] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] close(3 [pid 6644] <... futex resumed>) = 0 [pid 6644] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c47000 [pid 6643] <... sendfile resumed>) = ? [pid 6654] +++ killed by SIGBUS +++ [pid 6643] +++ killed by SIGBUS +++ [pid 6644] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6655] <... write resumed>) = 524288 [pid 6644] <... mprotect resumed>) = 0 [pid 6644] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6655] munmap(0x7fef8c868000, 138412032 [pid 6644] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6642] +++ killed by SIGBUS +++ [pid 6653] <... write resumed>) = 524288 [pid 6644] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5612] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6642, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4 /* 0.04 s */} --- ci2-upstream-fs/strace-static-x86_64: Process 6656 attached [pid 5612] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 6653] munmap(0x7fef8c868000, 138412032 [pid 6644] <... clone3 resumed> => {parent_tid=[6656]}, 88) = 6656 [pid 5612] <... restart_syscall resumed>) = 0 [pid 6656] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6655] <... munmap resumed>) = 0 [pid 6653] <... munmap resumed>) = 0 [pid 6644] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] <... close resumed>) = 0 [pid 6656] <... rseq resumed>) = 0 [pid 6655] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6644] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6644] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] umount2("./41", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6656] set_robust_list(0x7fef94c679a0, 24 [pid 6655] <... openat resumed>) = 4 [pid 6653] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5610] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6656] <... set_robust_list resumed>) = 0 [pid 6655] ioctl(4, LOOP_SET_FD, 3 [pid 6653] <... openat resumed>) = 4 [pid 6644] <... futex resumed>) = 0 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6656] rt_sigprocmask(SIG_SETMASK, [] [pid 6653] ioctl(4, LOOP_SET_FD, 3 [ 131.606664][ T6654] EXT4-fs (loop3): free_blocks=20480 [ 131.606685][ T6654] EXT4-fs (loop3): dirty_blocks=288 [ 131.606697][ T6654] EXT4-fs (loop3): Block reservation details [ 131.606707][ T6654] EXT4-fs (loop3): i_reserved_data_blocks=18 [pid 6644] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6656] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5612] <... openat resumed>) = 3 ci2-upstream-fs/strace-static-x86_64: Process 6657 attached [pid 5612] fstat(3 [pid 6657] set_robust_list(0x5555748a66e0, 24) = 0 [pid 6657] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6657] chdir("./40") = 0 [pid 6657] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6657] setpgid(0, 0) = 0 [pid 6657] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6655] <... ioctl resumed>) = 0 [pid 6653] <... ioctl resumed>) = 0 [pid 6657] <... openat resumed>) = 3 [pid 6655] close(3 [pid 6653] close(3 [pid 5610] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6657 [pid 6655] <... close resumed>) = 0 [pid 6653] <... close resumed>) = 0 [pid 5610] rt_sigprocmask(SIG_SETMASK, [] [pid 6657] write(3, "1000", 4 [pid 6655] close(4 [pid 6653] close(4 [pid 5610] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6657] <... write resumed>) = 4 [pid 6655] <... close resumed>) = 0 [pid 6653] <... close resumed>) = 0 [pid 6657] close(3 [pid 6655] mkdir("./file1", 0777 [pid 6653] mkdir("./file1", 0777 [pid 6657] <... close resumed>) = 0 [pid 6655] <... mkdir resumed>) = 0 [pid 6653] <... mkdir resumed>) = 0 [pid 6644] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6657] symlink("/dev/binderfs", "./binderfs" [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6657] <... symlink resumed>) = 0 [pid 6656] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6655] mount("/dev/loop4", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6653] mount("/dev/loop2", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5612] getdents64(3 executing program [ 131.726689][ T6646] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 131.727470][ T6655] loop4: detected capacity change from 0 to 1024 [ 131.731960][ T6653] loop2: detected capacity change from 0 to 1024 [ 131.733061][ T6656] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 336 with error 28 [ 131.733088][ T6656] EXT4-fs (loop0): This should not happen!! Data will be lost [ 131.733088][ T6656] [pid 6657] write(1, "executing program\n", 18) = 18 [pid 6657] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6657] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60}, NULL, 8) = 0 [pid 6657] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6657] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6657] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c68000 [pid 6657] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6657] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6657] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6656] +++ killed by SIGBUS +++ ci2-upstream-fs/strace-static-x86_64: Process 6658 attached [pid 6658] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6657] <... clone3 resumed> => {parent_tid=[6658]}, 88) = 6658 [pid 6658] <... rseq resumed>) = 0 [pid 6657] rt_sigprocmask(SIG_SETMASK, [] [pid 6658] set_robust_list(0x7fef94c889a0, 24 [pid 6657] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6658] <... set_robust_list resumed>) = 0 [pid 6657] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6658] rt_sigprocmask(SIG_SETMASK, [] [pid 6657] <... futex resumed>) = 0 [pid 6646] <... sendfile resumed>) = ? [pid 5612] umount2("./41/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6658] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6657] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6658] memfd_create("syzkaller", 0) = 3 [pid 6658] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fef8c868000 [pid 6646] +++ killed by SIGBUS +++ [pid 6644] +++ killed by SIGBUS +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6644, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5609] umount2("./40", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3 [pid 6658] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] getdents64(3, 0x5555748a7790 /* 4 entries */, 32768) = 112 [ 131.733101][ T6656] EXT4-fs (loop0): Total free blocks count 0 [ 131.733113][ T6656] EXT4-fs (loop0): Free/Dirty block details [ 131.733124][ T6656] EXT4-fs (loop0): free_blocks=20480 [ 131.733137][ T6656] EXT4-fs (loop0): dirty_blocks=336 [ 131.733149][ T6656] EXT4-fs (loop0): Block reservation details [ 131.733160][ T6656] EXT4-fs (loop0): i_reserved_data_blocks=21 [pid 5609] umount2("./40/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6658] <... write resumed>) = 524288 [pid 6658] munmap(0x7fef8c868000, 138412032) = 0 [pid 6658] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6658] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6658] close(3) = 0 [pid 6658] close(4) = 0 [ 131.847150][ T177] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 284 with max blocks 4 with error 28 [ 131.847187][ T177] EXT4-fs (loop3): This should not happen!! Data will be lost [ 131.847187][ T177] [ 131.853815][ T5612] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6658] mkdir("./file1", 0777) = 0 [pid 6655] <... mount resumed>) = 0 [pid 6658] mount("/dev/loop1", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6655] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6653] <... mount resumed>) = 0 [pid 6655] <... openat resumed>) = 3 [pid 6653] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6655] chdir("./file1") = 0 [pid 6653] chdir("./file1" [pid 6655] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6653] <... chdir resumed>) = 0 [pid 6655] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5612] <... umount2 resumed>) = 0 [pid 6653] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5612] umount2("./41/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6655] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6653] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5612] newfstatat(AT_FDCWD, "./41/file1" [pid 6655] <... futex resumed>) = 1 [pid 6653] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6651] <... futex resumed>) = 0 [pid 5609] <... umount2 resumed>) = 0 [pid 6655] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6653] <... futex resumed>) = 1 [pid 6652] <... futex resumed>) = 0 [pid 6651] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6655] <... openat resumed>) = 4 [pid 6653] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6652] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6651] <... futex resumed>) = 0 [pid 5612] umount2("./41/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] umount2("./40/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6655] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6655] <... futex resumed>) = 0 [pid 5612] openat(AT_FDCWD, "./41/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6655] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6652] <... futex resumed>) = 0 [pid 6651] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... openat resumed>) = 4 [pid 6652] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6651] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 131.894843][ T6658] loop1: detected capacity change from 0 to 1024 [ 131.914189][ T5609] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 5612] fstat(4 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6658] <... mount resumed>) = 0 [pid 6653] <... openat resumed>) = 4 [pid 6651] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5612] getdents64(4 [pid 5609] newfstatat(AT_FDCWD, "./40/file1" [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5609] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5612] getdents64(4 [pid 5609] umount2("./40/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6651] <... futex resumed>) = 1 [pid 5612] close(4 [pid 5609] openat(AT_FDCWD, "./40/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6658] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6653] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6651] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6652] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6655] <... futex resumed>) = 0 [pid 5612] <... close resumed>) = 0 [pid 5609] <... openat resumed>) = 4 [pid 6655] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6653] <... futex resumed>) = 0 [pid 6652] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] rmdir("./41/file1" [pid 5609] fstat(4 [pid 6658] <... openat resumed>) = 3 [pid 6655] <... openat resumed>) = 5 [pid 6653] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6652] <... futex resumed>) = 0 [pid 5612] <... rmdir resumed>) = 0 [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6658] chdir("./file1" [pid 6655] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6653] <... openat resumed>) = 5 [pid 6652] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] umount2("./41/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] getdents64(4 [pid 6658] <... chdir resumed>) = 0 [pid 6655] <... futex resumed>) = 1 [pid 6653] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6652] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6651] <... futex resumed>) = 0 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6658] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6655] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6653] <... futex resumed>) = 0 [pid 6652] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6651] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] newfstatat(AT_FDCWD, "./41/binderfs" [pid 5609] getdents64(4 [pid 6658] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6655] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6653] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6652] <... futex resumed>) = 0 [pid 6651] <... futex resumed>) = 0 [pid 5612] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6658] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6655] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6653] <... openat resumed>) = 6 [pid 6652] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6651] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] unlink("./41/binderfs" [pid 5609] close(4 [pid 6658] <... futex resumed>) = 1 [pid 6657] <... futex resumed>) = 0 [pid 6655] <... openat resumed>) = 6 [pid 6653] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... close resumed>) = 0 [pid 6658] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [ 131.963512][ T37] audit: type=1800 audit(1785844662.364:206): pid=6655 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 131.982284][ T37] audit: type=1800 audit(1785844662.384:207): pid=6653 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop2" ino=15 res=0 errno=0 [pid 6657] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... unlink resumed>) = 0 [pid 6657] <... futex resumed>) = 0 [pid 6653] <... futex resumed>) = 1 [pid 6652] <... futex resumed>) = 0 [pid 5609] rmdir("./40/file1" [pid 6658] <... openat resumed>) = 4 [pid 6657] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6655] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6653] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6652] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] getdents64(3 [pid 5609] <... rmdir resumed>) = 0 [pid 6658] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6655] <... futex resumed>) = 1 [pid 6653] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6652] <... futex resumed>) = 0 [pid 6651] <... futex resumed>) = 0 [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6658] <... futex resumed>) = 1 [pid 6657] <... futex resumed>) = 0 [pid 6655] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6653] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6652] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6651] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] close(3 [pid 6658] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6657] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6655] <... mmap resumed>) = 0x200000000000 [pid 6651] <... futex resumed>) = 0 [pid 5609] umount2("./40/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6658] <... openat resumed>) = 5 [pid 6657] <... futex resumed>) = 0 [pid 6651] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... close resumed>) = 0 [pid 6658] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6657] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6653] <... mmap resumed>) = 0x200000000000 [pid 5612] rmdir("./41" [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6658] <... futex resumed>) = 0 [pid 6657] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6658] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6657] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... rmdir resumed>) = 0 [pid 5609] newfstatat(AT_FDCWD, "./40/binderfs" [pid 6658] <... openat resumed>) = 6 [pid 6657] <... futex resumed>) = 0 [pid 5609] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./40/binderfs" [pid 6657] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] mkdir("./42", 0777 [pid 5609] <... unlink resumed>) = 0 [pid 6658] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... mkdir resumed>) = 0 [pid 6658] <... futex resumed>) = 1 [pid 6657] <... futex resumed>) = 0 [pid 6653] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] getdents64(3 [pid 6658] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6657] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6653] <... futex resumed>) = 1 [pid 6652] <... futex resumed>) = 0 [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6657] <... futex resumed>) = 0 [pid 6658] <... mmap resumed>) = 0x200000000000 [pid 6657] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6653] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6652] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5609] close(3 [pid 6658] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6653] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6652] <... futex resumed>) = 0 [pid 5612] <... openat resumed>) = 3 [pid 5609] <... close resumed>) = 0 [pid 6658] <... futex resumed>) = 1 [pid 6657] <... futex resumed>) = 0 [pid 6653] sendfile(4, 5, NULL, 553647746 [pid 6652] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] ioctl(3, LOOP_CLR_FD [pid 5609] rmdir("./40" [pid 6658] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6657] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6658] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5609] <... rmdir resumed>) = 0 [pid 6658] sendfile(4, 5, NULL, 553647746 [pid 6657] <... futex resumed>) = 0 [pid 5612] <... ioctl resumed>) = 0 [pid 6657] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6655] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6651] <... futex resumed>) = 0 [pid 5612] close(3 [pid 5609] mkdir("./41", 0777 [pid 6655] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6651] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6655] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5609] <... mkdir resumed>) = 0 [pid 6655] sendfile(4, 5, NULL, 553647746 [pid 6651] <... futex resumed>) = 0 [pid 6651] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = 0 [pid 5609] close(3 [pid 5612] <... close resumed>) = 0 [pid 5609] <... close resumed>) = 0 [pid 5612] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5612] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5612] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5609] <... rt_sigprocmask resumed>, [], 8) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6665 attached [ 132.055924][ T37] audit: type=1800 audit(1785844662.454:208): pid=6658 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop1" ino=15 res=0 errno=0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6652] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5612] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6665 [pid 6657] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5612] rt_sigprocmask(SIG_SETMASK, [] [pid 6665] set_robust_list(0x5555748a66e0, 24 [pid 6657] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6652] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... rt_sigprocmask resumed>, NULL, 8) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6666 attached [pid 6665] <... set_robust_list resumed>) = 0 [pid 6657] <... futex resumed>) = 0 [pid 6652] <... futex resumed>) = 0 [pid 6666] set_robust_list(0x5555748a66e0, 24 [pid 6665] rt_sigprocmask(SIG_SETMASK, [] [pid 6657] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6652] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6651] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5609] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6666 [pid 6666] <... set_robust_list resumed>) = 0 [pid 6665] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6657] <... mmap resumed>) = 0x7fef94c47000 [pid 6652] <... mmap resumed>) = 0x7fef94c47000 [pid 6666] rt_sigprocmask(SIG_SETMASK, [] [pid 6665] chdir("./42" [pid 6657] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6652] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6651] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 6666] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6665] <... chdir resumed>) = 0 [pid 6657] <... mprotect resumed>) = 0 [pid 6665] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6652] <... mprotect resumed>) = 0 [pid 6651] <... futex resumed>) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6665] <... prctl resumed>) = 0 [pid 6651] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6666] chdir("./41" [pid 6665] setpgid(0, 0 [pid 6652] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6651] <... mmap resumed>) = 0x7fef94c47000 [pid 6657] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6666] <... chdir resumed>) = 0 [pid 6665] <... setpgid resumed>) = 0 [pid 6657] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6652] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6651] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6666] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6665] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6657] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6652] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6651] <... mprotect resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6667 attached [pid 6666] <... prctl resumed>) = 0 [pid 6665] <... openat resumed>) = 3 ci2-upstream-fs/strace-static-x86_64: Process 6668 attached [pid 6667] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6666] setpgid(0, 0 [pid 6665] write(3, "1000", 4 [pid 6657] <... clone3 resumed> => {parent_tid=[6667]}, 88) = 6667 [pid 6652] <... clone3 resumed> => {parent_tid=[6668]}, 88) = 6668 [pid 6651] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6668] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6667] <... rseq resumed>) = 0 [pid 6666] <... setpgid resumed>) = 0 [pid 6665] <... write resumed>) = 4 [pid 6657] rt_sigprocmask(SIG_SETMASK, [] [pid 6652] rt_sigprocmask(SIG_SETMASK, [] [pid 6651] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6668] <... rseq resumed>) = 0 [pid 6667] set_robust_list(0x7fef94c679a0, 24 [pid 6666] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6665] close(3 [pid 6657] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6652] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6668] set_robust_list(0x7fef94c679a0, 24 [pid 6667] <... set_robust_list resumed>) = 0 [pid 6665] <... close resumed>) = 0 [pid 6657] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6652] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6651] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 6669 attached [pid 6668] <... set_robust_list resumed>) = 0 [pid 6667] rt_sigprocmask(SIG_SETMASK, [] [pid 6665] symlink("/dev/binderfs", "./binderfs" [pid 6657] <... futex resumed>) = 0 [pid 6652] <... futex resumed>) = 0 [pid 6669] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6668] rt_sigprocmask(SIG_SETMASK, [] [pid 6665] <... symlink resumed>) = 0 [pid 6657] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6669] <... rseq resumed>) = 0 [pid 6668] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6667] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6665] write(1, "executing program\n", 18 [pid 6652] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6651] <... clone3 resumed> => {parent_tid=[6669]}, 88) = 6669 executing program [pid 6669] set_robust_list(0x7fef94c679a0, 24 [pid 6665] <... write resumed>) = 18 [pid 6669] <... set_robust_list resumed>) = 0 [pid 6665] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6651] rt_sigprocmask(SIG_SETMASK, [] [pid 6669] rt_sigprocmask(SIG_SETMASK, [] [pid 6665] <... futex resumed>) = 0 [pid 6651] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6669] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6665] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6651] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6666] <... openat resumed>) = 3 [pid 6665] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6651] <... futex resumed>) = 0 [pid 6666] write(3, "1000", 4 [pid 6665] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6651] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6666] <... write resumed>) = 4 [pid 6665] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6666] close(3 [pid 6665] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6666] <... close resumed>) = 0 [pid 6665] <... mmap resumed>) = 0x7fef94c68000 [pid 6657] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6666] symlink("/dev/binderfs", "./binderfs" [pid 6665] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6666] <... symlink resumed>) = 0 [pid 6665] <... mprotect resumed>) = 0 [ 132.204502][ T6668] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 132.205609][ T6667] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 132.207676][ T6667] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 368 with error 28 [ 132.207705][ T6667] EXT4-fs (loop1): This should not happen!! Data will be lost [pid 6666] write(1, "executing program\n", 18 [pid 6665] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6652] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6665] <... rt_sigprocmask resumed>, [], 8) = 0 executing program [pid 6667] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6666] <... write resumed>) = 18 [pid 6665] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6658] <... sendfile resumed>) = 380928 [pid 6658] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000ci2-upstream-fs/strace-static-x86_64: Process 6670 attached [pid 6666] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6658] <... futex resumed>) = 0 [pid 6670] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6666] <... futex resumed>) = 0 [pid 6665] <... clone3 resumed> => {parent_tid=[6670]}, 88) = 6670 [pid 6658] +++ killed by SIGBUS +++ [pid 6666] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6665] rt_sigprocmask(SIG_SETMASK, [] [pid 6670] <... rseq resumed>) = 0 [pid 6668] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6666] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6665] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6653] <... sendfile resumed>) = 532480 [pid 6651] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6670] set_robust_list(0x7fef94c889a0, 24 [pid 6666] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6665] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6670] <... set_robust_list resumed>) = 0 [pid 6667] +++ killed by SIGBUS +++ [pid 6666] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6665] <... futex resumed>) = 0 [pid 6657] +++ killed by SIGBUS +++ [ 132.207705][ T6667] [ 132.207719][ T6667] EXT4-fs (loop1): Total free blocks count 0 [ 132.207731][ T6667] EXT4-fs (loop1): Free/Dirty block details [ 132.207744][ T6667] EXT4-fs (loop1): free_blocks=20480 [ 132.207757][ T6667] EXT4-fs (loop1): dirty_blocks=368 [ 132.207769][ T6667] EXT4-fs (loop1): Block reservation details [ 132.207781][ T6667] EXT4-fs (loop1): i_reserved_data_blocks=23 [ 132.208382][ T6668] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 520 with error 28 [pid 6670] rt_sigprocmask(SIG_SETMASK, [] [pid 6666] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6665] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6653] +++ killed by SIGBUS +++ [pid 6670] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6666] <... mmap resumed>) = 0x7fef94c68000 [pid 6655] <... sendfile resumed>) = 524288 [pid 6670] memfd_create("syzkaller", 0 [pid 6666] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 5610] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6657, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6670] <... memfd_create resumed>) = 3 [pid 6669] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6668] +++ killed by SIGBUS +++ [pid 6666] <... mprotect resumed>) = 0 [pid 6655] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6652] +++ killed by SIGBUS +++ [pid 5610] umount2("./40", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6670] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6666] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6655] <... futex resumed>) = 0 [pid 6670] <... mmap resumed>) = 0x7fef8c868000 [pid 6666] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5611] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6652, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6669] +++ killed by SIGBUS +++ [pid 6666] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6655] +++ killed by SIGBUS +++ ci2-upstream-fs/strace-static-x86_64: Process 6671 attached [pid 5610] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6671] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6666] <... clone3 resumed> => {parent_tid=[6671]}, 88) = 6671 [pid 5610] <... openat resumed>) = 3 [pid 6666] rt_sigprocmask(SIG_SETMASK, [] [pid 6651] +++ killed by SIGBUS +++ [pid 5611] umount2("./41", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] fstat(3 [pid 6666] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6666] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6651, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] getdents64(3 [pid 6671] <... rseq resumed>) = 0 [pid 6670] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6666] <... futex resumed>) = 0 [pid 5611] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6666] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [ 132.208407][ T6668] EXT4-fs (loop2): This should not happen!! Data will be lost [ 132.208407][ T6668] [ 132.208421][ T6668] EXT4-fs (loop2): Total free blocks count 0 [ 132.208433][ T6668] EXT4-fs (loop2): Free/Dirty block details [ 132.208443][ T6668] EXT4-fs (loop2): free_blocks=20480 [ 132.208456][ T6668] EXT4-fs (loop2): dirty_blocks=528 [ 132.208468][ T6668] EXT4-fs (loop2): Block reservation details [ 132.208478][ T6668] EXT4-fs (loop2): i_reserved_data_blocks=33 [pid 5611] <... openat resumed>) = 3 [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6671] set_robust_list(0x7fef94c889a0, 24 [pid 5611] fstat(3 [pid 5610] umount2("./40/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6671] <... set_robust_list resumed>) = 0 [pid 5611] getdents64(3, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5611] umount2("./41/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5614] umount2("./40", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6671] rt_sigprocmask(SIG_SETMASK, [] [pid 6670] <... write resumed>) = 524288 [pid 5614] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5614] fstat(3 [pid 6670] munmap(0x7fef8c868000, 138412032 [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6671] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6670] <... munmap resumed>) = 0 [pid 5614] getdents64(3 [pid 6671] memfd_create("syzkaller", 0 [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6670] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5614] umount2("./40/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6670] <... openat resumed>) = 4 [pid 6670] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6670] close(3) = 0 [pid 6670] close(4) = 0 [ 132.250032][ T6669] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 132.250236][ T6669] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 508 with error 28 [ 132.250260][ T6669] EXT4-fs (loop4): This should not happen!! Data will be lost [ 132.250260][ T6669] [ 132.250273][ T6669] EXT4-fs (loop4): Total free blocks count 0 [ 132.250285][ T6669] EXT4-fs (loop4): Free/Dirty block details [ 132.250297][ T6669] EXT4-fs (loop4): free_blocks=20480 [pid 6670] mkdir("./file1", 0777) = 0 [pid 6671] <... memfd_create resumed>) = 3 [pid 6670] mount("/dev/loop3", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6671] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fef8c868000 [ 132.250311][ T6669] EXT4-fs (loop4): dirty_blocks=512 [ 132.250322][ T6669] EXT4-fs (loop4): Block reservation details [ 132.250333][ T6669] EXT4-fs (loop4): i_reserved_data_blocks=32 [ 132.382505][ T3414] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 368 with max blocks 4 with error 28 [ 132.382535][ T3414] EXT4-fs (loop1): This should not happen!! Data will be lost [ 132.382535][ T3414] [ 132.384029][ T5610] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 5610] <... umount2 resumed>) = 0 [pid 5610] umount2("./40/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5610] newfstatat(AT_FDCWD, "./40/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5610] umount2("./40/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5610] openat(AT_FDCWD, "./40/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5610] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5610] getdents64(4, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5610] getdents64(4, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5610] close(4) = 0 [pid 5610] rmdir("./40/file1") = 0 [pid 5611] <... umount2 resumed>) = 0 [pid 5610] umount2("./40/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5611] umount2("./41/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] newfstatat(AT_FDCWD, "./40/binderfs" [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] newfstatat(AT_FDCWD, "./41/file1" [pid 5610] unlink("./40/binderfs" [pid 5611] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5610] <... unlink resumed>) = 0 [pid 6671] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5611] umount2("./41/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5610] getdents64(3 [pid 5611] openat(AT_FDCWD, "./41/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6671] <... write resumed>) = 524288 [pid 5611] <... openat resumed>) = 4 [pid 5610] close(3 [pid 5611] fstat(4 [pid 5610] <... close resumed>) = 0 [pid 6671] munmap(0x7fef8c868000, 138412032 [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5611] getdents64(4 [pid 5610] rmdir("./40" [pid 6671] <... munmap resumed>) = 0 [pid 6670] <... mount resumed>) = 0 [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5610] <... rmdir resumed>) = 0 [pid 6671] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6670] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5611] getdents64(4 [pid 6671] <... openat resumed>) = 4 [pid 5610] mkdir("./41", 0777 [pid 6671] ioctl(4, LOOP_SET_FD, 3 [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6671] <... ioctl resumed>) = 0 [pid 6670] <... openat resumed>) = 3 [pid 5610] <... mkdir resumed>) = 0 [ 132.405025][ T6670] loop3: detected capacity change from 0 to 1024 [ 132.418636][ T5611] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 132.446193][ T13] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 508 with max blocks 4 with error 28 [ 132.446246][ T13] EXT4-fs (loop4): This should not happen!! Data will be lost [ 132.446246][ T13] [ 132.455951][ T5614] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6671] close(3 [pid 6670] chdir("./file1" [pid 5611] close(4) = 0 [pid 5611] rmdir("./41/file1" [pid 5610] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6671] <... close resumed>) = 0 [pid 6670] <... chdir resumed>) = 0 [pid 5611] <... rmdir resumed>) = 0 [pid 6671] close(4 [pid 6670] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6671] <... close resumed>) = 0 [pid 6670] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5611] umount2("./41/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] <... openat resumed>) = 3 [pid 6671] mkdir("./file1", 0777 [pid 6670] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6671] <... mkdir resumed>) = 0 [pid 6670] <... futex resumed>) = 1 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] ioctl(3, LOOP_CLR_FD [pid 6670] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6671] mount("/dev/loop0", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6665] <... futex resumed>) = 0 [pid 5614] <... umount2 resumed>) = 0 [pid 5611] newfstatat(AT_FDCWD, "./41/binderfs" [pid 5610] <... ioctl resumed>) = 0 [pid 6665] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] umount2("./40/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] close(3 [pid 5611] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6665] <... futex resumed>) = 1 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] unlink("./41/binderfs") = 0 [pid 6665] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] newfstatat(AT_FDCWD, "./40/file1" [pid 6670] <... futex resumed>) = 0 [pid 5611] getdents64(3, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6670] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] close(3 [pid 5614] umount2("./40/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] <... close resumed>) = 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] rmdir("./41" [pid 5614] openat(AT_FDCWD, "./40/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5614] fstat(4 [pid 6670] <... openat resumed>) = 4 [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6670] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... close resumed>) = 0 [pid 6670] <... futex resumed>) = 1 [pid 6670] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6665] <... futex resumed>) = 0 [pid 5614] getdents64(4 [pid 5610] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6665] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6670] <... futex resumed>) = 0 [pid 6665] <... futex resumed>) = 1 ci2-upstream-fs/strace-static-x86_64: Process 6674 attached [pid 6670] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6665] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] getdents64(4 [pid 5611] <... rmdir resumed>) = 0 [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5611] mkdir("./42", 0777 [pid 5614] close(4 [pid 5610] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6674 [pid 6670] <... openat resumed>) = 5 [pid 6670] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... close resumed>) = 0 [pid 5611] <... mkdir resumed>) = 0 [pid 5610] rt_sigprocmask(SIG_SETMASK, [] [pid 6670] <... futex resumed>) = 1 [pid 6665] <... futex resumed>) = 0 [pid 5614] rmdir("./40/file1" [pid 5610] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6670] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6665] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6674] set_robust_list(0x5555748a66e0, 24 [pid 5614] <... rmdir resumed>) = 0 [pid 5611] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6670] <... openat resumed>) = 6 [pid 5611] <... openat resumed>) = 3 [pid 6674] <... set_robust_list resumed>) = 0 [pid 6665] <... futex resumed>) = 0 [pid 5611] ioctl(3, LOOP_CLR_FD [pid 5614] umount2("./40/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] <... ioctl resumed>) = 0 [pid 6674] rt_sigprocmask(SIG_SETMASK, [] [pid 6665] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] close(3 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./40/binderfs" [pid 6674] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6674] chdir("./41" [pid 6670] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6670] <... futex resumed>) = 1 [pid 5614] unlink("./40/binderfs" [pid 6670] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6665] <... futex resumed>) = 0 [pid 6674] <... chdir resumed>) = 0 [pid 6665] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6674] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6670] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6665] <... futex resumed>) = 0 [pid 6670] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6665] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] <... unlink resumed>) = 0 [pid 6674] <... prctl resumed>) = 0 [pid 6671] <... mount resumed>) = 0 [pid 6674] setpgid(0, 0 [pid 6671] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6674] <... setpgid resumed>) = 0 [pid 6670] <... mmap resumed>) = 0x200000000000 [pid 5614] getdents64(3 [pid 6674] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6671] <... openat resumed>) = 3 [pid 6670] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6670] <... futex resumed>) = 1 [pid 6665] <... futex resumed>) = 0 [pid 5614] close(3 [pid 6670] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6674] <... openat resumed>) = 3 [pid 6671] chdir("./file1" [pid 6670] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6665] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... close resumed>) = 0 [ 132.604534][ T37] audit: type=1800 audit(1785844662.994:209): pid=6670 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop3" ino=15 res=0 errno=0 [pid 6671] <... chdir resumed>) = 0 [pid 6670] sendfile(4, 5, NULL, 553647746 [pid 6665] <... futex resumed>) = 0 [pid 5614] rmdir("./40" [pid 6671] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6665] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6671] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5614] <... rmdir resumed>) = 0 [pid 6671] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6666] <... futex resumed>) = 0 [pid 6671] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6666] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6671] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6666] <... futex resumed>) = 0 [pid 6671] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6666] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] mkdir("./41", 0777) = 0 [pid 6674] write(3, "1000", 4) = 4 [pid 6674] close(3 [pid 5614] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5611] <... close resumed>) = 0 [pid 6674] <... close resumed>) = 0 [pid 5614] <... openat resumed>) = 3 [pid 5611] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6674] symlink("/dev/binderfs", "./binderfs" [pid 5614] ioctl(3, LOOP_CLR_FD [pid 5611] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6674] <... symlink resumed>) = 0 [pid 5614] <... ioctl resumed>) = 0 executing program [pid 5611] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6674] write(1, "executing program\n", 18 [pid 6671] <... openat resumed>) = 4 [pid 5614] close(3 [pid 6671] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6671] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6666] <... futex resumed>) = 0 [pid 6671] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6666] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6671] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6666] <... futex resumed>) = 0 [pid 6671] <... openat resumed>) = 5 [pid 6666] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-upstream-fs/strace-static-x86_64: Process 6677 attached [pid 6674] <... write resumed>) = 18 [pid 5611] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6677 [pid 6677] set_robust_list(0x5555748a66e0, 24 [pid 6674] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6671] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] rt_sigprocmask(SIG_SETMASK, [] [pid 6674] <... futex resumed>) = 0 [pid 5611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6677] <... set_robust_list resumed>) = 0 [pid 6674] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6671] <... futex resumed>) = 1 [pid 6666] <... futex resumed>) = 0 [pid 6677] rt_sigprocmask(SIG_SETMASK, [] [pid 6674] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6671] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6666] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6677] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6674] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6671] <... futex resumed>) = 0 [pid 6666] <... futex resumed>) = 1 [pid 6677] chdir("./42" [pid 6674] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6671] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6666] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] <... close resumed>) = 0 [pid 6677] <... chdir resumed>) = 0 [pid 6674] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6671] <... openat resumed>) = 6 [pid 6665] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6674] <... mmap resumed>) = 0x7fef94c68000 [pid 6665] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6665] <... futex resumed>) = 0 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6677] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6674] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6671] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6665] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6674] <... mprotect resumed>) = 0 [pid 6671] <... futex resumed>) = 1 [pid 6666] <... futex resumed>) = 0 [pid 6665] <... mmap resumed>) = 0x7fef94c47000 [pid 6677] <... prctl resumed>) = 0 [pid 6666] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6665] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6677] setpgid(0, 0 [pid 6674] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6677] <... setpgid resumed>) = 0 [pid 6674] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6671] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6666] <... futex resumed>) = 0 [pid 6665] <... mprotect resumed>) = 0 [pid 6677] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6674] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6665] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6666] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-upstream-fs/strace-static-x86_64: Process 6678 attached ci2-upstream-fs/strace-static-x86_64: Process 6679 attached [pid 6677] <... openat resumed>) = 3 [pid 6671] <... mmap resumed>) = 0x200000000000 [pid 6665] <... rt_sigprocmask resumed>, [], 8) = 0 [ 132.670917][ T37] audit: type=1800 audit(1785844663.064:210): pid=6671 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop0" ino=15 res=0 errno=0 [pid 6679] set_robust_list(0x5555748a66e0, 24 [pid 6678] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6677] write(3, "1000", 4 [pid 6674] <... clone3 resumed> => {parent_tid=[6678]}, 88) = 6678 [pid 6671] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6665] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5614] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6679 [pid 6679] <... set_robust_list resumed>) = 0 [pid 6678] <... rseq resumed>) = 0 [pid 6677] <... write resumed>) = 4 [pid 6674] rt_sigprocmask(SIG_SETMASK, []ci2-upstream-fs/strace-static-x86_64: Process 6680 attached , NULL, 8) = 0 [pid 6671] <... futex resumed>) = 1 [pid 6666] <... futex resumed>) = 0 [pid 6679] rt_sigprocmask(SIG_SETMASK, [] [pid 6678] set_robust_list(0x7fef94c889a0, 24 [pid 6677] close(3 [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 6680] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6679] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6678] <... set_robust_list resumed>) = 0 [pid 6677] <... close resumed>) = 0 [pid 6674] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6671] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6666] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6665] <... clone3 resumed> => {parent_tid=[6680]}, 88) = 6680 [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6680] <... rseq resumed>) = 0 [pid 6679] chdir("./41" [pid 6678] rt_sigprocmask(SIG_SETMASK, [] [pid 6677] symlink("/dev/binderfs", "./binderfs" [pid 6674] <... futex resumed>) = 0 [pid 6671] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6665] rt_sigprocmask(SIG_SETMASK, [] [pid 6680] set_robust_list(0x7fef94c679a0, 24 [pid 6678] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6671] sendfile(4, 5, NULL, 553647746 [pid 6666] <... futex resumed>) = 0 [pid 6680] <... set_robust_list resumed>) = 0 [pid 6679] <... chdir resumed>) = 0 [pid 6678] memfd_create("syzkaller", 0 [pid 6674] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6666] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6677] <... symlink resumed>) = 0 [pid 6665] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6680] rt_sigprocmask(SIG_SETMASK, [] [pid 6679] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6678] <... memfd_create resumed>) = 3 [pid 6665] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6680] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6679] <... prctl resumed>) = 0 [pid 6678] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6677] write(1, "executing program\n", 18 [pid 6665] <... futex resumed>) = 0 executing program [pid 6678] <... mmap resumed>) = 0x7fef8c868000 [pid 6677] <... write resumed>) = 18 [pid 6665] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6679] setpgid(0, 0) = 0 [pid 6677] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6679] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6677] <... futex resumed>) = 0 [pid 6680] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6679] <... openat resumed>) = 3 [pid 6678] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6677] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6670] <... sendfile resumed>) = 524288 [pid 6666] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6677] <... rt_sigaction resumed>, NULL, 8) = 0 [ 132.754790][ T6670] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 132.756669][ T6680] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 512 with error 28 [ 132.756699][ T6680] EXT4-fs (loop3): This should not happen!! Data will be lost [ 132.756699][ T6680] [ 132.756712][ T6680] EXT4-fs (loop3): Total free blocks count 0 [ 132.756723][ T6680] EXT4-fs (loop3): Free/Dirty block details [pid 6666] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6679] write(3, "1000", 4 [pid 6677] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6670] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6666] <... futex resumed>) = 0 [pid 6666] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6665] <... futex resumed>) = ? [pid 6677] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6666] <... mmap resumed>) = 0x7fef94c47000 [pid 6666] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6679] <... write resumed>) = 4 [pid 6677] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6670] +++ killed by SIGBUS +++ [pid 6666] <... mprotect resumed>) = 0 [pid 6679] close(3 [pid 6677] <... mmap resumed>) = 0x7fef94c68000 [pid 6679] <... close resumed>) = 0 [pid 6677] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6666] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6680] +++ killed by SIGBUS +++ [pid 6679] symlink("/dev/binderfs", "./binderfs" [pid 6677] <... mprotect resumed>) = 0 [pid 6666] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6665] +++ killed by SIGBUS +++ [pid 6666] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5612] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6665, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=11 /* 0.11 s */} --- ci2-upstream-fs/strace-static-x86_64: Process 6681 attached [pid 6679] <... symlink resumed>) = 0 [pid 6677] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6681] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6679] write(1, "executing program\n", 18 [pid 6678] <... write resumed>) = 524288 [pid 6677] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6666] <... clone3 resumed> => {parent_tid=[6681]}, 88) = 6681 executing program [pid 6679] <... write resumed>) = 18 [pid 6677] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6666] rt_sigprocmask(SIG_SETMASK, []ci2-upstream-fs/strace-static-x86_64: Process 6682 attached [pid 6681] <... rseq resumed>) = 0 [pid 6679] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6678] munmap(0x7fef8c868000, 138412032 [pid 6666] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5612] umount2("./42", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6682] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6681] set_robust_list(0x7fef94c679a0, 24 [pid 6679] <... futex resumed>) = 0 [pid 6678] <... munmap resumed>) = 0 [pid 6677] <... clone3 resumed> => {parent_tid=[6682]}, 88) = 6682 [pid 6666] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6682] <... rseq resumed>) = 0 [pid 6681] <... set_robust_list resumed>) = 0 [pid 6679] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6678] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6677] rt_sigprocmask(SIG_SETMASK, [] [pid 6666] <... futex resumed>) = 0 [pid 5612] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6682] set_robust_list(0x7fef94c889a0, 24 [pid 6681] rt_sigprocmask(SIG_SETMASK, [] [pid 6679] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6666] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6682] <... set_robust_list resumed>) = 0 [pid 6681] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6679] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6678] <... openat resumed>) = 4 [ 132.756735][ T6680] EXT4-fs (loop3): free_blocks=20480 [ 132.756749][ T6680] EXT4-fs (loop3): dirty_blocks=512 [ 132.756762][ T6680] EXT4-fs (loop3): Block reservation details [ 132.756774][ T6680] EXT4-fs (loop3): i_reserved_data_blocks=32 [pid 6677] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5612] <... openat resumed>) = 3 [pid 6682] rt_sigprocmask(SIG_SETMASK, [] [pid 6679] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6678] ioctl(4, LOOP_SET_FD, 3 [pid 5612] fstat(3 [pid 6682] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6679] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6678] <... ioctl resumed>) = 0 [pid 6677] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6679] <... mmap resumed>) = 0x7fef94c68000 [pid 6677] <... futex resumed>) = 0 [pid 6679] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6678] close(3 [pid 6679] <... mprotect resumed>) = 0 [pid 6679] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6678] <... close resumed>) = 0 [pid 6677] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6679] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6678] close(4 [pid 6679] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6678] <... close resumed>) = 0 [pid 6678] mkdir("./file1", 0777ci2-upstream-fs/strace-static-x86_64: Process 6683 attached [pid 6679] <... clone3 resumed> => {parent_tid=[6683]}, 88) = 6683 [pid 6678] <... mkdir resumed>) = 0 [pid 6683] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6679] rt_sigprocmask(SIG_SETMASK, [] [pid 6682] memfd_create("syzkaller", 0 [pid 6683] <... rseq resumed>) = 0 [pid 6679] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6678] mount("/dev/loop1", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6683] set_robust_list(0x7fef94c889a0, 24 [pid 6679] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6683] <... set_robust_list resumed>) = 0 [pid 6683] rt_sigprocmask(SIG_SETMASK, [] [pid 6679] <... futex resumed>) = 0 [pid 6683] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6682] <... memfd_create resumed>) = 3 [pid 6679] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6683] memfd_create("syzkaller", 0) = 3 [pid 6681] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6683] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fef8c868000 [pid 6683] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6682] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6671] <... sendfile resumed>) = ? [pid 6666] <... futex resumed>) = ? [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6682] <... mmap resumed>) = 0x7fef8c868000 [pid 6671] +++ killed by SIGBUS +++ [ 132.865984][ T6681] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 132.866167][ T6681] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 352 with error 28 [ 132.866189][ T6681] EXT4-fs (loop0): This should not happen!! Data will be lost [ 132.866189][ T6681] [pid 5612] getdents64(3, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5612] umount2("./42/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6682] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6678] <... mount resumed>) = 0 [pid 6678] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6681] +++ killed by SIGBUS +++ [pid 6678] <... openat resumed>) = 3 [pid 6666] +++ killed by SIGBUS +++ [pid 6683] <... write resumed>) = 524288 [pid 6678] chdir("./file1") = 0 [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6666, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 6678] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6683] munmap(0x7fef8c868000, 138412032 [pid 6678] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5609] umount2("./41", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6683] <... munmap resumed>) = 0 [pid 6678] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6683] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6678] <... futex resumed>) = 1 [pid 6674] <... futex resumed>) = 0 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6683] <... openat resumed>) = 4 [pid 6678] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5609] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6683] ioctl(4, LOOP_SET_FD, 3 [pid 6682] <... write resumed>) = 524288 [pid 6678] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6674] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6683] <... ioctl resumed>) = 0 [pid 6682] munmap(0x7fef8c868000, 138412032 [pid 6678] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6674] <... futex resumed>) = 0 [pid 5609] <... openat resumed>) = 3 [pid 6682] <... munmap resumed>) = 0 [pid 6674] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6683] close(3 [pid 6682] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6678] <... openat resumed>) = 4 [pid 5609] fstat(3 [pid 6682] <... openat resumed>) = 4 [pid 6683] <... close resumed>) = 0 [pid 6682] ioctl(4, LOOP_SET_FD, 3 [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6683] close(4 [pid 6678] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6683] <... close resumed>) = 0 [pid 6682] <... ioctl resumed>) = 0 [pid 6678] <... futex resumed>) = 1 [ 132.866203][ T6681] EXT4-fs (loop0): Total free blocks count 0 [ 132.866215][ T6681] EXT4-fs (loop0): Free/Dirty block details [ 132.866227][ T6681] EXT4-fs (loop0): free_blocks=20480 [ 132.866241][ T6681] EXT4-fs (loop0): dirty_blocks=368 [ 132.866252][ T6681] EXT4-fs (loop0): Block reservation details [ 132.866263][ T6681] EXT4-fs (loop0): i_reserved_data_blocks=22 [pid 6674] <... futex resumed>) = 0 [pid 5609] getdents64(3 [pid 6683] mkdir("./file1", 0777 [pid 6674] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6678] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6674] <... futex resumed>) = 0 [pid 6683] <... mkdir resumed>) = 0 [pid 5609] umount2("./41/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6678] <... openat resumed>) = 5 [pid 6674] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6678] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6674] <... futex resumed>) = 0 [pid 6683] mount("/dev/loop4", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6678] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6674] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6682] close(3 [pid 6678] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6674] <... futex resumed>) = 0 [pid 6682] <... close resumed>) = 0 [pid 6678] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6674] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6682] close(4 [pid 6678] <... openat resumed>) = 6 [pid 6682] <... close resumed>) = 0 [pid 6682] mkdir("./file1", 0777 [pid 6678] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6682] <... mkdir resumed>) = 0 [pid 6678] <... futex resumed>) = 1 [pid 6674] <... futex resumed>) = 0 [pid 6678] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6682] mount("/dev/loop2", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6674] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6674] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6678] <... futex resumed>) = 0 [pid 6678] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [ 132.985196][ T5612] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6678] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... umount2 resumed>) = 0 [pid 6678] <... futex resumed>) = 1 [pid 6674] <... futex resumed>) = 0 [pid 6674] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6678] sendfile(4, 5, NULL, 553647746 [pid 6674] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] umount2("./42/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5612] newfstatat(AT_FDCWD, "./42/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5612] umount2("./42/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5612] openat(AT_FDCWD, "./42/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6683] <... mount resumed>) = 0 [pid 5612] fstat(4 [pid 6683] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6683] <... openat resumed>) = 3 [pid 5612] getdents64(4 [pid 6683] chdir("./file1" [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6683] <... chdir resumed>) = 0 [pid 5612] getdents64(4 [pid 6683] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6683] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6683] <... futex resumed>) = 1 [pid 6679] <... futex resumed>) = 0 [ 133.046996][ T5609] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 5612] close(4 [pid 6683] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6679] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6682] <... mount resumed>) = 0 [pid 5612] <... close resumed>) = 0 [pid 5612] rmdir("./42/file1" [pid 6683] <... openat resumed>) = 4 [pid 6682] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6679] <... futex resumed>) = 0 [pid 6674] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5609] <... umount2 resumed>) = 0 [pid 6683] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6674] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6683] <... futex resumed>) = 0 [pid 6674] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6683] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6682] <... openat resumed>) = 3 [pid 6679] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6674] <... mmap resumed>) = 0x7fef94c47000 [pid 5609] umount2("./41/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6679] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6674] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6679] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6683] <... futex resumed>) = 0 [pid 6682] chdir("./file1" [pid 6679] <... futex resumed>) = 1 [pid 6674] <... mprotect resumed>) = 0 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6683] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6679] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6674] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6683] <... openat resumed>) = 5 [pid 6683] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6682] <... chdir resumed>) = 0 [pid 6674] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5609] newfstatat(AT_FDCWD, "./41/file1" [pid 6683] <... futex resumed>) = 1 [pid 6679] <... futex resumed>) = 0 [pid 6683] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6679] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6683] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6679] <... futex resumed>) = 0 [pid 6674] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6683] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6679] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6683] <... openat resumed>) = 6 [pid 6682] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5609] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6674] <... clone3 resumed> => {parent_tid=[6690]}, 88) = 6690 [pid 6682] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6674] rt_sigprocmask(SIG_SETMASK, [] [pid 6683] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] umount2("./41/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6683] <... futex resumed>) = 1 [pid 6679] <... futex resumed>) = 0 [pid 6674] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6683] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6679] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6674] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6683] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6679] <... futex resumed>) = 0 [pid 6674] <... futex resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6690 attached [pid 6683] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6682] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6679] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6674] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6690] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6683] <... mmap resumed>) = 0x200000000000 [pid 6682] <... futex resumed>) = 1 [pid 6677] <... futex resumed>) = 0 [pid 6682] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6690] <... rseq resumed>) = 0 [pid 6683] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6677] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] openat(AT_FDCWD, "./41/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6690] set_robust_list(0x7fef94c679a0, 24 [pid 6683] <... futex resumed>) = 1 [pid 6682] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6679] <... futex resumed>) = 0 [pid 6677] <... futex resumed>) = 0 [pid 5609] <... openat resumed>) = 4 [pid 6690] <... set_robust_list resumed>) = 0 [pid 6683] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6682] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6679] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6677] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] fstat(4 [pid 6690] rt_sigprocmask(SIG_SETMASK, [] [pid 6683] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6679] <... futex resumed>) = 0 [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6690] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6683] sendfile(4, 5, NULL, 553647746 [pid 6682] <... openat resumed>) = 4 [pid 6679] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... rmdir resumed>) = 0 [pid 5609] getdents64(4 [pid 6682] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6682] <... futex resumed>) = 1 [pid 6677] <... futex resumed>) = 0 [pid 5612] umount2("./42/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] getdents64(4 [pid 6682] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6677] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6682] <... openat resumed>) = 5 [pid 6677] <... futex resumed>) = 0 [pid 5612] newfstatat(AT_FDCWD, "./42/binderfs" [pid 5609] close(4 [pid 6682] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6677] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6682] <... futex resumed>) = 0 [pid 6677] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5612] unlink("./42/binderfs" [pid 5609] <... close resumed>) = 0 [pid 6682] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6677] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] rmdir("./41/file1" [pid 6682] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6677] <... futex resumed>) = 0 [pid 6682] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6677] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6682] <... openat resumed>) = 6 [pid 5612] <... unlink resumed>) = 0 [pid 5609] <... rmdir resumed>) = 0 [pid 6682] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] umount2("./41/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6682] <... futex resumed>) = 1 [pid 6677] <... futex resumed>) = 0 [pid 5612] getdents64(3 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6682] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6677] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5609] newfstatat(AT_FDCWD, "./41/binderfs" [pid 6682] <... mmap resumed>) = 0x200000000000 [pid 6674] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6677] <... futex resumed>) = 0 [pid 6677] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6682] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] close(3 [pid 6682] <... futex resumed>) = 0 [pid 6677] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5612] <... close resumed>) = 0 [pid 5609] unlink("./41/binderfs" [pid 6682] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5609] <... unlink resumed>) = 0 [pid 5612] rmdir("./42" [pid 6677] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6682] <... futex resumed>) = 0 [pid 6677] <... futex resumed>) = 1 [pid 5612] <... rmdir resumed>) = 0 [pid 5609] getdents64(3 [pid 6682] sendfile(4, 5, NULL, 553647746 [pid 6677] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5612] mkdir("./43", 0777 [pid 5609] close(3 [pid 5612] <... mkdir resumed>) = 0 [pid 5609] <... close resumed>) = 0 [ 133.200967][ T6690] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 133.201138][ T6690] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 984 with error 28 [ 133.201157][ T6690] EXT4-fs (loop1): This should not happen!! Data will be lost [ 133.201157][ T6690] [ 133.201168][ T6690] EXT4-fs (loop1): Total free blocks count 0 [pid 5609] rmdir("./41") = 0 [pid 5612] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5612] ioctl(3, LOOP_CLR_FD [pid 5609] mkdir("./42", 0777 [pid 5612] <... ioctl resumed>) = 0 [pid 5612] close(3 [pid 5609] <... mkdir resumed>) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6679] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5609] <... openat resumed>) = 3 [pid 6679] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5609] ioctl(3, LOOP_CLR_FD [pid 6679] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5609] <... ioctl resumed>) = 0 [pid 6690] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6679] <... mmap resumed>) = 0x7fef94c47000 [pid 6678] <... sendfile resumed>) = 1007616 [pid 5609] close(3 [pid 6679] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6690] +++ killed by SIGBUS +++ [pid 6679] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6677] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6679] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6677] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... close resumed>) = 0 [pid 6679] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6677] <... futex resumed>) = 0 [ 133.201177][ T6690] EXT4-fs (loop1): Free/Dirty block details [ 133.201186][ T6690] EXT4-fs (loop1): free_blocks=20480 [ 133.201196][ T6690] EXT4-fs (loop1): dirty_blocks=992 [ 133.201607][ T6690] EXT4-fs (loop1): Block reservation details [ 133.201619][ T6690] EXT4-fs (loop1): i_reserved_data_blocks=62 ci2-upstream-fs/strace-static-x86_64: Process 6691 attached [pid 6677] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5609] <... close resumed>) = 0 [pid 6678] +++ killed by SIGBUS +++ [pid 6677] <... mmap resumed>) = 0x7fef94c47000 [pid 6674] +++ killed by SIGBUS +++ [pid 6679] <... clone3 resumed> => {parent_tid=[6691]}, 88) = 6691 [pid 6677] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6679] rt_sigprocmask(SIG_SETMASK, [] [pid 6677] <... mprotect resumed>) = 0 [pid 6679] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6677] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5610] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6674, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 6691] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6679] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] umount2("./41", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6691] <... rseq resumed>) = 0 [pid 6679] <... futex resumed>) = 0 [pid 6677] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5612] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6691] set_robust_list(0x7fef94c679a0, 24 [pid 6679] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6677] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5612] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5609] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6691] <... set_robust_list resumed>) = 0 [pid 5610] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORYci2-upstream-fs/strace-static-x86_64: Process 6692 attached [pid 6691] rt_sigprocmask(SIG_SETMASK, [] [pid 6677] <... clone3 resumed> => {parent_tid=[6692]}, 88) = 6692 [pid 5612] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5610] <... openat resumed>) = 3 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 6693 attached [pid 6692] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6691] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6677] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] fstat(3 [pid 6693] set_robust_list(0x5555748a66e0, 24 [pid 6692] <... rseq resumed>) = 0 [pid 6677] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6693] <... set_robust_list resumed>) = 0 [pid 6692] set_robust_list(0x7fef94c679a0, 24 [pid 6677] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6694 attached [pid 6693] rt_sigprocmask(SIG_SETMASK, [] [pid 6692] <... set_robust_list resumed>) = 0 [pid 5612] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6693 [pid 6694] set_robust_list(0x5555748a66e0, 24 [pid 6692] rt_sigprocmask(SIG_SETMASK, [] [pid 6677] <... futex resumed>) = 0 [pid 5610] getdents64(3 [pid 6694] <... set_robust_list resumed>) = 0 [pid 6692] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6677] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5609] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6694 [pid 6694] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5612] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] umount2("./41/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 6694] chdir("./42" [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6694] <... chdir resumed>) = 0 [pid 6694] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6679] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6694] setpgid(0, 0) = 0 [pid 6694] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6694] write(3, "1000", 4) = 4 [pid 6694] close(3 [pid 6693] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6694] <... close resumed>) = 0 [pid 6694] symlink("/dev/binderfs", "./binderfs" [pid 6693] chdir("./43" [pid 6694] <... symlink resumed>) = 0 [ 133.354147][ T6683] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 133.356670][ T6691] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 804 with error 28 [ 133.356702][ T6691] EXT4-fs (loop4): This should not happen!! Data will be lost [ 133.356702][ T6691] [ 133.356716][ T6691] EXT4-fs (loop4): Total free blocks count 0 [ 133.356728][ T6691] EXT4-fs (loop4): Free/Dirty block details [pid 6694] write(1, "executing program\n", 18 [pid 6693] <... chdir resumed>) = 0 [pid 6692] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6694] <... write resumed>) = 18 [pid 6694] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6682] <... sendfile resumed>) = 311296 executing program [pid 6694] <... futex resumed>) = 0 [pid 6677] <... futex resumed>) = ? [pid 6694] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6682] +++ killed by SIGBUS +++ [pid 6693] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6692] +++ killed by SIGBUS +++ [pid 6677] +++ killed by SIGBUS +++ [pid 6693] <... prctl resumed>) = 0 [pid 5611] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6677, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6694] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6693] setpgid(0, 0 [pid 6694] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6693] <... setpgid resumed>) = 0 [pid 6694] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6693] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6691] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 5611] umount2("./42", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6694] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6683] <... sendfile resumed>) = 823296 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6694] <... mmap resumed>) = 0x7fef94c68000 [pid 5611] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6694] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6683] +++ killed by SIGBUS +++ [ 133.356740][ T6691] EXT4-fs (loop4): free_blocks=20480 [ 133.356752][ T6691] EXT4-fs (loop4): dirty_blocks=816 [ 133.356764][ T6691] EXT4-fs (loop4): Block reservation details [ 133.356776][ T6691] EXT4-fs (loop4): i_reserved_data_blocks=51 [ 133.374389][ T6692] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 133.374928][ T6692] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 300 with error 28 [pid 6694] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6693] <... openat resumed>) = 3 [pid 5611] <... openat resumed>) = 3 [pid 6694] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6691] +++ killed by SIGBUS +++ [pid 6679] +++ killed by SIGBUS +++ [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6679, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6694] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 5614] umount2("./41", MNT_FORCE|UMOUNT_NOFOLLOWci2-upstream-fs/strace-static-x86_64: Process 6695 attached ) = -1 EINVAL (Invalid argument) [pid 6694] <... clone3 resumed> => {parent_tid=[6695]}, 88) = 6695 [pid 6693] write(3, "1000", 4 [pid 5611] fstat(3 [pid 6694] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6694] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6693] <... write resumed>) = 4 [pid 5614] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5611] getdents64(3 [pid 6695] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6694] <... futex resumed>) = 0 [pid 6695] <... rseq resumed>) = 0 [pid 6694] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5614] <... openat resumed>) = 3 [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [ 133.374953][ T6692] EXT4-fs (loop2): This should not happen!! Data will be lost [ 133.374953][ T6692] [ 133.374965][ T6692] EXT4-fs (loop2): Total free blocks count 0 [ 133.374977][ T6692] EXT4-fs (loop2): Free/Dirty block details [ 133.374989][ T6692] EXT4-fs (loop2): free_blocks=20480 [ 133.375002][ T6692] EXT4-fs (loop2): dirty_blocks=304 [ 133.375014][ T6692] EXT4-fs (loop2): Block reservation details [ 133.375024][ T6692] EXT4-fs (loop2): i_reserved_data_blocks=19 [pid 6695] set_robust_list(0x7fef94c889a0, 24 [pid 5614] fstat(3 [pid 6695] <... set_robust_list resumed>) = 0 [pid 6693] close(3 [pid 5611] umount2("./42/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6695] rt_sigprocmask(SIG_SETMASK, [] [pid 6693] <... close resumed>) = 0 [pid 6695] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6695] memfd_create("syzkaller", 0 [pid 6693] symlink("/dev/binderfs", "./binderfs" [pid 5614] getdents64(3 [pid 6695] <... memfd_create resumed>) = 3 [pid 6693] <... symlink resumed>) = 0 [pid 6695] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6693] write(1, "executing program\n", 18 [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 executing program [pid 6695] <... mmap resumed>) = 0x7fef8c868000 [pid 6693] <... write resumed>) = 18 [pid 5614] umount2("./41/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6693] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6693] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60}, NULL, 8) = 0 [pid 6693] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6693] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c68000 [pid 6693] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6693] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6695] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6693] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6693] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} => {parent_tid=[6696]}, 88) = 6696 [pid 6693] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6693] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 133.497909][ T5610] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6693] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-upstream-fs/strace-static-x86_64: Process 6696 attached [pid 6695] <... write resumed>) = 524288 [pid 6695] munmap(0x7fef8c868000, 138412032 [pid 6696] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 6695] <... munmap resumed>) = 0 [pid 5611] <... umount2 resumed>) = 0 [pid 5610] <... umount2 resumed>) = 0 [pid 6696] set_robust_list(0x7fef94c889a0, 24 [pid 6695] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5610] umount2("./41/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6696] <... set_robust_list resumed>) = 0 [pid 6695] <... openat resumed>) = 4 [pid 5611] umount2("./42/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6696] rt_sigprocmask(SIG_SETMASK, [] [pid 6695] ioctl(4, LOOP_SET_FD, 3 [pid 5610] newfstatat(AT_FDCWD, "./41/file1" [pid 6696] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6696] memfd_create("syzkaller", 0 [pid 5611] newfstatat(AT_FDCWD, "./42/file1" [pid 5610] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6696] <... memfd_create resumed>) = 3 [pid 5611] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5610] umount2("./41/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6696] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5611] umount2("./42/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6696] <... mmap resumed>) = 0x7fef8c868000 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] openat(AT_FDCWD, "./41/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5611] openat(AT_FDCWD, "./42/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5610] <... openat resumed>) = 4 [pid 5611] <... openat resumed>) = 4 [pid 5610] fstat(4 [pid 5611] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6696] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5610] getdents64(4 [pid 5611] getdents64(4 [pid 6695] <... ioctl resumed>) = 0 [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6695] close(3 [pid 5611] getdents64(4 [pid 5610] getdents64(4 [pid 6695] <... close resumed>) = 0 [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6695] close(4 [pid 5611] close(4 [pid 5610] close(4 [pid 6695] <... close resumed>) = 0 [pid 5611] <... close resumed>) = 0 [pid 5610] <... close resumed>) = 0 [pid 6695] mkdir("./file1", 0777 [pid 5610] rmdir("./41/file1" [pid 5611] rmdir("./42/file1" [pid 6695] <... mkdir resumed>) = 0 [pid 5610] <... rmdir resumed>) = 0 [pid 5610] umount2("./41/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6695] mount("/dev/loop0", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6696] <... write resumed>) = 524288 [ 133.532244][ T3414] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 300 with max blocks 4 with error 28 [ 133.532274][ T3414] EXT4-fs (loop2): This should not happen!! Data will be lost [ 133.532274][ T3414] [ 133.535314][ T5611] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 133.576122][ T5614] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 5610] newfstatat(AT_FDCWD, "./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6696] munmap(0x7fef8c868000, 138412032 [pid 5610] unlink("./41/binderfs" [pid 6696] <... munmap resumed>) = 0 [pid 5610] <... unlink resumed>) = 0 [pid 5610] getdents64(3, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6696] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5610] close(3) = 0 [pid 6696] ioctl(4, LOOP_SET_FD, 3 [pid 5610] rmdir("./41" [pid 6696] <... ioctl resumed>) = 0 [pid 5610] <... rmdir resumed>) = 0 [pid 5610] mkdir("./42", 0777 [pid 6696] close(3) = 0 [pid 6696] close(4) = 0 [pid 6696] mkdir("./file1", 0777) = 0 [pid 6696] mount("/dev/loop3", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5614] <... umount2 resumed>) = 0 [pid 5611] <... rmdir resumed>) = 0 [pid 5614] umount2("./41/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] umount2("./42/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] <... mkdir resumed>) = 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5611] newfstatat(AT_FDCWD, "./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5610] <... openat resumed>) = 3 [pid 5611] unlink("./42/binderfs" [pid 5610] ioctl(3, LOOP_CLR_FD [pid 5614] newfstatat(AT_FDCWD, "./41/file1" [pid 5611] <... unlink resumed>) = 0 [pid 5610] <... ioctl resumed>) = 0 [pid 5610] close(3 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] getdents64(3, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5611] close(3) = 0 [pid 5614] umount2("./41/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5611] rmdir("./42") = 0 [pid 5614] openat(AT_FDCWD, "./41/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5614] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5614] getdents64(4, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5611] mkdir("./43", 0777 [pid 5614] getdents64(4, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5611] <... mkdir resumed>) = 0 [pid 6695] <... mount resumed>) = 0 [pid 5614] close(4 [pid 5611] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5610] <... close resumed>) = 0 [pid 5614] <... close resumed>) = 0 [pid 5611] <... openat resumed>) = 3 [pid 5614] rmdir("./41/file1" [pid 6695] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5614] <... rmdir resumed>) = 0 [pid 5611] ioctl(3, LOOP_CLR_FD [pid 5610] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6695] <... openat resumed>) = 3 [pid 6695] chdir("./file1" [pid 5614] umount2("./41/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] <... ioctl resumed>) = 0 [pid 5610] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6695] <... chdir resumed>) = 0 [pid 5611] close(3 [pid 5610] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6695] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6695] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5614] newfstatat(AT_FDCWD, "./41/binderfs" [pid 6695] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6695] <... futex resumed>) = 1 [pid 6694] <... futex resumed>) = 0 [pid 5614] unlink("./41/binderfs" [pid 6695] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6694] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6695] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6694] <... futex resumed>) = 0 [pid 5614] <... unlink resumed>) = 0 [pid 6695] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6694] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-upstream-fs/strace-static-x86_64: Process 6701 attached [pid 5614] getdents64(3 [pid 5610] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6701 [pid 5610] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5614] close(3 [pid 5610] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] <... close resumed>) = 0 [pid 5614] rmdir("./41" [pid 6701] set_robust_list(0x5555748a66e0, 24 [pid 6696] <... mount resumed>) = 0 [pid 6695] <... openat resumed>) = 4 [pid 5614] <... rmdir resumed>) = 0 [pid 5611] <... close resumed>) = 0 [pid 6701] <... set_robust_list resumed>) = 0 [pid 6696] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6695] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6701] rt_sigprocmask(SIG_SETMASK, [] [pid 6696] <... openat resumed>) = 3 [pid 6695] <... futex resumed>) = 1 [pid 6694] <... futex resumed>) = 0 [pid 6701] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6696] chdir("./file1" [pid 6695] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6694] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] mkdir("./42", 0777 [pid 5611] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6701] chdir("./42" [pid 6695] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6694] <... futex resumed>) = 0 [pid 6696] <... chdir resumed>) = 0 [pid 6695] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6694] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] <... mkdir resumed>) = 0 [pid 5611] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6701] <... chdir resumed>) = 0 [pid 6696] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6695] <... openat resumed>) = 5 ci2-upstream-fs/strace-static-x86_64: Process 6702 attached [pid 6701] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6696] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5614] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6702] set_robust_list(0x5555748a66e0, 24 [pid 6695] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6702] <... set_robust_list resumed>) = 0 [pid 6701] <... prctl resumed>) = 0 [pid 6696] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6695] <... futex resumed>) = 1 [pid 6694] <... futex resumed>) = 0 [pid 5614] <... openat resumed>) = 3 [pid 5611] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6702 [pid 6702] rt_sigprocmask(SIG_SETMASK, [] [pid 6701] setpgid(0, 0 [pid 6696] <... futex resumed>) = 1 [pid 6695] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6693] <... futex resumed>) = 0 [pid 6701] <... setpgid resumed>) = 0 [pid 6696] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6695] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6694] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6693] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] ioctl(3, LOOP_CLR_FD [pid 5611] rt_sigprocmask(SIG_SETMASK, [] [pid 6702] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6701] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6696] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6695] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6694] <... futex resumed>) = 0 [pid 6693] <... futex resumed>) = 0 [pid 5614] <... ioctl resumed>) = 0 [pid 5611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6702] chdir("./43" [pid 6701] <... openat resumed>) = 3 [pid 6693] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] close(3 [pid 6702] <... chdir resumed>) = 0 [pid 6696] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6695] <... openat resumed>) = 6 [pid 6694] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6702] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6702] setpgid(0, 0) = 0 [pid 6702] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6696] <... openat resumed>) = 4 [pid 6695] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6702] write(3, "1000", 4) = 4 [pid 6696] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6702] close(3 [pid 6696] <... futex resumed>) = 1 [pid 6693] <... futex resumed>) = 0 [pid 6701] write(3, "1000", 4 [pid 6693] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6702] <... close resumed>) = 0 [pid 6693] <... futex resumed>) = 0 [pid 6702] symlink("/dev/binderfs", "./binderfs" [pid 6701] <... write resumed>) = 4 [pid 6696] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6693] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6702] <... symlink resumed>) = 0 [pid 6701] close(3 [pid 6696] <... openat resumed>) = 5 [pid 6695] <... futex resumed>) = 1 [pid 6694] <... futex resumed>) = 0 [pid 6702] write(1, "executing program\n", 18 [pid 6696] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6695] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6694] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6701] <... close resumed>) = 0 [pid 6694] <... futex resumed>) = 0 [pid 6701] symlink("/dev/binderfs", "./binderfs" executing program [pid 6695] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6694] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6702] <... write resumed>) = 18 [pid 6701] <... symlink resumed>) = 0 [pid 6696] <... futex resumed>) = 1 [pid 6693] <... futex resumed>) = 0 [pid 5614] <... close resumed>) = 0 [pid 6702] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6701] write(1, "executing program\n", 18 [pid 6696] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6695] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 executing program [pid 6693] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6702] <... futex resumed>) = 0 [pid 6701] <... write resumed>) = 18 [pid 6696] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6695] <... mmap resumed>) = 0x200000000000 [pid 6693] <... futex resumed>) = 0 [pid 6701] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6702] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6696] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6693] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6702] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6701] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6696] <... openat resumed>) = 6 [pid 6695] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6702] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6701] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6696] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6695] <... futex resumed>) = 1 [pid 6694] <... futex resumed>) = 0 [pid 5614] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6702] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6701] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6696] <... futex resumed>) = 1 [pid 6695] sendfile(4, 5, NULL, 553647746 [pid 6694] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6693] <... futex resumed>) = 0 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6702] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6701] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6702] <... mmap resumed>) = 0x7fef94c68000 [pid 6696] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6693] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6702] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6701] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6696] <... mmap resumed>) = 0x200000000000 [pid 6694] <... futex resumed>) = 0 [pid 6693] <... futex resumed>) = 0 [pid 6694] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6701] <... mmap resumed>) = 0x7fef94c68000 [pid 6702] <... mprotect resumed>) = 0 [pid 6693] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6702] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6701] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6702] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6696] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000ci2-upstream-fs/strace-static-x86_64: Process 6703 attached [pid 6701] <... mprotect resumed>) = 0 [pid 6703] set_robust_list(0x5555748a66e0, 24 [pid 6701] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6703] <... set_robust_list resumed>) = 0 [pid 6702] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6696] <... futex resumed>) = 1 [pid 6693] <... futex resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6704 attached [pid 6703] rt_sigprocmask(SIG_SETMASK, [] [pid 6701] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6696] sendfile(4, 5, NULL, 553647746 [pid 6693] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6704] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6703] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6702] <... clone3 resumed> => {parent_tid=[6704]}, 88) = 6704 [pid 6701] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6693] <... futex resumed>) = 0 [pid 5614] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6703 [pid 6704] <... rseq resumed>) = 0 [pid 6703] chdir("./42" [pid 6702] rt_sigprocmask(SIG_SETMASK, []ci2-upstream-fs/strace-static-x86_64: Process 6705 attached [pid 6704] set_robust_list(0x7fef94c889a0, 24 [pid 6703] <... chdir resumed>) = 0 [pid 6702] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6693] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 6705] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6704] <... set_robust_list resumed>) = 0 [pid 6703] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6702] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6701] <... clone3 resumed> => {parent_tid=[6705]}, 88) = 6705 [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6705] <... rseq resumed>) = 0 [pid 6704] rt_sigprocmask(SIG_SETMASK, [] [pid 6703] <... prctl resumed>) = 0 [pid 6702] <... futex resumed>) = 0 [pid 6701] rt_sigprocmask(SIG_SETMASK, [] [pid 6705] set_robust_list(0x7fef94c889a0, 24 [pid 6701] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6701] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6704] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6703] setpgid(0, 0 [pid 6702] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6704] memfd_create("syzkaller", 0 [pid 6703] <... setpgid resumed>) = 0 [pid 6701] <... futex resumed>) = 0 [pid 6705] <... set_robust_list resumed>) = 0 [pid 6704] <... memfd_create resumed>) = 3 [pid 6703] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6701] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6704] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6703] <... openat resumed>) = 3 [pid 6704] <... mmap resumed>) = 0x7fef8c868000 [pid 6705] rt_sigprocmask(SIG_SETMASK, [] [pid 6703] write(3, "1000", 4 [pid 6705] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6703] <... write resumed>) = 4 [pid 6705] memfd_create("syzkaller", 0 [pid 6703] close(3) = 0 [pid 6703] symlink("/dev/binderfs", "./binderfs" [pid 6705] <... memfd_create resumed>) = 3 [pid 6704] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6705] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6703] <... symlink resumed>) = 0 [pid 6694] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6705] <... mmap resumed>) = 0x7fef8c868000 [pid 6703] write(1, "executing program\n", 18 executing program [pid 6694] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6703] <... write resumed>) = 18 [pid 6703] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6694] <... futex resumed>) = 0 [pid 6703] <... futex resumed>) = 0 [pid 6694] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6703] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6694] <... mmap resumed>) = 0x7fef94c47000 [pid 6705] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6703] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6703] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6693] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6703] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6694] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6703] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c68000 [pid 6694] <... mprotect resumed>) = 0 [pid 6703] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6693] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6705] <... write resumed>) = 524288 [pid 6704] <... write resumed>) = 524288 [pid 6703] <... mprotect resumed>) = 0 [pid 6694] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6693] <... futex resumed>) = 0 [pid 6693] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6704] munmap(0x7fef8c868000, 138412032 [pid 6703] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6705] munmap(0x7fef8c868000, 138412032 [pid 6694] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6693] <... mmap resumed>) = 0x7fef94c47000 [pid 6703] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6693] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6705] <... munmap resumed>) = 0 [pid 6704] <... munmap resumed>) = 0 [pid 6703] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6694] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6693] <... mprotect resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6707 attached ci2-upstream-fs/strace-static-x86_64: Process 6706 attached [pid 6705] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6693] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6694] <... clone3 resumed> => {parent_tid=[6706]}, 88) = 6706 [pid 6694] rt_sigprocmask(SIG_SETMASK, [] [pid 6707] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6706] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6705] <... openat resumed>) = 4 [pid 6704] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6703] <... clone3 resumed> => {parent_tid=[6707]}, 88) = 6707 [pid 6694] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6693] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6707] <... rseq resumed>) = 0 [pid 6706] <... rseq resumed>) = 0 [pid 6705] ioctl(4, LOOP_SET_FD, 3 [pid 6704] <... openat resumed>) = 4 [pid 6703] rt_sigprocmask(SIG_SETMASK, [] [pid 6693] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 6708 attached [pid 6707] set_robust_list(0x7fef94c889a0, 24 [pid 6706] set_robust_list(0x7fef94c679a0, 24 [pid 6705] <... ioctl resumed>) = 0 [pid 6704] ioctl(4, LOOP_SET_FD, 3 [pid 6703] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6694] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6708] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6707] <... set_robust_list resumed>) = 0 [pid 6706] <... set_robust_list resumed>) = 0 [pid 6703] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6694] <... futex resumed>) = 0 [pid 6708] <... rseq resumed>) = 0 [pid 6707] rt_sigprocmask(SIG_SETMASK, [] [pid 6705] close(3 [pid 6704] <... ioctl resumed>) = 0 [pid 6706] rt_sigprocmask(SIG_SETMASK, [] [pid 6703] <... futex resumed>) = 0 [pid 6694] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6708] set_robust_list(0x7fef94c679a0, 24 [pid 6707] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6706] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6705] <... close resumed>) = 0 [pid 6703] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6693] <... clone3 resumed> => {parent_tid=[6708]}, 88) = 6708 [pid 6708] <... set_robust_list resumed>) = 0 [pid 6707] memfd_create("syzkaller", 0 [pid 6706] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6705] close(4 [pid 6704] close(3 [pid 6695] <... sendfile resumed>) = 479232 [pid 6693] rt_sigprocmask(SIG_SETMASK, [] [pid 6708] rt_sigprocmask(SIG_SETMASK, [] [pid 6705] <... close resumed>) = 0 [pid 6704] <... close resumed>) = 0 [pid 6694] <... futex resumed>) = ? [pid 6693] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6708] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6707] <... memfd_create resumed>) = 3 [pid 6705] mkdir("./file1", 0777 [pid 6704] close(4 [pid 6695] +++ killed by SIGBUS +++ [pid 6705] <... mkdir resumed>) = 0 [pid 6693] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6706] +++ killed by SIGBUS +++ [pid 6704] <... close resumed>) = 0 [pid 6694] +++ killed by SIGBUS +++ [pid 6693] <... futex resumed>) = 0 [pid 6705] mount("/dev/loop1", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6693] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6694, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6707] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6704] mkdir("./file1", 0777 [pid 6707] <... mmap resumed>) = 0x7fef8c868000 [ 133.978657][ T6706] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 133.979011][ T6706] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 464 with error 28 [ 133.979037][ T6706] EXT4-fs (loop0): This should not happen!! Data will be lost [ 133.979037][ T6706] [ 133.979049][ T6706] EXT4-fs (loop0): Total free blocks count 0 [ 133.979060][ T6706] EXT4-fs (loop0): Free/Dirty block details [pid 5609] umount2("./42", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] getdents64(3, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6708] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6707] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6704] <... mkdir resumed>) = 0 [pid 6696] <... sendfile resumed>) = 442368 [pid 5609] umount2("./42/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6704] mount("/dev/loop2", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6693] <... futex resumed>) = ? [pid 6708] +++ killed by SIGBUS +++ [pid 6696] +++ killed by SIGBUS +++ [pid 6693] +++ killed by SIGBUS +++ [pid 5612] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6693, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=10 /* 0.10 s */} --- [ 133.979071][ T6706] EXT4-fs (loop0): free_blocks=20480 [ 133.979083][ T6706] EXT4-fs (loop0): dirty_blocks=464 [ 133.979094][ T6706] EXT4-fs (loop0): Block reservation details [ 133.979104][ T6706] EXT4-fs (loop0): i_reserved_data_blocks=29 [ 134.017582][ T6708] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 134.018908][ T6708] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 428 with error 28 [pid 5612] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 6707] <... write resumed>) = 524288 [pid 6707] munmap(0x7fef8c868000, 138412032) = 0 [pid 5612] umount2("./43", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6707] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6707] ioctl(4, LOOP_SET_FD, 3 [pid 5612] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6707] <... ioctl resumed>) = 0 [pid 5612] <... openat resumed>) = 3 [pid 5612] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6707] close(3 [pid 5612] getdents64(3 [pid 6707] <... close resumed>) = 0 [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6707] close(4 [pid 5612] umount2("./43/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6707] <... close resumed>) = 0 [pid 6707] mkdir("./file1", 0777) = 0 [ 134.018934][ T6708] EXT4-fs (loop3): This should not happen!! Data will be lost [ 134.018934][ T6708] [ 134.018948][ T6708] EXT4-fs (loop3): Total free blocks count 0 [ 134.018960][ T6708] EXT4-fs (loop3): Free/Dirty block details [ 134.018972][ T6708] EXT4-fs (loop3): free_blocks=20480 [ 134.018985][ T6708] EXT4-fs (loop3): dirty_blocks=432 [ 134.018996][ T6708] EXT4-fs (loop3): Block reservation details [ 134.019007][ T6708] EXT4-fs (loop3): i_reserved_data_blocks=27 [pid 6707] mount("/dev/loop4", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6704] <... mount resumed>) = 0 [pid 6704] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6704] chdir("./file1") = 0 [pid 6704] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [ 134.128126][ T3414] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 464 with max blocks 4 with error 28 [ 134.128156][ T3414] EXT4-fs (loop0): This should not happen!! Data will be lost [ 134.128156][ T3414] [ 134.157701][ T3414] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 428 with max blocks 4 with error 28 [ 134.157732][ T3414] EXT4-fs (loop3): This should not happen!! Data will be lost [pid 6705] <... mount resumed>) = 0 [pid 6704] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6705] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6704] <... futex resumed>) = 1 [pid 6705] <... openat resumed>) = 3 [pid 6704] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6705] chdir("./file1") = 0 [pid 6705] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6705] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6701] <... futex resumed>) = 0 [pid 6701] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6701] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6705] <... futex resumed>) = 1 [pid 6705] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6702] <... futex resumed>) = 0 [pid 6702] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6704] <... futex resumed>) = 0 [pid 6702] <... futex resumed>) = 1 [pid 6704] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6702] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6704] <... openat resumed>) = 4 [pid 6705] <... openat resumed>) = 4 [pid 6705] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6701] <... futex resumed>) = 0 [pid 6701] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6705] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6701] <... futex resumed>) = 0 [pid 6705] <... openat resumed>) = 5 [pid 6701] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... umount2 resumed>) = 0 [pid 6704] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] umount2("./43/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6704] <... futex resumed>) = 1 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 134.157732][ T3414] [ 134.159697][ T5612] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 134.163370][ T5609] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6705] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6704] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5612] newfstatat(AT_FDCWD, "./43/file1" [pid 6707] <... mount resumed>) = 0 [pid 6705] <... futex resumed>) = 1 [pid 6702] <... futex resumed>) = 0 [pid 6701] <... futex resumed>) = 0 [pid 5612] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] <... umount2 resumed>) = 0 [pid 6707] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6705] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6702] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6701] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] umount2("./43/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6705] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6701] <... futex resumed>) = 0 [pid 5609] umount2("./42/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6705] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6707] <... openat resumed>) = 3 [pid 6704] <... futex resumed>) = 0 [pid 6702] <... futex resumed>) = 1 [pid 6701] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6707] chdir("./file1") = 0 [pid 6705] <... openat resumed>) = 6 [pid 6704] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6702] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] openat(AT_FDCWD, "./43/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5609] newfstatat(AT_FDCWD, "./42/file1" [pid 6707] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6704] <... openat resumed>) = 5 [pid 5612] <... openat resumed>) = 4 [pid 6705] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6707] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6705] <... futex resumed>) = 1 [pid 6704] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6701] <... futex resumed>) = 0 [pid 5612] fstat(4 [pid 5609] umount2("./42/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6707] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6705] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6701] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6707] <... futex resumed>) = 1 [pid 6705] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6704] <... futex resumed>) = 1 [pid 6703] <... futex resumed>) = 0 [pid 6702] <... futex resumed>) = 0 [pid 6701] <... futex resumed>) = 0 [pid 5612] getdents64(4 [pid 5609] openat(AT_FDCWD, "./42/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6707] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6705] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6704] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6703] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6702] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6702] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5612] getdents64(4, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5612] close(4 [pid 5609] <... openat resumed>) = 4 [pid 5612] <... close resumed>) = 0 [pid 6701] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] fstat(4 [pid 6703] <... futex resumed>) = 0 [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6705] <... mmap resumed>) = 0x200000000000 [pid 5612] rmdir("./43/file1" [pid 6703] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6705] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... rmdir resumed>) = 0 [pid 5609] getdents64(4 [pid 6705] <... futex resumed>) = 1 [pid 6701] <... futex resumed>) = 0 [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6705] sendfile(4, 5, NULL, 553647746 [pid 6701] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] getdents64(4 [pid 6701] <... futex resumed>) = 0 [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6701] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] close(4 [pid 6707] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6704] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5612] umount2("./43/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... close resumed>) = 0 [pid 6707] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6704] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6704] <... openat resumed>) = 6 [pid 5612] newfstatat(AT_FDCWD, "./43/binderfs" [pid 5609] rmdir("./42/file1" [pid 6707] <... openat resumed>) = 4 [pid 5612] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] <... rmdir resumed>) = 0 [pid 6704] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] unlink("./43/binderfs" [pid 6704] <... futex resumed>) = 1 [pid 6702] <... futex resumed>) = 0 [pid 5609] umount2("./42/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6707] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6704] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6702] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6707] <... futex resumed>) = 1 [pid 6704] <... mmap resumed>) = 0x200000000000 [pid 6703] <... futex resumed>) = 0 [pid 6702] <... futex resumed>) = 0 [pid 6703] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6702] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6707] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6704] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6703] <... futex resumed>) = 0 [pid 5612] <... unlink resumed>) = 0 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6704] <... futex resumed>) = 1 [pid 6703] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6702] <... futex resumed>) = 0 [pid 5612] getdents64(3 [pid 5609] newfstatat(AT_FDCWD, "./42/binderfs" [pid 6702] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6704] sendfile(4, 5, NULL, 553647746 [pid 5609] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6707] <... openat resumed>) = 5 [pid 6702] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] close(3 [pid 5609] unlink("./42/binderfs" [pid 6707] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... close resumed>) = 0 [pid 5609] <... unlink resumed>) = 0 [pid 6707] <... futex resumed>) = 1 [pid 6703] <... futex resumed>) = 0 [pid 5612] rmdir("./43" [pid 5609] getdents64(3 [pid 6707] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6703] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6707] <... openat resumed>) = 6 [pid 6703] <... futex resumed>) = 0 [pid 5612] <... rmdir resumed>) = 0 [pid 6707] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6703] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] mkdir("./44", 0777 [pid 6707] <... futex resumed>) = 0 [pid 6703] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6707] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6703] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... mkdir resumed>) = 0 [pid 6707] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6703] <... futex resumed>) = 0 [pid 6707] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6703] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6707] <... mmap resumed>) = 0x200000000000 [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6707] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6707] <... futex resumed>) = 1 [pid 6703] <... futex resumed>) = 0 [pid 5612] <... openat resumed>) = 3 [pid 5609] close(3 [pid 6703] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6703] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] ioctl(3, LOOP_CLR_FD [pid 6707] sendfile(4, 5, NULL, 553647746 [pid 5612] <... ioctl resumed>) = 0 [pid 5612] close(3 [pid 5609] <... close resumed>) = 0 [pid 5609] rmdir("./42" [pid 5612] <... close resumed>) = 0 [pid 5609] <... rmdir resumed>) = 0 [pid 5612] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5612] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 6715 attached [pid 6701] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5609] mkdir("./43", 0777 [pid 6701] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6715] set_robust_list(0x5555748a66e0, 24 [pid 6701] <... futex resumed>) = 0 [pid 5609] <... mkdir resumed>) = 0 [pid 6715] <... set_robust_list resumed>) = 0 [pid 6701] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5612] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6715 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6701] <... mmap resumed>) = 0x7fef94c47000 [pid 6701] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 5612] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] <... openat resumed>) = 3 [pid 6715] rt_sigprocmask(SIG_SETMASK, [] [pid 6701] <... mprotect resumed>) = 0 [pid 5612] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6702] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6702] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6715] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6702] <... futex resumed>) = 0 [pid 6715] chdir("./44" [pid 6702] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5609] ioctl(3, LOOP_CLR_FD [pid 6702] <... mmap resumed>) = 0x7fef94c47000 [pid 6702] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6715] <... chdir resumed>) = 0 [pid 6702] <... mprotect resumed>) = 0 [pid 5609] <... ioctl resumed>) = 0 [pid 6701] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5609] close(3 [pid 6701] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6715] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6702] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6715] <... prctl resumed>) = 0 [pid 6703] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6702] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6701] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5609] <... close resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6716 attached [pid 6703] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6716] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6715] setpgid(0, 0 [pid 6703] <... futex resumed>) = 0 [pid 6702] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6701] <... clone3 resumed> => {parent_tid=[6716]}, 88) = 6716 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[]ci2-upstream-fs/strace-static-x86_64: Process 6717 attached [pid 6715] <... setpgid resumed>) = 0 [pid 6703] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6701] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6717] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6716] <... rseq resumed>) = 0 [pid 6715] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6703] <... mmap resumed>) = 0x7fef94c47000 [pid 6702] <... clone3 resumed> => {parent_tid=[6717]}, 88) = 6717 [pid 6701] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6716] set_robust_list(0x7fef94c679a0, 24 [pid 6715] <... openat resumed>) = 3 [pid 6703] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6702] rt_sigprocmask(SIG_SETMASK, [] [pid 6701] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6717] <... rseq resumed>) = 0 [pid 6716] <... set_robust_list resumed>) = 0 [pid 6717] set_robust_list(0x7fef94c679a0, 24 [pid 6716] rt_sigprocmask(SIG_SETMASK, [] [pid 6717] <... set_robust_list resumed>) = 0 [pid 6716] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6703] <... mprotect resumed>) = 0 [pid 6702] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6701] <... futex resumed>) = 0 [pid 6717] rt_sigprocmask(SIG_SETMASK, [] [pid 6715] write(3, "1000", 4 [pid 6703] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6702] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000ci2-upstream-fs/strace-static-x86_64: Process 6718 attached [pid 6717] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6703] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6701] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6718] set_robust_list(0x5555748a66e0, 24 [pid 6703] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6702] <... futex resumed>) = 0 [pid 5609] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6718 [pid 6718] <... set_robust_list resumed>) = 0 [pid 6715] <... write resumed>) = 4 [ 134.404820][ T6716] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 134.407327][ T6716] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 448 with error 28 [ 134.407358][ T6716] EXT4-fs (loop1): This should not happen!! Data will be lost [ 134.407358][ T6716] [ 134.407372][ T6716] EXT4-fs (loop1): Total free blocks count 0 [ 134.407383][ T6716] EXT4-fs (loop1): Free/Dirty block details [pid 6702] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6718] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] rt_sigprocmask(SIG_SETMASK, []ci2-upstream-fs/strace-static-x86_64: Process 6719 attached [pid 6718] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6715] close(3 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6718] chdir("./43" [pid 6719] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6718] <... chdir resumed>) = 0 [pid 6703] <... clone3 resumed> => {parent_tid=[6719]}, 88) = 6719 [pid 6719] <... rseq resumed>) = 0 [pid 6718] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6715] <... close resumed>) = 0 [pid 6703] rt_sigprocmask(SIG_SETMASK, [] [pid 6719] set_robust_list(0x7fef94c679a0, 24 [pid 6718] <... prctl resumed>) = 0 [pid 6715] symlink("/dev/binderfs", "./binderfs" [pid 6703] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6719] <... set_robust_list resumed>) = 0 [pid 6718] setpgid(0, 0 [pid 6701] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6719] rt_sigprocmask(SIG_SETMASK, [] [pid 6718] <... setpgid resumed>) = 0 [pid 6703] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6719] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6718] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6703] <... futex resumed>) = 0 [pid 6702] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6718] <... openat resumed>) = 3 [pid 6703] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6718] write(3, "1000", 4) = 4 [ 134.407394][ T6716] EXT4-fs (loop1): free_blocks=20480 [ 134.407407][ T6716] EXT4-fs (loop1): dirty_blocks=464 [ 134.407417][ T6716] EXT4-fs (loop1): Block reservation details [ 134.407427][ T6716] EXT4-fs (loop1): i_reserved_data_blocks=28 [ 134.461844][ T6717] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 134.462333][ T6717] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 360 with error 28 [pid 6718] close(3 [pid 6717] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6718] <... close resumed>) = 0 [pid 6704] <... sendfile resumed>) = 372736 [pid 6718] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6704] +++ killed by SIGBUS +++ [pid 6718] write(1, "executing program\n", 18) = 18 executing program [pid 6718] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6717] +++ killed by SIGBUS +++ [pid 6702] +++ killed by SIGBUS +++ [pid 6719] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6718] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 5611] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6702, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6718] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6716] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 5611] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 6718] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6707] <... sendfile resumed>) = ? [pid 6703] <... futex resumed>) = ? [pid 5611] <... restart_syscall resumed>) = 0 [pid 6719] +++ killed by SIGBUS +++ [pid 6718] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6718] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c68000 [pid 6718] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6707] +++ killed by SIGBUS +++ [pid 6703] +++ killed by SIGBUS +++ [pid 6718] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6703, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6718] <... rt_sigprocmask resumed>, [], 8) = 0 [ 134.462358][ T6717] EXT4-fs (loop2): This should not happen!! Data will be lost [ 134.462358][ T6717] [ 134.462371][ T6717] EXT4-fs (loop2): Total free blocks count 0 [ 134.462383][ T6717] EXT4-fs (loop2): Free/Dirty block details [ 134.462395][ T6717] EXT4-fs (loop2): free_blocks=20480 [ 134.462407][ T6717] EXT4-fs (loop2): dirty_blocks=368 [ 134.462418][ T6717] EXT4-fs (loop2): Block reservation details [ 134.462429][ T6717] EXT4-fs (loop2): i_reserved_data_blocks=23 [pid 5614] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 6718] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 5614] <... restart_syscall resumed>) = 0 [pid 5611] umount2("./43", MNT_FORCE|UMOUNT_NOFOLLOWci2-upstream-fs/strace-static-x86_64: Process 6720 attached ) = -1 EINVAL (Invalid argument) [pid 5611] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6718] <... clone3 resumed> => {parent_tid=[6720]}, 88) = 6720 [pid 5611] <... openat resumed>) = 3 [pid 6720] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6718] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] umount2("./42", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] fstat(3 [pid 6720] <... rseq resumed>) = 0 [pid 6718] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6718] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6720] set_robust_list(0x7fef94c889a0, 24 [pid 6718] <... futex resumed>) = 0 [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6720] <... set_robust_list resumed>) = 0 [pid 6718] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] getdents64(3 [pid 6720] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6720] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] fstat(3 [pid 5611] umount2("./43/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5614] getdents64(3 [pid 6720] memfd_create("syzkaller", 0 [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6720] <... memfd_create resumed>) = 3 [pid 5614] umount2("./42/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6720] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fef8c868000 [pid 6720] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6715] <... symlink resumed>) = 0 [pid 6705] <... sendfile resumed>) = ? [pid 6705] +++ killed by SIGBUS +++ [ 134.494573][ T6719] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 134.496960][ T6719] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 284 with error 28 [ 134.496988][ T6719] EXT4-fs (loop4): This should not happen!! Data will be lost [ 134.496988][ T6719] [ 134.497002][ T6719] EXT4-fs (loop4): Total free blocks count 0 [ 134.497014][ T6719] EXT4-fs (loop4): Free/Dirty block details [ 134.497026][ T6719] EXT4-fs (loop4): free_blocks=20480 [pid 6720] munmap(0x7fef8c868000, 138412032 [pid 6716] +++ killed by SIGBUS +++ [pid 6715] write(1, "executing program\n", 18) = 18 [pid 6715] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 executing program [pid 6720] <... munmap resumed>) = 0 [pid 6715] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60}, NULL, 8) = 0 [pid 6715] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6720] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6701] +++ killed by SIGBUS +++ [pid 6715] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6715] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5610] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6701, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6720] <... openat resumed>) = 4 [pid 6715] <... mmap resumed>) = 0x7fef94c68000 [pid 5610] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 6715] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 5610] <... restart_syscall resumed>) = 0 [pid 6715] <... mprotect resumed>) = 0 [pid 6720] ioctl(4, LOOP_SET_FD, 3 [pid 6715] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5610] umount2("./42", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6715] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6715] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 5610] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6715] <... clone3 resumed> => {parent_tid=[6721]}, 88) = 6721 [pid 5610] fstat(3 [pid 6715] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6721 attached [pid 6715] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] getdents64(3 [pid 6721] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6720] <... ioctl resumed>) = 0 [pid 6715] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6715] <... futex resumed>) = 0 [pid 6715] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6720] close(3 [pid 5610] umount2("./42/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6720] <... close resumed>) = 0 [ 134.497038][ T6719] EXT4-fs (loop4): dirty_blocks=288 [ 134.497049][ T6719] EXT4-fs (loop4): Block reservation details [ 134.497060][ T6719] EXT4-fs (loop4): i_reserved_data_blocks=18 [ 134.623512][ T13] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 284 with max blocks 4 with error 28 [ 134.623541][ T13] EXT4-fs (loop4): This should not happen!! Data will be lost [ 134.623541][ T13] [ 134.624919][ T63] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 360 with max blocks 4 with error 28 [pid 6720] close(4 [pid 6721] <... rseq resumed>) = 0 [pid 6721] set_robust_list(0x7fef94c889a0, 24) = 0 [pid 6721] rt_sigprocmask(SIG_SETMASK, [] [pid 6720] <... close resumed>) = 0 [pid 6720] mkdir("./file1", 0777) = 0 [pid 6721] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6721] memfd_create("syzkaller", 0) = 3 [pid 6720] mount("/dev/loop0", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6721] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fef8c868000 [pid 5611] <... umount2 resumed>) = 0 [pid 6721] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5611] umount2("./43/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5611] newfstatat(AT_FDCWD, "./43/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] <... umount2 resumed>) = 0 [pid 5611] umount2("./43/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] umount2("./42/file1", MNT_FORCE|UMOUNT_NOFOLLOW [ 134.624945][ T63] EXT4-fs (loop2): This should not happen!! Data will be lost [ 134.624945][ T63] [ 134.628189][ T5614] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 134.628787][ T5611] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 5611] openat(AT_FDCWD, "./43/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] <... openat resumed>) = 4 [pid 5614] newfstatat(AT_FDCWD, "./42/file1" [pid 5611] fstat(4 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5614] umount2("./42/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] getdents64(4 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5614] openat(AT_FDCWD, "./42/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5611] getdents64(4, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5611] close(4 [pid 5614] <... openat resumed>) = 4 [pid 5611] <... close resumed>) = 0 [pid 5614] fstat(4 [pid 5611] rmdir("./43/file1" [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5611] <... rmdir resumed>) = 0 [pid 6721] <... write resumed>) = 524288 [pid 5614] getdents64(4 [pid 5611] umount2("./43/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6721] munmap(0x7fef8c868000, 138412032 [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6721] <... munmap resumed>) = 0 [pid 5614] getdents64(4 [pid 5611] newfstatat(AT_FDCWD, "./43/binderfs" [pid 6721] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5611] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] close(4) = 0 [pid 5614] rmdir("./42/file1" [pid 5611] unlink("./43/binderfs" [pid 6721] <... openat resumed>) = 4 [pid 5614] <... rmdir resumed>) = 0 [pid 6721] ioctl(4, LOOP_SET_FD, 3 [pid 5611] <... unlink resumed>) = 0 [pid 6721] <... ioctl resumed>) = 0 [pid 5614] umount2("./42/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6721] close(3 [pid 6720] <... mount resumed>) = 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] getdents64(3 [pid 5610] <... umount2 resumed>) = 0 [pid 6721] <... close resumed>) = 0 [pid 5614] newfstatat(AT_FDCWD, "./42/binderfs" [pid 6721] close(4 [pid 6720] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5614] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5610] umount2("./42/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6721] <... close resumed>) = 0 [pid 6721] mkdir("./file1", 0777 [pid 6720] <... openat resumed>) = 3 [pid 5611] close(3 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6720] chdir("./file1" [pid 5614] unlink("./42/binderfs" [pid 5611] <... close resumed>) = 0 [pid 6720] <... chdir resumed>) = 0 [pid 5614] <... unlink resumed>) = 0 [pid 5611] rmdir("./43" [pid 5610] newfstatat(AT_FDCWD, "./42/file1" [pid 6721] <... mkdir resumed>) = 0 [pid 6720] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5611] <... rmdir resumed>) = 0 [pid 6721] mount("/dev/loop3", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5610] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6720] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5614] getdents64(3 [pid 5610] umount2("./42/file1", MNT_FORCE|UMOUNT_NOFOLLOW [ 134.704019][ T5610] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6720] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5611] mkdir("./44", 0777 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6720] <... futex resumed>) = 1 [pid 6718] <... futex resumed>) = 0 [pid 6718] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] close(3 [pid 6718] <... futex resumed>) = 0 [pid 5614] <... close resumed>) = 0 [pid 5611] <... mkdir resumed>) = 0 [pid 5614] rmdir("./42" [pid 6720] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6718] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] <... rmdir resumed>) = 0 [pid 5614] mkdir("./43", 0777 [pid 5611] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6720] <... openat resumed>) = 4 [pid 5614] <... mkdir resumed>) = 0 [pid 5611] <... openat resumed>) = 3 [pid 5611] ioctl(3, LOOP_CLR_FD) = 0 [pid 5611] close(3 [pid 5610] openat(AT_FDCWD, "./42/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6720] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... openat resumed>) = 4 [pid 6720] <... futex resumed>) = 1 [pid 6718] <... futex resumed>) = 0 [pid 5610] fstat(4 [pid 6720] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6718] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6720] <... openat resumed>) = 5 [pid 6718] <... futex resumed>) = 0 [pid 5614] ioctl(3, LOOP_CLR_FD [pid 6720] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6718] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] <... ioctl resumed>) = 0 [pid 5610] getdents64(4 [pid 6720] <... futex resumed>) = 0 [pid 6720] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6718] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5614] close(3 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6718] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] getdents64(4 [pid 6720] <... futex resumed>) = 0 [pid 6718] <... futex resumed>) = 1 [pid 6720] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6718] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5610] close(4) = 0 [pid 5611] <... close resumed>) = 0 [pid 5610] rmdir("./42/file1" [pid 6720] <... openat resumed>) = 6 [pid 5614] <... close resumed>) = 0 [pid 5611] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6720] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... rmdir resumed>) = 0 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5611] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5610] umount2("./42/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6720] <... futex resumed>) = 1 [pid 6718] <... futex resumed>) = 0 [pid 5614] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5611] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6721] <... mount resumed>) = 0 [pid 6720] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6718] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5610] newfstatat(AT_FDCWD, "./42/binderfs"ci2-upstream-fs/strace-static-x86_64: Process 6727 attached [pid 6720] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6718] <... futex resumed>) = 0 [pid 6727] set_robust_list(0x5555748a66e0, 24 [pid 6721] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6720] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 5610] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6727] <... set_robust_list resumed>) = 0 [pid 6718] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] unlink("./42/binderfs"ci2-upstream-fs/strace-static-x86_64: Process 6726 attached [pid 6727] rt_sigprocmask(SIG_SETMASK, [] [pid 6720] <... mmap resumed>) = 0x200000000000 [pid 6727] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6726] set_robust_list(0x5555748a66e0, 24 [pid 6721] <... openat resumed>) = 3 [pid 6720] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6727 [pid 5611] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6726 [pid 5610] <... unlink resumed>) = 0 [pid 6727] chdir("./43" [pid 6726] <... set_robust_list resumed>) = 0 [pid 6721] chdir("./file1" [pid 6720] <... futex resumed>) = 1 [pid 6718] <... futex resumed>) = 0 [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] getdents64(3 [pid 6727] <... chdir resumed>) = 0 [pid 6726] rt_sigprocmask(SIG_SETMASK, [] [pid 6721] <... chdir resumed>) = 0 [pid 6720] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6718] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5611] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6727] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6726] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6721] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6720] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6718] <... futex resumed>) = 0 [pid 5610] close(3 [pid 6727] <... prctl resumed>) = 0 [pid 6726] chdir("./44" [pid 6721] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6720] sendfile(4, 5, NULL, 553647746 [pid 6718] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] <... close resumed>) = 0 [pid 6727] setpgid(0, 0 [pid 5610] rmdir("./42" [pid 6727] <... setpgid resumed>) = 0 [pid 6726] <... chdir resumed>) = 0 [pid 6721] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6726] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6721] <... futex resumed>) = 1 [pid 6715] <... futex resumed>) = 0 [pid 6727] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6726] <... prctl resumed>) = 0 [pid 6721] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5610] <... rmdir resumed>) = 0 [pid 6726] setpgid(0, 0 [pid 6727] <... openat resumed>) = 3 [pid 6726] <... setpgid resumed>) = 0 [pid 6721] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6715] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] mkdir("./43", 0777 [pid 6726] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6727] write(3, "1000", 4 [pid 6726] <... openat resumed>) = 3 [pid 6721] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 5610] <... mkdir resumed>) = 0 [pid 6727] <... write resumed>) = 4 [pid 6727] close(3 [pid 6715] <... futex resumed>) = 0 [pid 5610] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6727] <... close resumed>) = 0 [pid 5610] <... openat resumed>) = 3 [pid 5610] ioctl(3, LOOP_CLR_FD [pid 6727] symlink("/dev/binderfs", "./binderfs" [pid 5610] <... ioctl resumed>) = 0 [pid 6727] <... symlink resumed>) = 0 [pid 6726] write(3, "1000", 4 [pid 6715] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] close(3 [pid 6726] <... write resumed>) = 4 [pid 6726] close(3) = 0 [pid 6726] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6726] write(1, "executing program\n", 18) = 18 [pid 6726] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6721] <... openat resumed>) = 4 [pid 6726] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60}, NULL, 8) = 0 executing program [pid 6727] write(1, "executing program\n", 18) = 18 [pid 6726] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6721] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6715] <... futex resumed>) = 0 [pid 6721] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6715] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6721] <... openat resumed>) = 5 [pid 6715] <... futex resumed>) = 0 [pid 6727] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6726] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6715] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6727] <... futex resumed>) = 0 [pid 6726] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6721] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6726] <... mmap resumed>) = 0x7fef94c68000 [pid 6721] <... futex resumed>) = 1 [pid 6715] <... futex resumed>) = 0 [pid 6727] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6726] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6721] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6715] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6727] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6726] <... mprotect resumed>) = 0 [pid 6721] <... openat resumed>) = 6 [pid 6727] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6726] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6721] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6715] <... futex resumed>) = 0 [pid 6727] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6726] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6727] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6726] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6727] <... mmap resumed>) = 0x7fef94c68000 ci2-upstream-fs/strace-static-x86_64: Process 6728 attached [pid 6721] <... futex resumed>) = 0 [pid 6715] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6727] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6726] <... clone3 resumed> => {parent_tid=[6728]}, 88) = 6728 [pid 6718] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6728] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6727] <... mprotect resumed>) = 0 [pid 6726] rt_sigprocmask(SIG_SETMASK, [] [pid 6721] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6718] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6715] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6728] <... rseq resumed>) = 0 [pid 6727] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6726] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6718] <... futex resumed>) = 0 [pid 6715] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6728] set_robust_list(0x7fef94c889a0, 24 [pid 6727] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6726] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6718] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6728] <... set_robust_list resumed>) = 0 [pid 6727] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6726] <... futex resumed>) = 0 [pid 6721] <... futex resumed>) = 0 [pid 6718] <... mmap resumed>) = 0x7fef94c47000 [pid 6715] <... futex resumed>) = 1 ci2-upstream-fs/strace-static-x86_64: Process 6729 attached [pid 6728] rt_sigprocmask(SIG_SETMASK, [] [pid 6726] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6721] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6718] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6715] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... close resumed>) = 0 [pid 6729] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6728] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6727] <... clone3 resumed> => {parent_tid=[6729]}, 88) = 6729 [pid 6721] <... mmap resumed>) = 0x200000000000 [pid 6718] <... mprotect resumed>) = 0 [pid 6729] <... rseq resumed>) = 0 [pid 6728] memfd_create("syzkaller", 0 [pid 6727] rt_sigprocmask(SIG_SETMASK, [] [pid 6721] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6718] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5610] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6729] set_robust_list(0x7fef94c889a0, 24 [pid 6728] <... memfd_create resumed>) = 3 [pid 6727] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6721] <... futex resumed>) = 1 [pid 6718] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6715] <... futex resumed>) = 0 [pid 6729] <... set_robust_list resumed>) = 0 [pid 6728] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6727] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6721] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6718] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5610] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6729] rt_sigprocmask(SIG_SETMASK, [] [pid 6728] <... mmap resumed>) = 0x7fef8c868000 [pid 6727] <... futex resumed>) = 0 [pid 6721] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6715] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 6730 attached [pid 6729] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6727] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6721] sendfile(4, 5, NULL, 553647746 [pid 6715] <... futex resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6731 attached [pid 6730] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6729] memfd_create("syzkaller", 0 [pid 6728] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6718] <... clone3 resumed> => {parent_tid=[6730]}, 88) = 6730 [pid 6715] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6731] set_robust_list(0x5555748a66e0, 24 [pid 6730] <... rseq resumed>) = 0 [pid 6729] <... memfd_create resumed>) = 3 [pid 6718] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6731 [pid 6731] <... set_robust_list resumed>) = 0 [pid 6730] set_robust_list(0x7fef94c679a0, 24 [pid 6729] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6718] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] rt_sigprocmask(SIG_SETMASK, [] [pid 6731] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6731] chdir("./43" [pid 6730] <... set_robust_list resumed>) = 0 [pid 6729] <... mmap resumed>) = 0x7fef8c868000 [pid 6718] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6731] <... chdir resumed>) = 0 [pid 6730] rt_sigprocmask(SIG_SETMASK, [] [pid 6718] <... futex resumed>) = 0 [pid 6731] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6718] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6731] <... prctl resumed>) = 0 [pid 6731] setpgid(0, 0) = 0 [pid 6731] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6730] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6729] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6728] <... write resumed>) = 524288 [pid 6731] <... openat resumed>) = 3 [pid 6728] munmap(0x7fef8c868000, 138412032 [pid 6715] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 135.002678][ T6720] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 135.004544][ T6730] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1276 with error 28 [ 135.004564][ T6730] EXT4-fs (loop0): This should not happen!! Data will be lost [ 135.004564][ T6730] [ 135.004572][ T6730] EXT4-fs (loop0): Total free blocks count 0 [ 135.004579][ T6730] EXT4-fs (loop0): Free/Dirty block details [pid 6729] <... write resumed>) = 524288 [pid 6718] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6731] write(3, "1000", 4 [pid 6729] munmap(0x7fef8c868000, 138412032 [pid 6728] <... munmap resumed>) = 0 [pid 6715] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6731] <... write resumed>) = 4 [pid 6731] close(3 [pid 6729] <... munmap resumed>) = 0 [pid 6715] <... futex resumed>) = 0 [pid 6731] <... close resumed>) = 0 [pid 6731] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6729] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6728] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6715] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6731] write(1, "executing program\n", 18 [pid 6729] <... openat resumed>) = 4 [pid 6728] <... openat resumed>) = 4 [pid 6715] <... mmap resumed>) = 0x7fef94c47000 [pid 6731] <... write resumed>) = 18 [pid 6728] ioctl(4, LOOP_SET_FD, 3 [pid 6731] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6715] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6731] <... futex resumed>) = 0 executing program [pid 6728] <... ioctl resumed>) = 0 [pid 6715] <... mprotect resumed>) = 0 [pid 6731] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6729] ioctl(4, LOOP_SET_FD, 3 [pid 6715] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6731] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6729] <... ioctl resumed>) = 0 [pid 6731] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6728] close(3 [pid 6715] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6731] <... rt_sigprocmask resumed>, NULL, 8) = 0 [ 135.004586][ T6730] EXT4-fs (loop0): free_blocks=20480 [ 135.004593][ T6730] EXT4-fs (loop0): dirty_blocks=1280 [ 135.004599][ T6730] EXT4-fs (loop0): Block reservation details [ 135.004605][ T6730] EXT4-fs (loop0): i_reserved_data_blocks=80 [pid 6715] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6731] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6730] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6729] close(3 [pid 6728] <... close resumed>) = 0 [pid 6720] <... sendfile resumed>) = 1306624 ci2-upstream-fs/strace-static-x86_64: Process 6732 attached [pid 6731] <... mmap resumed>) = 0x7fef94c68000 [pid 6731] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6720] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6731] <... mprotect resumed>) = 0 [pid 6731] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6729] <... close resumed>) = 0 [pid 6728] close(4 [pid 6720] <... futex resumed>) = 0 [pid 6715] <... clone3 resumed> => {parent_tid=[6732]}, 88) = 6732 [pid 6729] close(4 [pid 6728] <... close resumed>) = 0 [pid 6720] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6715] rt_sigprocmask(SIG_SETMASK, [] [pid 6732] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6729] <... close resumed>) = 0 [pid 6732] <... rseq resumed>) = 0 [pid 6731] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6728] mkdir("./file1", 0777 [pid 6715] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6732] set_robust_list(0x7fef94c679a0, 24 [pid 6731] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6715] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6732] <... set_robust_list resumed>) = 0 [pid 6729] mkdir("./file1", 0777 [pid 6715] <... futex resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6733 attached [pid 6731] <... clone3 resumed> => {parent_tid=[6733]}, 88) = 6733 [pid 6715] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6731] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6732] rt_sigprocmask(SIG_SETMASK, [] [pid 6729] <... mkdir resumed>) = 0 [pid 6720] <... futex resumed>) = ? [pid 6732] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6731] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6720] +++ killed by SIGBUS +++ [pid 6731] <... futex resumed>) = 0 [pid 6731] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6728] <... mkdir resumed>) = 0 [ 135.137846][ T6732] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 135.142327][ T6732] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 448 with error 28 [ 135.142357][ T6732] EXT4-fs (loop3): This should not happen!! Data will be lost [ 135.142357][ T6732] [ 135.142370][ T6732] EXT4-fs (loop3): Total free blocks count 0 [ 135.142382][ T6732] EXT4-fs (loop3): Free/Dirty block details [pid 6733] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6730] +++ killed by SIGBUS +++ [pid 6729] mount("/dev/loop4", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6728] mount("/dev/loop2", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6718] +++ killed by SIGBUS +++ [pid 6732] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6721] <... sendfile resumed>) = 462848 [pid 6715] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6733] <... rseq resumed>) = 0 [pid 6721] +++ killed by SIGBUS +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6718, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 6733] set_robust_list(0x7fef94c889a0, 24) = 0 [pid 6733] rt_sigprocmask(SIG_SETMASK, [] [pid 6732] +++ killed by SIGBUS +++ [pid 6715] +++ killed by SIGBUS +++ [pid 6733] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5612] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6715, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6733] memfd_create("syzkaller", 0) = 3 [pid 6733] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fef8c868000 [pid 5612] umount2("./44", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5612] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5612] fstat(3 [pid 6733] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6729] <... mount resumed>) = 0 [pid 6728] <... mount resumed>) = 0 [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] umount2("./43", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6729] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5612] getdents64(3 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6729] <... openat resumed>) = 3 [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5612] umount2("./44/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 135.142394][ T6732] EXT4-fs (loop3): free_blocks=20480 [ 135.142408][ T6732] EXT4-fs (loop3): dirty_blocks=448 [ 135.142419][ T6732] EXT4-fs (loop3): Block reservation details [ 135.142430][ T6732] EXT4-fs (loop3): i_reserved_data_blocks=28 [pid 6728] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6733] <... write resumed>) = 524288 [pid 6729] chdir("./file1" [pid 6728] chdir("./file1" [pid 5609] <... openat resumed>) = 3 [pid 6733] munmap(0x7fef8c868000, 138412032 [pid 6729] <... chdir resumed>) = 0 [pid 6728] <... chdir resumed>) = 0 [pid 5609] fstat(3 [pid 6733] <... munmap resumed>) = 0 [pid 6729] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6728] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6729] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6728] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6733] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6729] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6728] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] getdents64(3 [pid 6733] <... openat resumed>) = 4 [pid 6729] <... futex resumed>) = 1 [pid 6728] <... futex resumed>) = 1 [pid 6727] <... futex resumed>) = 0 [pid 6726] <... futex resumed>) = 0 [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6727] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6726] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] umount2("./43/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6727] <... futex resumed>) = 0 [pid 6726] <... futex resumed>) = 0 [pid 6733] ioctl(4, LOOP_SET_FD, 3 [pid 6729] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6728] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6727] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6726] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6733] <... ioctl resumed>) = 0 [pid 6729] <... openat resumed>) = 4 [pid 6728] <... openat resumed>) = 4 [pid 6728] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6726] <... futex resumed>) = 0 [pid 6733] close(3) = 0 [pid 6726] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6733] close(4 [pid 6729] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6733] <... close resumed>) = 0 [pid 6729] <... futex resumed>) = 1 [pid 6726] <... futex resumed>) = 0 [pid 6733] mkdir("./file1", 0777 [pid 6726] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6728] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6727] <... futex resumed>) = 0 [pid 6733] <... mkdir resumed>) = 0 [pid 6729] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6728] <... openat resumed>) = 5 [pid 6727] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6729] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6729] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC) = 5 [pid 6733] mount("/dev/loop1", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6729] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6727] <... futex resumed>) = 0 [pid 6729] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6727] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6728] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6727] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6726] <... futex resumed>) = 0 [pid 6728] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6727] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6726] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6728] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6727] <... futex resumed>) = 1 [pid 6726] <... futex resumed>) = 0 [pid 6729] <... futex resumed>) = 0 [pid 6728] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6729] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6727] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6726] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6729] <... openat resumed>) = 6 [pid 6728] <... openat resumed>) = 6 [pid 6729] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6728] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6729] <... futex resumed>) = 1 [pid 6728] <... futex resumed>) = 1 [pid 6726] <... futex resumed>) = 0 [pid 6727] <... futex resumed>) = 0 [pid 6727] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6726] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6727] <... futex resumed>) = 0 [pid 6726] <... futex resumed>) = 0 [pid 6727] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6726] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6729] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6728] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 6729] <... mmap resumed>) = 0x200000000000 [pid 6728] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6726] <... futex resumed>) = 0 [pid 6728] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6729] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6726] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6729] <... futex resumed>) = 1 [pid 6727] <... futex resumed>) = 0 [pid 6728] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6729] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6728] sendfile(4, 5, NULL, 553647746 [pid 6726] <... futex resumed>) = 0 [pid 6727] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [ 135.272175][ T177] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 448 with max blocks 4 with error 28 [ 135.272207][ T177] EXT4-fs (loop3): This should not happen!! Data will be lost [ 135.272207][ T177] [ 135.278823][ T5612] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6726] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6733] <... mount resumed>) = 0 [pid 6729] <... futex resumed>) = 0 [pid 6727] <... futex resumed>) = 1 [pid 6729] sendfile(4, 5, NULL, 553647746 [pid 6733] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6727] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6733] <... openat resumed>) = 3 [pid 6733] chdir("./file1" [pid 5612] <... umount2 resumed>) = 0 [pid 6733] <... chdir resumed>) = 0 [pid 6733] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5612] umount2("./44/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5612] newfstatat(AT_FDCWD, "./44/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5612] umount2("./44/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5612] openat(AT_FDCWD, "./44/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6733] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6733] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... openat resumed>) = 4 [pid 6733] <... futex resumed>) = 1 [pid 6731] <... futex resumed>) = 0 [pid 6733] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6731] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] fstat(4 [pid 6731] <... futex resumed>) = 0 [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6731] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] getdents64(4 [pid 6733] <... openat resumed>) = 4 [pid 6733] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6733] <... futex resumed>) = 1 [pid 6731] <... futex resumed>) = 0 [pid 5612] getdents64(4 [pid 6731] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6733] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6731] <... futex resumed>) = 0 [pid 6733] <... openat resumed>) = 5 [pid 6731] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] close(4 [pid 6733] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6731] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6733] <... futex resumed>) = 0 [pid 6731] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... close resumed>) = 0 [pid 6733] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6731] <... futex resumed>) = 0 [pid 5612] rmdir("./44/file1" [pid 6731] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6726] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6733] <... openat resumed>) = 6 [pid 6726] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... rmdir resumed>) = 0 [pid 6733] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6726] <... futex resumed>) = 0 [pid 6733] <... futex resumed>) = 1 [pid 6731] <... futex resumed>) = 0 [pid 6726] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [ 135.359062][ T5609] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 5612] umount2("./44/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6733] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6731] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6726] <... mmap resumed>) = 0x7fef94c47000 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6731] <... futex resumed>) = 0 [pid 6727] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6726] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 5612] newfstatat(AT_FDCWD, "./44/binderfs" [pid 6733] <... mmap resumed>) = 0x200000000000 [pid 6731] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6727] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6726] <... mprotect resumed>) = 0 [pid 5612] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6727] <... futex resumed>) = 0 [pid 6727] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5612] unlink("./44/binderfs" [pid 6727] <... mmap resumed>) = 0x7fef94c47000 [pid 6726] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5612] <... unlink resumed>) = 0 [pid 5609] <... umount2 resumed>) = 0 [pid 6733] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6727] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6726] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5612] getdents64(3 [pid 5609] umount2("./43/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6733] <... futex resumed>) = 1 [pid 6731] <... futex resumed>) = 0 [pid 6727] <... mprotect resumed>) = 0 [pid 6726] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 6740 attached [pid 6733] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6731] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6740] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6733] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6731] <... futex resumed>) = 0 [pid 6727] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6726] <... clone3 resumed> => {parent_tid=[6740]}, 88) = 6740 [pid 5612] close(3 [pid 6740] <... rseq resumed>) = 0 [pid 6733] sendfile(4, 5, NULL, 553647746 [pid 6731] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6727] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6726] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] <... close resumed>) = 0 [pid 5609] newfstatat(AT_FDCWD, "./43/file1" [pid 6740] set_robust_list(0x7fef94c679a0, 24 [pid 6727] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6726] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5612] rmdir("./44" [pid 5609] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6741 attached [pid 6740] <... set_robust_list resumed>) = 0 [pid 6726] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... rmdir resumed>) = 0 [pid 5609] umount2("./43/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6741] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6740] rt_sigprocmask(SIG_SETMASK, [] [pid 6727] <... clone3 resumed> => {parent_tid=[6741]}, 88) = 6741 [pid 6726] <... futex resumed>) = 0 [pid 6741] <... rseq resumed>) = 0 [pid 6740] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6727] rt_sigprocmask(SIG_SETMASK, [] [pid 6726] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] mkdir("./45", 0777 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6741] set_robust_list(0x7fef94c679a0, 24 [pid 6727] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6741] <... set_robust_list resumed>) = 0 [pid 6727] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... mkdir resumed>) = 0 [pid 5609] openat(AT_FDCWD, "./43/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6741] rt_sigprocmask(SIG_SETMASK, [] [pid 6727] <... futex resumed>) = 0 [pid 6741] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6727] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] <... openat resumed>) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] getdents64(4, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./43/file1") = 0 [pid 5609] umount2("./43/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6731] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5609] newfstatat(AT_FDCWD, "./43/binderfs" [pid 6731] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5609] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6731] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c47000 [pid 5609] unlink("./43/binderfs" [pid 6731] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5609] <... unlink resumed>) = 0 [pid 5609] getdents64(3, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./43") = 0 [pid 5609] mkdir("./44", 0777 [pid 6726] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5609] <... mkdir resumed>) = 0 [ 135.467693][ T6740] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 135.470055][ T6740] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 684 with error 28 [ 135.470087][ T6740] EXT4-fs (loop2): This should not happen!! Data will be lost [ 135.470087][ T6740] [ 135.470101][ T6740] EXT4-fs (loop2): Total free blocks count 0 [ 135.470112][ T6740] EXT4-fs (loop2): Free/Dirty block details [pid 6731] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6731] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 6742 attached => {parent_tid=[6742]}, 88) = 6742 [pid 6731] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6731] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6742] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6731] <... futex resumed>) = 0 [pid 6742] <... rseq resumed>) = 0 [pid 6731] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] <... openat resumed>) = 3 [pid 6742] set_robust_list(0x7fef94c679a0, 24 [pid 5609] ioctl(3, LOOP_CLR_FD [pid 6742] <... set_robust_list resumed>) = 0 [pid 6742] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] <... ioctl resumed>) = 0 [pid 6742] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] close(3 [pid 6727] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6740] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6728] <... sendfile resumed>) = 700416 [pid 6728] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6728] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5612] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5609] <... close resumed>) = 0 [ 135.470125][ T6740] EXT4-fs (loop2): free_blocks=20480 [ 135.470138][ T6740] EXT4-fs (loop2): dirty_blocks=688 [ 135.470150][ T6740] EXT4-fs (loop2): Block reservation details [ 135.470161][ T6740] EXT4-fs (loop2): i_reserved_data_blocks=43 [ 135.500931][ T6741] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 6743 attached [pid 6728] <... futex resumed>) = ? [pid 5612] <... openat resumed>) = 3 [pid 6740] +++ killed by SIGBUS +++ [pid 6731] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6728] +++ killed by SIGBUS +++ [pid 6743] set_robust_list(0x5555748a66e0, 24) = 0 [pid 5612] ioctl(3, LOOP_CLR_FD) = 0 [pid 5609] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6743 [pid 6743] rt_sigprocmask(SIG_SETMASK, [] [pid 6726] +++ killed by SIGBUS +++ [pid 5612] close(3 [pid 6743] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 6743] chdir("./44" [pid 5611] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6726, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6743] <... chdir resumed>) = 0 [pid 6743] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6743] setpgid(0, 0 [pid 6742] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6743] <... setpgid resumed>) = 0 [pid 6743] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6733] <... sendfile resumed>) = 438272 [pid 6743] <... openat resumed>) = 3 [ 135.501124][ T6741] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 268 with error 28 [ 135.501146][ T6741] EXT4-fs (loop4): This should not happen!! Data will be lost [ 135.501146][ T6741] [ 135.501159][ T6741] EXT4-fs (loop4): Total free blocks count 0 [ 135.501169][ T6741] EXT4-fs (loop4): Free/Dirty block details [ 135.501178][ T6741] EXT4-fs (loop4): free_blocks=20480 [ 135.501189][ T6741] EXT4-fs (loop4): dirty_blocks=272 [ 135.544830][ T6742] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [pid 6733] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6743] write(3, "1000", 4 [pid 5612] <... close resumed>) = 0 [pid 6733] +++ killed by SIGBUS +++ [pid 6743] <... write resumed>) = 4 [pid 6743] close(3 [pid 5611] umount2("./44", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6743] <... close resumed>) = 0 [pid 6743] symlink("/dev/binderfs", "./binderfs" [pid 5612] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6742] +++ killed by SIGBUS +++ [pid 6731] +++ killed by SIGBUS +++ [pid 5612] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6743] <... symlink resumed>) = 0 [pid 5612] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6743] write(1, "executing program\n", 18 [pid 5611] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5610] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6731, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=11 /* 0.11 s */} --- executing program ci2-upstream-fs/strace-static-x86_64: Process 6744 attached [pid 6743] <... write resumed>) = 18 [pid 5611] <... openat resumed>) = 3 [pid 5610] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 6744] set_robust_list(0x5555748a66e0, 24 [pid 6743] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6744] <... set_robust_list resumed>) = 0 [pid 6743] <... futex resumed>) = 0 [pid 5612] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6744 [pid 5610] <... restart_syscall resumed>) = 0 [pid 6744] rt_sigprocmask(SIG_SETMASK, [] [pid 6743] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 5612] rt_sigprocmask(SIG_SETMASK, [] [pid 5611] fstat(3 [pid 6744] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6743] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6743] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6744] chdir("./45" [pid 6743] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6744] <... chdir resumed>) = 0 [pid 6743] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5612] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6744] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6743] <... mmap resumed>) = 0x7fef94c68000 [pid 5610] umount2("./43", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6744] <... prctl resumed>) = 0 [pid 6743] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 5611] getdents64(3 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6744] setpgid(0, 0 [pid 6743] <... mprotect resumed>) = 0 [ 135.546279][ T6742] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 428 with error 28 [ 135.546306][ T6742] EXT4-fs (loop1): This should not happen!! Data will be lost [ 135.546306][ T6742] [ 135.546320][ T6742] EXT4-fs (loop1): Total free blocks count 0 [ 135.546332][ T6742] EXT4-fs (loop1): Free/Dirty block details [ 135.546343][ T6742] EXT4-fs (loop1): free_blocks=20480 [ 135.546357][ T6742] EXT4-fs (loop1): dirty_blocks=432 [ 135.546368][ T6742] EXT4-fs (loop1): Block reservation details [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5610] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6744] <... setpgid resumed>) = 0 [pid 6743] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6744] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5610] <... openat resumed>) = 3 [pid 6744] <... openat resumed>) = 3 [pid 6743] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5611] umount2("./44/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6744] write(3, "1000", 4 [pid 6743] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0}ci2-upstream-fs/strace-static-x86_64: Process 6745 attached [pid 6744] <... write resumed>) = 4 [pid 5610] fstat(3 [pid 6745] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6744] close(3 [pid 6743] <... clone3 resumed> => {parent_tid=[6745]}, 88) = 6745 [pid 6744] <... close resumed>) = 0 [pid 6743] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6745] <... rseq resumed>) = 0 [pid 6744] symlink("/dev/binderfs", "./binderfs" [pid 6743] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] getdents64(3 [pid 6745] set_robust_list(0x7fef94c889a0, 24 [pid 6741] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6729] <... sendfile resumed>) = 274432 [pid 6745] <... set_robust_list resumed>) = 0 [pid 6744] <... symlink resumed>) = 0 [pid 6743] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6745] rt_sigprocmask(SIG_SETMASK, [] [pid 6743] <... futex resumed>) = 0 [pid 6729] +++ killed by SIGBUS +++ [pid 5610] umount2("./43/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6745] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6744] write(1, "executing program\n", 18 executing program [pid 6743] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6745] memfd_create("syzkaller", 0 [pid 6744] <... write resumed>) = 18 [pid 6741] +++ killed by SIGBUS +++ [pid 6727] +++ killed by SIGBUS +++ [pid 6745] <... memfd_create resumed>) = 3 [pid 6744] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6745] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6744] <... futex resumed>) = 0 [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6727, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6745] <... mmap resumed>) = 0x7fef8c868000 [pid 6744] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [ 135.546379][ T6742] EXT4-fs (loop1): i_reserved_data_blocks=27 [ 135.551304][ T6741] EXT4-fs (loop4): Block reservation details [ 135.551321][ T6741] EXT4-fs (loop4): i_reserved_data_blocks=17 [pid 5614] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 6744] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6744] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 5614] <... restart_syscall resumed>) = 0 [pid 6744] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6744] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c68000 [pid 6745] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6744] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 5614] umount2("./43", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6744] <... mprotect resumed>) = 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6744] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5614] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6744] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6744] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 5614] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6746 attached [pid 6745] <... write resumed>) = 524288 [pid 5614] getdents64(3 [pid 6745] munmap(0x7fef8c868000, 138412032 [pid 6744] <... clone3 resumed> => {parent_tid=[6746]}, 88) = 6746 [pid 6745] <... munmap resumed>) = 0 [pid 6744] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6746] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6745] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6744] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6746] <... rseq resumed>) = 0 [pid 5614] umount2("./43/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6746] set_robust_list(0x7fef94c889a0, 24 [pid 6744] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6746] <... set_robust_list resumed>) = 0 [pid 6744] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6746] rt_sigprocmask(SIG_SETMASK, [] [pid 6745] <... openat resumed>) = 4 [pid 6746] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6746] memfd_create("syzkaller", 0 [pid 6745] ioctl(4, LOOP_SET_FD, 3 [pid 6746] <... memfd_create resumed>) = 3 [ 135.706816][ T5611] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6746] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fef8c868000 [pid 6745] <... ioctl resumed>) = 0 [pid 6745] close(3) = 0 [pid 6745] close(4) = 0 [pid 6745] mkdir("./file1", 0777) = 0 [pid 6746] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6745] mount("/dev/loop0", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5611] <... umount2 resumed>) = 0 [pid 6746] <... write resumed>) = 524288 [pid 5611] umount2("./44/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6746] munmap(0x7fef8c868000, 138412032) = 0 [pid 5611] newfstatat(AT_FDCWD, "./44/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] umount2("./44/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5611] openat(AT_FDCWD, "./44/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5611] fstat(4 [pid 6746] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6746] <... openat resumed>) = 4 [pid 5611] getdents64(4, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6746] ioctl(4, LOOP_SET_FD, 3 [pid 5611] getdents64(4, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5611] close(4) = 0 [pid 5611] rmdir("./44/file1") = 0 [pid 5611] umount2("./44/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5611] newfstatat(AT_FDCWD, "./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] unlink("./44/binderfs" [pid 6746] <... ioctl resumed>) = 0 [ 135.772349][ T6745] set_capacity_and_notify: 14 callbacks suppressed [ 135.772361][ T6745] loop0: detected capacity change from 0 to 1024 [ 135.790844][ T5614] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 135.792900][ T5610] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 5611] <... unlink resumed>) = 0 [pid 6746] close(3 [pid 5611] getdents64(3, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5611] close(3) = 0 [pid 5611] rmdir("./44") = 0 [pid 6746] <... close resumed>) = 0 [pid 6746] close(4 [pid 6745] <... mount resumed>) = 0 [pid 6746] <... close resumed>) = 0 [pid 6745] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6746] mkdir("./file1", 0777 [pid 6745] <... openat resumed>) = 3 [pid 5614] <... umount2 resumed>) = 0 [pid 6745] chdir("./file1") = 0 [pid 6745] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5611] mkdir("./45", 0777 [pid 6745] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6745] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] umount2("./43/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6745] <... futex resumed>) = 1 [pid 6743] <... futex resumed>) = 0 [pid 5610] <... umount2 resumed>) = 0 [pid 6745] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6743] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6746] <... mkdir resumed>) = 0 [pid 6745] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6743] <... futex resumed>) = 0 [pid 5611] <... mkdir resumed>) = 0 [pid 5610] umount2("./43/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6745] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 5614] newfstatat(AT_FDCWD, "./43/file1" [pid 6746] mount("/dev/loop3", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6743] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6745] <... openat resumed>) = 4 [pid 5614] umount2("./43/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] <... openat resumed>) = 3 [pid 5610] newfstatat(AT_FDCWD, "./43/file1" [pid 6745] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./43/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5610] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6745] <... futex resumed>) = 1 [pid 6743] <... futex resumed>) = 0 [pid 5614] <... openat resumed>) = 4 [ 135.843109][ T6746] loop3: detected capacity change from 0 to 1024 [ 135.893345][ T37] kauditd_printk_skb: 13 callbacks suppressed [pid 5611] ioctl(3, LOOP_CLR_FD [pid 6745] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6743] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] fstat(4 [pid 5610] umount2("./43/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6743] <... futex resumed>) = 0 [pid 5611] <... ioctl resumed>) = 0 [pid 6743] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] close(3) = 0 [pid 5611] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5611] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 6749 attached [pid 6749] set_robust_list(0x5555748a66e0, 24) = 0 [pid 5611] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6749 [pid 6749] rt_sigprocmask(SIG_SETMASK, [] [pid 6745] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5611] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6749] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] getdents64(4 [pid 5611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] openat(AT_FDCWD, "./43/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6745] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5614] getdents64(4 [pid 5610] <... openat resumed>) = 4 [pid 6745] <... openat resumed>) = 5 [pid 6745] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6749] chdir("./45" [pid 6745] <... futex resumed>) = 1 [pid 6743] <... futex resumed>) = 0 [pid 5614] close(4 [pid 5610] fstat(4 [pid 6749] <... chdir resumed>) = 0 [pid 6743] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6749] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6745] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6743] <... futex resumed>) = 0 [pid 5614] <... close resumed>) = 0 [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6749] <... prctl resumed>) = 0 [pid 6743] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6749] setpgid(0, 0 [pid 5610] getdents64(4 [pid 6749] <... setpgid resumed>) = 0 [pid 6745] <... openat resumed>) = 6 [pid 5614] rmdir("./43/file1" [pid 6749] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6749] <... openat resumed>) = 3 [pid 5614] <... rmdir resumed>) = 0 [pid 6749] write(3, "1000", 4 [pid 5610] getdents64(4 [pid 6749] <... write resumed>) = 4 [pid 6745] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] umount2("./43/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6749] close(3 [pid 5610] close(4 [pid 6749] <... close resumed>) = 0 [pid 6745] <... futex resumed>) = 1 [pid 6743] <... futex resumed>) = 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] <... close resumed>) = 0 [pid 6749] symlink("/dev/binderfs", "./binderfs" [pid 5614] newfstatat(AT_FDCWD, "./43/binderfs" [pid 6745] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5610] rmdir("./43/file1" [pid 6745] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6743] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5610] <... rmdir resumed>) = 0 [pid 6745] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 5610] umount2("./43/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6749] <... symlink resumed>) = 0 [pid 6746] <... mount resumed>) = 0 [pid 6745] <... mmap resumed>) = 0x200000000000 [pid 6743] <... futex resumed>) = 0 [pid 5614] unlink("./43/binderfs" [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6749] write(1, "executing program\n", 18 [pid 6743] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6749] <... write resumed>) = 18 [pid 6746] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5610] newfstatat(AT_FDCWD, "./43/binderfs" [pid 6749] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... unlink resumed>) = 0 [pid 6746] <... openat resumed>) = 3 [pid 6749] <... futex resumed>) = 0 executing program [pid 6749] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60}, NULL, 8) = 0 [pid 6746] chdir("./file1" [pid 6749] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6749] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6745] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6749] <... mmap resumed>) = 0x7fef94c68000 [pid 6745] <... futex resumed>) = 1 [pid 6743] <... futex resumed>) = 0 [pid 5614] getdents64(3 [pid 6749] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6743] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6749] <... mprotect resumed>) = 0 [pid 6746] <... chdir resumed>) = 0 [pid 6745] sendfile(4, 5, NULL, 553647746 [pid 6743] <... futex resumed>) = 0 [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5610] unlink("./43/binderfs" [pid 6749] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6746] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6743] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6749] <... rt_sigprocmask resumed>, [], 8) = 0 [ 135.893363][ T37] audit: type=1800 audit(1785844666.294:224): pid=6745 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop0" ino=15 res=0 errno=0 [pid 5610] <... unlink resumed>) = 0 [pid 6749] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6746] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5614] close(3ci2-upstream-fs/strace-static-x86_64: Process 6752 attached [pid 6746] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... close resumed>) = 0 [pid 5610] getdents64(3 [pid 6752] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 6752] set_robust_list(0x7fef94c889a0, 24 [pid 5614] rmdir("./43" [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6752] <... set_robust_list resumed>) = 0 [pid 5610] close(3 [pid 6752] rt_sigprocmask(SIG_SETMASK, [] [pid 6749] <... clone3 resumed> => {parent_tid=[6752]}, 88) = 6752 [pid 6746] <... futex resumed>) = 1 [pid 6744] <... futex resumed>) = 0 [pid 5614] <... rmdir resumed>) = 0 [pid 5610] <... close resumed>) = 0 [pid 6752] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6749] rt_sigprocmask(SIG_SETMASK, [] [pid 6746] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6749] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6749] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6744] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] rmdir("./43" [pid 6752] memfd_create("syzkaller", 0 [pid 6749] <... futex resumed>) = 0 [pid 5614] mkdir("./44", 0777 [pid 6752] <... memfd_create resumed>) = 3 [pid 6746] <... futex resumed>) = 0 [pid 6744] <... futex resumed>) = 1 [pid 6749] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5610] <... rmdir resumed>) = 0 [pid 6746] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6744] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6752] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6746] <... openat resumed>) = 4 [pid 6743] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5614] <... mkdir resumed>) = 0 [pid 5610] mkdir("./44", 0777 [pid 6743] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6752] <... mmap resumed>) = 0x7fef8c868000 [pid 6743] <... futex resumed>) = 0 [pid 6743] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c47000 [pid 6743] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6743] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5610] <... mkdir resumed>) = 0 [pid 6743] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6743] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6746] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] openat(AT_FDCWD, "/dev/loop4", O_RDWRci2-upstream-fs/strace-static-x86_64: Process 6753 attached [pid 6752] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6746] <... futex resumed>) = 1 [pid 6744] <... futex resumed>) = 0 [pid 5614] <... openat resumed>) = 3 [pid 5610] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6746] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6744] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6743] <... clone3 resumed> => {parent_tid=[6753]}, 88) = 6753 [pid 5614] ioctl(3, LOOP_CLR_FD [pid 5610] <... openat resumed>) = 3 [pid 6753] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 6746] <... openat resumed>) = 5 [pid 6744] <... futex resumed>) = 0 [pid 6743] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] <... ioctl resumed>) = 0 [pid 6753] set_robust_list(0x7fef94c679a0, 24 [pid 6746] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6744] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6743] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] close(3 [pid 5610] ioctl(3, LOOP_CLR_FD [pid 6753] <... set_robust_list resumed>) = 0 [pid 6746] <... futex resumed>) = 0 [pid 6744] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6743] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... ioctl resumed>) = 0 [pid 6753] rt_sigprocmask(SIG_SETMASK, [] [pid 6746] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6744] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6743] <... futex resumed>) = 0 [pid 5610] close(3 [pid 6753] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6746] <... openat resumed>) = 6 [pid 6744] <... futex resumed>) = 0 [ 136.022989][ T37] audit: type=1800 audit(1785844666.424:225): pid=6746 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop3" ino=15 res=0 errno=0 [pid 6743] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6752] <... write resumed>) = 524288 [pid 6746] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6744] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... close resumed>) = 0 [pid 6744] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6746] <... futex resumed>) = 0 [pid 6744] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6746] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6744] <... futex resumed>) = 0 [ 136.092324][ T6753] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 136.092552][ T6753] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 932 with error 28 [ 136.092575][ T6753] EXT4-fs (loop0): This should not happen!! Data will be lost [ 136.092575][ T6753] [ 136.092589][ T6753] EXT4-fs (loop0): Total free blocks count 0 [ 136.092601][ T6753] EXT4-fs (loop0): Free/Dirty block details [pid 5610] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6752] munmap(0x7fef8c868000, 138412032 [pid 6744] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] <... close resumed>) = 0 [pid 6752] <... munmap resumed>) = 0 [pid 6752] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6752] <... openat resumed>) = 4 [pid 5614] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6752] ioctl(4, LOOP_SET_FD, 3 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6752] <... ioctl resumed>) = 0 [pid 6752] close(3) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6754 attached [pid 6752] close(4) = 0 [pid 5614] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6754 [pid 6752] mkdir("./file1", 0777 [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 6752] <... mkdir resumed>) = 0 [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6754] set_robust_list(0x5555748a66e0, 24) = 0 [pid 6752] mount("/dev/loop2", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6754] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6754] chdir("./44") = 0 [pid 6754] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5610] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6754] setpgid(0, 0) = 0 [pid 6754] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECci2-upstream-fs/strace-static-x86_64: Process 6755 attached ) = 3 [pid 6755] set_robust_list(0x5555748a66e0, 24 [pid 6754] write(3, "1000", 4 [pid 6755] <... set_robust_list resumed>) = 0 [pid 6754] <... write resumed>) = 4 [pid 6755] rt_sigprocmask(SIG_SETMASK, [] [pid 6754] close(3 [pid 6755] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6754] <... close resumed>) = 0 [pid 6755] chdir("./44" [pid 6754] symlink("/dev/binderfs", "./binderfs" [pid 6755] <... chdir resumed>) = 0 [pid 6754] <... symlink resumed>) = 0 [pid 6755] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6755] setpgid(0, 0 [pid 6754] write(1, "executing program\n", 18 [pid 6755] <... setpgid resumed>) = 0 [pid 6754] <... write resumed>) = 18 [pid 6755] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6754] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6755] <... openat resumed>) = 3 [pid 6754] <... futex resumed>) = 0 [pid 6754] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6755] write(3, "1000", 4 [pid 6754] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6755] <... write resumed>) = 4 [pid 6754] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6743] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6755] close(3 [pid 6754] <... rt_sigprocmask resumed>, NULL, 8) = 0 executing program [pid 6755] <... close resumed>) = 0 [pid 6754] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6755] symlink("/dev/binderfs", "./binderfs" [pid 6754] <... mmap resumed>) = 0x7fef94c68000 [pid 6755] <... symlink resumed>) = 0 [pid 6754] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6755] write(1, "executing program\n", 18 [pid 6754] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6753] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6746] <... mmap resumed>) = 0x200000000000 [pid 6755] <... write resumed>) = 18 [pid 6754] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6745] <... sendfile resumed>) = 958464 [pid 6755] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6754] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6745] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000ci2-upstream-fs/strace-static-x86_64: Process 6758 attached [pid 6755] <... futex resumed>) = 0 [pid 6755] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6754] <... clone3 resumed> => {parent_tid=[6758]}, 88) = 6758 [pid 6745] <... futex resumed>) = ? executing program [pid 6758] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6755] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6754] rt_sigprocmask(SIG_SETMASK, [] [pid 6752] <... mount resumed>) = 0 [pid 6758] <... rseq resumed>) = 0 [pid 6755] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6754] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6752] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6746] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6744] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5610] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6755 [pid 6758] set_robust_list(0x7fef94c889a0, 24 [pid 6755] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6754] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6753] +++ killed by SIGBUS +++ [pid 6746] <... futex resumed>) = 0 [pid 6744] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6758] <... set_robust_list resumed>) = 0 [pid 6755] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6754] <... futex resumed>) = 0 [pid 6752] <... openat resumed>) = 3 [pid 6746] sendfile(4, 5, NULL, 553647746 [pid 6744] <... futex resumed>) = 0 [pid 5610] rt_sigprocmask(SIG_SETMASK, [] [pid 6758] rt_sigprocmask(SIG_SETMASK, [] [pid 6755] <... mmap resumed>) = 0x7fef94c68000 [pid 6754] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6752] chdir("./file1" [pid 6745] +++ killed by SIGBUS +++ [pid 6744] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6743] +++ killed by SIGBUS +++ [pid 6758] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6755] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6752] <... chdir resumed>) = 0 [pid 5610] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6758] memfd_create("syzkaller", 0 [pid 6755] <... mprotect resumed>) = 0 [pid 6752] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6758] <... memfd_create resumed>) = 3 [pid 6755] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6752] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6743, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6758] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6755] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6752] <... futex resumed>) = 1 [pid 6749] <... futex resumed>) = 0 [pid 5609] umount2("./44", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6758] <... mmap resumed>) = 0x7fef8c868000 [pid 6755] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6752] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6749] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6752] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6749] <... futex resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6759 attached [pid 6755] <... clone3 resumed> => {parent_tid=[6759]}, 88) = 6759 [pid 6752] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6755] rt_sigprocmask(SIG_SETMASK, [] [ 136.092614][ T6753] EXT4-fs (loop0): free_blocks=20480 [ 136.092627][ T6753] EXT4-fs (loop0): dirty_blocks=944 [ 136.092639][ T6753] EXT4-fs (loop0): Block reservation details [ 136.092650][ T6753] EXT4-fs (loop0): i_reserved_data_blocks=59 [ 136.111959][ T6752] loop2: detected capacity change from 0 to 1024 [pid 5609] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6759] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6755] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6749] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] <... openat resumed>) = 3 [pid 6758] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6752] <... openat resumed>) = 4 [pid 6744] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6759] <... rseq resumed>) = 0 [pid 6755] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6752] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6744] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] fstat(3 [pid 6759] set_robust_list(0x7fef94c889a0, 24 [pid 6755] <... futex resumed>) = 0 [pid 6752] <... futex resumed>) = 1 [pid 6749] <... futex resumed>) = 0 [pid 6759] <... set_robust_list resumed>) = 0 [pid 6755] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6749] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6744] <... futex resumed>) = 0 [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6759] rt_sigprocmask(SIG_SETMASK, [] [pid 6752] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6749] <... futex resumed>) = 0 [pid 6744] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5609] getdents64(3 [pid 6759] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6752] <... openat resumed>) = 5 [ 136.229110][ T37] audit: type=1800 audit(1785844666.624:226): pid=6752 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop2" ino=15 res=0 errno=0 [pid 6749] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6744] <... mmap resumed>) = 0x7fef94c47000 [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6759] memfd_create("syzkaller", 0 [pid 6758] <... write resumed>) = 524288 [pid 6752] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6744] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 5609] umount2("./44/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6759] <... memfd_create resumed>) = 3 [pid 6752] <... futex resumed>) = 1 [pid 6749] <... futex resumed>) = 0 [pid 6744] <... mprotect resumed>) = 0 [pid 6759] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6752] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6749] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6744] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6759] <... mmap resumed>) = 0x7fef8c868000 [pid 6758] munmap(0x7fef8c868000, 138412032 [pid 6752] <... openat resumed>) = 6 [pid 6749] <... futex resumed>) = 0 [pid 6744] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6749] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6744] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 6760 attached [pid 6752] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6760] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6759] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6758] <... munmap resumed>) = 0 [pid 6752] <... futex resumed>) = 1 [pid 6749] <... futex resumed>) = 0 [pid 6744] <... clone3 resumed> => {parent_tid=[6760]}, 88) = 6760 [pid 6760] <... rseq resumed>) = 0 [pid 6758] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6752] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6749] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6744] rt_sigprocmask(SIG_SETMASK, [] [pid 6760] set_robust_list(0x7fef94c679a0, 24 [pid 6758] <... openat resumed>) = 4 [pid 6760] <... set_robust_list resumed>) = 0 [pid 6758] ioctl(4, LOOP_SET_FD, 3 [pid 6752] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6749] <... futex resumed>) = 0 [pid 6744] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6760] rt_sigprocmask(SIG_SETMASK, [] [pid 6749] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6744] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6760] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6758] <... ioctl resumed>) = 0 [pid 6744] <... futex resumed>) = 0 [pid 6752] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6744] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6758] close(3 [pid 6752] <... mmap resumed>) = 0x200000000000 [pid 6758] <... close resumed>) = 0 [pid 6758] close(4 [pid 6752] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6758] <... close resumed>) = 0 [pid 6752] <... futex resumed>) = 1 [pid 6749] <... futex resumed>) = 0 [pid 6758] mkdir("./file1", 0777 [pid 6752] sendfile(4, 5, NULL, 553647746 [pid 6749] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6758] <... mkdir resumed>) = 0 [pid 6749] <... futex resumed>) = 0 [pid 6758] mount("/dev/loop4", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6749] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6759] <... write resumed>) = 524288 [pid 6759] munmap(0x7fef8c868000, 138412032) = 0 [ 136.337325][ T6758] loop4: detected capacity change from 0 to 1024 [ 136.340399][ T63] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 932 with max blocks 4 with error 28 [ 136.340430][ T63] EXT4-fs (loop0): This should not happen!! Data will be lost [ 136.340430][ T63] [ 136.352168][ T5609] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6759] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6759] ioctl(4, LOOP_SET_FD, 3 [pid 6744] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6759] <... ioctl resumed>) = 0 [pid 6759] close(3) = 0 [pid 6759] close(4 [pid 6749] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6759] <... close resumed>) = 0 [pid 6759] mkdir("./file1", 0777 [pid 6749] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6749] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6759] <... mkdir resumed>) = 0 [pid 6749] <... mmap resumed>) = 0x7fef94c47000 [pid 6759] mount("/dev/loop1", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6749] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE) = 0 [ 136.372403][ T6760] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 136.376867][ T6760] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 796 with error 28 [ 136.376897][ T6760] EXT4-fs (loop3): This should not happen!! Data will be lost [ 136.376897][ T6760] [ 136.376911][ T6760] EXT4-fs (loop3): Total free blocks count 0 [ 136.376923][ T6760] EXT4-fs (loop3): Free/Dirty block details [ 136.376936][ T6760] EXT4-fs (loop3): free_blocks=20480 [ 136.376948][ T6760] EXT4-fs (loop3): dirty_blocks=800 [pid 6749] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6749] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 6763 attached [pid 6763] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6749] <... clone3 resumed> => {parent_tid=[6763]}, 88) = 6763 [pid 6763] <... rseq resumed>) = 0 [pid 6749] rt_sigprocmask(SIG_SETMASK, [] [pid 6763] set_robust_list(0x7fef94c679a0, 24 [pid 6760] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6758] <... mount resumed>) = 0 [pid 6746] <... sendfile resumed>) = 819200 [pid 6763] <... set_robust_list resumed>) = 0 [pid 6758] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6746] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6763] rt_sigprocmask(SIG_SETMASK, [] [pid 6758] <... openat resumed>) = 3 [pid 6746] <... futex resumed>) = 0 [pid 5609] <... umount2 resumed>) = 0 [pid 6758] chdir("./file1" [pid 5609] umount2("./44/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6763] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6758] <... chdir resumed>) = 0 [ 136.376960][ T6760] EXT4-fs (loop3): Block reservation details [ 136.376970][ T6760] EXT4-fs (loop3): i_reserved_data_blocks=50 [ 136.414732][ T6759] loop1: detected capacity change from 0 to 1024 [pid 6746] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6763] futex(0x7fef94d63e58, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6758] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6749] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6758] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5609] newfstatat(AT_FDCWD, "./44/file1" [pid 6758] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6749] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6758] <... futex resumed>) = 1 [pid 6749] <... futex resumed>) = 1 [pid 5609] umount2("./44/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6758] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6749] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6763] <... futex resumed>) = 0 [pid 6746] <... futex resumed>) = ? [pid 6759] <... mount resumed>) = 0 [pid 6754] <... futex resumed>) = 0 [pid 5609] openat(AT_FDCWD, "./44/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6760] +++ killed by SIGBUS +++ [pid 6754] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6758] <... futex resumed>) = 0 [pid 6754] <... futex resumed>) = 1 [pid 5609] <... openat resumed>) = 4 [pid 6759] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6746] +++ killed by SIGBUS +++ [pid 6744] +++ killed by SIGBUS +++ [pid 6759] <... openat resumed>) = 3 [pid 5609] fstat(4 [pid 6759] chdir("./file1" [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6759] <... chdir resumed>) = 0 [pid 5609] getdents64(4 [pid 6759] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6759] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5609] getdents64(4 [pid 6759] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6763] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6759] <... futex resumed>) = 1 [pid 6755] <... futex resumed>) = 0 [pid 6752] <... sendfile resumed>) = 294912 [pid 5609] close(4 [pid 6759] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6755] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6752] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... close resumed>) = 0 [pid 6755] <... futex resumed>) = 0 [pid 5609] rmdir("./44/file1" [pid 6755] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6752] <... futex resumed>) = ? [pid 6749] <... futex resumed>) = ? [pid 5609] <... rmdir resumed>) = 0 [pid 6763] +++ killed by SIGBUS +++ [pid 6758] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6754] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6752] +++ killed by SIGBUS +++ [pid 6759] <... openat resumed>) = 4 [pid 6759] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] umount2("./44/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6759] <... futex resumed>) = 1 [pid 6755] <... futex resumed>) = 0 [pid 6749] +++ killed by SIGBUS +++ [pid 6759] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [ 136.517942][ T6763] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 136.518064][ T6763] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 284 with error 28 [ 136.518078][ T6763] EXT4-fs (loop2): This should not happen!! Data will be lost [ 136.518078][ T6763] [ 136.518085][ T6763] EXT4-fs (loop2): Total free blocks count 0 [ 136.518092][ T6763] EXT4-fs (loop2): Free/Dirty block details [pid 6755] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6759] <... openat resumed>) = 5 [pid 6755] <... futex resumed>) = 0 [pid 5611] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6749, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6759] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6755] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] newfstatat(AT_FDCWD, "./44/binderfs" [pid 5611] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 6759] <... futex resumed>) = 0 [pid 6755] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5609] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] <... restart_syscall resumed>) = 0 [pid 6759] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6755] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] unlink("./44/binderfs" [pid 6759] <... openat resumed>) = 6 [pid 6755] <... futex resumed>) = 0 [pid 5612] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6744, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5609] <... unlink resumed>) = 0 [pid 6755] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] umount2("./45", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] getdents64(3 [pid 6759] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6759] <... futex resumed>) = 1 [pid 6758] <... openat resumed>) = 4 [pid 6755] <... futex resumed>) = 0 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6755] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5611] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5609] close(3 [pid 6759] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6758] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6755] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] <... openat resumed>) = 3 [pid 5609] <... close resumed>) = 0 [pid 6759] <... mmap resumed>) = 0x200000000000 [pid 6758] <... futex resumed>) = 1 [pid 6754] <... futex resumed>) = 0 [pid 6754] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] rmdir("./44" [pid 6754] <... futex resumed>) = 0 [pid 6758] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6754] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] fstat(3 [pid 5609] <... rmdir resumed>) = 0 [pid 6759] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6758] <... openat resumed>) = 5 [pid 5612] umount2("./45", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6759] <... futex resumed>) = 1 [pid 6758] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6755] <... futex resumed>) = 0 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] getdents64(3 [pid 6759] sendfile(4, 5, NULL, 553647746 [pid 6758] <... futex resumed>) = 1 [pid 6755] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6754] <... futex resumed>) = 0 [pid 5612] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6758] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6755] <... futex resumed>) = 0 [ 136.518099][ T6763] EXT4-fs (loop2): free_blocks=20480 [ 136.518106][ T6763] EXT4-fs (loop2): dirty_blocks=288 [ 136.518113][ T6763] EXT4-fs (loop2): Block reservation details [ 136.518118][ T6763] EXT4-fs (loop2): i_reserved_data_blocks=18 [ 136.566987][ T37] audit: type=1800 audit(1785844666.944:227): pid=6759 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop1" ino=15 res=0 errno=0 [pid 6754] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... openat resumed>) = 3 [pid 5609] mkdir("./45", 0777 [pid 6755] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] umount2("./45/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6758] <... openat resumed>) = 6 [pid 6754] <... futex resumed>) = 0 [pid 5612] fstat(3 [pid 5609] <... mkdir resumed>) = 0 [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6758] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6754] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6758] <... futex resumed>) = 0 [pid 5612] getdents64(3 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6758] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6754] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5609] <... openat resumed>) = 3 [pid 6754] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] umount2("./45/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] ioctl(3, LOOP_CLR_FD [pid 6758] <... futex resumed>) = 0 [pid 6754] <... futex resumed>) = 1 [pid 5609] <... ioctl resumed>) = 0 [pid 6758] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6754] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] close(3 [pid 6758] <... mmap resumed>) = 0x200000000000 [pid 6758] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6754] <... futex resumed>) = 0 [pid 6758] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6754] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6758] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6754] <... futex resumed>) = 0 [pid 6758] sendfile(4, 5, NULL, 553647746 [pid 6754] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] <... close resumed>) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555748a66d0) = 6766 ci2-upstream-fs/strace-static-x86_64: Process 6766 attached [pid 5609] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 136.596736][ T37] audit: type=1800 audit(1785844666.994:228): pid=6758 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop4" ino=15 res=0 errno=0 [pid 6766] set_robust_list(0x5555748a66e0, 24 [pid 6755] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6766] <... set_robust_list resumed>) = 0 [pid 6755] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6766] rt_sigprocmask(SIG_SETMASK, [] [pid 6755] <... futex resumed>) = 0 [pid 6766] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6755] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c47000 [pid 6755] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6754] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6754] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6766] chdir("./45" [pid 6754] <... futex resumed>) = 0 [pid 6754] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6755] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6754] <... mmap resumed>) = 0x7fef94c47000 [pid 6754] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6755] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6766] <... chdir resumed>) = 0 [pid 6755] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6754] <... mprotect resumed>) = 0 [pid 6766] prctl(PR_SET_PDEATHSIG, SIGKILLci2-upstream-fs/strace-static-x86_64: Process 6767 attached ) = 0 [ 136.663573][ T3414] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 284 with max blocks 4 with error 28 [ 136.663605][ T3414] EXT4-fs (loop2): This should not happen!! Data will be lost [ 136.663605][ T3414] [ 136.671965][ T177] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 796 with max blocks 4 with error 28 [ 136.671996][ T177] EXT4-fs (loop3): This should not happen!! Data will be lost [ 136.671996][ T177] [pid 6754] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6767] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6766] setpgid(0, 0 [pid 6755] <... clone3 resumed> => {parent_tid=[6767]}, 88) = 6767 [pid 6754] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6767] <... rseq resumed>) = 0 [pid 6766] <... setpgid resumed>) = 0 [pid 6755] rt_sigprocmask(SIG_SETMASK, [] [pid 6767] set_robust_list(0x7fef94c679a0, 24 [pid 6766] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6754] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6755] <... rt_sigprocmask resumed>, NULL, 8) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6768 attached [pid 6767] <... set_robust_list resumed>) = 0 [pid 6755] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6766] <... openat resumed>) = 3 [pid 6755] <... futex resumed>) = 0 [pid 6767] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6766] write(3, "1000", 4 [pid 6755] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6754] <... clone3 resumed> => {parent_tid=[6768]}, 88) = 6768 [pid 6768] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6766] <... write resumed>) = 4 [pid 6754] rt_sigprocmask(SIG_SETMASK, [] [pid 6768] <... rseq resumed>) = 0 [pid 6766] close(3 [pid 6768] set_robust_list(0x7fef94c679a0, 24 [pid 6754] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6766] <... close resumed>) = 0 [ 136.676049][ T5611] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 136.686995][ T5612] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6754] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6768] <... set_robust_list resumed>) = 0 [pid 6766] symlink("/dev/binderfs", "./binderfs" [pid 6754] <... futex resumed>) = 0 [pid 6754] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6768] rt_sigprocmask(SIG_SETMASK, [] [pid 6766] <... symlink resumed>) = 0 [ 136.754263][ T6767] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 136.754453][ T6767] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 248 with error 28 [ 136.754476][ T6767] EXT4-fs (loop1): This should not happen!! Data will be lost [ 136.754476][ T6767] [ 136.754490][ T6767] EXT4-fs (loop1): Total free blocks count 0 [ 136.754502][ T6767] EXT4-fs (loop1): Free/Dirty block details [ 136.754515][ T6767] EXT4-fs (loop1): free_blocks=20480 [ 136.754527][ T6767] EXT4-fs (loop1): dirty_blocks=256 [pid 6768] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6766] write(1, "executing program\n", 18 [pid 5611] <... umount2 resumed>) = 0 [pid 6766] <... write resumed>) = 18 [pid 5611] umount2("./45/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6766] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] newfstatat(AT_FDCWD, "./45/file1" [pid 6766] <... futex resumed>) = 0 [pid 5611] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6766] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 5611] umount2("./45/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6766] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6766] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 5611] openat(AT_FDCWD, "./45/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6767] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6766] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6759] <... sendfile resumed>) = 258048 [pid 5611] <... openat resumed>) = 4 [pid 6766] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6759] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... umount2 resumed>) = 0 [pid 5611] fstat(4 [pid 6766] <... mmap resumed>) = 0x7fef94c68000 [pid 6759] <... futex resumed>) = 0 [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6766] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6759] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5611] getdents64(4 [pid 6766] <... mprotect resumed>) = 0 [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6766] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6755] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5612] umount2("./45/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6766] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6759] <... futex resumed>) = ? [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] getdents64(4 [pid 6766] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6759] +++ killed by SIGBUS +++ [pid 5612] newfstatat(AT_FDCWD, "./45/file1" [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6769 attached [pid 5611] close(4 [pid 6769] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6766] <... clone3 resumed> => {parent_tid=[6769]}, 88) = 6769 [pid 5612] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] <... close resumed>) = 0 [pid 6754] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6769] <... rseq resumed>) = 0 [pid 6768] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6766] rt_sigprocmask(SIG_SETMASK, [] [pid 6754] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 5612] umount2("./45/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] rmdir("./45/file1" [pid 6769] set_robust_list(0x7fef94c889a0, 24 [pid 6767] +++ killed by SIGBUS +++ [pid 6766] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6758] <... sendfile resumed>) = ? [pid 6755] +++ killed by SIGBUS +++ [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] <... rmdir resumed>) = 0 [pid 6769] <... set_robust_list resumed>) = 0 [pid 6768] +++ killed by SIGBUS +++ [pid 6766] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] openat(AT_FDCWD, "./45/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6769] rt_sigprocmask(SIG_SETMASK, [] [pid 6766] <... futex resumed>) = 0 [pid 5611] umount2("./45/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5612] <... openat resumed>) = 4 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6755, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6769] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6766] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5612] fstat(4 [pid 5611] newfstatat(AT_FDCWD, "./45/binderfs" [pid 5610] umount2("./44", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6769] memfd_create("syzkaller", 0 [pid 6758] +++ killed by SIGBUS +++ [pid 6754] +++ killed by SIGBUS +++ [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5611] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6769] <... memfd_create resumed>) = 3 [pid 5612] getdents64(4 [pid 5611] unlink("./45/binderfs" [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6769] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6754, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5611] <... unlink resumed>) = 0 [pid 5614] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 5612] getdents64(4 [pid 5610] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6769] <... mmap resumed>) = 0x7fef8c868000 [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5610] <... openat resumed>) = 3 [pid 5612] close(4 [pid 5611] getdents64(3, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5611] close(3 [pid 5610] fstat(3 [pid 5612] <... close resumed>) = 0 [pid 5611] <... close resumed>) = 0 [pid 5612] rmdir("./45/file1" [pid 5611] rmdir("./45" [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5614] <... restart_syscall resumed>) = 0 [pid 5612] <... rmdir resumed>) = 0 [pid 5611] <... rmdir resumed>) = 0 [pid 5610] getdents64(3, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5612] umount2("./45/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] mkdir("./46", 0777 [pid 5610] umount2("./44/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] <... mkdir resumed>) = 0 [pid 5612] newfstatat(AT_FDCWD, "./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 executing program [pid 6769] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5612] unlink("./45/binderfs") = 0 [pid 5614] umount2("./44", MNT_FORCE|UMOUNT_NOFOLLOW [ 136.754537][ T6767] EXT4-fs (loop1): Block reservation details [ 136.754547][ T6767] EXT4-fs (loop1): i_reserved_data_blocks=16 [ 136.779603][ T6758] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 136.780481][ T6768] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 296 with error 28 [ 136.780508][ T6768] EXT4-fs (loop4): This should not happen!! Data will be lost [ 136.780508][ T6768] [pid 5611] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6769] <... write resumed>) = 524288 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5612] getdents64(3 [pid 5611] <... openat resumed>) = 3 [pid 5614] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5611] ioctl(3, LOOP_CLR_FD [pid 6769] munmap(0x7fef8c868000, 138412032 [pid 5614] <... openat resumed>) = 3 [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5611] <... ioctl resumed>) = 0 [pid 5612] close(3 [pid 5611] close(3 [pid 6769] <... munmap resumed>) = 0 [pid 5614] fstat(3 [pid 5612] <... close resumed>) = 0 [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5612] rmdir("./45" [pid 5614] getdents64(3 [pid 5612] <... rmdir resumed>) = 0 [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6769] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5614] umount2("./44/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5612] mkdir("./46", 0777 [pid 6769] <... openat resumed>) = 4 [pid 5612] <... mkdir resumed>) = 0 [pid 6769] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5611] <... close resumed>) = 0 [pid 5612] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6769] close(3) = 0 [pid 6769] close(4) = 0 [pid 6769] mkdir("./file1", 0777 [pid 5611] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5611] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 6770 attached [pid 5612] <... openat resumed>) = 3 [pid 6770] set_robust_list(0x5555748a66e0, 24) = 0 [pid 5612] ioctl(3, LOOP_CLR_FD [pid 5611] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6770 [pid 6770] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] <... ioctl resumed>) = 0 [pid 5611] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] close(3 [pid 5611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6770] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6770] chdir("./46") = 0 [pid 6770] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6770] setpgid(0, 0) = 0 [pid 6770] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6769] <... mkdir resumed>) = 0 [pid 6770] <... openat resumed>) = 3 [pid 6770] write(3, "1000", 4) = 4 [pid 6770] close(3) = 0 [ 136.780522][ T6768] EXT4-fs (loop4): Total free blocks count 0 [ 136.780534][ T6768] EXT4-fs (loop4): Free/Dirty block details [ 136.780547][ T6768] EXT4-fs (loop4): free_blocks=20480 [ 136.780559][ T6768] EXT4-fs (loop4): dirty_blocks=304 [ 136.780570][ T6768] EXT4-fs (loop4): Block reservation details [ 136.780581][ T6768] EXT4-fs (loop4): i_reserved_data_blocks=19 [ 136.903942][ T6769] loop0: detected capacity change from 0 to 1024 [pid 6770] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6769] mount("/dev/loop0", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5612] <... close resumed>) = 0 [pid 5612] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5612] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555748a66d0) = 6771 ci2-upstream-fs/strace-static-x86_64: Process 6771 attached [pid 5612] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6771] set_robust_list(0x5555748a66e0, 24) = 0 [pid 6771] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6771] chdir("./46") = 0 [pid 6771] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6771] setpgid(0, 0) = 0 [pid 6771] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6771] write(3, "1000", 4 [pid 6770] write(1, "executing program\n", 18) = 18 [pid 6770] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6771] <... write resumed>) = 4 [pid 6770] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} executing program [pid 6771] close(3 [pid 6770] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6771] <... close resumed>) = 0 [pid 6770] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6771] symlink("/dev/binderfs", "./binderfs" [pid 6770] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6771] <... symlink resumed>) = 0 [pid 6770] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c68000 [pid 6771] write(1, "executing program\n", 18 executing program [pid 6770] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6771] <... write resumed>) = 18 [pid 6770] <... mprotect resumed>) = 0 [pid 6771] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6770] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6771] <... futex resumed>) = 0 [pid 6770] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6771] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6770] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6771] <... rt_sigaction resumed>, NULL, 8) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6774 attached [pid 6771] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6774] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6771] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6770] <... clone3 resumed> => {parent_tid=[6774]}, 88) = 6774 [pid 6769] <... mount resumed>) = 0 [pid 5614] <... umount2 resumed>) = 0 [pid 6774] <... rseq resumed>) = 0 [pid 6771] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [ 136.949849][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 248 with max blocks 4 with error 28 [ 136.949878][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 136.949878][ T12] [ 136.966691][ T5610] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 136.969960][ T5614] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6770] rt_sigprocmask(SIG_SETMASK, [] [pid 6774] set_robust_list(0x7fef94c889a0, 24 [pid 6771] <... mmap resumed>) = 0x7fef94c68000 [pid 6770] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] umount2("./44/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6771] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6770] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6771] <... mprotect resumed>) = 0 [pid 6770] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5614] newfstatat(AT_FDCWD, "./44/file1" [pid 6771] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5614] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6771] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5614] umount2("./44/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6771] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0}ci2-upstream-fs/strace-static-x86_64: Process 6775 attached [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6771] <... clone3 resumed> => {parent_tid=[6775]}, 88) = 6775 [pid 5614] openat(AT_FDCWD, "./44/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6771] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] <... openat resumed>) = 4 [pid 6775] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6771] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6775] <... rseq resumed>) = 0 [pid 6771] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] fstat(4 [pid 6775] set_robust_list(0x7fef94c889a0, 24) = 0 [pid 6771] <... futex resumed>) = 0 [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6775] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6771] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6775] memfd_create("syzkaller", 0 [pid 5614] getdents64(4, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6775] <... memfd_create resumed>) = 3 [pid 6774] <... set_robust_list resumed>) = 0 [pid 6769] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5614] getdents64(4 [pid 5610] <... umount2 resumed>) = 0 [pid 6774] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] umount2("./44/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6774] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6769] <... openat resumed>) = 3 [pid 6775] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6775] <... mmap resumed>) = 0x7fef8c868000 [pid 6774] memfd_create("syzkaller", 0 [pid 6769] chdir("./file1" [pid 5614] close(4 [pid 5610] newfstatat(AT_FDCWD, "./44/file1" [pid 6774] <... memfd_create resumed>) = 3 [pid 6769] <... chdir resumed>) = 0 [pid 5610] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6774] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6769] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5610] umount2("./44/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6774] <... mmap resumed>) = 0x7fef8c868000 [pid 6769] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5614] <... close resumed>) = 0 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6775] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6774] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6769] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] openat(AT_FDCWD, "./44/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6769] <... futex resumed>) = 1 [pid 6766] <... futex resumed>) = 0 [pid 5614] rmdir("./44/file1" [pid 5610] <... openat resumed>) = 4 [pid 6769] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6766] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... rmdir resumed>) = 0 [pid 5610] fstat(4 [pid 6769] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6766] <... futex resumed>) = 0 [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6769] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6766] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] getdents64(4 [pid 6769] <... openat resumed>) = 4 [pid 5614] umount2("./44/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6769] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6769] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6766] <... futex resumed>) = 0 [pid 5610] getdents64(4 [pid 6766] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6769] <... futex resumed>) = 0 [pid 6766] <... futex resumed>) = 1 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6769] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC) = 5 [pid 6769] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6769] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6775] <... write resumed>) = 524288 [pid 6766] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] close(4 [pid 6766] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5610] <... close resumed>) = 0 [pid 6766] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6769] <... futex resumed>) = 0 [pid 6766] <... futex resumed>) = 1 [pid 5610] rmdir("./44/file1" [pid 6766] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6775] munmap(0x7fef8c868000, 138412032 [pid 6769] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6775] <... munmap resumed>) = 0 [pid 5610] <... rmdir resumed>) = 0 [pid 6769] <... openat resumed>) = 6 [pid 6775] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6769] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6775] ioctl(4, LOOP_SET_FD, 3 [pid 6769] <... futex resumed>) = 1 [pid 6766] <... futex resumed>) = 0 [pid 6766] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] umount2("./44/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6766] <... futex resumed>) = 0 [pid 6774] <... write resumed>) = 524288 [pid 5614] newfstatat(AT_FDCWD, "./44/binderfs" [pid 6769] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6766] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6774] munmap(0x7fef8c868000, 138412032 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5610] newfstatat(AT_FDCWD, "./44/binderfs" [pid 6775] <... ioctl resumed>) = 0 [pid 6774] <... munmap resumed>) = 0 [pid 6769] <... mmap resumed>) = 0x200000000000 [pid 5614] unlink("./44/binderfs" [pid 5610] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6774] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5610] unlink("./44/binderfs" [pid 6774] <... openat resumed>) = 4 [pid 5610] <... unlink resumed>) = 0 [pid 6774] ioctl(4, LOOP_SET_FD, 3 [pid 5610] getdents64(3 [pid 6775] close(3 [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6775] <... close resumed>) = 0 [pid 6769] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] close(3 [pid 6766] <... futex resumed>) = 0 [pid 6766] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6766] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6775] close(4 [pid 6769] <... futex resumed>) = 1 [pid 5610] <... close resumed>) = 0 [pid 6775] <... close resumed>) = 0 [pid 6769] sendfile(4, 5, NULL, 553647746 [pid 5610] rmdir("./44" [pid 6775] mkdir("./file1", 0777 [pid 6774] <... ioctl resumed>) = 0 [pid 5614] <... unlink resumed>) = 0 [pid 5610] <... rmdir resumed>) = 0 [pid 5614] getdents64(3 [pid 5610] mkdir("./45", 0777 [pid 6775] <... mkdir resumed>) = 0 [pid 5610] <... mkdir resumed>) = 0 [pid 5610] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6774] close(3 [pid 5614] close(3 [pid 5610] <... openat resumed>) = 3 [pid 6775] mount("/dev/loop3", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6774] <... close resumed>) = 0 [pid 5614] <... close resumed>) = 0 [pid 5610] ioctl(3, LOOP_CLR_FD [pid 6774] close(4 [pid 5614] rmdir("./44" [pid 5610] <... ioctl resumed>) = 0 [pid 6774] <... close resumed>) = 0 [pid 6774] mkdir("./file1", 0777 [pid 5614] <... rmdir resumed>) = 0 [pid 5610] close(3 [pid 6774] <... mkdir resumed>) = 0 [pid 6774] mount("/dev/loop2", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5614] mkdir("./45", 0777) = 0 [pid 5610] <... close resumed>) = 0 [pid 5614] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [ 137.063864][ T37] audit: type=1800 audit(1785844667.464:229): pid=6769 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 137.104690][ T6775] loop3: detected capacity change from 0 to 1024 [ 137.119305][ T6774] loop2: detected capacity change from 0 to 1024 [pid 5610] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5614] ioctl(3, LOOP_CLR_FD [pid 5610] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5610] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6775] <... mount resumed>) = 0 [pid 6766] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5614] <... ioctl resumed>) = 0 [pid 6775] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6766] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] close(3 [pid 6775] <... openat resumed>) = 3 [pid 6766] <... futex resumed>) = 0 [pid 6775] chdir("./file1" [pid 6766] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6775] <... chdir resumed>) = 0 [pid 6766] <... mmap resumed>) = 0x7fef94c47000 [pid 6775] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6766] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6775] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6774] <... mount resumed>) = 0 [pid 6766] rt_sigprocmask(SIG_BLOCK, ~[]ci2-upstream-fs/strace-static-x86_64: Process 6780 attached [pid 6775] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6766] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6780] set_robust_list(0x5555748a66e0, 24 [pid 6775] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6774] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6771] <... futex resumed>) = 0 [pid 6766] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5610] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6780 [pid 6771] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6766] <... clone3 resumed> => {parent_tid=[6781]}, 88) = 6781 ci2-upstream-fs/strace-static-x86_64: Process 6781 attached [pid 6774] <... openat resumed>) = 3 [pid 6766] rt_sigprocmask(SIG_SETMASK, [] [pid 6775] <... futex resumed>) = 0 [pid 6771] <... futex resumed>) = 1 [pid 6766] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6780] <... set_robust_list resumed>) = 0 [pid 6775] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6774] chdir("./file1" [pid 6771] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] rt_sigprocmask(SIG_SETMASK, [] [pid 6781] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6774] <... chdir resumed>) = 0 [pid 6766] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6780] rt_sigprocmask(SIG_SETMASK, [] [pid 6781] <... rseq resumed>) = 0 [pid 6774] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6766] <... futex resumed>) = 0 [pid 6780] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6766] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6774] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6781] set_robust_list(0x7fef94c679a0, 24 [pid 6780] chdir("./45" [pid 6781] <... set_robust_list resumed>) = 0 [pid 6781] rt_sigprocmask(SIG_SETMASK, [] [pid 6775] <... openat resumed>) = 4 [pid 6774] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6781] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6780] <... chdir resumed>) = 0 [pid 6780] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6775] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6774] <... futex resumed>) = 1 [pid 6770] <... futex resumed>) = 0 [pid 6780] <... prctl resumed>) = 0 [pid 6775] <... futex resumed>) = 1 [pid 6774] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6771] <... futex resumed>) = 0 [pid 6770] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... close resumed>) = 0 [pid 6780] setpgid(0, 0 [pid 6775] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6781] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6780] <... setpgid resumed>) = 0 [pid 6774] <... openat resumed>) = 4 [pid 6771] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6770] <... futex resumed>) = 0 [ 137.206013][ T37] audit: type=1800 audit(1785844667.604:230): pid=6775 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 137.208480][ T6781] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 137.214803][ T6781] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 200 with error 28 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6780] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6775] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6771] <... futex resumed>) = 0 [pid 6770] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6769] <... sendfile resumed>) = ? [pid 6766] <... futex resumed>) = ? [pid 6774] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6781] +++ killed by SIGBUS +++ [pid 6780] <... openat resumed>) = 3 [pid 6775] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6774] <... futex resumed>) = 0 [pid 6771] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6770] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6769] +++ killed by SIGBUS +++ [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 6782 attached [pid 6775] <... openat resumed>) = 5 [pid 6774] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6770] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6782] set_robust_list(0x5555748a66e0, 24 [pid 6780] write(3, "1000", 4 [pid 6775] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6774] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6770] <... futex resumed>) = 0 [pid 6766] +++ killed by SIGBUS +++ [pid 6780] <... write resumed>) = 4 [pid 6775] <... futex resumed>) = 1 [pid 6774] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6771] <... futex resumed>) = 0 [pid 6770] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6782 [ 137.214833][ T6781] EXT4-fs (loop0): This should not happen!! Data will be lost [ 137.214833][ T6781] [ 137.214847][ T6781] EXT4-fs (loop0): Total free blocks count 0 [ 137.214859][ T6781] EXT4-fs (loop0): Free/Dirty block details [ 137.214872][ T6781] EXT4-fs (loop0): free_blocks=20480 [ 137.214885][ T6781] EXT4-fs (loop0): dirty_blocks=208 [ 137.214895][ T6781] EXT4-fs (loop0): Block reservation details [ 137.214904][ T6781] EXT4-fs (loop0): i_reserved_data_blocks=13 [pid 6782] <... set_robust_list resumed>) = 0 [pid 6780] close(3 [pid 6775] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6774] <... openat resumed>) = 5 [pid 6771] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6780] <... close resumed>) = 0 [pid 6775] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6774] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6771] <... futex resumed>) = 0 [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 6782] rt_sigprocmask(SIG_SETMASK, [] [pid 6780] symlink("/dev/binderfs", "./binderfs" [pid 6775] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6774] <... futex resumed>) = 0 [pid 6771] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6770] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6766, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6782] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6780] <... symlink resumed>) = 0 [pid 6775] <... openat resumed>) = 6 [pid 6774] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6770] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 6774] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6770] <... futex resumed>) = 0 [pid 6782] chdir("./45" [pid 6774] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6770] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] umount2("./45", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6782] <... chdir resumed>) = 0 [pid 6780] write(1, "executing program\n", 18 [pid 6775] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6774] <... openat resumed>) = 6 [pid 6782] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6780] <... write resumed>) = 18 [pid 6775] <... futex resumed>) = 1 [pid 6771] <... futex resumed>) = 0 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6782] <... prctl resumed>) = 0 executing program [pid 6780] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6775] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6774] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6771] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6782] setpgid(0, 0 [pid 6780] <... futex resumed>) = 0 [pid 6774] <... futex resumed>) = 1 [pid 6770] <... futex resumed>) = 0 [pid 6782] <... setpgid resumed>) = 0 [pid 6780] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6775] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6774] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6771] <... futex resumed>) = 0 [pid 6770] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... openat resumed>) = 3 [pid 6782] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6780] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6775] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6770] <... futex resumed>) = 0 [pid 6774] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6771] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] fstat(3 [pid 6782] <... openat resumed>) = 3 [pid 6780] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6775] <... mmap resumed>) = 0x200000000000 [pid 6774] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6770] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6782] write(3, "1000", 4 [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6782] <... write resumed>) = 4 [pid 6780] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] getdents64(3 [pid 6782] close(3 [pid 6780] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6775] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6774] <... mmap resumed>) = 0x200000000000 [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6782] <... close resumed>) = 0 [pid 6780] <... mmap resumed>) = 0x7fef94c68000 [pid 6775] <... futex resumed>) = 1 [pid 6774] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6771] <... futex resumed>) = 0 [pid 6782] symlink("/dev/binderfs", "./binderfs" [pid 6780] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6775] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6774] <... futex resumed>) = 1 [pid 6771] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6770] <... futex resumed>) = 0 [pid 5609] umount2("./45/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6782] <... symlink resumed>) = 0 [pid 6780] <... mprotect resumed>) = 0 [pid 6775] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6774] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6771] <... futex resumed>) = 0 [pid 6770] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6770] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6775] sendfile(4, 5, NULL, 553647746 [pid 6771] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6774] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6780] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6782] write(1, "executing program\n", 18 [pid 6780] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6774] sendfile(4, 5, NULL, 553647746 [pid 6782] <... write resumed>) = 18 [pid 6780] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6782] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 executing program ci2-upstream-fs/strace-static-x86_64: Process 6783 attached [pid 6780] <... clone3 resumed> => {parent_tid=[6783]}, 88) = 6783 [pid 6782] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60}, NULL, 8) = 0 [pid 6782] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6780] rt_sigprocmask(SIG_SETMASK, [] [pid 6782] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6780] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6780] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6782] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6780] <... futex resumed>) = 0 [pid 6783] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6782] <... mmap resumed>) = 0x7fef94c68000 [pid 6780] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6783] <... rseq resumed>) = 0 [pid 6783] set_robust_list(0x7fef94c889a0, 24) = 0 [pid 6783] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6782] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6783] memfd_create("syzkaller", 0 [pid 6782] <... mprotect resumed>) = 0 [pid 6782] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6783] <... memfd_create resumed>) = 3 [ 137.240491][ T37] audit: type=1800 audit(1785844667.634:231): pid=6774 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop2" ino=15 res=0 errno=0 [pid 6782] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6783] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6782] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6783] <... mmap resumed>) = 0x7fef8c868000 ci2-upstream-fs/strace-static-x86_64: Process 6784 attached [pid 6782] <... clone3 resumed> => {parent_tid=[6784]}, 88) = 6784 [pid 6784] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6782] rt_sigprocmask(SIG_SETMASK, [] [pid 6784] <... rseq resumed>) = 0 [pid 6782] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6784] set_robust_list(0x7fef94c889a0, 24 [pid 6782] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6784] <... set_robust_list resumed>) = 0 [pid 6783] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6782] <... futex resumed>) = 0 [pid 6784] rt_sigprocmask(SIG_SETMASK, [] [pid 6782] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6771] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6770] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6784] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6771] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6770] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6771] <... futex resumed>) = 0 [pid 6770] <... futex resumed>) = 0 [pid 6770] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c47000 [pid 6771] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6770] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6784] memfd_create("syzkaller", 0 [pid 6771] <... mmap resumed>) = 0x7fef94c47000 [pid 6784] <... memfd_create resumed>) = 3 [pid 6771] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6770] <... mprotect resumed>) = 0 [pid 6784] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fef8c868000 [pid 6771] <... mprotect resumed>) = 0 [pid 6771] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6770] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6771] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6770] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6784] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [ 137.391027][ T5609] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6771] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6770] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 6786 attached ci2-upstream-fs/strace-static-x86_64: Process 6785 attached [pid 6771] <... clone3 resumed> => {parent_tid=[6785]}, 88) = 6785 [pid 6783] <... write resumed>) = 524288 [pid 6786] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6785] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6771] rt_sigprocmask(SIG_SETMASK, [] [pid 6770] <... clone3 resumed> => {parent_tid=[6786]}, 88) = 6786 [pid 6771] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6771] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6786] <... rseq resumed>) = 0 [pid 6785] <... rseq resumed>) = 0 [pid 6771] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6770] rt_sigprocmask(SIG_SETMASK, [] [pid 6786] set_robust_list(0x7fef94c679a0, 24 [pid 6785] set_robust_list(0x7fef94c679a0, 24 [pid 6783] munmap(0x7fef8c868000, 138412032 [pid 6770] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6786] <... set_robust_list resumed>) = 0 [pid 6785] <... set_robust_list resumed>) = 0 [pid 6783] <... munmap resumed>) = 0 [pid 6770] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6786] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6785] rt_sigprocmask(SIG_SETMASK, [] [pid 6770] <... futex resumed>) = 0 [pid 6785] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6770] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6783] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6784] <... write resumed>) = 524288 [pid 6783] <... openat resumed>) = 4 [pid 6784] munmap(0x7fef8c868000, 138412032 [pid 6783] ioctl(4, LOOP_SET_FD, 3 [pid 6771] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6784] <... munmap resumed>) = 0 [pid 6783] <... ioctl resumed>) = 0 [pid 5609] <... umount2 resumed>) = 0 [pid 6784] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6783] close(3 [pid 5609] umount2("./45/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6784] <... openat resumed>) = 4 [pid 6783] <... close resumed>) = 0 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6784] ioctl(4, LOOP_SET_FD, 3 [ 137.494375][ T6786] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 137.498692][ T6786] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 740 with error 28 [ 137.498720][ T6786] EXT4-fs (loop2): This should not happen!! Data will be lost [ 137.498720][ T6786] [ 137.498733][ T6786] EXT4-fs (loop2): Total free blocks count 0 [pid 6783] close(4 [pid 6784] <... ioctl resumed>) = 0 [pid 6783] <... close resumed>) = 0 [pid 5609] newfstatat(AT_FDCWD, "./45/file1" [pid 6770] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6783] mkdir("./file1", 0777 [pid 5609] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6784] close(3) = 0 [pid 6784] close(4 [pid 5609] umount2("./45/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6784] <... close resumed>) = 0 [pid 6784] mkdir("./file1", 0777 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 137.498744][ T6786] EXT4-fs (loop2): Free/Dirty block details [ 137.498755][ T6786] EXT4-fs (loop2): free_blocks=20480 [ 137.498768][ T6786] EXT4-fs (loop2): dirty_blocks=752 [ 137.498778][ T6786] EXT4-fs (loop2): Block reservation details [ 137.498788][ T6786] EXT4-fs (loop2): i_reserved_data_blocks=47 [ 137.500493][ T6785] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [pid 5609] openat(AT_FDCWD, "./45/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6784] <... mkdir resumed>) = 0 [pid 6783] <... mkdir resumed>) = 0 [pid 5609] <... openat resumed>) = 4 [pid 6784] mount("/dev/loop4", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] getdents64(4 [pid 6783] mount("/dev/loop1", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6786] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6774] <... sendfile resumed>) = 761856 [pid 5609] getdents64(4 [pid 6774] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [ 137.506772][ T6785] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 756 with error 28 [ 137.506814][ T6785] EXT4-fs (loop3): This should not happen!! Data will be lost [ 137.506814][ T6785] [ 137.506827][ T6785] EXT4-fs (loop3): Total free blocks count 0 [ 137.506838][ T6785] EXT4-fs (loop3): Free/Dirty block details [ 137.506850][ T6785] EXT4-fs (loop3): free_blocks=20480 [ 137.506863][ T6785] EXT4-fs (loop3): dirty_blocks=768 [ 137.506875][ T6785] EXT4-fs (loop3): Block reservation details [ 137.506885][ T6785] EXT4-fs (loop3): i_reserved_data_blocks=48 [pid 6774] <... futex resumed>) = ? [pid 5609] close(4 [pid 6786] +++ killed by SIGBUS +++ [pid 6775] <... sendfile resumed>) = 774144 [pid 6774] +++ killed by SIGBUS +++ [pid 6775] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... close resumed>) = 0 [pid 6775] <... futex resumed>) = 0 [pid 6775] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5609] rmdir("./45/file1" [pid 6785] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6770] +++ killed by SIGBUS +++ [pid 5611] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6770, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6775] <... futex resumed>) = ? [pid 5609] <... rmdir resumed>) = 0 [pid 6775] +++ killed by SIGBUS +++ [pid 5611] umount2("./46", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6785] +++ killed by SIGBUS +++ [pid 6783] <... mount resumed>) = 0 [pid 5609] umount2("./45/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6784] <... mount resumed>) = 0 [pid 5611] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6783] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5611] <... openat resumed>) = 3 [pid 6784] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6783] <... openat resumed>) = 3 [pid 5611] fstat(3 [pid 5609] newfstatat(AT_FDCWD, "./45/binderfs" [pid 6784] <... openat resumed>) = 3 [pid 6783] chdir("./file1" [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6784] chdir("./file1" [pid 6783] <... chdir resumed>) = 0 [pid 6784] <... chdir resumed>) = 0 [pid 5611] getdents64(3 [pid 5609] unlink("./45/binderfs" [pid 6784] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6783] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6784] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6783] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5611] umount2("./46/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... unlink resumed>) = 0 [pid 6771] +++ killed by SIGBUS +++ [pid 6783] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6784] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6783] <... futex resumed>) = 1 [pid 6780] <... futex resumed>) = 0 [pid 5612] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6771, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 6784] <... futex resumed>) = 1 [pid 6783] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6782] <... futex resumed>) = 0 [pid 6780] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] getdents64(3 [ 137.525962][ T6783] loop1: detected capacity change from 0 to 1024 [ 137.549328][ T6784] loop4: detected capacity change from 0 to 1024 [pid 6784] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6782] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6780] <... futex resumed>) = 0 [pid 5612] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 6783] <... openat resumed>) = 4 [pid 6782] <... futex resumed>) = 0 [pid 5612] <... restart_syscall resumed>) = 0 [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6784] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6782] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6780] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] close(3 [pid 6784] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6783] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6780] <... futex resumed>) = 0 [pid 5609] <... close resumed>) = 0 [pid 6783] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6780] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] umount2("./46", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] rmdir("./45" [pid 6784] <... openat resumed>) = 4 [pid 6783] <... openat resumed>) = 5 [pid 6780] <... futex resumed>) = 0 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6780] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6784] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6783] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... rmdir resumed>) = 0 [pid 6784] <... futex resumed>) = 1 [pid 6783] <... futex resumed>) = 0 [pid 6782] <... futex resumed>) = 0 [pid 6780] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5612] <... openat resumed>) = 3 [pid 6784] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6783] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6782] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6780] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] fstat(3 [pid 6784] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6783] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6782] <... futex resumed>) = 0 [pid 6780] <... futex resumed>) = 0 [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 137.712928][ T37] audit: type=1800 audit(1785844668.104:232): pid=6783 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop1" ino=15 res=0 errno=0 [pid 6784] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6783] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6782] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6780] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] getdents64(3 [pid 5609] mkdir("./46", 0777 [pid 6784] <... openat resumed>) = 5 [pid 6783] <... openat resumed>) = 6 [pid 5609] <... mkdir resumed>) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6784] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6783] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6784] <... futex resumed>) = 1 [pid 6783] <... futex resumed>) = 1 [pid 6782] <... futex resumed>) = 0 [pid 6780] <... futex resumed>) = 0 [pid 5612] umount2("./46/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6784] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6783] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6782] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6780] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6784] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6783] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6782] <... futex resumed>) = 0 [pid 6780] <... futex resumed>) = 0 [pid 5609] <... openat resumed>) = 3 [pid 6784] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6783] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6782] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6780] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6784] <... openat resumed>) = 6 [pid 6783] <... mmap resumed>) = 0x200000000000 [pid 5609] ioctl(3, LOOP_CLR_FD [pid 6784] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6783] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6784] <... futex resumed>) = 1 [pid 6783] <... futex resumed>) = 1 [pid 6782] <... futex resumed>) = 0 [pid 6780] <... futex resumed>) = 0 [pid 6784] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6783] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6782] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6780] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6784] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6783] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6782] <... futex resumed>) = 0 [pid 6780] <... futex resumed>) = 0 [pid 5609] <... ioctl resumed>) = 0 [pid 6784] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6783] sendfile(4, 5, NULL, 553647746 [pid 6782] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6780] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] close(3 [pid 6784] <... mmap resumed>) = 0x200000000000 [pid 6784] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6782] <... futex resumed>) = 0 [pid 6782] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6782] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6784] <... futex resumed>) = 1 [ 137.742782][ T37] audit: type=1800 audit(1785844668.144:233): pid=6784 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 137.776859][ T63] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 740 with max blocks 4 with error 28 [ 137.776890][ T63] EXT4-fs (loop2): This should not happen!! Data will be lost [ 137.776890][ T63] [ 137.783634][ T5611] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6784] sendfile(4, 5, NULL, 553647746 [pid 5609] <... close resumed>) = 0 [pid 5611] <... umount2 resumed>) = 0 [pid 5611] umount2("./46/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5611] newfstatat(AT_FDCWD, "./46/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] umount2("./46/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5611] openat(AT_FDCWD, "./46/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 6791 attached [pid 6782] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6780] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5611] <... openat resumed>) = 4 [pid 6780] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5611] fstat(4 [pid 5609] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6791 [pid 6780] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 6782] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6791] set_robust_list(0x5555748a66e0, 24 [pid 6780] <... mmap resumed>) = 0x7fef94c47000 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6791] <... set_robust_list resumed>) = 0 [pid 6782] <... futex resumed>) = 0 [pid 6780] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6791] rt_sigprocmask(SIG_SETMASK, [] [pid 6782] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6780] <... mprotect resumed>) = 0 [pid 6791] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6782] <... mmap resumed>) = 0x7fef94c47000 [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6791] chdir("./46" [pid 6780] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6791] <... chdir resumed>) = 0 [pid 6782] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 5611] getdents64(4 [pid 6791] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6782] <... mprotect resumed>) = 0 [pid 6780] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6791] <... prctl resumed>) = 0 [pid 6782] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6780] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5611] getdents64(4 [pid 6791] setpgid(0, 0 [pid 6782] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6792 attached [pid 6791] <... setpgid resumed>) = 0 [pid 6782] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6780] <... clone3 resumed> => {parent_tid=[6792]}, 88) = 6792 [pid 5611] close(4ci2-upstream-fs/strace-static-x86_64: Process 6793 attached [pid 6792] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6791] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6780] rt_sigprocmask(SIG_SETMASK, [] [pid 5611] <... close resumed>) = 0 [pid 6793] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6792] <... rseq resumed>) = 0 [pid 6791] <... openat resumed>) = 3 [pid 6782] <... clone3 resumed> => {parent_tid=[6793]}, 88) = 6793 [pid 6780] <... rt_sigprocmask resumed>, NULL, 8) = 0 [ 137.871936][ T5612] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 5611] rmdir("./46/file1" [pid 6793] <... rseq resumed>) = 0 [pid 6792] set_robust_list(0x7fef94c679a0, 24 [pid 6791] write(3, "1000", 4 [pid 6782] rt_sigprocmask(SIG_SETMASK, [] [pid 6780] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... rmdir resumed>) = 0 [pid 6782] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6780] <... futex resumed>) = 0 [pid 6793] set_robust_list(0x7fef94c679a0, 24 [pid 6792] <... set_robust_list resumed>) = 0 [pid 6791] <... write resumed>) = 4 [pid 6782] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6780] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] umount2("./46/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6793] <... set_robust_list resumed>) = 0 [pid 6792] rt_sigprocmask(SIG_SETMASK, [] [pid 6791] close(3 [pid 6782] <... futex resumed>) = 0 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6793] rt_sigprocmask(SIG_SETMASK, [] [pid 6792] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6791] <... close resumed>) = 0 [pid 6782] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] newfstatat(AT_FDCWD, "./46/binderfs" [pid 6793] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6791] symlink("/dev/binderfs", "./binderfs" [pid 5611] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6791] <... symlink resumed>) = 0 [pid 5611] unlink("./46/binderfs") = 0 [pid 5611] getdents64(3 [pid 6791] write(1, "executing program\n", 18 [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6791] <... write resumed>) = 18 [pid 5611] close(3 [pid 6791] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... close resumed>) = 0 [pid 6791] <... futex resumed>) = 0 [pid 5611] rmdir("./46" [pid 6791] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 5611] <... rmdir resumed>) = 0 [pid 6791] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6791] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6791] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 executing program [pid 5611] mkdir("./47", 0777 [pid 6791] <... mmap resumed>) = 0x7fef94c68000 [pid 5611] <... mkdir resumed>) = 0 [pid 6791] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6791] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5611] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6791] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6780] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5611] <... openat resumed>) = 3 ci2-upstream-fs/strace-static-x86_64: Process 6794 attached [ 137.978944][ T6783] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 137.984708][ T6793] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 137.984903][ T6793] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 780 with error 28 [ 137.984925][ T6793] EXT4-fs (loop4): This should not happen!! Data will be lost [pid 5611] ioctl(3, LOOP_CLR_FD) = 0 [pid 5611] close(3 [pid 6791] <... clone3 resumed> => {parent_tid=[6794]}, 88) = 6794 [pid 6782] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6794] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6791] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5612] <... umount2 resumed>) = 0 [pid 6794] <... rseq resumed>) = 0 [pid 6791] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6794] set_robust_list(0x7fef94c889a0, 24 [pid 6791] <... futex resumed>) = 0 [pid 5612] umount2("./46/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6794] <... set_robust_list resumed>) = 0 [pid 6791] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] <... close resumed>) = 0 [pid 6794] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] newfstatat(AT_FDCWD, "./46/file1" [pid 6794] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6794] memfd_create("syzkaller", 0 [pid 5612] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6794] <... memfd_create resumed>) = 3 [ 137.984925][ T6793] [ 137.984939][ T6793] EXT4-fs (loop4): Total free blocks count 0 [ 137.984951][ T6793] EXT4-fs (loop4): Free/Dirty block details [ 137.984963][ T6793] EXT4-fs (loop4): free_blocks=20480 [ 137.984976][ T6793] EXT4-fs (loop4): dirty_blocks=784 [ 137.984987][ T6793] EXT4-fs (loop4): Block reservation details [ 137.984997][ T6793] EXT4-fs (loop4): i_reserved_data_blocks=49 [ 137.986579][ T6792] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 796 with error 28 [pid 5612] umount2("./46/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6794] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5611] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6794] <... mmap resumed>) = 0x7fef8c868000 [pid 5612] openat(AT_FDCWD, "./46/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5611] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5612] <... openat resumed>) = 4 [pid 5611] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5612] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5612] getdents64(4ci2-upstream-fs/strace-static-x86_64: Process 6795 attached [pid 6792] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6793] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 5611] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6795 [pid 6795] set_robust_list(0x5555748a66e0, 24 [pid 6794] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5612] getdents64(4 [pid 5611] rt_sigprocmask(SIG_SETMASK, [] [pid 6795] <... set_robust_list resumed>) = 0 [pid 6795] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6795] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5612] close(4 [pid 6795] chdir("./47" [pid 5612] <... close resumed>) = 0 [pid 5612] rmdir("./46/file1" [pid 6795] <... chdir resumed>) = 0 [pid 6784] <... sendfile resumed>) = ? [pid 6783] <... sendfile resumed>) = ? [pid 5612] <... rmdir resumed>) = 0 [pid 6795] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6794] <... write resumed>) = 524288 [pid 6793] +++ killed by SIGBUS +++ [pid 6792] +++ killed by SIGBUS +++ [pid 6784] +++ killed by SIGBUS +++ [pid 6783] +++ killed by SIGBUS +++ [pid 6782] +++ killed by SIGBUS +++ [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6782, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5612] umount2("./46/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6795] <... prctl resumed>) = 0 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6795] setpgid(0, 0 [pid 6794] munmap(0x7fef8c868000, 138412032 [pid 6780] +++ killed by SIGBUS +++ [pid 5612] newfstatat(AT_FDCWD, "./46/binderfs" [pid 6795] <... setpgid resumed>) = 0 [pid 6794] <... munmap resumed>) = 0 [pid 5614] umount2("./45", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5612] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 137.986606][ T6792] EXT4-fs (loop1): This should not happen!! Data will be lost [ 137.986606][ T6792] [ 137.986619][ T6792] EXT4-fs (loop1): Total free blocks count 0 [ 137.986631][ T6792] EXT4-fs (loop1): Free/Dirty block details [ 137.986643][ T6792] EXT4-fs (loop1): free_blocks=20480 [ 137.986656][ T6792] EXT4-fs (loop1): dirty_blocks=800 [ 137.986667][ T6792] EXT4-fs (loop1): Block reservation details [ 137.986678][ T6792] EXT4-fs (loop1): i_reserved_data_blocks=50 [pid 6795] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5612] unlink("./46/binderfs" [pid 5610] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6780, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 6795] <... openat resumed>) = 3 [pid 6794] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5614] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5610] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 6794] <... openat resumed>) = 4 [pid 5614] <... openat resumed>) = 3 [pid 5610] <... restart_syscall resumed>) = 0 [pid 6795] write(3, "1000", 4 [pid 6794] ioctl(4, LOOP_SET_FD, 3 [pid 6795] <... write resumed>) = 4 [pid 6794] <... ioctl resumed>) = 0 [pid 5614] fstat(3 [pid 6795] close(3 [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5614] getdents64(3 [pid 6795] <... close resumed>) = 0 [pid 6794] close(3 [pid 5612] <... unlink resumed>) = 0 [pid 5610] umount2("./45", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6795] symlink("/dev/binderfs", "./binderfs" [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5612] getdents64(3 [pid 5610] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5614] umount2("./45/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6795] <... symlink resumed>) = 0 [pid 6794] <... close resumed>) = 0 [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5610] <... openat resumed>) = 3 [pid 6795] write(1, "executing program\n", 18 executing program [pid 6794] close(4 [pid 6795] <... write resumed>) = 18 [pid 6794] <... close resumed>) = 0 [pid 5612] close(3 [pid 5610] fstat(3 [pid 6795] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6794] mkdir("./file1", 0777 [pid 5612] <... close resumed>) = 0 [pid 6795] <... futex resumed>) = 0 [pid 6794] <... mkdir resumed>) = 0 [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6795] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 5612] rmdir("./46" [pid 5610] getdents64(3 [pid 6795] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 5612] <... rmdir resumed>) = 0 [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6795] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6794] mount("/dev/loop0", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5612] mkdir("./47", 0777 [pid 6795] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] umount2("./45/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6795] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c68000 [pid 5612] <... mkdir resumed>) = 0 [pid 6795] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6795] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6795] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 5612] openat(AT_FDCWD, "/dev/loop3", O_RDWRci2-upstream-fs/strace-static-x86_64: Process 6796 attached [pid 6795] <... clone3 resumed> => {parent_tid=[6796]}, 88) = 6796 [pid 5612] <... openat resumed>) = 3 [pid 6795] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] ioctl(3, LOOP_CLR_FD [pid 6796] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 6795] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5612] <... ioctl resumed>) = 0 [pid 6796] set_robust_list(0x7fef94c889a0, 24) = 0 [pid 6795] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] close(3 [pid 6796] rt_sigprocmask(SIG_SETMASK, [] [pid 6795] <... futex resumed>) = 0 [pid 6796] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6796] memfd_create("syzkaller", 0 [pid 6795] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6796] <... memfd_create resumed>) = 3 [pid 5612] <... close resumed>) = 0 [pid 5612] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5612] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6796] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fef8c868000 ci2-upstream-fs/strace-static-x86_64: Process 6799 attached [pid 5612] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6799 [pid 6799] set_robust_list(0x5555748a66e0, 24 [pid 6796] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6799] <... set_robust_list resumed>) = 0 [pid 5612] rt_sigprocmask(SIG_SETMASK, [] [pid 6799] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5612] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6799] chdir("./47") = 0 [pid 6799] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6799] setpgid(0, 0) = 0 [ 138.223941][ T63] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 780 with max blocks 4 with error 28 [ 138.223972][ T63] EXT4-fs (loop4): This should not happen!! Data will be lost [ 138.223972][ T63] [ 138.238542][ T5614] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6799] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6796] <... write resumed>) = 524288 [pid 6794] <... mount resumed>) = 0 [pid 6799] write(3, "1000", 4 [pid 6794] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6799] <... write resumed>) = 4 [pid 6796] munmap(0x7fef8c868000, 138412032 [pid 6794] <... openat resumed>) = 3 [pid 6799] close(3) = 0 [pid 6799] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6799] write(1, "executing program\n", 18 [pid 6794] chdir("./file1" [pid 6799] <... write resumed>) = 18 [pid 6794] <... chdir resumed>) = 0 [pid 6799] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6794] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6799] <... futex resumed>) = 0 [pid 6794] <... openat resumed>) = -1 EBUSY (Device or resource busy) executing program [pid 6799] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6794] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6799] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6794] <... futex resumed>) = 1 [pid 6799] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6794] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6799] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6799] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c68000 [pid 6799] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6799] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6799] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} => {parent_tid=[6800]}, 88) = 6800 [pid 6799] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6799] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6799] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6796] <... munmap resumed>) = 0 [pid 6796] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6796] ioctl(4, LOOP_SET_FD, 3 [pid 6791] <... futex resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6800 attached [pid 6791] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6800] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6794] <... futex resumed>) = 0 [pid 6800] <... rseq resumed>) = 0 [pid 6794] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6800] set_robust_list(0x7fef94c889a0, 24 [pid 6791] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6794] <... openat resumed>) = 4 [pid 6800] <... set_robust_list resumed>) = 0 [pid 6800] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6800] memfd_create("syzkaller", 0) = 3 [pid 6800] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6794] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6800] <... mmap resumed>) = 0x7fef8c868000 [pid 6794] <... futex resumed>) = 1 [pid 6794] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6791] <... futex resumed>) = 0 [pid 6791] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6794] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6791] <... futex resumed>) = 0 [pid 6794] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6791] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6794] <... openat resumed>) = 5 [ 138.295722][ T5610] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6800] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6796] <... ioctl resumed>) = 0 [pid 6794] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... umount2 resumed>) = 0 [pid 6796] close(3 [pid 6794] <... futex resumed>) = 1 [pid 6791] <... futex resumed>) = 0 [pid 5610] <... umount2 resumed>) = 0 [pid 6796] <... close resumed>) = 0 [pid 6794] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5614] umount2("./45/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6796] close(4 [pid 6791] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] umount2("./45/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6796] <... close resumed>) = 0 [pid 6794] <... futex resumed>) = 0 [pid 6791] <... futex resumed>) = 1 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6796] mkdir("./file1", 0777 [pid 6794] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6791] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./45/file1" [pid 5610] newfstatat(AT_FDCWD, "./45/file1" [pid 6794] <... openat resumed>) = 6 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6794] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] umount2("./45/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6794] <... futex resumed>) = 1 [pid 6791] <... futex resumed>) = 0 [pid 5610] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6794] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6791] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] umount2("./45/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6794] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6791] <... futex resumed>) = 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6791] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] openat(AT_FDCWD, "./45/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6794] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 5610] <... openat resumed>) = 4 [pid 5614] openat(AT_FDCWD, "./45/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5610] fstat(4 [pid 5614] <... openat resumed>) = 4 [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6794] <... mmap resumed>) = 0x200000000000 [pid 5610] getdents64(4 [pid 6794] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] fstat(4 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6794] <... futex resumed>) = 1 [pid 6791] <... futex resumed>) = 0 [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5610] getdents64(4 [pid 6794] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6791] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6794] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6791] <... futex resumed>) = 0 [pid 5614] getdents64(4 [pid 6794] sendfile(4, 5, NULL, 553647746 [pid 6791] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] close(4) = 0 [pid 5610] rmdir("./45/file1" [pid 6800] <... write resumed>) = 524288 [pid 6800] munmap(0x7fef8c868000, 138412032) = 0 [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6800] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6796] <... mkdir resumed>) = 0 [pid 5614] getdents64(4 [pid 6800] <... openat resumed>) = 4 [pid 6796] mount("/dev/loop2", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6800] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5614] close(4 [pid 6800] close(3 [pid 5614] <... close resumed>) = 0 [pid 6800] <... close resumed>) = 0 [pid 5614] rmdir("./45/file1" [pid 6800] close(4) = 0 [pid 6800] mkdir("./file1", 0777) = 0 [pid 6800] mount("/dev/loop3", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5614] <... rmdir resumed>) = 0 [pid 6791] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5614] umount2("./45/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6791] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] newfstatat(AT_FDCWD, "./45/binderfs" [pid 6791] <... futex resumed>) = 0 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6791] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c47000 [pid 5614] unlink("./45/binderfs" [pid 6791] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 5614] <... unlink resumed>) = 0 [pid 6791] <... mprotect resumed>) = 0 [pid 6791] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6796] <... mount resumed>) = 0 [pid 6791] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5614] getdents64(3ci2-upstream-fs/strace-static-x86_64: Process 6805 attached [pid 6796] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5610] <... rmdir resumed>) = 0 [pid 6805] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6796] <... openat resumed>) = 3 [pid 5614] close(3 [pid 6805] <... rseq resumed>) = 0 [pid 6796] chdir("./file1" [pid 5614] <... close resumed>) = 0 [pid 5610] umount2("./45/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6805] set_robust_list(0x7fef94c679a0, 24 [pid 6796] <... chdir resumed>) = 0 [pid 6791] <... clone3 resumed> => {parent_tid=[6805]}, 88) = 6805 [pid 5614] rmdir("./45" [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6805] <... set_robust_list resumed>) = 0 [pid 6796] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5614] <... rmdir resumed>) = 0 [pid 5610] newfstatat(AT_FDCWD, "./45/binderfs" [pid 6805] rt_sigprocmask(SIG_SETMASK, [] [pid 6800] <... mount resumed>) = 0 [pid 6796] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6791] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] mkdir("./46", 0777 [pid 5610] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6805] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6800] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6796] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6805] futex(0x7fef94d63e58, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6800] <... openat resumed>) = 3 [pid 6796] <... futex resumed>) = 1 [pid 6795] <... futex resumed>) = 0 [pid 6791] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] <... mkdir resumed>) = 0 [pid 6800] chdir("./file1" [pid 6791] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] unlink("./45/binderfs" [pid 6805] <... futex resumed>) = 0 [pid 6800] <... chdir resumed>) = 0 [pid 6796] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6795] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6791] <... futex resumed>) = 1 [pid 6800] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6795] <... futex resumed>) = 0 [pid 6791] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 138.505917][ T6805] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 138.507959][ T6805] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 348 with error 28 [ 138.507989][ T6805] EXT4-fs (loop0): This should not happen!! Data will be lost [ 138.507989][ T6805] [ 138.508003][ T6805] EXT4-fs (loop0): Total free blocks count 0 [pid 5614] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5610] <... unlink resumed>) = 0 [pid 6805] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6800] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6796] <... openat resumed>) = 4 [pid 6795] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6794] <... sendfile resumed>) = 360448 [pid 5614] <... openat resumed>) = 3 [pid 5610] getdents64(3 [pid 6800] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6796] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] ioctl(3, LOOP_CLR_FD [pid 6800] <... futex resumed>) = 1 [pid 6799] <... futex resumed>) = 0 [pid 6796] <... futex resumed>) = 1 [pid 6795] <... futex resumed>) = 0 [pid 6791] <... futex resumed>) = ? [pid 5614] <... ioctl resumed>) = 0 [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6800] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6799] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6795] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] close(3 [pid 6794] +++ killed by SIGBUS +++ [pid 6795] <... futex resumed>) = 0 [pid 6799] <... futex resumed>) = 0 [pid 6795] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6799] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] close(3 [pid 6796] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 5610] <... close resumed>) = 0 [pid 6800] <... openat resumed>) = 4 [pid 6805] +++ killed by SIGBUS +++ [pid 6796] <... openat resumed>) = 5 [pid 6791] +++ killed by SIGBUS +++ [pid 5614] <... close resumed>) = 0 [pid 5610] rmdir("./45" [pid 6800] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6796] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6800] <... futex resumed>) = 1 [pid 6799] <... futex resumed>) = 0 [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6791, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6800] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6799] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6796] <... futex resumed>) = 1 [pid 6795] <... futex resumed>) = 0 [pid 5610] <... rmdir resumed>) = 0 [pid 6799] <... futex resumed>) = 0 [pid 6795] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6800] <... openat resumed>) = 5 [pid 6799] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6795] <... futex resumed>) = 0 [pid 6800] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6795] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6796] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6800] <... futex resumed>) = 1 [pid 5609] umount2("./46", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6799] <... futex resumed>) = 0 [pid 6800] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6796] <... openat resumed>) = 6 [pid 5610] mkdir("./46", 0777 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6799] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6800] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6799] <... futex resumed>) = 0 [pid 5609] <... openat resumed>) = 3 [pid 6800] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6799] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6796] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... mkdir resumed>) = 0 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6800] <... openat resumed>) = 6 [pid 6796] <... futex resumed>) = 1 [pid 5609] getdents64(3 [pid 6795] <... futex resumed>) = 0 [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [ 138.508015][ T6805] EXT4-fs (loop0): Free/Dirty block details [ 138.508027][ T6805] EXT4-fs (loop0): free_blocks=20480 [ 138.508040][ T6805] EXT4-fs (loop0): dirty_blocks=352 [ 138.508052][ T6805] EXT4-fs (loop0): Block reservation details [ 138.508062][ T6805] EXT4-fs (loop0): i_reserved_data_blocks=22 ci2-upstream-fs/strace-static-x86_64: Process 6806 attached [pid 6800] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6796] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6795] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6806 [pid 5610] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5609] umount2("./46/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6799] <... futex resumed>) = 0 [pid 6796] <... mmap resumed>) = 0x200000000000 [pid 6799] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6795] <... futex resumed>) = 0 [pid 6799] <... futex resumed>) = 0 [pid 6800] <... futex resumed>) = 1 [pid 6806] set_robust_list(0x5555748a66e0, 24 [pid 6799] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6795] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] <... openat resumed>) = 3 [pid 6806] <... set_robust_list resumed>) = 0 [pid 6800] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6796] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6795] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] ioctl(3, LOOP_CLR_FD [pid 6806] rt_sigprocmask(SIG_SETMASK, [] [pid 6795] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5610] <... ioctl resumed>) = 0 [pid 6796] <... futex resumed>) = 0 [pid 6795] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] close(3 [pid 6806] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6796] sendfile(4, 5, NULL, 553647746 [pid 6806] chdir("./46" [pid 6800] <... mmap resumed>) = 0x200000000000 [pid 6806] <... chdir resumed>) = 0 [pid 6806] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6800] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6806] <... prctl resumed>) = 0 [pid 6800] <... futex resumed>) = 1 [pid 6799] <... futex resumed>) = 0 [pid 5610] <... close resumed>) = 0 [pid 6799] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6799] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6800] sendfile(4, 5, NULL, 553647746 [pid 6806] setpgid(0, 0) = 0 [pid 6806] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5610] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6806] write(3, "1000", 4 [pid 5610] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6806] <... write resumed>) = 4 [pid 6806] close(3ci2-upstream-fs/strace-static-x86_64: Process 6807 attached ) = 0 [pid 6807] set_robust_list(0x5555748a66e0, 24 [pid 6806] symlink("/dev/binderfs", "./binderfs" [pid 6795] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5610] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6807 [pid 6807] <... set_robust_list resumed>) = 0 [pid 6807] rt_sigprocmask(SIG_SETMASK, [] [pid 6806] <... symlink resumed>) = 0 [pid 5610] rt_sigprocmask(SIG_SETMASK, [] [pid 6799] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6795] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6807] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6799] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6807] chdir("./46" [pid 6799] <... futex resumed>) = 0 [pid 6807] <... chdir resumed>) = 0 [pid 6799] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6807] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6799] <... mmap resumed>) = 0x7fef94c47000 [pid 6807] <... prctl resumed>) = 0 [pid 6799] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6807] setpgid(0, 0) = 0 [pid 6799] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6807] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6799] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6799] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6807] write(3, "1000", 4) = 4 [pid 6795] <... futex resumed>) = 0 [pid 6807] close(3 [pid 6799] <... clone3 resumed> => {parent_tid=[6808]}, 88) = 6808 [pid 6807] <... close resumed>) = 0 [pid 6807] symlink("/dev/binderfs", "./binderfs" [pid 6799] rt_sigprocmask(SIG_SETMASK, [] [pid 6807] <... symlink resumed>) = 0 [pid 6799] <... rt_sigprocmask resumed>, NULL, 8) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6808 attached [pid 6807] write(1, "executing program\n", 18 [pid 6806] write(1, "executing program\n", 18 executing program [pid 6799] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6795] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5610] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6806] <... write resumed>) = 18 [pid 6807] <... write resumed>) = 18 [pid 6807] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6799] <... futex resumed>) = 0 [pid 6807] <... futex resumed>) = 0 [pid 6806] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6799] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} executing program [pid 6795] <... mmap resumed>) = 0x7fef94c47000 [pid 6808] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6806] <... futex resumed>) = 0 [pid 6808] <... rseq resumed>) = 0 [pid 6807] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6806] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6795] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6808] set_robust_list(0x7fef94c679a0, 24 [pid 6807] <... rt_sigaction resumed>, NULL, 8) = 0 [ 138.657978][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 348 with max blocks 4 with error 28 [ 138.658009][ T12] EXT4-fs (loop0): This should not happen!! Data will be lost [ 138.658009][ T12] [ 138.663664][ T5609] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6808] <... set_robust_list resumed>) = 0 [pid 6806] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6795] <... mprotect resumed>) = 0 [pid 6807] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6806] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6795] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6808] rt_sigprocmask(SIG_SETMASK, [] [pid 6806] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6807] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c68000 [pid 6807] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6808] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6807] <... mprotect resumed>) = 0 [pid 6806] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5609] <... umount2 resumed>) = 0 [pid 6807] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6806] <... mmap resumed>) = 0x7fef94c68000 [ 138.737893][ T6808] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 138.738095][ T6808] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 188 with error 28 [ 138.738118][ T6808] EXT4-fs (loop3): This should not happen!! Data will be lost [ 138.738118][ T6808] [ 138.738131][ T6808] EXT4-fs (loop3): Total free blocks count 0 [ 138.738142][ T6808] EXT4-fs (loop3): Free/Dirty block details [pid 6807] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0}ci2-upstream-fs/strace-static-x86_64: Process 6809 attached [pid 6808] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6806] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6800] <... sendfile resumed>) = 196608 [pid 6795] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5609] umount2("./46/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6809] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6807] <... clone3 resumed> => {parent_tid=[6809]}, 88) = 6809 [pid 6806] <... mprotect resumed>) = 0 [pid 6799] <... futex resumed>) = ? [pid 6795] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ci2-upstream-fs/strace-static-x86_64: Process 6810 attached [pid 6809] <... rseq resumed>) = 0 [pid 6807] rt_sigprocmask(SIG_SETMASK, [] [pid 6800] +++ killed by SIGBUS +++ [pid 6806] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5609] newfstatat(AT_FDCWD, "./46/file1" [pid 6810] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6809] set_robust_list(0x7fef94c889a0, 24 [pid 6807] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6806] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6795] <... clone3 resumed> => {parent_tid=[6810]}, 88) = 6810 [pid 6810] <... rseq resumed>) = 0 [pid 6809] <... set_robust_list resumed>) = 0 [pid 6807] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6806] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6795] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6811 attached [pid 6810] set_robust_list(0x7fef94c679a0, 24 [pid 6809] rt_sigprocmask(SIG_SETMASK, [] [pid 6807] <... futex resumed>) = 0 [pid 6795] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] umount2("./46/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6811] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6810] <... set_robust_list resumed>) = 0 [pid 6795] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6807] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6811] <... rseq resumed>) = 0 [pid 6810] rt_sigprocmask(SIG_SETMASK, [] [pid 6809] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6795] <... futex resumed>) = 0 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6811] set_robust_list(0x7fef94c889a0, 24 [pid 6810] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6795] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] openat(AT_FDCWD, "./46/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6811] <... set_robust_list resumed>) = 0 [pid 6809] memfd_create("syzkaller", 0 [pid 6806] <... clone3 resumed> => {parent_tid=[6811]}, 88) = 6811 [pid 6811] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] <... openat resumed>) = 4 [pid 6811] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] fstat(4 [pid 6811] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] getdents64(4, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4 [pid 6806] rt_sigprocmask(SIG_SETMASK, [] [pid 6809] <... memfd_create resumed>) = 3 [pid 6806] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6808] +++ killed by SIGBUS +++ [pid 6806] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6799] +++ killed by SIGBUS +++ [pid 6809] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6806] <... futex resumed>) = 1 [pid 6811] <... futex resumed>) = 0 [pid 5609] close(4 [pid 6809] <... mmap resumed>) = 0x7fef8c868000 [pid 6806] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6811] memfd_create("syzkaller", 0 [pid 6809] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5612] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6799, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5609] <... close resumed>) = 0 [pid 6811] <... memfd_create resumed>) = 3 [ 138.738154][ T6808] EXT4-fs (loop3): free_blocks=20480 [ 138.738166][ T6808] EXT4-fs (loop3): dirty_blocks=192 [ 138.738178][ T6808] EXT4-fs (loop3): Block reservation details [ 138.738189][ T6808] EXT4-fs (loop3): i_reserved_data_blocks=12 [pid 5609] rmdir("./46/file1" [pid 6811] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5609] <... rmdir resumed>) = 0 [pid 6811] <... mmap resumed>) = 0x7fef8c868000 [pid 5609] umount2("./46/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./46/binderfs") = 0 [pid 5609] getdents64(3, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./46") = 0 [pid 6811] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5609] mkdir("./47", 0777 [pid 5612] umount2("./47", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6809] <... write resumed>) = 524288 [pid 5612] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5612] fstat(3 [pid 6809] munmap(0x7fef8c868000, 138412032 [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6809] <... munmap resumed>) = 0 [pid 5612] getdents64(3, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5612] umount2("./47/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6809] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6795] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6809] <... openat resumed>) = 4 [pid 5609] <... mkdir resumed>) = 0 [pid 6809] ioctl(4, LOOP_SET_FD, 3 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = 0 [pid 6811] <... write resumed>) = 524288 [pid 5609] close(3 [pid 6809] <... ioctl resumed>) = 0 [ 138.826581][ T6810] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 138.827934][ T6810] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 884 with error 28 [ 138.827961][ T6810] EXT4-fs (loop2): This should not happen!! Data will be lost [ 138.827961][ T6810] [ 138.827973][ T6810] EXT4-fs (loop2): Total free blocks count 0 [ 138.827983][ T6810] EXT4-fs (loop2): Free/Dirty block details [ 138.827994][ T6810] EXT4-fs (loop2): free_blocks=20480 [ 138.828005][ T6810] EXT4-fs (loop2): dirty_blocks=896 [pid 6809] close(3) = 0 [pid 6811] munmap(0x7fef8c868000, 138412032 [pid 6809] close(4 [pid 6811] <... munmap resumed>) = 0 [pid 6809] <... close resumed>) = 0 [pid 6809] mkdir("./file1", 0777) = 0 [pid 6811] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6811] ioctl(4, LOOP_SET_FD, 3 [pid 6809] mount("/dev/loop1", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6811] <... ioctl resumed>) = 0 [pid 6811] close(3 [pid 6810] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 5609] <... close resumed>) = 0 [pid 6811] <... close resumed>) = 0 [pid 6811] close(4 [pid 6796] <... sendfile resumed>) = ? [pid 6811] <... close resumed>) = 0 [pid 6810] +++ killed by SIGBUS +++ [pid 6796] +++ killed by SIGBUS +++ [pid 6811] mkdir("./file1", 0777 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6795] +++ killed by SIGBUS +++ [pid 6811] <... mkdir resumed>) = 0 [pid 5611] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6795, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5609] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6811] mount("/dev/loop4", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 6814 attached [ 138.828016][ T6810] EXT4-fs (loop2): Block reservation details [ 138.828027][ T6810] EXT4-fs (loop2): i_reserved_data_blocks=56 [pid 6814] set_robust_list(0x5555748a66e0, 24) = 0 [pid 5609] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6814 [pid 6814] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 6814] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6814] chdir("./47") = 0 [pid 6814] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6814] setpgid(0, 0) = 0 [pid 6814] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6814] write(3, "1000", 4) = 4 [pid 6814] close(3) = 0 [pid 5611] umount2("./47", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6814] symlink("/dev/binderfs", "./binderfs" [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6814] <... symlink resumed>) = 0 [pid 5611] <... openat resumed>) = 3 [pid 5611] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6809] <... mount resumed>) = 0 [pid 5611] getdents64(3 [pid 6814] write(1, "executing program\n", 18) = 18 executing program [pid 6814] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6814] <... futex resumed>) = 0 [pid 5611] umount2("./47/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6814] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60}, NULL, 8) = 0 [ 138.923640][ T63] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 188 with max blocks 4 with error 28 [ 138.923672][ T63] EXT4-fs (loop3): This should not happen!! Data will be lost [ 138.923672][ T63] [ 138.928431][ T5612] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6809] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6814] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6811] <... mount resumed>) = 0 [pid 6809] chdir("./file1" [pid 5612] <... umount2 resumed>) = 0 [pid 6814] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6811] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6809] <... chdir resumed>) = 0 [pid 6814] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5612] umount2("./47/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6814] <... mmap resumed>) = 0x7fef94c68000 [pid 6809] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6814] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6811] <... openat resumed>) = 3 [pid 6811] chdir("./file1" [pid 6814] <... mprotect resumed>) = 0 [pid 6811] <... chdir resumed>) = 0 [pid 6811] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6811] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6806] <... futex resumed>) = 0 [pid 6811] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6814] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6806] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6811] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6809] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6814] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6811] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6806] <... futex resumed>) = 0 [pid 6814] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6809] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] newfstatat(AT_FDCWD, "./47/file1"ci2-upstream-fs/strace-static-x86_64: Process 6817 attached [pid 6809] <... futex resumed>) = 1 [pid 6807] <... futex resumed>) = 0 [pid 6817] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6814] <... clone3 resumed> => {parent_tid=[6817]}, 88) = 6817 [pid 6811] <... openat resumed>) = 4 [pid 6809] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6806] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6817] <... rseq resumed>) = 0 [pid 6814] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] umount2("./47/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6817] set_robust_list(0x7fef94c889a0, 24 [pid 6814] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6811] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6807] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6817] <... set_robust_list resumed>) = 0 [pid 6814] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6811] <... futex resumed>) = 1 [pid 6809] <... futex resumed>) = 0 [pid 6807] <... futex resumed>) = 1 [pid 6806] <... futex resumed>) = 0 [pid 5612] openat(AT_FDCWD, "./47/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6817] rt_sigprocmask(SIG_SETMASK, [] [pid 6814] <... futex resumed>) = 0 [pid 6811] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6809] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6806] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... openat resumed>) = 4 [pid 6817] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6814] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6811] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6809] <... openat resumed>) = 4 [pid 6807] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] <... umount2 resumed>) = 0 [pid 6811] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6809] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] umount2("./47/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6817] memfd_create("syzkaller", 0 [pid 6811] <... openat resumed>) = 5 [pid 6809] <... futex resumed>) = 0 [pid 6807] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5612] fstat(4 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6809] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6807] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6806] <... futex resumed>) = 0 [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5611] newfstatat(AT_FDCWD, "./47/file1" [pid 6817] <... memfd_create resumed>) = 3 [pid 6809] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6807] <... futex resumed>) = 0 [pid 6806] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6811] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] getdents64(4 [pid 5611] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6811] <... futex resumed>) = 0 [pid 6817] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6811] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6809] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6807] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6806] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5611] umount2("./47/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6806] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] getdents64(4 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6811] <... futex resumed>) = 0 [pid 6806] <... futex resumed>) = 1 [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6811] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6817] <... mmap resumed>) = 0x7fef8c868000 [pid 6809] <... openat resumed>) = 5 [pid 6806] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 139.027583][ T5611] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 5612] close(4 [pid 5611] openat(AT_FDCWD, "./47/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6811] <... openat resumed>) = 6 [pid 6809] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6807] <... futex resumed>) = 0 [pid 5611] <... openat resumed>) = 4 [pid 6809] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6807] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] fstat(4 [pid 6817] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6811] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6809] <... openat resumed>) = 6 [pid 5612] <... close resumed>) = 0 [pid 6811] <... futex resumed>) = 1 [pid 6811] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6809] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6807] <... futex resumed>) = 0 [pid 6806] <... futex resumed>) = 0 [pid 5612] rmdir("./47/file1" [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6809] <... futex resumed>) = 0 [pid 6807] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6806] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... rmdir resumed>) = 0 [pid 5611] getdents64(4 [pid 6811] <... futex resumed>) = 0 [pid 6809] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6807] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6806] <... futex resumed>) = 1 [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6817] <... write resumed>) = 524288 [pid 6811] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6807] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6806] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] umount2("./47/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] getdents64(4 [pid 6811] <... mmap resumed>) = 0x200000000000 [pid 6809] <... futex resumed>) = 0 [pid 6807] <... futex resumed>) = 1 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6807] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6811] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6809] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 5612] newfstatat(AT_FDCWD, "./47/binderfs" [pid 6817] munmap(0x7fef8c868000, 138412032 [pid 5611] close(4 [pid 6811] <... futex resumed>) = 1 [pid 6809] <... mmap resumed>) = 0x200000000000 [pid 6806] <... futex resumed>) = 0 [pid 5612] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6811] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6817] <... munmap resumed>) = 0 [pid 6809] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6806] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] unlink("./47/binderfs" [pid 5611] <... close resumed>) = 0 [pid 6806] <... futex resumed>) = 1 [pid 6811] <... futex resumed>) = 0 [pid 6806] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6811] sendfile(4, 5, NULL, 553647746 [pid 6809] <... futex resumed>) = 1 [pid 5611] rmdir("./47/file1" [pid 6809] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5611] <... rmdir resumed>) = 0 [pid 6817] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6807] <... futex resumed>) = 0 [pid 5612] <... unlink resumed>) = 0 [pid 6817] <... openat resumed>) = 4 [pid 6807] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6817] ioctl(4, LOOP_SET_FD, 3 [pid 6809] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6807] <... futex resumed>) = 0 [pid 5612] getdents64(3 [pid 6807] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6817] <... ioctl resumed>) = 0 [pid 6809] sendfile(4, 5, NULL, 553647746 [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5611] umount2("./47/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6817] close(3 [pid 5612] close(3 [pid 6817] <... close resumed>) = 0 [pid 5612] <... close resumed>) = 0 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6817] close(4 [pid 5612] rmdir("./47" [pid 5611] newfstatat(AT_FDCWD, "./47/binderfs" [pid 6817] <... close resumed>) = 0 [pid 5612] <... rmdir resumed>) = 0 [pid 6817] mkdir("./file1", 0777 [pid 5611] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6817] <... mkdir resumed>) = 0 [pid 5612] mkdir("./48", 0777 [pid 5611] unlink("./47/binderfs" [pid 5612] <... mkdir resumed>) = 0 [pid 5611] <... unlink resumed>) = 0 [pid 6817] mount("/dev/loop0", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5611] getdents64(3 [pid 5612] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5612] ioctl(3, LOOP_CLR_FD [pid 5611] close(3 [pid 5612] <... ioctl resumed>) = 0 [pid 5611] <... close resumed>) = 0 [pid 6806] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5611] rmdir("./47" [pid 6806] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5612] close(3 [pid 5611] <... rmdir resumed>) = 0 [pid 6807] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6806] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5611] mkdir("./48", 0777 [pid 6807] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6806] <... mmap resumed>) = 0x7fef94c47000 [pid 5611] <... mkdir resumed>) = 0 [pid 6807] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c47000 [pid 6807] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6806] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6807] <... mprotect resumed>) = 0 [pid 6806] <... mprotect resumed>) = 0 [pid 5611] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6807] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6806] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5611] <... openat resumed>) = 3 [pid 6807] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6807] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 6820 attached [pid 6806] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5611] ioctl(3, LOOP_CLR_FD [pid 6806] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5611] <... ioctl resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6821 attached [pid 6820] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6807] <... clone3 resumed> => {parent_tid=[6820]}, 88) = 6820 [pid 5612] <... close resumed>) = 0 [pid 5611] close(3 [pid 6807] rt_sigprocmask(SIG_SETMASK, [] [pid 6821] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6820] <... rseq resumed>) = 0 [pid 6807] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6806] <... clone3 resumed> => {parent_tid=[6821]}, 88) = 6821 [pid 5612] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6807] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6806] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6807] <... futex resumed>) = 0 [pid 6806] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6821] <... rseq resumed>) = 0 [pid 6820] set_robust_list(0x7fef94c679a0, 24 [pid 6807] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6806] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5611] <... close resumed>) = 0 [pid 6806] <... futex resumed>) = 0 [pid 6821] set_robust_list(0x7fef94c679a0, 24 [pid 6820] <... set_robust_list resumed>) = 0 [pid 6821] <... set_robust_list resumed>) = 0 [pid 6820] rt_sigprocmask(SIG_SETMASK, [] [pid 6821] rt_sigprocmask(SIG_SETMASK, [] [pid 5611] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6820] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6806] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6821] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5611] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 6822 attached [pid 6822] set_robust_list(0x5555748a66e0, 24 [pid 6817] <... mount resumed>) = 0 [pid 5612] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6822 [pid 6822] <... set_robust_list resumed>) = 0 [pid 6817] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6822] rt_sigprocmask(SIG_SETMASK, [] [pid 6817] <... openat resumed>) = 3 [pid 5612] rt_sigprocmask(SIG_SETMASK, [] [pid 6822] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5612] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6822] chdir("./48" [ 139.235400][ T6820] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 139.235947][ T6820] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 296 with error 28 [ 139.235973][ T6820] EXT4-fs (loop1): This should not happen!! Data will be lost [ 139.235973][ T6820] [ 139.235987][ T6820] EXT4-fs (loop1): Total free blocks count 0 [ 139.236014][ T6820] EXT4-fs (loop1): Free/Dirty block details [pid 6817] chdir("./file1" [pid 6822] <... chdir resumed>) = 0 [pid 6822] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6817] <... chdir resumed>) = 0 [pid 6822] <... prctl resumed>) = 0 [pid 6817] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6822] setpgid(0, 0 [pid 6817] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6822] <... setpgid resumed>) = 0 [pid 6817] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6822] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6817] <... futex resumed>) = 1 [pid 6814] <... futex resumed>) = 0 [pid 6814] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6822] <... openat resumed>) = 3 [pid 6817] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6814] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-upstream-fs/strace-static-x86_64: Process 6823 attached [pid 6807] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6822] write(3, "1000", 4 [pid 6820] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6823] set_robust_list(0x5555748a66e0, 24 [pid 6817] <... openat resumed>) = 4 [pid 6809] <... sendfile resumed>) = 307200 [pid 6806] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6823] <... set_robust_list resumed>) = 0 [pid 6822] <... write resumed>) = 4 [pid 6823] rt_sigprocmask(SIG_SETMASK, [] [pid 6822] close(3 [pid 6817] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6822] <... close resumed>) = 0 [pid 6817] <... futex resumed>) = 1 [pid 6814] <... futex resumed>) = 0 [pid 6809] +++ killed by SIGBUS +++ [pid 5611] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6823 [pid 6823] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6822] symlink("/dev/binderfs", "./binderfs" [pid 6817] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6814] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6822] <... symlink resumed>) = 0 [pid 6820] +++ killed by SIGBUS +++ [pid 6817] <... openat resumed>) = 5 [pid 6814] <... futex resumed>) = 0 [pid 6807] +++ killed by SIGBUS +++ [ 139.236026][ T6820] EXT4-fs (loop1): free_blocks=20480 [ 139.236039][ T6820] EXT4-fs (loop1): dirty_blocks=304 [ 139.236050][ T6820] EXT4-fs (loop1): Block reservation details [ 139.236060][ T6820] EXT4-fs (loop1): i_reserved_data_blocks=19 [ 139.237737][ T6811] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 139.245402][ T6821] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 560 with error 28 [pid 5611] rt_sigprocmask(SIG_SETMASK, [] [pid 6823] chdir("./48" [pid 6814] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6823] <... chdir resumed>) = 0 [pid 6822] write(1, "executing program\n", 18 [pid 6823] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6821] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6817] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6811] <... sendfile resumed>) = 573440 [pid 5610] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6807, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6823] <... prctl resumed>) = 0 [pid 6822] <... write resumed>) = 18 [pid 6817] <... futex resumed>) = 1 [pid 6814] <... futex resumed>) = 0 [pid 5611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6823] setpgid(0, 0 [pid 6822] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6814] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6823] <... setpgid resumed>) = 0 [pid 6822] <... futex resumed>) = 0 [pid 6817] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6823] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6822] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6817] <... openat resumed>) = 6 executing program [pid 6814] <... futex resumed>) = 0 [pid 6811] +++ killed by SIGBUS +++ [pid 6823] <... openat resumed>) = 3 [pid 6822] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6821] +++ killed by SIGBUS +++ [pid 6817] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6814] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6806] +++ killed by SIGBUS +++ [pid 6823] write(3, "1000", 4 [pid 6822] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6817] <... futex resumed>) = 0 [pid 6814] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6823] <... write resumed>) = 4 [pid 6822] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6817] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6814] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6823] close(3 [pid 6822] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6823] <... close resumed>) = 0 [pid 6822] <... mmap resumed>) = 0x7fef94c68000 [pid 6817] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6814] <... futex resumed>) = 0 [pid 6823] symlink("/dev/binderfs", "./binderfs" [pid 6822] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6817] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6814] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6823] <... symlink resumed>) = 0 [pid 6822] <... mprotect resumed>) = 0 [pid 6817] <... mmap resumed>) = 0x200000000000 [pid 6823] write(1, "executing program\n", 18 executing program [pid 6822] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6823] <... write resumed>) = 18 [pid 6822] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6817] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6822] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6817] <... futex resumed>) = 1 [pid 6814] <... futex resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6824 attached [pid 6823] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6814] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6823] <... futex resumed>) = 0 [pid 6822] <... clone3 resumed> => {parent_tid=[6824]}, 88) = 6824 [pid 6817] sendfile(4, 5, NULL, 553647746 [pid 6814] <... futex resumed>) = 0 [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6806, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6824] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5610] umount2("./46", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6823] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6822] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6822] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6814] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6824] <... rseq resumed>) = 0 [pid 6823] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6822] <... futex resumed>) = 0 [pid 5614] umount2("./46", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6824] set_robust_list(0x7fef94c889a0, 24 [pid 6823] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6822] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6823] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6823] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5614] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6824] <... set_robust_list resumed>) = 0 [pid 5610] <... openat resumed>) = 3 [pid 6824] rt_sigprocmask(SIG_SETMASK, [] [pid 6823] <... mmap resumed>) = 0x7fef94c68000 [pid 5614] <... openat resumed>) = 3 [pid 5610] fstat(3 [pid 6823] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6824] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6823] <... mprotect resumed>) = 0 [pid 5614] fstat(3 [pid 5610] getdents64(3 [pid 6824] memfd_create("syzkaller", 0 [pid 6823] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6824] <... memfd_create resumed>) = 3 [pid 6823] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5614] getdents64(3 [pid 5610] umount2("./46/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6824] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6823] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6824] <... mmap resumed>) = 0x7fef8c868000 [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 ci2-upstream-fs/strace-static-x86_64: Process 6825 attached [pid 5614] umount2("./46/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6823] <... clone3 resumed> => {parent_tid=[6825]}, 88) = 6825 [ 139.245433][ T6821] EXT4-fs (loop4): This should not happen!! Data will be lost [ 139.245433][ T6821] [ 139.245447][ T6821] EXT4-fs (loop4): Total free blocks count 0 [ 139.245459][ T6821] EXT4-fs (loop4): Free/Dirty block details [ 139.245471][ T6821] EXT4-fs (loop4): free_blocks=20480 [ 139.245484][ T6821] EXT4-fs (loop4): dirty_blocks=560 [ 139.245496][ T6821] EXT4-fs (loop4): Block reservation details [ 139.245507][ T6821] EXT4-fs (loop4): i_reserved_data_blocks=35 [pid 6825] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6823] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6823] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6825] <... rseq resumed>) = 0 [pid 6823] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6825] set_robust_list(0x7fef94c889a0, 24 [pid 6824] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6825] <... set_robust_list resumed>) = 0 [pid 6825] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6825] memfd_create("syzkaller", 0) = 3 [pid 6825] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fef8c868000 [pid 6814] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6814] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6814] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c47000 [pid 6814] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6814] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6814] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 6826 attached [pid 6824] <... write resumed>) = 524288 [pid 6814] <... clone3 resumed> => {parent_tid=[6826]}, 88) = 6826 [pid 6826] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6814] rt_sigprocmask(SIG_SETMASK, [] [pid 6826] <... rseq resumed>) = 0 [pid 6825] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6814] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6814] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6826] set_robust_list(0x7fef94c679a0, 24 [pid 6824] munmap(0x7fef8c868000, 138412032 [pid 6814] <... futex resumed>) = 0 [pid 6826] <... set_robust_list resumed>) = 0 [pid 6814] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6826] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6824] <... munmap resumed>) = 0 [ 139.456622][ T63] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 296 with max blocks 4 with error 28 [ 139.456656][ T63] EXT4-fs (loop1): This should not happen!! Data will be lost [ 139.456656][ T63] [ 139.468514][ T5614] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 139.472306][ T5610] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6824] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6824] ioctl(4, LOOP_SET_FD, 3 [pid 6825] <... write resumed>) = 524288 [ 139.493948][ T6826] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 139.494306][ T6826] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 580 with error 28 [ 139.494329][ T6826] EXT4-fs (loop0): This should not happen!! Data will be lost [ 139.494329][ T6826] [ 139.494343][ T6826] EXT4-fs (loop0): Total free blocks count 0 [ 139.494355][ T6826] EXT4-fs (loop0): Free/Dirty block details [ 139.494366][ T6826] EXT4-fs (loop0): free_blocks=20480 [pid 6825] munmap(0x7fef8c868000, 138412032) = 0 [pid 6814] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6825] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6825] ioctl(4, LOOP_SET_FD, 3 [pid 6824] <... ioctl resumed>) = 0 [pid 6824] close(3) = 0 [pid 6824] close(4) = 0 [pid 6824] mkdir("./file1", 0777 [pid 5610] <... umount2 resumed>) = 0 [pid 5610] umount2("./46/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6824] <... mkdir resumed>) = 0 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] newfstatat(AT_FDCWD, "./46/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5610] umount2("./46/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6824] mount("/dev/loop3", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] openat(AT_FDCWD, "./46/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5610] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6825] <... ioctl resumed>) = 0 [pid 5610] getdents64(4 [pid 6825] close(3 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6826] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6825] <... close resumed>) = 0 [pid 5610] getdents64(4 [pid 6825] close(4 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6825] <... close resumed>) = 0 [pid 5610] close(4 [pid 6826] +++ killed by SIGBUS +++ [pid 6825] mkdir("./file1", 0777 [pid 6817] <... sendfile resumed>) = ? [pid 5610] <... close resumed>) = 0 [pid 6825] <... mkdir resumed>) = 0 [pid 5614] <... umount2 resumed>) = 0 [pid 5610] rmdir("./46/file1") = 0 [pid 5610] umount2("./46/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5614] umount2("./46/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6825] mount("/dev/loop2", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6817] +++ killed by SIGBUS +++ [pid 6814] +++ killed by SIGBUS +++ [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] newfstatat(AT_FDCWD, "./46/binderfs" [pid 5614] newfstatat(AT_FDCWD, "./46/file1" [pid 5610] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5610] unlink("./46/binderfs" [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6814, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5614] umount2("./46/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] <... unlink resumed>) = 0 [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] <... restart_syscall resumed>) = 0 [pid 5614] openat(AT_FDCWD, "./46/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5610] getdents64(3 [pid 5614] <... openat resumed>) = 4 [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6824] <... mount resumed>) = 0 [pid 5610] close(3 [pid 6824] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5614] fstat(4 [pid 5610] <... close resumed>) = 0 [pid 5609] umount2("./47", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5610] rmdir("./46" [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6824] <... openat resumed>) = 3 [pid 5614] getdents64(4 [pid 5610] <... rmdir resumed>) = 0 [pid 5609] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6824] chdir("./file1" [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5609] <... openat resumed>) = 3 [pid 6824] <... chdir resumed>) = 0 [pid 5609] fstat(3 [pid 5614] getdents64(4 [pid 6824] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6824] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5610] mkdir("./47", 0777 [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6824] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [ 139.494379][ T6826] EXT4-fs (loop0): dirty_blocks=592 [ 139.494390][ T6826] EXT4-fs (loop0): Block reservation details [ 139.494401][ T6826] EXT4-fs (loop0): i_reserved_data_blocks=37 [pid 5614] close(4 [pid 6825] <... mount resumed>) = 0 [pid 6824] <... futex resumed>) = 1 [pid 6822] <... futex resumed>) = 0 [pid 5614] <... close resumed>) = 0 [pid 5610] <... mkdir resumed>) = 0 [pid 5609] getdents64(3 [pid 6822] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6822] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] rmdir("./46/file1" [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6824] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 5610] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5609] umount2("./47/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6825] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6824] <... openat resumed>) = 4 [pid 5614] <... rmdir resumed>) = 0 [pid 5610] <... openat resumed>) = 3 [pid 6824] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6822] <... futex resumed>) = 0 [pid 5610] ioctl(3, LOOP_CLR_FD) = 0 [pid 6822] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] close(3 [pid 6825] <... openat resumed>) = 3 [pid 6822] <... futex resumed>) = 0 [pid 5614] umount2("./46/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6822] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6824] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 5614] newfstatat(AT_FDCWD, "./46/binderfs" [pid 6825] chdir("./file1" [pid 6824] <... openat resumed>) = 5 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6825] <... chdir resumed>) = 0 [pid 6824] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6822] <... futex resumed>) = 0 [pid 6825] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5614] unlink("./46/binderfs" [pid 6825] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6824] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6822] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... unlink resumed>) = 0 [pid 6824] <... openat resumed>) = 6 [pid 6822] <... futex resumed>) = 0 [pid 6825] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6822] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] getdents64(3 [pid 6825] <... futex resumed>) = 1 [pid 6824] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6823] <... futex resumed>) = 0 [pid 6822] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6823] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6822] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] close(3 [pid 6822] <... futex resumed>) = 0 [pid 5614] <... close resumed>) = 0 [pid 6825] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6823] <... futex resumed>) = 0 [pid 6824] <... futex resumed>) = 0 [pid 6823] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6822] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] rmdir("./46" [pid 6824] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 5610] <... close resumed>) = 0 [pid 6824] <... mmap resumed>) = 0x200000000000 [pid 5610] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5610] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6824] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6822] <... futex resumed>) = 0 [pid 6824] sendfile(4, 5, NULL, 553647746 [pid 6822] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6822] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-upstream-fs/strace-static-x86_64: Process 6831 attached [pid 5610] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6831 [pid 5610] rt_sigprocmask(SIG_SETMASK, [] [pid 6831] set_robust_list(0x5555748a66e0, 24 [pid 6825] <... openat resumed>) = 4 [pid 5614] <... rmdir resumed>) = 0 [pid 5610] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6825] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6831] <... set_robust_list resumed>) = 0 [pid 6825] <... futex resumed>) = 1 [pid 6825] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6823] <... futex resumed>) = 0 [pid 6831] rt_sigprocmask(SIG_SETMASK, [] [pid 6823] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] mkdir("./47", 0777 [pid 6831] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6823] <... futex resumed>) = 1 [pid 5614] <... mkdir resumed>) = 0 [pid 6831] chdir("./47" [pid 6825] <... futex resumed>) = 0 [pid 6823] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6831] <... chdir resumed>) = 0 [pid 6825] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 5614] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6831] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6825] <... openat resumed>) = 5 [pid 5614] <... openat resumed>) = 3 [pid 6831] <... prctl resumed>) = 0 [pid 6825] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] ioctl(3, LOOP_CLR_FD [pid 6831] setpgid(0, 0 [pid 6825] <... futex resumed>) = 1 [pid 6823] <... futex resumed>) = 0 [pid 5614] <... ioctl resumed>) = 0 [pid 6825] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6823] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6831] <... setpgid resumed>) = 0 [pid 6825] <... openat resumed>) = 6 [pid 6823] <... futex resumed>) = 0 [pid 5614] close(3 [pid 6831] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6823] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6831] <... openat resumed>) = 3 [pid 6825] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6823] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6831] write(3, "1000", 4 [pid 6825] <... futex resumed>) = 0 [pid 6823] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6831] <... write resumed>) = 4 [pid 6825] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6823] <... futex resumed>) = 0 [pid 6831] close(3 [pid 6823] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6822] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6831] <... close resumed>) = 0 [pid 6825] <... mmap resumed>) = 0x200000000000 [pid 6822] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6831] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6822] <... futex resumed>) = 0 [pid 6831] write(1, "executing program\n", 18 [pid 6825] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6822] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6825] <... futex resumed>) = 1 [pid 6823] <... futex resumed>) = 0 executing program [pid 6822] <... mmap resumed>) = 0x7fef94c47000 [pid 6831] <... write resumed>) = 18 [pid 6823] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6822] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6825] sendfile(4, 5, NULL, 553647746 [pid 6831] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6823] <... futex resumed>) = 0 [pid 6822] <... mprotect resumed>) = 0 [pid 6831] <... futex resumed>) = 0 [ 139.715077][ T5609] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6823] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6831] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6822] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5614] <... close resumed>) = 0 [pid 6831] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6831] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6822] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6831] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6831] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6822] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6831] <... mmap resumed>) = 0x7fef94c68000 [pid 6831] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6822] <... clone3 resumed> => {parent_tid=[6832]}, 88) = 6832 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6831] <... mprotect resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6832 attached [pid 6831] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6822] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6831] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6831] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0}ci2-upstream-fs/strace-static-x86_64: Process 6833 attached [pid 6822] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6833] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053ci2-upstream-fs/strace-static-x86_64: Process 6834 attached ) = 0 [pid 6832] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6831] <... clone3 resumed> => {parent_tid=[6833]}, 88) = 6833 [pid 6822] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... umount2 resumed>) = 0 [pid 6834] set_robust_list(0x5555748a66e0, 24 [pid 6833] set_robust_list(0x7fef94c889a0, 24 [pid 6831] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6833] <... set_robust_list resumed>) = 0 [pid 5609] umount2("./47/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6834] <... set_robust_list resumed>) = 0 [pid 6833] rt_sigprocmask(SIG_SETMASK, [] [pid 6832] <... rseq resumed>) = 0 [pid 6831] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6822] <... futex resumed>) = 0 [pid 5614] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6834 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6834] rt_sigprocmask(SIG_SETMASK, [] [pid 6833] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6832] set_robust_list(0x7fef94c679a0, 24 [pid 6831] <... futex resumed>) = 0 [pid 6822] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] newfstatat(AT_FDCWD, "./47/file1" [pid 6834] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6833] memfd_create("syzkaller", 0 [pid 6832] <... set_robust_list resumed>) = 0 [pid 6831] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6834] chdir("./47" [pid 6833] <... memfd_create resumed>) = 3 [pid 6832] rt_sigprocmask(SIG_SETMASK, [] [pid 6823] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5609] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6834] <... chdir resumed>) = 0 [pid 6833] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6832] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6823] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6834] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6833] <... mmap resumed>) = 0x7fef8c868000 [pid 6823] <... futex resumed>) = 0 [pid 5609] umount2("./47/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6834] <... prctl resumed>) = 0 [pid 6823] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6823] <... mmap resumed>) = 0x7fef94c47000 [pid 6823] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6823] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6834] setpgid(0, 0 [pid 6823] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6823] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 6835 attached [pid 6834] <... setpgid resumed>) = 0 [pid 6834] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6823] <... clone3 resumed> => {parent_tid=[6835]}, 88) = 6835 [pid 6835] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6834] <... openat resumed>) = 3 [pid 6823] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6835] <... rseq resumed>) = 0 [pid 6834] write(3, "1000", 4 [pid 6823] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6835] set_robust_list(0x7fef94c679a0, 24 [pid 6834] <... write resumed>) = 4 [pid 6823] <... futex resumed>) = 0 [pid 6835] <... set_robust_list resumed>) = 0 [pid 6834] close(3 [pid 6823] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6835] rt_sigprocmask(SIG_SETMASK, [] [pid 6834] <... close resumed>) = 0 [pid 5609] openat(AT_FDCWD, "./47/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6835] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6834] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6832] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6822] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) executing program [ 139.834662][ T6832] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 139.834877][ T6832] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 360 with error 28 [ 139.834900][ T6832] EXT4-fs (loop3): This should not happen!! Data will be lost [ 139.834900][ T6832] [ 139.834914][ T6832] EXT4-fs (loop3): Total free blocks count 0 [ 139.834926][ T6832] EXT4-fs (loop3): Free/Dirty block details [pid 6834] write(1, "executing program\n", 18 [pid 6824] <... sendfile resumed>) = ? [pid 6834] <... write resumed>) = 18 [pid 6832] +++ killed by SIGBUS +++ [pid 6834] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6824] +++ killed by SIGBUS +++ [pid 6822] +++ killed by SIGBUS +++ [pid 5609] <... openat resumed>) = 4 [pid 6834] <... futex resumed>) = 0 [pid 5612] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6822, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6834] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6835] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6834] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6834] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6825] <... sendfile resumed>) = ? [pid 6823] <... futex resumed>) = ? [pid 5612] umount2("./48", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6835] +++ killed by SIGBUS +++ [pid 6834] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c68000 [pid 6834] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5609] fstat(4 [pid 6834] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6834] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6825] +++ killed by SIGBUS +++ [pid 6823] +++ killed by SIGBUS +++ ci2-upstream-fs/strace-static-x86_64: Process 6836 attached [pid 6834] <... clone3 resumed> => {parent_tid=[6836]}, 88) = 6836 [pid 6836] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6834] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6836] <... rseq resumed>) = 0 [ 139.834938][ T6832] EXT4-fs (loop3): free_blocks=20480 [ 139.834952][ T6832] EXT4-fs (loop3): dirty_blocks=368 [ 139.834963][ T6832] EXT4-fs (loop3): Block reservation details [ 139.834980][ T6832] EXT4-fs (loop3): i_reserved_data_blocks=23 [ 139.887014][ T6835] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 139.887697][ T6835] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 284 with error 28 [pid 6834] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5612] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5611] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6823, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6836] set_robust_list(0x7fef94c889a0, 24 [pid 6834] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... openat resumed>) = 3 [pid 5611] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 5609] getdents64(4 [pid 6836] <... set_robust_list resumed>) = 0 [pid 6834] <... futex resumed>) = 0 [pid 5612] fstat(3 [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6836] rt_sigprocmask(SIG_SETMASK, [] [pid 6834] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5611] <... restart_syscall resumed>) = 0 [pid 5609] getdents64(4 [pid 6836] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6833] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5612] getdents64(3 [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6836] memfd_create("syzkaller", 0 [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6836] <... memfd_create resumed>) = 3 [pid 5612] umount2("./48/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] close(4 [pid 6836] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fef8c868000 [pid 5609] <... close resumed>) = 0 [pid 5609] rmdir("./47/file1" [pid 5611] umount2("./48", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] <... rmdir resumed>) = 0 [pid 5611] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5611] fstat(3 [pid 5609] umount2("./47/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6836] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] getdents64(3 [pid 5609] newfstatat(AT_FDCWD, "./47/binderfs" [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5609] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] umount2("./48/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] unlink("./47/binderfs") = 0 [pid 5609] getdents64(3, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./47") = 0 [pid 6833] <... write resumed>) = 524288 [pid 5609] mkdir("./48", 0777 [pid 6833] munmap(0x7fef8c868000, 138412032 [pid 5609] <... mkdir resumed>) = 0 [pid 6833] <... munmap resumed>) = 0 [pid 6833] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6833] ioctl(4, LOOP_SET_FD, 3 [pid 5609] <... openat resumed>) = 3 [pid 6833] <... ioctl resumed>) = 0 [pid 6836] <... write resumed>) = 524288 [pid 6833] close(3 [pid 5609] ioctl(3, LOOP_CLR_FD [pid 6833] <... close resumed>) = 0 [pid 6833] close(4 [pid 5609] <... ioctl resumed>) = 0 [pid 6833] <... close resumed>) = 0 [pid 5609] close(3 [pid 6833] mkdir("./file1", 0777) = 0 [ 139.887723][ T6835] EXT4-fs (loop2): This should not happen!! Data will be lost [ 139.887723][ T6835] [ 139.887736][ T6835] EXT4-fs (loop2): Total free blocks count 0 [ 139.887748][ T6835] EXT4-fs (loop2): Free/Dirty block details [ 139.887760][ T6835] EXT4-fs (loop2): free_blocks=20480 [ 139.887773][ T6835] EXT4-fs (loop2): dirty_blocks=288 [ 139.887784][ T6835] EXT4-fs (loop2): Block reservation details [ 139.887794][ T6835] EXT4-fs (loop2): i_reserved_data_blocks=18 [pid 6836] munmap(0x7fef8c868000, 138412032) = 0 [pid 6833] mount("/dev/loop1", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6836] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6836] ioctl(4, LOOP_SET_FD, 3 [pid 5609] <... close resumed>) = 0 [pid 6836] <... ioctl resumed>) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6836] close(3) = 0 [pid 5609] <... rt_sigprocmask resumed>, [], 8) = 0 [ 140.030156][ T63] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 284 with max blocks 4 with error 28 [ 140.030188][ T63] EXT4-fs (loop2): This should not happen!! Data will be lost [ 140.030188][ T63] [ 140.051436][ T5611] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6836] close(4 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 6837 attached [pid 6836] <... close resumed>) = 0 [pid 6836] mkdir("./file1", 0777 [pid 6837] set_robust_list(0x5555748a66e0, 24) = 0 [pid 6837] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5609] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6837 [pid 5609] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6837] chdir("./48") = 0 [pid 6837] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6837] setpgid(0, 0) = 0 [pid 6837] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6836] <... mkdir resumed>) = 0 [pid 6837] <... openat resumed>) = 3 [pid 6836] mount("/dev/loop4", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6837] write(3, "1000", 4) = 4 [pid 6837] close(3) = 0 [pid 6837] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6837] write(1, "executing program\n", 18) = 18 executing program [pid 6837] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6837] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60}, NULL, 8) = 0 [pid 5611] <... umount2 resumed>) = 0 [ 140.067607][ T3414] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 360 with max blocks 4 with error 28 [ 140.067627][ T3414] EXT4-fs (loop3): This should not happen!! Data will be lost [ 140.067627][ T3414] [ 140.070150][ T5612] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 5611] umount2("./48/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6837] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6833] <... mount resumed>) = 0 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] newfstatat(AT_FDCWD, "./48/file1" [pid 6837] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6833] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5611] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6837] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5611] umount2("./48/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6837] <... mmap resumed>) = 0x7fef94c68000 [pid 6833] <... openat resumed>) = 3 [pid 5612] <... umount2 resumed>) = 0 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6837] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 5611] openat(AT_FDCWD, "./48/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6833] chdir("./file1" [pid 6837] <... mprotect resumed>) = 0 [pid 6833] <... chdir resumed>) = 0 [pid 5611] <... openat resumed>) = 4 [pid 5612] umount2("./48/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6833] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5611] fstat(4 [pid 6837] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6836] <... mount resumed>) = 0 [pid 6833] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6837] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6833] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] getdents64(4 [pid 6837] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6833] <... futex resumed>) = 1 [pid 6831] <... futex resumed>) = 0 [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6833] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6831] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] getdents64(4 [pid 6837] <... clone3 resumed> => {parent_tid=[6842]}, 88) = 6842 [pid 6833] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6831] <... futex resumed>) = 0 [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6837] rt_sigprocmask(SIG_SETMASK, [] [pid 6833] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6831] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] close(4 [pid 6837] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6837] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... close resumed>) = 0 [pid 6837] <... futex resumed>) = 0 [pid 6837] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5611] rmdir("./48/file1"ci2-upstream-fs/strace-static-x86_64: Process 6842 attached [pid 6836] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6833] <... openat resumed>) = 4 [pid 5612] newfstatat(AT_FDCWD, "./48/file1" [pid 6842] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6836] <... openat resumed>) = 3 [pid 5612] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6842] <... rseq resumed>) = 0 [pid 6836] chdir("./file1") = 0 [pid 6842] set_robust_list(0x7fef94c889a0, 24 [pid 6836] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5612] umount2("./48/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6833] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6842] <... set_robust_list resumed>) = 0 [pid 6836] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6833] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5612] openat(AT_FDCWD, "./48/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6842] rt_sigprocmask(SIG_SETMASK, [] [pid 6836] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... openat resumed>) = 4 [pid 6831] <... futex resumed>) = 0 [pid 5612] fstat(4 [pid 6836] <... futex resumed>) = 1 [pid 6842] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6842] memfd_create("syzkaller", 0 [pid 6831] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6842] <... memfd_create resumed>) = 3 [pid 6836] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6834] <... futex resumed>) = 0 [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6842] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6834] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6842] <... mmap resumed>) = 0x7fef8c868000 [pid 6836] <... futex resumed>) = 0 [pid 6834] <... futex resumed>) = 1 [pid 6833] <... futex resumed>) = 0 [pid 6831] <... futex resumed>) = 1 [pid 5612] getdents64(4 [pid 6833] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6831] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6836] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6834] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6833] <... openat resumed>) = 5 [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6833] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6831] <... futex resumed>) = 0 [pid 6836] <... openat resumed>) = 4 [pid 6833] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6831] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] getdents64(4 [pid 6833] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6831] <... futex resumed>) = 0 [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5611] <... rmdir resumed>) = 0 [pid 6833] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6831] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] close(4 [pid 6842] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6836] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6833] <... openat resumed>) = 6 [pid 5611] umount2("./48/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5612] <... close resumed>) = 0 [pid 6836] <... futex resumed>) = 1 [pid 6834] <... futex resumed>) = 0 [pid 6833] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] rmdir("./48/file1" [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6833] <... futex resumed>) = 1 [pid 6831] <... futex resumed>) = 0 [pid 5611] newfstatat(AT_FDCWD, "./48/binderfs" [pid 6836] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6834] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6833] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6831] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... rmdir resumed>) = 0 [pid 6836] <... openat resumed>) = 5 [pid 6834] <... futex resumed>) = 0 [pid 6833] <... mmap resumed>) = 0x200000000000 [pid 6831] <... futex resumed>) = 0 [pid 5611] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6834] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] umount2("./48/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6836] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6836] <... futex resumed>) = 1 [pid 6834] <... futex resumed>) = 0 [pid 6833] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6831] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] newfstatat(AT_FDCWD, "./48/binderfs" [pid 5611] unlink("./48/binderfs" [pid 6834] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6833] <... futex resumed>) = 0 [pid 6831] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5612] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6836] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6834] <... futex resumed>) = 0 [pid 6833] sendfile(4, 5, NULL, 553647746 [pid 6831] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] unlink("./48/binderfs" [pid 5611] <... unlink resumed>) = 0 [pid 6836] <... openat resumed>) = 6 [pid 6834] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6831] <... futex resumed>) = 0 [pid 6836] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6831] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... unlink resumed>) = 0 [pid 5611] getdents64(3 [pid 6836] <... futex resumed>) = 1 [pid 6834] <... futex resumed>) = 0 [pid 6834] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5612] getdents64(3 [pid 6836] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6834] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6836] <... mmap resumed>) = 0x200000000000 [pid 5612] close(3 [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5611] close(3 [pid 6836] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... close resumed>) = 0 [pid 5611] <... close resumed>) = 0 [pid 5611] rmdir("./48" [pid 6836] <... futex resumed>) = 1 [pid 6834] <... futex resumed>) = 0 [pid 5612] rmdir("./48" [pid 5611] <... rmdir resumed>) = 0 [pid 6834] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... rmdir resumed>) = 0 [pid 5611] mkdir("./49", 0777 [pid 6836] sendfile(4, 5, NULL, 553647746 [pid 6834] <... futex resumed>) = 0 [pid 5612] mkdir("./49", 0777 [pid 6834] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... mkdir resumed>) = 0 [pid 6842] <... write resumed>) = 524288 [pid 5612] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6842] munmap(0x7fef8c868000, 138412032 [pid 5612] <... openat resumed>) = 3 [pid 6842] <... munmap resumed>) = 0 [pid 5612] ioctl(3, LOOP_CLR_FD [pid 6842] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5612] <... ioctl resumed>) = 0 [pid 6842] <... openat resumed>) = 4 [pid 5612] close(3 [pid 6842] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5611] <... mkdir resumed>) = 0 [pid 6842] close(3 [pid 5611] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6842] <... close resumed>) = 0 [pid 6842] close(4) = 0 [pid 5611] <... openat resumed>) = 3 [pid 5611] ioctl(3, LOOP_CLR_FD [pid 6842] mkdir("./file1", 0777 [pid 5611] <... ioctl resumed>) = 0 [pid 6842] <... mkdir resumed>) = 0 [pid 6831] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5611] close(3 [pid 6831] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6831] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c47000 [pid 5612] <... close resumed>) = 0 [pid 6831] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6842] mount("/dev/loop0", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5612] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6831] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5612] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6831] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5612] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6831] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 6843 attached [pid 6843] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6834] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6831] <... clone3 resumed> => {parent_tid=[6843]}, 88) = 6843 [pid 6843] <... rseq resumed>) = 0 [pid 6834] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6831] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6844 attached [pid 6843] set_robust_list(0x7fef94c679a0, 24 [pid 6834] <... futex resumed>) = 0 [pid 6831] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6844 [pid 6844] set_robust_list(0x5555748a66e0, 24 [pid 6843] <... set_robust_list resumed>) = 0 [pid 6834] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6831] <... futex resumed>) = 0 [pid 5611] <... close resumed>) = 0 [pid 6844] <... set_robust_list resumed>) = 0 [pid 6843] rt_sigprocmask(SIG_SETMASK, [] [pid 6834] <... mmap resumed>) = 0x7fef94c47000 [pid 6831] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] rt_sigprocmask(SIG_SETMASK, [] [pid 6844] rt_sigprocmask(SIG_SETMASK, [] [pid 6843] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6834] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 5612] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5611] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6844] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6844] chdir("./49" [pid 6834] <... mprotect resumed>) = 0 [pid 5611] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6844] <... chdir resumed>) = 0 [pid 6834] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5611] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6834] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6834] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 6847 attached => {parent_tid=[6847]}, 88) = 6847 ci2-upstream-fs/strace-static-x86_64: Process 6848 attached [pid 6847] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6834] rt_sigprocmask(SIG_SETMASK, [] [pid 6847] <... rseq resumed>) = 0 [pid 6844] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6842] <... mount resumed>) = 0 [pid 6834] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5611] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6848 [pid 6848] set_robust_list(0x5555748a66e0, 24 [pid 6847] set_robust_list(0x7fef94c679a0, 24 [pid 6844] <... prctl resumed>) = 0 [pid 6834] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] rt_sigprocmask(SIG_SETMASK, [] [pid 6848] <... set_robust_list resumed>) = 0 [pid 6847] <... set_robust_list resumed>) = 0 [pid 6844] setpgid(0, 0 [pid 6834] <... futex resumed>) = 0 [pid 6848] rt_sigprocmask(SIG_SETMASK, [] [pid 6847] rt_sigprocmask(SIG_SETMASK, [] [pid 6844] <... setpgid resumed>) = 0 [pid 6842] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6834] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6848] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6844] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6842] <... openat resumed>) = 3 [ 140.328423][ T6843] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 140.329528][ T6843] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 816 with error 28 [ 140.329556][ T6843] EXT4-fs (loop1): This should not happen!! Data will be lost [ 140.329556][ T6843] [ 140.329570][ T6843] EXT4-fs (loop1): Total free blocks count 0 [ 140.329592][ T6843] EXT4-fs (loop1): Free/Dirty block details [pid 6848] chdir("./49" [pid 6847] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6842] chdir("./file1" [pid 6831] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6844] <... openat resumed>) = 3 [pid 6848] <... chdir resumed>) = 0 [pid 6848] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6844] write(3, "1000", 4 [pid 6842] <... chdir resumed>) = 0 [pid 6848] <... prctl resumed>) = 0 [pid 6844] <... write resumed>) = 4 [pid 6842] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6848] setpgid(0, 0 [pid 6844] close(3 [pid 6842] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6848] <... setpgid resumed>) = 0 [pid 6844] <... close resumed>) = 0 [pid 6842] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6848] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6844] symlink("/dev/binderfs", "./binderfs" [pid 6848] <... openat resumed>) = 3 [pid 6844] <... symlink resumed>) = 0 [pid 6842] <... futex resumed>) = 1 [pid 6837] <... futex resumed>) = 0 [pid 6848] write(3, "1000", 4 [pid 6844] write(1, "executing program\n", 18 executing program [pid 6842] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6837] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6848] <... write resumed>) = 4 [pid 6844] <... write resumed>) = 18 [pid 6848] close(3 [pid 6844] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6842] <... openat resumed>) = 4 [pid 6837] <... futex resumed>) = 0 [pid 6848] <... close resumed>) = 0 [pid 6847] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6844] <... futex resumed>) = 0 [pid 6842] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6837] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6848] symlink("/dev/binderfs", "./binderfs" [pid 6844] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6837] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6836] <... sendfile resumed>) = 249856 [pid 6848] <... symlink resumed>) = 0 [pid 6844] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6842] <... futex resumed>) = 0 [pid 6837] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6844] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6837] <... futex resumed>) = 0 [pid 6834] <... futex resumed>) = ? [pid 6848] write(1, "executing program\n", 18 [pid 6844] <... rt_sigprocmask resumed>, NULL, 8) = 0 executing program [pid 6842] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6837] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6836] +++ killed by SIGBUS +++ [pid 6848] <... write resumed>) = 18 [pid 6844] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6842] <... openat resumed>) = 5 [ 140.329603][ T6843] EXT4-fs (loop1): free_blocks=20480 [ 140.329616][ T6843] EXT4-fs (loop1): dirty_blocks=848 [ 140.329628][ T6843] EXT4-fs (loop1): Block reservation details [ 140.329638][ T6843] EXT4-fs (loop1): i_reserved_data_blocks=52 [ 140.384459][ T6847] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 140.385277][ T6847] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 244 with error 28 [pid 6848] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6844] <... mmap resumed>) = 0x7fef94c68000 [pid 6842] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6848] <... futex resumed>) = 0 [pid 6847] +++ killed by SIGBUS +++ [pid 6844] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6842] <... futex resumed>) = 1 [pid 6837] <... futex resumed>) = 0 [pid 6834] +++ killed by SIGBUS +++ [pid 6848] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6844] <... mprotect resumed>) = 0 [pid 6842] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6837] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6834, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6848] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6848] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6844] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6837] <... futex resumed>) = 0 [pid 6848] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6844] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6837] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6842] <... openat resumed>) = 6 [pid 6848] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c68000 [pid 6848] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6844] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6842] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6848] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6842] <... futex resumed>) = 1 [pid 6837] <... futex resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6849 attached [pid 6848] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6844] <... clone3 resumed> => {parent_tid=[6849]}, 88) = 6849 [pid 6842] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6837] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6849] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6848] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6844] rt_sigprocmask(SIG_SETMASK, [] [pid 6842] <... mmap resumed>) = 0x200000000000 ci2-upstream-fs/strace-static-x86_64: Process 6850 attached [pid 6849] <... rseq resumed>) = 0 [pid 6844] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6842] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6837] <... futex resumed>) = 0 [pid 6850] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6849] set_robust_list(0x7fef94c889a0, 24 [pid 6848] <... clone3 resumed> => {parent_tid=[6850]}, 88) = 6850 [pid 6844] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6842] <... futex resumed>) = 0 [pid 6837] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6850] <... rseq resumed>) = 0 [pid 6849] <... set_robust_list resumed>) = 0 [pid 6848] rt_sigprocmask(SIG_SETMASK, [] [pid 6844] <... futex resumed>) = 0 [pid 6850] set_robust_list(0x7fef94c889a0, 24 [pid 6849] rt_sigprocmask(SIG_SETMASK, [] [pid 6848] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6844] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6842] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6837] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5614] umount2("./47", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6850] <... set_robust_list resumed>) = 0 [pid 6849] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6848] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6837] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6850] rt_sigprocmask(SIG_SETMASK, [] [pid 6849] memfd_create("syzkaller", 0 [pid 6848] <... futex resumed>) = 0 [pid 6842] <... futex resumed>) = 0 [pid 6837] <... futex resumed>) = 1 [pid 5614] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6850] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6849] <... memfd_create resumed>) = 3 [pid 6848] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6842] sendfile(4, 5, NULL, 553647746 [pid 6837] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] <... openat resumed>) = 3 [pid 6850] memfd_create("syzkaller", 0 [pid 6849] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6850] <... memfd_create resumed>) = 3 [pid 5614] fstat(3 [pid 6850] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6849] <... mmap resumed>) = 0x7fef8c868000 [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6850] <... mmap resumed>) = 0x7fef8c868000 [pid 5614] getdents64(3, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6849] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5614] umount2("./47/file1", MNT_FORCE|UMOUNT_NOFOLLOW [ 140.385302][ T6847] EXT4-fs (loop4): This should not happen!! Data will be lost [ 140.385302][ T6847] [ 140.385316][ T6847] EXT4-fs (loop4): Total free blocks count 0 [ 140.385328][ T6847] EXT4-fs (loop4): Free/Dirty block details [ 140.385340][ T6847] EXT4-fs (loop4): free_blocks=20480 [ 140.385354][ T6847] EXT4-fs (loop4): dirty_blocks=256 [ 140.385365][ T6847] EXT4-fs (loop4): Block reservation details [ 140.385376][ T6847] EXT4-fs (loop4): i_reserved_data_blocks=16 [pid 6850] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6837] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6837] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6837] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c47000 [pid 6837] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6849] <... write resumed>) = 524288 [pid 6837] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6850] <... write resumed>) = 524288 [pid 6843] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6849] munmap(0x7fef8c868000, 138412032 [pid 6837] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6833] <... sendfile resumed>) = 839680 [pid 6850] munmap(0x7fef8c868000, 138412032 [pid 6849] <... munmap resumed>) = 0 [pid 6837] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 6851 attached [pid 6850] <... munmap resumed>) = 0 [pid 6849] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6843] +++ killed by SIGBUS +++ [pid 6833] +++ killed by SIGBUS +++ [pid 6851] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6837] <... clone3 resumed> => {parent_tid=[6851]}, 88) = 6851 [pid 6831] +++ killed by SIGBUS +++ [pid 6837] rt_sigprocmask(SIG_SETMASK, [] [pid 6851] <... rseq resumed>) = 0 [pid 5610] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6831, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 6851] set_robust_list(0x7fef94c679a0, 24 [pid 6849] <... openat resumed>) = 4 [pid 6837] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6837] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6851] <... set_robust_list resumed>) = 0 [pid 6850] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6849] ioctl(4, LOOP_SET_FD, 3 [pid 6837] <... futex resumed>) = 0 [pid 6851] rt_sigprocmask(SIG_SETMASK, [] [pid 6850] <... openat resumed>) = 4 [pid 6849] <... ioctl resumed>) = 0 [ 140.543994][ T5614] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6837] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6851] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6850] ioctl(4, LOOP_SET_FD, 3 [pid 6849] close(3 [pid 6850] <... ioctl resumed>) = 0 [pid 6849] <... close resumed>) = 0 [pid 5614] <... umount2 resumed>) = 0 [pid 6849] close(4 [pid 5614] umount2("./47/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6850] close(3 [pid 6849] <... close resumed>) = 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] umount2("./47", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6850] <... close resumed>) = 0 [pid 6849] mkdir("./file1", 0777 [pid 5614] newfstatat(AT_FDCWD, "./47/file1" [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6850] close(4 [pid 6849] <... mkdir resumed>) = 0 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5610] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6850] <... close resumed>) = 0 [pid 5614] umount2("./47/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] <... openat resumed>) = 3 [pid 6850] mkdir("./file1", 0777 [pid 6849] mount("/dev/loop3", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] fstat(3 [pid 5614] openat(AT_FDCWD, "./47/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6850] <... mkdir resumed>) = 0 [pid 5614] fstat(4 [pid 5610] getdents64(3 [pid 6850] mount("/dev/loop2", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5614] getdents64(4, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5610] umount2("./47/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5614] getdents64(4, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5614] close(4) = 0 [pid 5614] rmdir("./47/file1") = 0 [pid 6837] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5614] umount2("./47/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 140.632410][ T6842] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 140.632941][ T6851] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1512 with error 28 [ 140.632965][ T6851] EXT4-fs (loop0): This should not happen!! Data will be lost [ 140.632965][ T6851] [ 140.632973][ T6851] EXT4-fs (loop0): Total free blocks count 0 [ 140.632980][ T6851] EXT4-fs (loop0): Free/Dirty block details [pid 5614] newfstatat(AT_FDCWD, "./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./47/binderfs") = 0 [pid 5614] getdents64(3, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5614] close(3) = 0 [pid 5614] rmdir("./47") = 0 [pid 5614] mkdir("./48", 0777) = 0 [pid 5614] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5614] ioctl(3, LOOP_CLR_FD) = 0 [pid 5614] close(3 [pid 6851] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6850] <... mount resumed>) = 0 [pid 6849] <... mount resumed>) = 0 [pid 6837] ???( [pid 6850] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6849] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6850] <... openat resumed>) = 3 [pid 6849] <... openat resumed>) = 3 [pid 6850] chdir("./file1") = 0 [pid 6849] chdir("./file1" [pid 6850] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6849] <... chdir resumed>) = 0 [pid 6849] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6850] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6851] +++ killed by SIGBUS +++ [pid 6842] <... sendfile resumed>) = ? [pid 6850] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6849] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6850] <... futex resumed>) = 1 [ 140.632986][ T6851] EXT4-fs (loop0): free_blocks=20480 [ 140.632994][ T6851] EXT4-fs (loop0): dirty_blocks=1520 [ 140.633003][ T6851] EXT4-fs (loop0): Block reservation details [ 140.633009][ T6851] EXT4-fs (loop0): i_reserved_data_blocks=95 [ 140.702761][ T3414] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 816 with max blocks 4 with error 28 [ 140.702791][ T3414] EXT4-fs (loop1): This should not happen!! Data will be lost [ 140.702791][ T3414] [pid 6850] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6849] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6848] <... futex resumed>) = 0 [pid 6848] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6849] <... futex resumed>) = 1 [pid 6848] <... futex resumed>) = 1 [pid 6844] <... futex resumed>) = 0 [pid 6848] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6844] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6849] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6850] <... futex resumed>) = 0 [pid 6844] <... futex resumed>) = 0 [pid 6850] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6844] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6850] <... openat resumed>) = 4 [pid 6849] <... openat resumed>) = 4 [pid 5614] <... close resumed>) = 0 [pid 6850] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6849] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6842] +++ killed by SIGBUS +++ [pid 6837] +++ killed by SIGBUS +++ [pid 6850] <... futex resumed>) = 1 [pid 6849] <... futex resumed>) = 1 [pid 6848] <... futex resumed>) = 0 [pid 6844] <... futex resumed>) = 0 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6837, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 6856 attached [pid 6850] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6849] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6848] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6844] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6849] <... openat resumed>) = 5 [pid 6848] <... futex resumed>) = 0 [pid 6844] <... futex resumed>) = 0 [pid 6850] <... openat resumed>) = 5 [pid 6849] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6848] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6844] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... umount2 resumed>) = 0 [ 140.744939][ T5610] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6850] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6849] <... futex resumed>) = 0 [pid 6848] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6844] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6856] set_robust_list(0x5555748a66e0, 24 [pid 6850] <... futex resumed>) = 0 [pid 6849] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6848] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6844] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6856 [pid 5610] umount2("./47/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] umount2("./48", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6856] <... set_robust_list resumed>) = 0 [pid 6850] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6849] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6848] <... futex resumed>) = 0 [pid 6844] <... futex resumed>) = 0 [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6849] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6848] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6844] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6856] rt_sigprocmask(SIG_SETMASK, [] [pid 6850] <... openat resumed>) = 6 [pid 6849] <... openat resumed>) = 6 [pid 5610] newfstatat(AT_FDCWD, "./47/file1" [pid 5609] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6856] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6849] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6856] chdir("./48" [pid 6850] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6849] <... futex resumed>) = 1 [pid 6844] <... futex resumed>) = 0 [pid 5610] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] <... openat resumed>) = 3 [pid 6856] <... chdir resumed>) = 0 [pid 6850] <... futex resumed>) = 1 [pid 6849] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6848] <... futex resumed>) = 0 [pid 6844] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] umount2("./47/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] fstat(3 [pid 6850] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6849] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6848] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6844] <... futex resumed>) = 0 [pid 6849] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6844] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6848] <... futex resumed>) = 0 [pid 6856] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6850] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6849] <... mmap resumed>) = 0x200000000000 [pid 6848] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] getdents64(3 [pid 6850] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 5610] openat(AT_FDCWD, "./47/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6856] <... prctl resumed>) = 0 [pid 6850] <... mmap resumed>) = 0x200000000000 [pid 6849] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... openat resumed>) = 4 [pid 5609] umount2("./48/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6856] setpgid(0, 0) = 0 [pid 6850] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6849] <... futex resumed>) = 1 [pid 6844] <... futex resumed>) = 0 [pid 5610] fstat(4 [pid 6844] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6856] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6850] <... futex resumed>) = 1 [pid 6849] sendfile(4, 5, NULL, 553647746 [pid 6848] <... futex resumed>) = 0 [pid 6844] <... futex resumed>) = 0 [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6850] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6848] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6844] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6856] <... openat resumed>) = 3 [pid 5610] getdents64(4 [pid 6850] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6850] sendfile(4, 5, NULL, 553647746 [pid 6856] write(3, "1000", 4 [pid 6848] <... futex resumed>) = 0 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6856] <... write resumed>) = 4 [pid 6848] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6856] close(3 [pid 5610] getdents64(4 [pid 6856] <... close resumed>) = 0 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6856] symlink("/dev/binderfs", "./binderfs" [pid 5610] close(4 [pid 6856] <... symlink resumed>) = 0 [pid 5610] <... close resumed>) = 0 [pid 6856] write(1, "executing program\n", 18 executing program [pid 5610] rmdir("./47/file1" [pid 6856] <... write resumed>) = 18 [pid 5610] <... rmdir resumed>) = 0 [pid 6856] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6856] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60}, NULL, 8) = 0 [pid 6856] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 5610] umount2("./47/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6856] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6856] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6856] <... mmap resumed>) = 0x7fef94c68000 [pid 5610] newfstatat(AT_FDCWD, "./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6844] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5610] unlink("./47/binderfs" [pid 6844] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6844] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c47000 [pid 6844] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6848] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6844] <... mprotect resumed>) = 0 [pid 6848] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6856] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6848] <... futex resumed>) = 0 [pid 6844] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6856] <... mprotect resumed>) = 0 [pid 6848] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6844] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5610] <... unlink resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6857 attached [pid 6856] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6848] <... mmap resumed>) = 0x7fef94c47000 [pid 5610] getdents64(3 [pid 6848] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6844] <... clone3 resumed> => {parent_tid=[6857]}, 88) = 6857 [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6856] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6848] <... mprotect resumed>) = 0 [pid 6844] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] close(3 [pid 6856] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6848] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6844] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] <... close resumed>) = 0 [pid 6857] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6848] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6848] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5610] rmdir("./47" [pid 6844] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000ci2-upstream-fs/strace-static-x86_64: Process 6859 attached ci2-upstream-fs/strace-static-x86_64: Process 6858 attached [pid 6857] <... rseq resumed>) = 0 [pid 6856] <... clone3 resumed> => {parent_tid=[6858]}, 88) = 6858 [pid 6844] <... futex resumed>) = 0 [pid 5610] <... rmdir resumed>) = 0 [pid 6856] rt_sigprocmask(SIG_SETMASK, [] [pid 6844] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6856] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6848] <... clone3 resumed> => {parent_tid=[6859]}, 88) = 6859 [pid 6856] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6848] rt_sigprocmask(SIG_SETMASK, [] [pid 6856] <... futex resumed>) = 0 [pid 6848] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] mkdir("./48", 0777 [pid 6859] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6858] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6857] set_robust_list(0x7fef94c679a0, 24 [pid 6856] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6848] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... mkdir resumed>) = 0 [pid 6859] <... rseq resumed>) = 0 [pid 6858] <... rseq resumed>) = 0 [pid 6857] <... set_robust_list resumed>) = 0 [pid 6848] <... futex resumed>) = 0 [ 140.901918][ T5609] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 5610] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6859] set_robust_list(0x7fef94c679a0, 24 [pid 6858] set_robust_list(0x7fef94c889a0, 24 [pid 6857] rt_sigprocmask(SIG_SETMASK, [] [pid 6848] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6859] <... set_robust_list resumed>) = 0 [pid 6858] <... set_robust_list resumed>) = 0 [pid 6857] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] <... openat resumed>) = 3 [pid 6859] rt_sigprocmask(SIG_SETMASK, [] [pid 6858] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] ioctl(3, LOOP_CLR_FD [pid 6859] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6858] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6858] memfd_create("syzkaller", 0) = 3 [pid 6858] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fef8c868000 [pid 6858] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5610] <... ioctl resumed>) = 0 [ 140.985101][ T6849] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 140.985715][ T6857] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 576 with error 28 [ 140.985732][ T6857] EXT4-fs (loop3): This should not happen!! Data will be lost [ 140.985732][ T6857] [ 140.985740][ T6857] EXT4-fs (loop3): Total free blocks count 0 [ 140.985747][ T6857] EXT4-fs (loop3): Free/Dirty block details [pid 5610] close(3 [pid 6859] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6850] <... sendfile resumed>) = 364544 [pid 6850] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6857] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6849] <... sendfile resumed>) = 589824 [pid 6848] <... futex resumed>) = ? [pid 6844] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6858] <... write resumed>) = 524288 [pid 6850] +++ killed by SIGBUS +++ [pid 5610] <... close resumed>) = 0 [pid 6849] +++ killed by SIGBUS +++ [pid 6859] +++ killed by SIGBUS +++ [pid 6858] munmap(0x7fef8c868000, 138412032 [pid 6848] +++ killed by SIGBUS +++ [pid 5610] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6858] <... munmap resumed>) = 0 [pid 5611] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6848, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6857] +++ killed by SIGBUS +++ [pid 6844] +++ killed by SIGBUS +++ [pid 5610] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6858] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5612] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6844, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=11 /* 0.11 s */} --- [ 140.985753][ T6857] EXT4-fs (loop3): free_blocks=20480 [ 140.985760][ T6857] EXT4-fs (loop3): dirty_blocks=576 [ 140.985767][ T6857] EXT4-fs (loop3): Block reservation details [ 140.985773][ T6857] EXT4-fs (loop3): i_reserved_data_blocks=36 [ 140.994122][ T6859] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 140.994443][ T6859] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 356 with error 28 [pid 5611] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 5609] <... umount2 resumed>) = 0 [pid 6858] <... openat resumed>) = 4 [pid 5610] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6858] ioctl(4, LOOP_SET_FD, 3 [pid 5611] <... restart_syscall resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6860 attached [pid 5609] umount2("./48/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6860] set_robust_list(0x5555748a66e0, 24 [pid 5611] umount2("./49", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] newfstatat(AT_FDCWD, "./48/file1" [pid 6860] <... set_robust_list resumed>) = 0 [pid 5609] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6860] rt_sigprocmask(SIG_SETMASK, [] [pid 6858] <... ioctl resumed>) = 0 [pid 5609] umount2("./48/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6860] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5611] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5610] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6860 [pid 6860] chdir("./48" [pid 5611] <... openat resumed>) = 3 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] rt_sigprocmask(SIG_SETMASK, [] [pid 6860] <... chdir resumed>) = 0 [pid 5612] umount2("./49", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] openat(AT_FDCWD, "./48/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6860] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6858] close(3 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] fstat(3 [pid 5610] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] <... openat resumed>) = 4 [pid 6860] <... prctl resumed>) = 0 [pid 6858] <... close resumed>) = 0 [pid 5612] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6860] setpgid(0, 0 [pid 6858] close(4 [pid 5609] fstat(4 [pid 5611] getdents64(3 [pid 6860] <... setpgid resumed>) = 0 [pid 6858] <... close resumed>) = 0 [pid 5612] <... openat resumed>) = 3 [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6860] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6858] mkdir("./file1", 0777 [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [ 140.994475][ T6859] EXT4-fs (loop2): This should not happen!! Data will be lost [ 140.994475][ T6859] [ 140.994488][ T6859] EXT4-fs (loop2): Total free blocks count 0 [ 140.994498][ T6859] EXT4-fs (loop2): Free/Dirty block details [ 140.994509][ T6859] EXT4-fs (loop2): free_blocks=20480 [ 140.994520][ T6859] EXT4-fs (loop2): dirty_blocks=368 [ 140.994530][ T6859] EXT4-fs (loop2): Block reservation details [ 140.994540][ T6859] EXT4-fs (loop2): i_reserved_data_blocks=23 [ 141.121014][ T6858] set_capacity_and_notify: 13 callbacks suppressed [pid 6860] <... openat resumed>) = 3 [pid 6858] <... mkdir resumed>) = 0 [pid 5612] fstat(3 [pid 5611] umount2("./49/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] getdents64(4 [pid 6860] write(3, "1000", 4 [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6860] <... write resumed>) = 4 [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6860] close(3 [pid 6858] mount("/dev/loop4", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5609] getdents64(4 [pid 6860] <... close resumed>) = 0 [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6860] symlink("/dev/binderfs", "./binderfs" [pid 5612] getdents64(3 [pid 5609] close(4) = 0 [pid 6860] <... symlink resumed>) = 0 [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5609] rmdir("./48/file1" [pid 5612] umount2("./49/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6860] write(1, "executing program\n", 18 [pid 5609] <... rmdir resumed>) = 0 [pid 6860] <... write resumed>) = 18 executing program [pid 6860] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] umount2("./48/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6860] <... futex resumed>) = 0 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6860] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 5609] newfstatat(AT_FDCWD, "./48/binderfs" [pid 6860] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6860] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 5609] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6860] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] unlink("./48/binderfs" [pid 6860] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5609] <... unlink resumed>) = 0 [pid 6860] <... mmap resumed>) = 0x7fef94c68000 [pid 5609] getdents64(3 [pid 6860] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6860] <... mprotect resumed>) = 0 [pid 5609] close(3 [pid 6860] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5609] <... close resumed>) = 0 [pid 5609] rmdir("./48" [pid 6860] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6860] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} => {parent_tid=[6862]}, 88) = 6862 [pid 5609] <... rmdir resumed>) = 0 [pid 6860] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] mkdir("./49", 0777ci2-upstream-fs/strace-static-x86_64: Process 6862 attached [pid 6860] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] <... mkdir resumed>) = 0 [pid 6860] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6860] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6862] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6862] <... rseq resumed>) = 0 [ 141.121033][ T6858] loop4: detected capacity change from 0 to 1024 [pid 6862] set_robust_list(0x7fef94c889a0, 24) = 0 [pid 6862] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6862] memfd_create("syzkaller", 0) = 3 [pid 6862] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fef8c868000 [pid 6862] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5609] <... openat resumed>) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD [pid 6862] <... write resumed>) = 524288 [pid 6858] <... mount resumed>) = 0 [pid 5609] <... ioctl resumed>) = 0 [pid 5609] close(3 [pid 6862] munmap(0x7fef8c868000, 138412032 [pid 6858] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6862] <... munmap resumed>) = 0 [pid 6858] <... openat resumed>) = 3 [pid 6858] chdir("./file1" [pid 6862] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5612] <... umount2 resumed>) = 0 [pid 6858] <... chdir resumed>) = 0 [pid 5612] umount2("./49/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... close resumed>) = 0 [pid 6858] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6862] <... openat resumed>) = 4 [pid 6858] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5612] newfstatat(AT_FDCWD, "./49/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6858] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6858] <... futex resumed>) = 1 [pid 5612] umount2("./49/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6856] <... futex resumed>) = 0 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6862] ioctl(4, LOOP_SET_FD, 3 [pid 6856] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6858] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 5612] openat(AT_FDCWD, "./49/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6856] <... futex resumed>) = 0 [pid 6856] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... openat resumed>) = 4 ci2-upstream-fs/strace-static-x86_64: Process 6864 attached [pid 6862] <... ioctl resumed>) = 0 [pid 5612] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6862] close(3 [pid 5609] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6864 [ 141.206812][ T5612] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 141.224110][ T5611] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6864] set_robust_list(0x5555748a66e0, 24 [pid 6862] <... close resumed>) = 0 [pid 6858] <... openat resumed>) = 4 [pid 5612] getdents64(4 [pid 5611] <... umount2 resumed>) = 0 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 6862] close(4 [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6858] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6864] <... set_robust_list resumed>) = 0 [pid 6862] <... close resumed>) = 0 [pid 5612] getdents64(4 [pid 6858] <... futex resumed>) = 1 [pid 6856] <... futex resumed>) = 0 [pid 6856] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6856] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5612] close(4) = 0 [pid 5612] rmdir("./49/file1") = 0 [pid 6864] rt_sigprocmask(SIG_SETMASK, [] [pid 6862] mkdir("./file1", 0777 [pid 6858] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6864] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6862] <... mkdir resumed>) = 0 [pid 6858] <... openat resumed>) = 5 [pid 6864] chdir("./49" [pid 6858] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6864] <... chdir resumed>) = 0 [pid 6862] mount("/dev/loop1", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6858] <... futex resumed>) = 1 [pid 6864] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6858] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6856] <... futex resumed>) = 0 [pid 5612] umount2("./49/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] umount2("./49/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6864] <... prctl resumed>) = 0 [pid 6856] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6864] setpgid(0, 0 [pid 6856] <... futex resumed>) = 0 [pid 5612] newfstatat(AT_FDCWD, "./49/binderfs" [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6864] <... setpgid resumed>) = 0 [pid 6858] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6856] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] newfstatat(AT_FDCWD, "./49/file1" [pid 6864] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6858] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 5611] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6864] <... openat resumed>) = 3 [pid 5612] unlink("./49/binderfs" [pid 6864] write(3, "1000", 4 [pid 5612] <... unlink resumed>) = 0 [pid 6858] <... openat resumed>) = 6 [pid 5611] umount2("./49/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6864] <... write resumed>) = 4 [pid 6858] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] getdents64(3 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6864] close(3 [pid 6858] <... futex resumed>) = 1 [pid 6856] <... futex resumed>) = 0 [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5611] openat(AT_FDCWD, "./49/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6856] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] close(3 [pid 6864] <... close resumed>) = 0 [pid 6858] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6856] <... futex resumed>) = 0 [pid 5612] <... close resumed>) = 0 [pid 5611] <... openat resumed>) = 4 [pid 6864] symlink("/dev/binderfs", "./binderfs" [pid 6856] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 141.284689][ T6862] loop1: detected capacity change from 0 to 1024 [ 141.288338][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 141.288355][ T37] audit: type=1800 audit(1785844671.684:247): pid=6858 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop4" ino=15 res=0 errno=0 [pid 5612] rmdir("./49" [pid 6864] <... symlink resumed>) = 0 [pid 6858] <... mmap resumed>) = 0x200000000000 [pid 5612] <... rmdir resumed>) = 0 [pid 5611] fstat(4 [pid 6864] write(1, "executing program\n", 18 [pid 6858] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] mkdir("./50", 0777 [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6858] <... futex resumed>) = 1 [pid 6856] <... futex resumed>) = 0 [pid 5612] <... mkdir resumed>) = 0 [pid 5611] getdents64(4 executing program [pid 6856] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6864] <... write resumed>) = 18 [pid 6858] sendfile(4, 5, NULL, 553647746 [pid 6856] <... futex resumed>) = 0 [pid 5612] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6856] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6864] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5612] <... openat resumed>) = 3 [pid 5611] getdents64(4 [pid 6864] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 5612] ioctl(3, LOOP_CLR_FD [pid 6864] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6864] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 5612] <... ioctl resumed>) = 0 [pid 5611] close(4 [pid 6864] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6864] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6862] <... mount resumed>) = 0 [pid 5611] <... close resumed>) = 0 [pid 6864] <... mmap resumed>) = 0x7fef94c68000 [pid 5612] close(3 [pid 6862] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5611] rmdir("./49/file1" [pid 6862] <... openat resumed>) = 3 [pid 6862] chdir("./file1") = 0 [pid 5611] <... rmdir resumed>) = 0 [pid 6862] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6862] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6864] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6862] <... futex resumed>) = 1 [pid 6860] <... futex resumed>) = 0 [pid 5611] umount2("./49/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6864] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6864] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6860] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6860] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6864] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6862] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 5611] newfstatat(AT_FDCWD, "./49/binderfs"ci2-upstream-fs/strace-static-x86_64: Process 6867 attached [pid 6864] <... clone3 resumed> => {parent_tid=[6867]}, 88) = 6867 [pid 6867] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6864] rt_sigprocmask(SIG_SETMASK, [] [pid 6862] <... openat resumed>) = 4 [pid 5612] <... close resumed>) = 0 [pid 5611] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6864] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6864] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6867] <... rseq resumed>) = 0 [pid 6864] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6867] set_robust_list(0x7fef94c889a0, 24) = 0 [pid 6856] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6856] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6867] rt_sigprocmask(SIG_SETMASK, [] [pid 5611] unlink("./49/binderfs" [pid 6856] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6867] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5611] <... unlink resumed>) = 0 [pid 6856] <... mmap resumed>) = 0x7fef94c47000 [pid 6856] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6862] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5611] getdents64(3 [pid 6862] <... futex resumed>) = 1 [pid 6860] <... futex resumed>) = 0 [pid 6862] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5612] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6860] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6860] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6867] memfd_create("syzkaller", 0 [pid 6862] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6856] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5612] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5611] close(3 [pid 6862] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6867] <... memfd_create resumed>) = 3 [pid 6862] <... openat resumed>) = 5 [pid 6856] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5611] <... close resumed>) = 0 [pid 6856] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5611] rmdir("./49"ci2-upstream-fs/strace-static-x86_64: Process 6868 attached ) = 0 [pid 6868] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6862] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6868] <... rseq resumed>) = 0 [pid 6868] set_robust_list(0x7fef94c679a0, 24ci2-upstream-fs/strace-static-x86_64: Process 6869 attached [pid 6867] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6862] <... futex resumed>) = 1 [pid 6860] <... futex resumed>) = 0 [pid 5611] mkdir("./50", 0777 [pid 6869] set_robust_list(0x5555748a66e0, 24 [pid 6868] <... set_robust_list resumed>) = 0 [pid 6867] <... mmap resumed>) = 0x7fef8c868000 [pid 6862] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6860] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6856] <... clone3 resumed> => {parent_tid=[6868]}, 88) = 6868 [ 141.418766][ T37] audit: type=1800 audit(1785844671.814:248): pid=6862 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop1" ino=15 res=0 errno=0 [pid 5612] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6869 [pid 5611] <... mkdir resumed>) = 0 [pid 6869] <... set_robust_list resumed>) = 0 [pid 6868] rt_sigprocmask(SIG_SETMASK, [] [pid 6860] <... futex resumed>) = 0 [pid 6856] rt_sigprocmask(SIG_SETMASK, [] [pid 6869] rt_sigprocmask(SIG_SETMASK, [] [pid 6868] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6862] <... openat resumed>) = 6 [pid 6860] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] rt_sigprocmask(SIG_SETMASK, [] [pid 5611] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6869] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6868] futex(0x7fef94d63e58, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6867] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6862] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6860] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6856] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5612] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5611] <... openat resumed>) = 3 [pid 6869] chdir("./50" [pid 6868] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6862] <... futex resumed>) = 0 [pid 6860] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6856] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] ioctl(3, LOOP_CLR_FD [pid 6869] <... chdir resumed>) = 0 [pid 6862] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6856] <... futex resumed>) = 0 [pid 5611] <... ioctl resumed>) = 0 [pid 6856] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] close(3 [pid 6869] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6860] <... futex resumed>) = 0 [pid 6869] <... prctl resumed>) = 0 [pid 6860] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6869] setpgid(0, 0 [pid 6862] <... mmap resumed>) = 0x200000000000 [pid 5611] <... close resumed>) = 0 [pid 6869] <... setpgid resumed>) = 0 [pid 6867] <... write resumed>) = 524288 [pid 5611] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 141.500357][ T6868] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 141.500638][ T6868] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 628 with error 28 [ 141.500663][ T6868] EXT4-fs (loop4): This should not happen!! Data will be lost [ 141.500663][ T6868] [ 141.500675][ T6868] EXT4-fs (loop4): Total free blocks count 0 [ 141.500687][ T6868] EXT4-fs (loop4): Free/Dirty block details [pid 5611] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6869] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6867] munmap(0x7fef8c868000, 138412032) = 0 [pid 6856] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ci2-upstream-fs/strace-static-x86_64: Process 6870 attached [pid 6867] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5611] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6870 [pid 5611] rt_sigprocmask(SIG_SETMASK, [] [pid 6867] <... openat resumed>) = 4 [pid 5611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6870] set_robust_list(0x5555748a66e0, 24 [pid 6867] ioctl(4, LOOP_SET_FD, 3 [pid 6870] <... set_robust_list resumed>) = 0 [pid 6870] rt_sigprocmask(SIG_SETMASK, [] [pid 6869] <... openat resumed>) = 3 [pid 6862] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6870] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6869] write(3, "1000", 4 [pid 6862] <... futex resumed>) = 1 [pid 6860] <... futex resumed>) = 0 [pid 6870] chdir("./50" [pid 6869] <... write resumed>) = 4 [pid 6867] <... ioctl resumed>) = 0 [pid 6862] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6860] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6867] close(3) = 0 [pid 6867] close(4) = 0 [pid 6869] close(3 [pid 6867] mkdir("./file1", 0777 [pid 6862] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6860] <... futex resumed>) = 0 [pid 6870] <... chdir resumed>) = 0 [pid 6869] <... close resumed>) = 0 [pid 6868] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6867] <... mkdir resumed>) = 0 [pid 6862] sendfile(4, 5, NULL, 553647746 [pid 6860] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6858] <... sendfile resumed>) = 643072 [pid 6870] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6869] symlink("/dev/binderfs", "./binderfs" [pid 6870] <... prctl resumed>) = 0 [pid 6870] setpgid(0, 0 [pid 6869] <... symlink resumed>) = 0 [pid 6867] mount("/dev/loop0", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6870] <... setpgid resumed>) = 0 executing program [pid 6869] write(1, "executing program\n", 18 [pid 6870] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6869] <... write resumed>) = 18 [pid 6870] <... openat resumed>) = 3 [pid 6869] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6868] +++ killed by SIGBUS +++ [pid 6870] write(3, "1000", 4 [pid 6869] <... futex resumed>) = 0 [pid 6870] <... write resumed>) = 4 [pid 6869] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6870] close(3 [pid 6869] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6858] +++ killed by SIGBUS +++ [pid 6856] +++ killed by SIGBUS +++ [pid 6869] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6856, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 6870] <... close resumed>) = 0 [pid 6869] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6870] symlink("/dev/binderfs", "./binderfs" [pid 6869] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5614] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 6870] <... symlink resumed>) = 0 [pid 6869] <... mmap resumed>) = 0x7fef94c68000 [pid 5614] <... restart_syscall resumed>) = 0 [pid 6870] write(1, "executing program\n", 18 [pid 6869] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6870] <... write resumed>) = 18 executing program [pid 6870] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6869] <... mprotect resumed>) = 0 [ 141.500698][ T6868] EXT4-fs (loop4): free_blocks=20480 [ 141.500710][ T6868] EXT4-fs (loop4): dirty_blocks=640 [ 141.500721][ T6868] EXT4-fs (loop4): Block reservation details [ 141.500732][ T6868] EXT4-fs (loop4): i_reserved_data_blocks=40 [ 141.580446][ T6867] loop0: detected capacity change from 0 to 1024 [pid 5614] umount2("./48", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6869] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6870] <... futex resumed>) = 0 [pid 6869] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 5614] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6870] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60}, NULL, 8) = 0 [pid 5614] <... openat resumed>) = 3 ci2-upstream-fs/strace-static-x86_64: Process 6873 attached [pid 6870] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 5614] fstat(3 [pid 6870] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6869] <... clone3 resumed> => {parent_tid=[6873]}, 88) = 6873 [pid 6870] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6869] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6870] <... mmap resumed>) = 0x7fef94c68000 [pid 6869] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6870] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6869] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] getdents64(3 [pid 6869] <... futex resumed>) = 0 [pid 6873] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6870] <... mprotect resumed>) = 0 [pid 6869] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6873] <... rseq resumed>) = 0 [pid 6870] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5614] umount2("./48/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6873] set_robust_list(0x7fef94c889a0, 24 [pid 6870] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6860] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6873] <... set_robust_list resumed>) = 0 [pid 6870] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6860] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6873] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6860] <... futex resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6874 attached [pid 6873] memfd_create("syzkaller", 0 [pid 6867] <... mount resumed>) = 0 [pid 6860] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6873] <... memfd_create resumed>) = 3 [pid 6874] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6873] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6867] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6860] <... mmap resumed>) = 0x7fef94c47000 [pid 6870] <... clone3 resumed> => {parent_tid=[6874]}, 88) = 6874 [pid 6867] <... openat resumed>) = 3 [pid 6860] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6873] <... mmap resumed>) = 0x7fef8c868000 [pid 6874] <... rseq resumed>) = 0 [pid 6870] rt_sigprocmask(SIG_SETMASK, [] [pid 6860] <... mprotect resumed>) = 0 [pid 6870] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6867] chdir("./file1") = 0 [pid 6867] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6874] set_robust_list(0x7fef94c889a0, 24 [pid 6870] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6867] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6874] <... set_robust_list resumed>) = 0 [pid 6870] <... futex resumed>) = 0 [pid 6860] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6874] rt_sigprocmask(SIG_SETMASK, [] [pid 6870] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6860] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6867] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6860] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6874] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6873] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6867] <... futex resumed>) = 1 [pid 6864] <... futex resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6875 attached [pid 6874] memfd_create("syzkaller", 0 [pid 6867] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6864] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6874] <... memfd_create resumed>) = 3 [pid 6867] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6864] <... futex resumed>) = 0 [pid 6860] <... clone3 resumed> => {parent_tid=[6875]}, 88) = 6875 [pid 6875] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6874] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6867] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6864] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6860] rt_sigprocmask(SIG_SETMASK, [] [pid 6874] <... mmap resumed>) = 0x7fef8c868000 [pid 6860] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6860] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6875] <... rseq resumed>) = 0 [pid 6860] <... futex resumed>) = 0 [pid 6860] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6875] set_robust_list(0x7fef94c679a0, 24 [pid 6867] <... openat resumed>) = 4 [pid 6875] <... set_robust_list resumed>) = 0 [pid 6875] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6874] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6873] <... write resumed>) = 524288 [pid 6867] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6873] munmap(0x7fef8c868000, 138412032 [pid 6867] <... futex resumed>) = 1 [pid 6864] <... futex resumed>) = 0 [pid 6873] <... munmap resumed>) = 0 [pid 6867] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6864] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6867] <... openat resumed>) = 5 [pid 6864] <... futex resumed>) = 0 [pid 6873] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6867] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6864] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6867] <... futex resumed>) = 0 [pid 6864] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6873] <... openat resumed>) = 4 [pid 6867] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6864] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6873] ioctl(4, LOOP_SET_FD, 3 [pid 6867] <... openat resumed>) = 6 [pid 6864] <... futex resumed>) = 0 [pid 6864] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6873] <... ioctl resumed>) = 0 [pid 6867] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6860] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6867] <... futex resumed>) = 1 [pid 6864] <... futex resumed>) = 0 [ 141.679263][ T37] audit: type=1800 audit(1785844672.074:249): pid=6867 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 141.687604][ T6875] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 141.695595][ T5614] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6873] close(3 [pid 6867] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6864] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6873] <... close resumed>) = 0 [pid 6867] <... mmap resumed>) = 0x200000000000 [pid 6864] <... futex resumed>) = 0 [pid 6874] <... write resumed>) = 524288 [pid 6873] close(4 [pid 6867] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6864] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6873] <... close resumed>) = 0 [pid 6867] <... futex resumed>) = 0 [pid 6864] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6873] mkdir("./file1", 0777 [pid 6867] sendfile(4, 5, NULL, 553647746 [pid 6864] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6874] munmap(0x7fef8c868000, 138412032 [pid 6873] <... mkdir resumed>) = 0 [pid 6864] <... futex resumed>) = 0 [pid 6874] <... munmap resumed>) = 0 [pid 6864] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6874] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6873] mount("/dev/loop3", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6874] <... openat resumed>) = 4 [pid 6874] ioctl(4, LOOP_SET_FD, 3) = 0 [ 141.725782][ T6873] loop3: detected capacity change from 0 to 1024 [ 141.735481][ T6875] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 440 with error 28 [ 141.735511][ T6875] EXT4-fs (loop1): This should not happen!! Data will be lost [ 141.735511][ T6875] [ 141.735525][ T6875] EXT4-fs (loop1): Total free blocks count 0 [ 141.735537][ T6875] EXT4-fs (loop1): Free/Dirty block details [ 141.735548][ T6875] EXT4-fs (loop1): free_blocks=20480 [pid 6874] close(3) = 0 [pid 6874] close(4) = 0 [pid 6874] mkdir("./file1", 0777) = 0 [pid 6874] mount("/dev/loop2", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6875] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6864] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6862] <... sendfile resumed>) = 454656 [pid 5614] <... umount2 resumed>) = 0 [pid 6864] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6864] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5614] umount2("./48/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6875] +++ killed by SIGBUS +++ [pid 6864] <... mmap resumed>) = 0x7fef94c47000 [pid 6862] +++ killed by SIGBUS +++ [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6864] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 5614] newfstatat(AT_FDCWD, "./48/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] umount2("./48/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./48/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6864] <... mprotect resumed>) = 0 [pid 6860] +++ killed by SIGBUS +++ [pid 5614] <... openat resumed>) = 4 [ 141.735561][ T6875] EXT4-fs (loop1): dirty_blocks=448 [ 141.735573][ T6875] EXT4-fs (loop1): Block reservation details [ 141.735584][ T6875] EXT4-fs (loop1): i_reserved_data_blocks=28 [ 141.771622][ T6874] loop2: detected capacity change from 0 to 1024 [pid 5614] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6873] <... mount resumed>) = 0 [pid 6864] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5610] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6860, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6873] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6864] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5614] getdents64(4 [pid 5610] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 6873] <... openat resumed>) = 3 [pid 6864] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5610] <... restart_syscall resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6880 attached [pid 6873] chdir("./file1" [pid 5614] getdents64(4, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6873] <... chdir resumed>) = 0 [pid 6864] <... clone3 resumed> => {parent_tid=[6880]}, 88) = 6880 [pid 5614] close(4 [pid 6880] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6873] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6864] rt_sigprocmask(SIG_SETMASK, [] [pid 6880] <... rseq resumed>) = 0 [pid 6873] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6864] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] <... close resumed>) = 0 [pid 5610] umount2("./48", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6873] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6864] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] rmdir("./48/file1" [pid 6864] <... futex resumed>) = 0 [pid 5614] <... rmdir resumed>) = 0 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6864] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6873] <... futex resumed>) = 1 [pid 6880] set_robust_list(0x7fef94c679a0, 24 [pid 6873] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5610] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6880] <... set_robust_list resumed>) = 0 [pid 6869] <... futex resumed>) = 0 [pid 5614] umount2("./48/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] <... openat resumed>) = 3 [pid 6880] rt_sigprocmask(SIG_SETMASK, [] [pid 6869] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] fstat(3 [pid 6880] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] newfstatat(AT_FDCWD, "./48/binderfs" [pid 6869] <... futex resumed>) = 1 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6874] <... mount resumed>) = 0 [pid 6873] <... futex resumed>) = 0 [pid 6869] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6873] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6880] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6874] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6874] chdir("./file1") = 0 [pid 6867] <... sendfile resumed>) = ? [pid 5610] getdents64(3 [pid 6874] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6873] <... openat resumed>) = 4 [pid 6874] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6864] <... futex resumed>) = ? [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6867] +++ killed by SIGBUS +++ [pid 6874] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6873] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] umount2("./48/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6874] <... futex resumed>) = 1 [pid 6873] <... futex resumed>) = 1 [pid 6870] <... futex resumed>) = 0 [pid 6869] <... futex resumed>) = 0 [pid 6874] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6873] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6870] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6869] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6870] <... futex resumed>) = 0 [pid 6869] <... futex resumed>) = 0 [pid 5614] unlink("./48/binderfs" [pid 6873] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6880] +++ killed by SIGBUS +++ [ 141.868318][ T6880] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 141.868500][ T6880] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 192 with error 28 [ 141.868515][ T6880] EXT4-fs (loop0): This should not happen!! Data will be lost [ 141.868515][ T6880] [ 141.868523][ T6880] EXT4-fs (loop0): Total free blocks count 0 [ 141.868530][ T6880] EXT4-fs (loop0): Free/Dirty block details [pid 6874] <... openat resumed>) = 4 [pid 6870] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6869] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6864] +++ killed by SIGBUS +++ [pid 5614] <... unlink resumed>) = 0 [pid 6874] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6873] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 5614] getdents64(3 [pid 6874] <... futex resumed>) = 1 [pid 6873] <... openat resumed>) = 5 [pid 6870] <... futex resumed>) = 0 [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6874] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6870] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] close(3 [pid 6873] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6870] <... futex resumed>) = 0 [pid 6869] <... futex resumed>) = 0 [pid 5614] <... close resumed>) = 0 [pid 6874] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6873] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6870] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6869] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6874] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6873] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5614] rmdir("./48" [pid 6869] <... futex resumed>) = 0 [pid 6874] <... openat resumed>) = 5 [pid 5614] <... rmdir resumed>) = 0 [pid 6874] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6873] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6869] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6874] <... futex resumed>) = 1 [pid 6873] <... openat resumed>) = 6 [pid 6870] <... futex resumed>) = 0 [pid 5614] mkdir("./49", 0777 [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6864, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6874] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6873] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6870] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 6874] <... openat resumed>) = 6 [pid 6873] <... futex resumed>) = 1 [pid 6870] <... futex resumed>) = 0 [pid 6869] <... futex resumed>) = 0 [pid 5614] <... mkdir resumed>) = 0 [pid 6870] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 141.868537][ T6880] EXT4-fs (loop0): free_blocks=20480 [ 141.868544][ T6880] EXT4-fs (loop0): dirty_blocks=192 [ 141.868551][ T6880] EXT4-fs (loop0): Block reservation details [ 141.868557][ T6880] EXT4-fs (loop0): i_reserved_data_blocks=12 [ 141.890896][ T37] audit: type=1800 audit(1785844672.284:250): pid=6873 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop3" ino=15 res=0 errno=0 [pid 6869] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... restart_syscall resumed>) = 0 [pid 6874] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6873] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6869] <... futex resumed>) = 0 [pid 5614] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6873] <... mmap resumed>) = 0x200000000000 [pid 6869] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] <... openat resumed>) = 3 [pid 6874] <... futex resumed>) = 1 [pid 6870] <... futex resumed>) = 0 [pid 5614] ioctl(3, LOOP_CLR_FD [pid 6874] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6873] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6870] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6874] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6873] <... futex resumed>) = 1 [pid 6870] <... futex resumed>) = 0 [pid 6869] <... futex resumed>) = 0 [pid 5614] <... ioctl resumed>) = 0 [pid 6870] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6873] sendfile(4, 5, NULL, 553647746 [pid 6869] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] close(3 [pid 6874] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 6869] <... futex resumed>) = 0 [pid 6869] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] umount2("./49", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6874] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6874] <... futex resumed>) = 1 [pid 6870] <... futex resumed>) = 0 [pid 5609] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6874] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6870] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... openat resumed>) = 3 [pid 6874] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6870] <... futex resumed>) = 0 [pid 5609] fstat(3 [pid 6874] sendfile(4, 5, NULL, 553647746 [pid 6870] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5614] <... close resumed>) = 0 [ 141.911377][ T37] audit: type=1800 audit(1785844672.304:251): pid=6874 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop2" ino=15 res=0 errno=0 [pid 5609] getdents64(3 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 ci2-upstream-fs/strace-static-x86_64: Process 6881 attached [pid 6881] set_robust_list(0x5555748a66e0, 24) = 0 [pid 6881] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6881] chdir("./49" [pid 5614] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6881 [pid 6881] <... chdir resumed>) = 0 [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 6881] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6869] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] umount2("./49/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6869] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6869] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6881] <... prctl resumed>) = 0 [pid 6869] <... mmap resumed>) = 0x7fef94c47000 [pid 6881] setpgid(0, 0 [pid 6869] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6881] <... setpgid resumed>) = 0 [pid 6870] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6869] <... mprotect resumed>) = 0 [pid 6881] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6870] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6869] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6870] <... futex resumed>) = 0 [pid 6869] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6870] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6881] <... openat resumed>) = 3 [pid 6870] <... mmap resumed>) = 0x7fef94c47000 [pid 6869] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 6882 attached [pid 6870] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6882] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6881] write(3, "1000", 4 [pid 6870] <... mprotect resumed>) = 0 [pid 6882] <... rseq resumed>) = 0 [pid 6881] <... write resumed>) = 4 [pid 6870] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6869] <... clone3 resumed> => {parent_tid=[6882]}, 88) = 6882 [pid 6870] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6882] set_robust_list(0x7fef94c679a0, 24 [pid 6881] close(3 [pid 6870] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6869] rt_sigprocmask(SIG_SETMASK, []ci2-upstream-fs/strace-static-x86_64: Process 6883 attached [ 142.005592][ T177] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 440 with max blocks 4 with error 28 [ 142.005612][ T177] EXT4-fs (loop1): This should not happen!! Data will be lost [ 142.005612][ T177] [ 142.021472][ T5610] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6882] <... set_robust_list resumed>) = 0 [pid 6881] <... close resumed>) = 0 [pid 6869] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6883] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 6882] rt_sigprocmask(SIG_SETMASK, [] [pid 6881] symlink("/dev/binderfs", "./binderfs" [pid 6869] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6882] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6881] <... symlink resumed>) = 0 [pid 6870] <... clone3 resumed> => {parent_tid=[6883]}, 88) = 6883 [pid 6869] <... futex resumed>) = 0 [pid 6870] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6883] set_robust_list(0x7fef94c679a0, 24 [pid 6870] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6869] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6870] <... futex resumed>) = 0 [pid 6870] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6883] <... set_robust_list resumed>) = 0 executing program [ 142.073248][ T5609] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6881] write(1, "executing program\n", 18 [pid 6883] rt_sigprocmask(SIG_SETMASK, [] [pid 6881] <... write resumed>) = 18 [pid 6883] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6881] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6881] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60}, NULL, 8) = 0 [pid 6881] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6881] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c68000 [pid 6882] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6881] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6873] <... sendfile resumed>) = 233472 [pid 6873] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6873] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6881] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6873] <... futex resumed>) = ? [pid 6869] <... futex resumed>) = ? [pid 6881] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6873] +++ killed by SIGBUS +++ [pid 5610] <... umount2 resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6884 attached [pid 5610] umount2("./48/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6881] <... clone3 resumed> => {parent_tid=[6884]}, 88) = 6884 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] <... umount2 resumed>) = 0 [pid 6884] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6881] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] newfstatat(AT_FDCWD, "./48/file1" [pid 6884] <... rseq resumed>) = 0 [pid 6881] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./49/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6881] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] umount2("./48/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6881] <... futex resumed>) = 0 [pid 6884] set_robust_list(0x7fef94c889a0, 24 [pid 6881] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 142.111282][ T6882] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 142.111482][ T6882] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 224 with error 28 [ 142.111505][ T6882] EXT4-fs (loop3): This should not happen!! Data will be lost [ 142.111505][ T6882] [ 142.111519][ T6882] EXT4-fs (loop3): Total free blocks count 0 [ 142.111531][ T6882] EXT4-fs (loop3): Free/Dirty block details [ 142.111544][ T6882] EXT4-fs (loop3): free_blocks=20480 [ 142.111557][ T6882] EXT4-fs (loop3): dirty_blocks=224 [pid 6884] <... set_robust_list resumed>) = 0 [pid 6882] +++ killed by SIGBUS +++ [pid 6869] +++ killed by SIGBUS +++ [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./49/file1" [pid 6884] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] openat(AT_FDCWD, "./48/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5609] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6884] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6883] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6874] <... sendfile resumed>) = 217088 [pid 5612] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6869, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5610] <... openat resumed>) = 4 [pid 6884] memfd_create("syzkaller", 0 [pid 6874] ???( [pid 5610] fstat(4 [pid 5609] umount2("./49/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6884] <... memfd_create resumed>) = 3 [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6884] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5610] getdents64(4 [pid 6884] <... mmap resumed>) = 0x7fef8c868000 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5609] openat(AT_FDCWD, "./49/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5610] getdents64(4, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5610] close(4 [pid 5609] fstat(4 [pid 5610] <... close resumed>) = 0 [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5610] rmdir("./48/file1" [pid 6874] <... ??? resumed>) = ? [pid 5609] getdents64(4 [pid 6884] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6883] +++ killed by SIGBUS +++ [pid 6874] +++ killed by SIGBUS +++ [pid 6870] <... futex resumed>) = ? [ 142.111569][ T6882] EXT4-fs (loop3): Block reservation details [ 142.111580][ T6882] EXT4-fs (loop3): i_reserved_data_blocks=14 [ 142.124578][ T6883] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 142.124771][ T6883] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 212 with error 28 [ 142.124794][ T6883] EXT4-fs (loop2): This should not happen!! Data will be lost [ 142.124794][ T6883] [pid 5610] <... rmdir resumed>) = 0 [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5610] umount2("./48/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] getdents64(4 [pid 5610] newfstatat(AT_FDCWD, "./48/binderfs" [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6870] +++ killed by SIGBUS +++ [pid 5610] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./49/file1" [pid 5611] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6870, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5611] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 5610] unlink("./48/binderfs" [pid 5609] <... rmdir resumed>) = 0 [pid 5610] <... unlink resumed>) = 0 [pid 5610] getdents64(3 [pid 5609] umount2("./49/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] <... restart_syscall resumed>) = 0 [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] close(3) = 0 [pid 5609] newfstatat(AT_FDCWD, "./49/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] umount2("./50", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] rmdir("./48" [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] <... rmdir resumed>) = 0 [pid 5609] unlink("./49/binderfs" [pid 6884] <... write resumed>) = 524288 [pid 5611] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5612] umount2("./50", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] <... openat resumed>) = 3 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] fstat(3 [pid 6884] munmap(0x7fef8c868000, 138412032 [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5610] mkdir("./49", 0777 [pid 6884] <... munmap resumed>) = 0 [pid 5612] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5611] getdents64(3 [pid 5610] <... mkdir resumed>) = 0 [pid 5612] <... openat resumed>) = 3 [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5612] fstat(3 [pid 5611] umount2("./50/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5612] getdents64(3 [pid 5610] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 6884] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5610] ioctl(3, LOOP_CLR_FD [pid 6884] ioctl(4, LOOP_SET_FD, 3 [pid 5612] umount2("./50/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] <... ioctl resumed>) = 0 [pid 6884] <... ioctl resumed>) = 0 [pid 5609] <... unlink resumed>) = 0 [pid 5609] getdents64(3, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5610] close(3 [pid 5609] rmdir("./49") = 0 [pid 6884] close(3) = 0 [pid 6884] close(4) = 0 [pid 5609] mkdir("./50", 0777 [pid 6884] mkdir("./file1", 0777 [pid 5609] <... mkdir resumed>) = 0 [pid 6884] <... mkdir resumed>) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 6884] mount("/dev/loop4", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5609] ioctl(3, LOOP_CLR_FD) = 0 [pid 5609] close(3 [pid 5610] <... close resumed>) = 0 [pid 5610] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 142.124807][ T6883] EXT4-fs (loop2): Total free blocks count 0 [ 142.124818][ T6883] EXT4-fs (loop2): Free/Dirty block details [ 142.124830][ T6883] EXT4-fs (loop2): free_blocks=20480 [ 142.124843][ T6883] EXT4-fs (loop2): dirty_blocks=224 [ 142.124854][ T6883] EXT4-fs (loop2): Block reservation details [ 142.124864][ T6883] EXT4-fs (loop2): i_reserved_data_blocks=14 [ 142.230179][ T6884] loop4: detected capacity change from 0 to 1024 [pid 5610] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 6885 attached , child_tidptr=0x5555748a66d0) = 6885 [pid 6885] set_robust_list(0x5555748a66e0, 24 [pid 5610] rt_sigprocmask(SIG_SETMASK, [] [pid 6885] <... set_robust_list resumed>) = 0 [pid 6885] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6885] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6885] chdir("./49") = 0 [pid 6885] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5609] <... close resumed>) = 0 [ 142.274942][ T5611] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 142.293674][ T177] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 224 with max blocks 4 with error 28 [ 142.294374][ T177] EXT4-fs (loop3): This should not happen!! Data will be lost [ 142.294374][ T177] [pid 6885] <... prctl resumed>) = 0 [pid 5611] <... umount2 resumed>) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6885] setpgid(0, 0 [pid 5611] umount2("./50/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6885] <... setpgid resumed>) = 0 [pid 6884] <... mount resumed>) = 0 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6885] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5611] newfstatat(AT_FDCWD, "./50/file1" [pid 6885] write(3, "1000", 4) = 4 [pid 5611] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6885] close(3 [pid 5611] umount2("./50/file1", MNT_FORCE|UMOUNT_NOFOLLOWci2-upstream-fs/strace-static-x86_64: Process 6888 attached [pid 6884] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6888] set_robust_list(0x5555748a66e0, 24 [pid 6884] <... openat resumed>) = 3 [pid 5609] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6888 [pid 6884] chdir("./file1" [pid 6888] <... set_robust_list resumed>) = 0 [pid 6885] <... close resumed>) = 0 [pid 6884] <... chdir resumed>) = 0 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 6888] rt_sigprocmask(SIG_SETMASK, [] [pid 6885] symlink("/dev/binderfs", "./binderfs" [pid 6884] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5611] openat(AT_FDCWD, "./50/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6888] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6888] chdir("./50" [pid 6884] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5612] <... umount2 resumed>) = 0 [pid 5611] <... openat resumed>) = 4 [pid 6885] <... symlink resumed>) = 0 [pid 6888] <... chdir resumed>) = 0 [pid 6884] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] umount2("./50/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] fstat(4 [pid 6888] prctl(PR_SET_PDEATHSIG, SIGKILL executing program [pid 6885] write(1, "executing program\n", 18 [pid 6884] <... futex resumed>) = 1 [pid 6881] <... futex resumed>) = 0 [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6888] <... prctl resumed>) = 0 [pid 6885] <... write resumed>) = 18 [pid 6884] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [ 142.298478][ T5612] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6881] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] getdents64(4 [pid 6888] setpgid(0, 0 [pid 6885] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6884] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6888] <... setpgid resumed>) = 0 [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6884] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6888] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6885] <... futex resumed>) = 0 [pid 6881] <... futex resumed>) = 0 [pid 5612] newfstatat(AT_FDCWD, "./50/file1" [pid 5611] getdents64(4 [pid 6888] <... openat resumed>) = 3 [pid 6885] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6881] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6888] write(3, "1000", 4 [pid 6885] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6884] <... openat resumed>) = 4 [pid 5612] umount2("./50/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] close(4 [pid 6888] <... write resumed>) = 4 [pid 6885] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6888] close(3 [pid 6885] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6884] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] openat(AT_FDCWD, "./50/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5611] <... close resumed>) = 0 [pid 6888] <... close resumed>) = 0 [pid 6885] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6881] <... futex resumed>) = 0 [pid 5611] rmdir("./50/file1" [pid 6885] <... mmap resumed>) = 0x7fef94c68000 [pid 6881] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6888] symlink("/dev/binderfs", "./binderfs" [pid 6885] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6881] <... futex resumed>) = 0 [pid 5612] <... openat resumed>) = 4 [pid 5611] <... rmdir resumed>) = 0 [pid 6884] <... futex resumed>) = 1 [pid 6884] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6888] <... symlink resumed>) = 0 [pid 6885] <... mprotect resumed>) = 0 [pid 6881] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] fstat(4 [pid 5611] umount2("./50/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6888] write(1, "executing program\n", 18 [pid 6884] <... openat resumed>) = 5 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] newfstatat(AT_FDCWD, "./50/binderfs" [pid 6888] <... write resumed>) = 18 [pid 6885] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6884] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5611] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6888] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6885] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5612] getdents64(4 [pid 6888] <... futex resumed>) = 0 [pid 6885] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 executing program ci2-upstream-fs/strace-static-x86_64: Process 6889 attached [pid 6888] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6884] <... futex resumed>) = 1 [pid 6881] <... futex resumed>) = 0 [pid 5612] getdents64(4 [pid 5611] unlink("./50/binderfs" [pid 6888] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6884] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6881] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6889] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6888] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6885] <... clone3 resumed> => {parent_tid=[6889]}, 88) = 6889 [pid 6884] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6881] <... futex resumed>) = 0 [pid 5612] close(4 [pid 5611] <... unlink resumed>) = 0 [pid 6889] <... rseq resumed>) = 0 [pid 6888] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6885] rt_sigprocmask(SIG_SETMASK, [] [pid 6884] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6881] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... close resumed>) = 0 [pid 6889] set_robust_list(0x7fef94c889a0, 24 [pid 6888] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6885] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6884] <... openat resumed>) = 6 [pid 5612] rmdir("./50/file1" [pid 5611] getdents64(3 [pid 6889] <... set_robust_list resumed>) = 0 [pid 6888] <... mmap resumed>) = 0x7fef94c68000 [pid 6885] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6884] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6889] rt_sigprocmask(SIG_SETMASK, [] [pid 6888] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6885] <... futex resumed>) = 0 [pid 5612] <... rmdir resumed>) = 0 [pid 5611] close(3 [pid 6889] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6884] <... futex resumed>) = 1 [pid 6881] <... futex resumed>) = 0 [pid 6888] <... mprotect resumed>) = 0 [pid 6885] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5611] <... close resumed>) = 0 [pid 5611] rmdir("./50" [pid 6889] memfd_create("syzkaller", 0 [pid 6888] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6884] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6881] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] umount2("./50/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] <... rmdir resumed>) = 0 [pid 6888] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6884] <... mmap resumed>) = 0x200000000000 [pid 6881] <... futex resumed>) = 0 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] mkdir("./51", 0777 [pid 6889] <... memfd_create resumed>) = 3 [pid 6888] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [ 142.396302][ T37] audit: type=1800 audit(1785844672.794:252): pid=6884 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop4" ino=15 res=0 errno=0 [pid 6884] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6881] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] newfstatat(AT_FDCWD, "./50/binderfs"ci2-upstream-fs/strace-static-x86_64: Process 6890 attached [pid 6889] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6884] <... futex resumed>) = 0 [pid 5611] <... mkdir resumed>) = 0 [pid 6890] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6889] <... mmap resumed>) = 0x7fef8c868000 [pid 6888] <... clone3 resumed> => {parent_tid=[6890]}, 88) = 6890 [pid 6884] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6881] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5612] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6890] <... rseq resumed>) = 0 [pid 6888] rt_sigprocmask(SIG_SETMASK, [] [pid 6881] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] unlink("./50/binderfs" [pid 5611] <... openat resumed>) = 3 [pid 6890] set_robust_list(0x7fef94c889a0, 24 [pid 6888] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5612] <... unlink resumed>) = 0 [pid 6881] <... futex resumed>) = 1 [pid 6890] <... set_robust_list resumed>) = 0 [pid 6889] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6888] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6884] <... futex resumed>) = 0 [pid 6881] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] getdents64(3 [pid 5611] ioctl(3, LOOP_CLR_FD [pid 6890] rt_sigprocmask(SIG_SETMASK, [] [pid 6888] <... futex resumed>) = 0 [pid 6884] sendfile(4, 5, NULL, 553647746 [pid 6890] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6888] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5611] <... ioctl resumed>) = 0 [pid 6890] memfd_create("syzkaller", 0 [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5611] close(3 [pid 5612] close(3 [pid 6890] <... memfd_create resumed>) = 3 [pid 5612] <... close resumed>) = 0 [pid 6890] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fef8c868000 [pid 5612] rmdir("./50") = 0 [pid 5612] mkdir("./51", 0777 [pid 5611] <... close resumed>) = 0 [pid 5612] <... mkdir resumed>) = 0 [pid 5611] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6889] <... write resumed>) = 524288 [pid 6889] munmap(0x7fef8c868000, 138412032 [pid 6890] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5611] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5611] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6889] <... munmap resumed>) = 0 [pid 5612] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 ci2-upstream-fs/strace-static-x86_64: Process 6891 attached [pid 6889] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5612] ioctl(3, LOOP_CLR_FD [pid 6889] <... openat resumed>) = 4 [pid 5612] <... ioctl resumed>) = 0 [pid 5611] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6891 [pid 6891] set_robust_list(0x5555748a66e0, 24 [pid 6889] ioctl(4, LOOP_SET_FD, 3 [pid 5612] close(3 [pid 6889] <... ioctl resumed>) = 0 [pid 5611] rt_sigprocmask(SIG_SETMASK, [] [pid 6891] <... set_robust_list resumed>) = 0 [pid 6890] <... write resumed>) = 524288 [pid 5611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6890] munmap(0x7fef8c868000, 138412032 [pid 6891] rt_sigprocmask(SIG_SETMASK, [] [pid 6890] <... munmap resumed>) = 0 [pid 6889] close(3 [pid 6891] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6889] <... close resumed>) = 0 [pid 6891] chdir("./51" [pid 6889] close(4 [pid 6891] <... chdir resumed>) = 0 [pid 6889] <... close resumed>) = 0 [pid 6891] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6889] mkdir("./file1", 0777 [pid 6891] <... prctl resumed>) = 0 [pid 6889] <... mkdir resumed>) = 0 [pid 6890] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6881] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6891] setpgid(0, 0 [pid 6890] <... openat resumed>) = 4 [pid 6881] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6891] <... setpgid resumed>) = 0 [pid 6890] ioctl(4, LOOP_SET_FD, 3 [pid 6889] mount("/dev/loop1", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5612] <... close resumed>) = 0 [pid 6881] <... futex resumed>) = 0 [pid 6881] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6891] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6890] <... ioctl resumed>) = 0 [pid 6881] <... mmap resumed>) = 0x7fef94c47000 [pid 6891] <... openat resumed>) = 3 [pid 6890] close(3 [pid 5612] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6890] <... close resumed>) = 0 [pid 6881] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6890] close(4) = 0 [pid 6891] write(3, "1000", 4 [pid 5612] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6891] <... write resumed>) = 4 [pid 6890] mkdir("./file1", 0777 [pid 6881] <... mprotect resumed>) = 0 [pid 5612] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6891] close(3 [pid 6890] <... mkdir resumed>) = 0 [pid 6881] rt_sigprocmask(SIG_BLOCK, ~[]ci2-upstream-fs/strace-static-x86_64: Process 6892 attached [pid 6891] <... close resumed>) = 0 [pid 6891] symlink("/dev/binderfs", "./binderfs" [pid 6881] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6892] set_robust_list(0x5555748a66e0, 24 [pid 6881] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6892] <... set_robust_list resumed>) = 0 [pid 6891] <... symlink resumed>) = 0 [pid 6890] mount("/dev/loop0", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5612] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6892 ci2-upstream-fs/strace-static-x86_64: Process 6895 attached [pid 6892] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] rt_sigprocmask(SIG_SETMASK, [] [pid 6892] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6895] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6892] chdir("./51" executing program [pid 6891] write(1, "executing program\n", 18 [pid 5612] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6895] <... rseq resumed>) = 0 [pid 6892] <... chdir resumed>) = 0 [pid 6891] <... write resumed>) = 18 [pid 6881] <... clone3 resumed> => {parent_tid=[6895]}, 88) = 6895 [pid 6892] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6881] rt_sigprocmask(SIG_SETMASK, [] [pid 6895] set_robust_list(0x7fef94c679a0, 24 [pid 6889] <... mount resumed>) = 0 [pid 6892] <... prctl resumed>) = 0 [pid 6891] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6881] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6895] <... set_robust_list resumed>) = 0 [pid 6892] setpgid(0, 0 [pid 6881] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6895] rt_sigprocmask(SIG_SETMASK, [] [pid 6892] <... setpgid resumed>) = 0 [pid 6891] <... futex resumed>) = 0 [pid 6881] <... futex resumed>) = 0 [pid 6895] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6892] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6891] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6889] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6881] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6892] <... openat resumed>) = 3 [pid 6891] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6889] <... openat resumed>) = 3 [pid 6892] write(3, "1000", 4 [ 142.515591][ T6889] loop1: detected capacity change from 0 to 1024 [ 142.539178][ T6890] loop0: detected capacity change from 0 to 1024 [pid 6891] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6889] chdir("./file1" [pid 6892] <... write resumed>) = 4 [pid 6892] close(3 [pid 6891] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6889] <... chdir resumed>) = 0 [pid 6891] <... mmap resumed>) = 0x7fef94c68000 [pid 6889] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6892] <... close resumed>) = 0 [pid 6891] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6889] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6892] symlink("/dev/binderfs", "./binderfs" [pid 6891] <... mprotect resumed>) = 0 [pid 6891] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6889] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6891] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6889] <... futex resumed>) = 1 [pid 6885] <... futex resumed>) = 0 [pid 6891] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6889] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6885] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6889] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6885] <... futex resumed>) = 0 [ 142.584121][ T6895] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 142.585309][ T6895] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 280 with error 28 [ 142.585336][ T6895] EXT4-fs (loop4): This should not happen!! Data will be lost [ 142.585336][ T6895] [ 142.585363][ T6895] EXT4-fs (loop4): Total free blocks count 0 [pid 6889] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6890] <... mount resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6898 attached [pid 6891] <... clone3 resumed> => {parent_tid=[6898]}, 88) = 6898 [pid 6885] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6891] rt_sigprocmask(SIG_SETMASK, [] [pid 6898] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6891] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6884] <... sendfile resumed>) = 290816 [pid 6898] <... rseq resumed>) = 0 [pid 6895] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6891] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6889] <... openat resumed>) = 4 [pid 6884] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6898] set_robust_list(0x7fef94c889a0, 24 [pid 6891] <... futex resumed>) = 0 [pid 6889] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6884] <... futex resumed>) = ? [pid 6881] <... futex resumed>) = ? [pid 6898] <... set_robust_list resumed>) = 0 [pid 6891] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6889] <... futex resumed>) = 1 [pid 6885] <... futex resumed>) = 0 [pid 6884] +++ killed by SIGBUS +++ [pid 6885] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6898] rt_sigprocmask(SIG_SETMASK, [] [pid 6889] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6885] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6898] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6898] memfd_create("syzkaller", 0 [pid 6889] <... openat resumed>) = 5 [pid 6889] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6898] <... memfd_create resumed>) = 3 [pid 6889] <... futex resumed>) = 1 [pid 6885] <... futex resumed>) = 0 [pid 6885] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6898] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6889] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6885] <... futex resumed>) = 0 [pid 6898] <... mmap resumed>) = 0x7fef8c868000 [pid 6889] <... openat resumed>) = 6 [pid 6885] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6895] +++ killed by SIGBUS +++ [pid 6889] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6881] +++ killed by SIGBUS +++ [pid 6889] <... futex resumed>) = 1 [pid 6885] <... futex resumed>) = 0 [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6881, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6889] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6885] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6885] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6889] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6889] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 6889] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] umount2("./49", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6889] <... futex resumed>) = 1 [pid 6885] <... futex resumed>) = 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6898] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6885] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6889] sendfile(4, 5, NULL, 553647746 [pid 6885] <... futex resumed>) = 0 [pid 5614] <... openat resumed>) = 3 [pid 6890] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6885] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5614] getdents64(3 [pid 6890] <... openat resumed>) = 3 [pid 6890] chdir("./file1" [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6890] <... chdir resumed>) = 0 [pid 6890] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5614] umount2("./49/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6890] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6890] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6888] <... futex resumed>) = 0 [pid 6898] <... write resumed>) = 524288 [pid 6892] <... symlink resumed>) = 0 [pid 6890] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6888] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6892] write(1, "executing program\n", 18 [pid 6888] <... futex resumed>) = 0 executing program [pid 6892] <... write resumed>) = 18 [ 142.585376][ T6895] EXT4-fs (loop4): Free/Dirty block details [ 142.585395][ T6895] EXT4-fs (loop4): free_blocks=20480 [ 142.585409][ T6895] EXT4-fs (loop4): dirty_blocks=288 [ 142.585421][ T6895] EXT4-fs (loop4): Block reservation details [ 142.585431][ T6895] EXT4-fs (loop4): i_reserved_data_blocks=18 [ 142.613130][ T37] audit: type=1800 audit(1785844673.014:253): pid=6889 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop1" ino=15 res=0 errno=0 [pid 6888] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6898] munmap(0x7fef8c868000, 138412032 [pid 6892] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6890] <... openat resumed>) = 4 [pid 6898] <... munmap resumed>) = 0 [pid 6898] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6890] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6898] <... openat resumed>) = 4 [pid 6890] <... futex resumed>) = 1 [pid 6898] ioctl(4, LOOP_SET_FD, 3 [pid 6890] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6888] <... futex resumed>) = 0 [pid 6898] <... ioctl resumed>) = 0 [pid 6890] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6888] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6890] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6888] <... futex resumed>) = 0 [pid 6898] close(3 [pid 6890] <... openat resumed>) = 5 [pid 6888] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6898] <... close resumed>) = 0 [pid 6898] close(4 [pid 6890] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6898] <... close resumed>) = 0 [pid 6890] <... futex resumed>) = 1 [pid 6888] <... futex resumed>) = 0 [pid 6898] mkdir("./file1", 0777 [pid 6890] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6892] <... futex resumed>) = 0 [pid 6888] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6885] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6898] <... mkdir resumed>) = 0 [pid 6892] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6890] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6888] <... futex resumed>) = 0 [pid 6885] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6898] mount("/dev/loop2", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6892] <... rt_sigaction resumed>, NULL, 8) = 0 [ 142.690155][ T37] audit: type=1800 audit(1785844673.084:254): pid=6890 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 142.705127][ T6898] loop2: detected capacity change from 0 to 1024 [ 142.713251][ T177] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 280 with max blocks 4 with error 28 [ 142.713281][ T177] EXT4-fs (loop4): This should not happen!! Data will be lost [ 142.713281][ T177] [pid 6892] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6890] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6888] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6885] <... futex resumed>) = 0 [pid 6892] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6890] <... openat resumed>) = 6 [pid 6892] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6890] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6885] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6892] <... mmap resumed>) = 0x7fef94c68000 [pid 6892] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6890] <... futex resumed>) = 1 [pid 6888] <... futex resumed>) = 0 [pid 6885] <... mmap resumed>) = 0x7fef94c47000 [pid 6892] <... mprotect resumed>) = 0 [pid 6890] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6888] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6885] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6892] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6890] <... mmap resumed>) = 0x200000000000 [pid 6888] <... futex resumed>) = 0 [pid 6885] <... mprotect resumed>) = 0 [pid 6892] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6890] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6888] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6885] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6892] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6890] <... futex resumed>) = 0 [pid 6888] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6885] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6890] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6888] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6885] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6890] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6888] <... futex resumed>) = 0 [pid 6890] sendfile(4, 5, NULL, 553647746 [pid 6888] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-upstream-fs/strace-static-x86_64: Process 6902 attached ci2-upstream-fs/strace-static-x86_64: Process 6901 attached [pid 6885] <... clone3 resumed> => {parent_tid=[6902]}, 88) = 6902 [ 142.738195][ T5614] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6902] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6892] <... clone3 resumed> => {parent_tid=[6901]}, 88) = 6901 [pid 6885] rt_sigprocmask(SIG_SETMASK, [] [pid 6892] rt_sigprocmask(SIG_SETMASK, [] [pid 6885] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6901] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6902] <... rseq resumed>) = 0 [pid 6898] <... mount resumed>) = 0 [pid 6892] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6888] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6885] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6888] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6885] <... futex resumed>) = 0 [pid 6902] set_robust_list(0x7fef94c679a0, 24 [pid 6901] <... rseq resumed>) = 0 [pid 6898] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6892] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6888] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6885] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6902] <... set_robust_list resumed>) = 0 [pid 6901] set_robust_list(0x7fef94c889a0, 24 [pid 6898] <... openat resumed>) = 3 [pid 6892] <... futex resumed>) = 0 [pid 6888] <... mmap resumed>) = 0x7fef94c47000 [pid 6888] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6892] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6902] rt_sigprocmask(SIG_SETMASK, [] [pid 6901] <... set_robust_list resumed>) = 0 [pid 6898] chdir("./file1" [pid 6888] <... mprotect resumed>) = 0 [pid 5614] <... umount2 resumed>) = 0 [pid 6902] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6901] rt_sigprocmask(SIG_SETMASK, [] [pid 6898] <... chdir resumed>) = 0 [pid 5614] umount2("./49/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6901] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6898] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6888] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6901] memfd_create("syzkaller", 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6901] <... memfd_create resumed>) = 3 [pid 6898] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6901] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6898] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] newfstatat(AT_FDCWD, "./49/file1" [pid 6901] <... mmap resumed>) = 0x7fef8c868000 [pid 6898] <... futex resumed>) = 1 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6891] <... futex resumed>) = 0 [pid 6898] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5614] umount2("./49/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6891] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6888] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6885] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6888] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6898] <... futex resumed>) = 0 [pid 6891] <... futex resumed>) = 1 [pid 5614] openat(AT_FDCWD, "./49/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORYci2-upstream-fs/strace-static-x86_64: Process 6903 attached [pid 6898] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6891] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] <... openat resumed>) = 4 [pid 6903] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6902] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6901] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [ 142.865931][ T6902] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 142.866137][ T6902] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 364 with error 28 [ 142.866161][ T6902] EXT4-fs (loop1): This should not happen!! Data will be lost [ 142.866161][ T6902] [ 142.866175][ T6902] EXT4-fs (loop1): Total free blocks count 0 [ 142.866187][ T6902] EXT4-fs (loop1): Free/Dirty block details [pid 5614] fstat(4 [pid 6903] <... rseq resumed>) = 0 [pid 6898] <... openat resumed>) = 4 [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6889] <... sendfile resumed>) = ? [pid 6903] set_robust_list(0x7fef94c679a0, 24) = 0 [pid 6902] +++ killed by SIGBUS +++ [pid 5614] getdents64(4 [pid 6903] rt_sigprocmask(SIG_SETMASK, [] [pid 6898] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6889] +++ killed by SIGBUS +++ [pid 6888] <... clone3 resumed> => {parent_tid=[6903]}, 88) = 6903 [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6903] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6901] <... write resumed>) = 524288 [pid 6898] <... futex resumed>) = 1 [pid 6891] <... futex resumed>) = 0 [pid 5614] getdents64(4 [pid 6903] futex(0x7fef94d63e58, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6901] munmap(0x7fef8c868000, 138412032 [pid 6898] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6891] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6888] rt_sigprocmask(SIG_SETMASK, [] [pid 6885] +++ killed by SIGBUS +++ [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6901] <... munmap resumed>) = 0 [pid 6898] <... openat resumed>) = 5 [pid 6891] <... futex resumed>) = 0 [pid 6888] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] close(4 [pid 6888] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6885, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6888] <... futex resumed>) = 1 [pid 6903] <... futex resumed>) = 0 [pid 6891] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 142.866200][ T6902] EXT4-fs (loop1): free_blocks=20480 [ 142.866214][ T6902] EXT4-fs (loop1): dirty_blocks=368 [ 142.866226][ T6902] EXT4-fs (loop1): Block reservation details [ 142.866236][ T6902] EXT4-fs (loop1): i_reserved_data_blocks=23 [ 142.923351][ T37] audit: type=1800 audit(1785844673.314:255): pid=6898 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop2" ino=15 res=0 errno=0 [pid 6901] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6898] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6891] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6888] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] <... close resumed>) = 0 [pid 5610] umount2("./49", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6901] <... openat resumed>) = 4 [pid 6898] <... futex resumed>) = 0 [pid 5614] rmdir("./49/file1" [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 142.988566][ T6903] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 142.988887][ T6903] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1120 with error 28 [ 142.988911][ T6903] EXT4-fs (loop0): This should not happen!! Data will be lost [ 142.988911][ T6903] [ 142.988922][ T6903] EXT4-fs (loop0): Total free blocks count 0 [pid 6898] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6901] ioctl(4, LOOP_SET_FD, 3 [pid 6891] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6901] <... ioctl resumed>) = 0 [pid 6891] <... futex resumed>) = 1 [pid 5610] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6891] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6901] close(3) = 0 [pid 6901] close(4) = 0 [pid 6901] mkdir("./file1", 0777 [pid 5610] <... openat resumed>) = 3 [pid 6901] <... mkdir resumed>) = 0 [pid 6898] <... futex resumed>) = 0 [pid 6901] mount("/dev/loop3", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5610] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6898] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 5610] getdents64(3 [pid 6891] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6898] <... openat resumed>) = 6 [pid 6891] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6891] <... futex resumed>) = 0 [pid 5610] umount2("./49/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6898] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6891] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6898] <... futex resumed>) = 0 [pid 6891] <... mmap resumed>) = 0x7fef94c47000 [pid 6898] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6891] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6888] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6891] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5614] <... rmdir resumed>) = 0 [pid 5614] umount2("./49/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6891] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./49/binderfs" [pid 6891] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5614] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6905 attached [pid 5614] unlink("./49/binderfs" [pid 6903] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6890] <... sendfile resumed>) = 1150976 [pid 6905] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 6905] set_robust_list(0x7fef94c679a0, 24 [pid 6891] <... clone3 resumed> => {parent_tid=[6905]}, 88) = 6905 [pid 6890] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... unlink resumed>) = 0 [ 142.988933][ T6903] EXT4-fs (loop0): Free/Dirty block details [ 142.988944][ T6903] EXT4-fs (loop0): free_blocks=20480 [ 142.988956][ T6903] EXT4-fs (loop0): dirty_blocks=1120 [ 142.988967][ T6903] EXT4-fs (loop0): Block reservation details [ 142.988976][ T6903] EXT4-fs (loop0): i_reserved_data_blocks=70 [ 143.008658][ T6901] loop3: detected capacity change from 0 to 1024 [pid 6905] <... set_robust_list resumed>) = 0 [pid 6891] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] getdents64(3 [pid 6890] <... futex resumed>) = ? [pid 6905] rt_sigprocmask(SIG_SETMASK, [] [pid 6891] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6890] +++ killed by SIGBUS +++ [pid 6905] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6891] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6905] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 6891] <... futex resumed>) = 0 [pid 5614] close(3 [pid 6891] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] <... close resumed>) = 0 [pid 6905] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6903] +++ killed by SIGBUS +++ [pid 6888] +++ killed by SIGBUS +++ [pid 5614] rmdir("./49" [pid 6905] <... futex resumed>) = 1 [pid 6901] <... mount resumed>) = 0 [pid 6891] <... futex resumed>) = 0 [pid 5614] <... rmdir resumed>) = 0 [pid 6905] futex(0x7fef94d63e58, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6891] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6888, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 6898] <... futex resumed>) = 0 [pid 6891] <... futex resumed>) = 1 [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 6901] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6898] sendfile(4, 5, NULL, 553647746 [pid 6891] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] mkdir("./50", 0777 [pid 5609] <... restart_syscall resumed>) = 0 [pid 6901] <... openat resumed>) = 3 [pid 5614] <... mkdir resumed>) = 0 [ 143.106664][ T5610] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6901] chdir("./file1") = 0 [pid 5614] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5609] umount2("./50", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5614] <... openat resumed>) = 3 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6901] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5614] ioctl(3, LOOP_CLR_FD [pid 5610] <... umount2 resumed>) = 0 [pid 5609] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5614] <... ioctl resumed>) = 0 [pid 5609] <... openat resumed>) = 3 [pid 5614] close(3 [pid 5609] fstat(3 [pid 6901] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5610] umount2("./49/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6901] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] getdents64(3 [pid 6901] <... futex resumed>) = 1 [pid 5610] newfstatat(AT_FDCWD, "./49/file1" [pid 6901] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5610] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5610] umount2("./49/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] umount2("./50/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6892] <... futex resumed>) = 0 [pid 5614] <... close resumed>) = 0 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6892] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] openat(AT_FDCWD, "./49/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6892] <... futex resumed>) = 1 [pid 5610] <... openat resumed>) = 4 [pid 6892] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6901] <... futex resumed>) = 0 [pid 6901] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6891] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5610] fstat(4 [pid 6891] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6905] <... futex resumed>) = 0 [pid 6901] <... openat resumed>) = 4 [pid 6891] <... futex resumed>) = 1 [pid 5614] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6891] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 6907 attached [pid 6901] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] getdents64(4 [pid 6901] <... futex resumed>) = 1 [pid 6892] <... futex resumed>) = 0 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5610] getdents64(4, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [ 143.204534][ T37] audit: type=1800 audit(1785844673.594:256): pid=6901 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 143.206742][ T6905] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 143.206937][ T6905] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 96 with error 28 [ 143.206959][ T6905] EXT4-fs (loop2): This should not happen!! Data will be lost [ 143.206959][ T6905] [ 143.206973][ T6905] EXT4-fs (loop2): Total free blocks count 0 [ 143.206985][ T6905] EXT4-fs (loop2): Free/Dirty block details [ 143.206998][ T6905] EXT4-fs (loop2): free_blocks=20480 [ 143.207011][ T6905] EXT4-fs (loop2): dirty_blocks=96 [ 143.207023][ T6905] EXT4-fs (loop2): Block reservation details [ 143.207034][ T6905] EXT4-fs (loop2): i_reserved_data_blocks=6 [pid 5610] close(4 [pid 6907] set_robust_list(0x5555748a66e0, 24 [pid 6905] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6901] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6898] <... sendfile resumed>) = 102400 [pid 6892] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6891] <... futex resumed>) = ? [pid 5610] <... close resumed>) = 0 [pid 6907] <... set_robust_list resumed>) = 0 [pid 6901] <... openat resumed>) = 5 [pid 5614] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6907 [pid 6892] <... futex resumed>) = 0 [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 6907] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6901] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6892] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6901] <... futex resumed>) = 0 [pid 6907] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6892] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5609] <... umount2 resumed>) = 0 [pid 6901] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6892] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6901] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6892] <... futex resumed>) = 0 [pid 6907] chdir("./50" [pid 6901] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6892] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6907] <... chdir resumed>) = 0 [pid 5610] rmdir("./49/file1" [pid 5609] umount2("./50/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6907] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6901] <... openat resumed>) = 6 [pid 6898] +++ killed by SIGBUS +++ [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6901] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6892] <... futex resumed>) = 0 [pid 6892] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5610] <... rmdir resumed>) = 0 [pid 5609] newfstatat(AT_FDCWD, "./50/file1" [pid 6907] <... prctl resumed>) = 0 [pid 6907] setpgid(0, 0 [pid 6892] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6901] <... futex resumed>) = 1 [pid 6901] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6907] <... setpgid resumed>) = 0 [pid 6907] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6901] <... mmap resumed>) = 0x200000000000 [pid 5609] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6901] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6892] <... futex resumed>) = 0 [pid 5609] umount2("./50/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6907] <... openat resumed>) = 3 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6892] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] openat(AT_FDCWD, "./50/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6901] sendfile(4, 5, NULL, 553647746 [pid 6892] <... futex resumed>) = 0 [pid 5609] <... openat resumed>) = 4 [pid 6892] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] fstat(4 [pid 6907] write(3, "1000", 4 [pid 6905] +++ killed by SIGBUS +++ [pid 6891] +++ killed by SIGBUS +++ [pid 5610] umount2("./49/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6907] <... write resumed>) = 4 [pid 5609] getdents64(4 [pid 6907] close(3 [pid 5611] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6891, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6907] <... close resumed>) = 0 [pid 5611] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 5610] newfstatat(AT_FDCWD, "./49/binderfs" [pid 5609] getdents64(4 [pid 6907] symlink("/dev/binderfs", "./binderfs" [pid 5611] <... restart_syscall resumed>) = 0 [pid 5610] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5610] unlink("./49/binderfs" [pid 5609] close(4 [pid 5611] umount2("./51", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] <... unlink resumed>) = 0 [pid 5609] <... close resumed>) = 0 [pid 6907] <... symlink resumed>) = 0 [pid 5609] rmdir("./50/file1" [pid 5610] getdents64(3 executing program [pid 6907] write(1, "executing program\n", 18 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6907] <... write resumed>) = 18 [pid 5610] close(3 [pid 5611] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5610] <... close resumed>) = 0 [pid 6907] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] rmdir("./49" [pid 6907] <... futex resumed>) = 0 [pid 5611] <... openat resumed>) = 3 [pid 5611] fstat(3 [pid 6907] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5611] getdents64(3, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6907] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6907] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [ 143.234209][ T177] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1120 with max blocks 4 with error 28 [ 143.234262][ T177] EXT4-fs (loop0): This should not happen!! Data will be lost [ 143.234262][ T177] [ 143.245312][ T5609] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 5611] umount2("./51/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6907] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] <... rmdir resumed>) = 0 [pid 6907] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c68000 [pid 6907] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6907] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5610] mkdir("./50", 0777 [pid 5609] <... rmdir resumed>) = 0 [pid 6907] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 5610] <... mkdir resumed>) = 0 [pid 5609] umount2("./50/binderfs", MNT_FORCE|UMOUNT_NOFOLLOWci2-upstream-fs/strace-static-x86_64: Process 6908 attached ) = -1 EINVAL (Invalid argument) [pid 6907] <... clone3 resumed> => {parent_tid=[6908]}, 88) = 6908 [pid 5609] newfstatat(AT_FDCWD, "./50/binderfs" [pid 6892] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6908] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6907] rt_sigprocmask(SIG_SETMASK, [] [pid 6892] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5609] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6908] <... rseq resumed>) = 0 [pid 6907] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6892] <... futex resumed>) = 0 [pid 5610] <... openat resumed>) = 3 [pid 5609] unlink("./50/binderfs" [pid 6908] set_robust_list(0x7fef94c889a0, 24 [pid 6907] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6892] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5610] ioctl(3, LOOP_CLR_FD [pid 5609] <... unlink resumed>) = 0 [pid 6908] <... set_robust_list resumed>) = 0 [pid 6907] <... futex resumed>) = 0 [pid 6892] <... mmap resumed>) = 0x7fef94c47000 [pid 6908] rt_sigprocmask(SIG_SETMASK, [] [pid 6907] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6892] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 5610] <... ioctl resumed>) = 0 [pid 5609] getdents64(3 [pid 6908] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6892] <... mprotect resumed>) = 0 [pid 5610] close(3 [pid 6892] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6908] memfd_create("syzkaller", 0 [pid 5609] close(3 [pid 6892] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5609] <... close resumed>) = 0 [pid 6908] <... memfd_create resumed>) = 3 [pid 6908] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6892] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5609] rmdir("./50" [pid 6908] <... mmap resumed>) = 0x7fef8c868000 ci2-upstream-fs/strace-static-x86_64: Process 6909 attached [pid 5609] <... rmdir resumed>) = 0 [pid 6909] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6892] <... clone3 resumed> => {parent_tid=[6909]}, 88) = 6909 [pid 6892] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6909] <... rseq resumed>) = 0 [pid 6908] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5609] mkdir("./51", 0777 [pid 6909] set_robust_list(0x7fef94c679a0, 24) = 0 [pid 6892] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... mkdir resumed>) = 0 [pid 6909] rt_sigprocmask(SIG_SETMASK, [] [pid 6892] <... futex resumed>) = 0 [pid 6909] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6892] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 143.423957][ T13] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 96 with max blocks 4 with error 28 [ 143.423990][ T13] EXT4-fs (loop2): This should not happen!! Data will be lost [ 143.423990][ T13] [ 143.425396][ T5611] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 143.458640][ T6909] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [pid 5610] <... close resumed>) = 0 [pid 5609] ioctl(3, LOOP_CLR_FD) = 0 [pid 5609] close(3 [pid 5610] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5610] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 6910 attached [pid 5611] <... umount2 resumed>) = 0 [pid 6910] set_robust_list(0x5555748a66e0, 24 [pid 6909] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6908] <... write resumed>) = 524288 [pid 6901] <... sendfile resumed>) = ? [pid 5609] <... close resumed>) = 0 [pid 6910] <... set_robust_list resumed>) = 0 [pid 6908] munmap(0x7fef8c868000, 138412032 [pid 5611] umount2("./51/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6910 [pid 6910] rt_sigprocmask(SIG_SETMASK, [] [pid 6908] <... munmap resumed>) = 0 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] rt_sigprocmask(SIG_SETMASK, [] [pid 6910] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6908] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5611] newfstatat(AT_FDCWD, "./51/file1" [pid 5610] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6910] chdir("./50" [pid 6908] <... openat resumed>) = 4 [pid 5611] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6910] <... chdir resumed>) = 0 [ 143.458840][ T6909] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 456 with error 28 [ 143.458863][ T6909] EXT4-fs (loop3): This should not happen!! Data will be lost [ 143.458863][ T6909] [ 143.458877][ T6909] EXT4-fs (loop3): Total free blocks count 0 [ 143.458898][ T6909] EXT4-fs (loop3): Free/Dirty block details [ 143.458911][ T6909] EXT4-fs (loop3): free_blocks=20480 [ 143.458925][ T6909] EXT4-fs (loop3): dirty_blocks=464 [ 143.458937][ T6909] EXT4-fs (loop3): Block reservation details [pid 6908] ioctl(4, LOOP_SET_FD, 3 [pid 5611] umount2("./51/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6910] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6908] <... ioctl resumed>) = 0 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6892] <... futex resumed>) = ? [pid 6909] +++ killed by SIGBUS +++ [pid 6901] +++ killed by SIGBUS +++ [pid 5611] openat(AT_FDCWD, "./51/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6910] <... prctl resumed>) = 0 [pid 6908] close(3 [pid 5611] <... openat resumed>) = 4 ci2-upstream-fs/strace-static-x86_64: Process 6911 attached [pid 6910] setpgid(0, 0 [pid 6908] <... close resumed>) = 0 [pid 6892] +++ killed by SIGBUS +++ [pid 6911] set_robust_list(0x5555748a66e0, 24 [pid 6910] <... setpgid resumed>) = 0 [pid 6908] close(4 [pid 5612] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6892, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5611] fstat(4 [pid 6911] <... set_robust_list resumed>) = 0 [pid 6910] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5609] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6911 [pid 6911] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6910] <... openat resumed>) = 3 [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6911] chdir("./51" [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 6911] <... chdir resumed>) = 0 [pid 6910] write(3, "1000", 4 [pid 5611] getdents64(4 [pid 6911] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6910] <... write resumed>) = 4 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6911] <... prctl resumed>) = 0 [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6911] setpgid(0, 0 [pid 6910] close(3 [pid 5611] getdents64(4 [pid 6911] <... setpgid resumed>) = 0 [pid 6910] <... close resumed>) = 0 [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6911] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6910] symlink("/dev/binderfs", "./binderfs" [pid 5611] close(4) = 0 [pid 6911] <... openat resumed>) = 3 [pid 6910] <... symlink resumed>) = 0 [pid 6911] write(3, "1000", 4 [ 143.458948][ T6909] EXT4-fs (loop3): i_reserved_data_blocks=29 [pid 5611] rmdir("./51/file1" [pid 6911] <... write resumed>) = 4 executing program [pid 6910] write(1, "executing program\n", 18 [pid 6911] close(3 [pid 6910] <... write resumed>) = 18 [pid 5611] <... rmdir resumed>) = 0 [pid 6911] <... close resumed>) = 0 [pid 6910] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] umount2("./51", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6911] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6910] <... futex resumed>) = 0 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] umount2("./51/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6911] write(1, "executing program\n", 18 [pid 5612] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6911] <... write resumed>) = 18 [pid 6910] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 5612] <... openat resumed>) = 3 executing program [pid 5611] newfstatat(AT_FDCWD, "./51/binderfs" [pid 6911] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6910] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 5612] fstat(3 [pid 6911] <... futex resumed>) = 0 [pid 6910] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5611] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6911] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6910] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6908] <... close resumed>) = 0 [pid 5612] getdents64(3 [pid 5611] unlink("./51/binderfs" [pid 6911] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6911] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6910] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5611] <... unlink resumed>) = 0 [pid 6911] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6910] <... mmap resumed>) = 0x7fef94c68000 [pid 5612] umount2("./51/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] getdents64(3 [pid 6911] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6910] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6908] mkdir("./file1", 0777 [pid 6911] <... mmap resumed>) = 0x7fef94c68000 [pid 6910] <... mprotect resumed>) = 0 [pid 6908] <... mkdir resumed>) = 0 [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6911] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6910] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6911] <... mprotect resumed>) = 0 [pid 6908] mount("/dev/loop4", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5611] close(3 [pid 6911] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5611] <... close resumed>) = 0 [pid 6911] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6910] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5611] rmdir("./51"ci2-upstream-fs/strace-static-x86_64: Process 6912 attached [pid 6910] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 5611] <... rmdir resumed>) = 0 [pid 6912] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6911] <... clone3 resumed> => {parent_tid=[6912]}, 88) = 6912 ci2-upstream-fs/strace-static-x86_64: Process 6913 attached [pid 6912] <... rseq resumed>) = 0 [pid 6911] rt_sigprocmask(SIG_SETMASK, [] [pid 6910] <... clone3 resumed> => {parent_tid=[6913]}, 88) = 6913 [pid 5611] mkdir("./52", 0777 [pid 6913] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6912] set_robust_list(0x7fef94c889a0, 24 [pid 6911] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6910] rt_sigprocmask(SIG_SETMASK, [] [pid 6913] <... rseq resumed>) = 0 [pid 6912] <... set_robust_list resumed>) = 0 [pid 6911] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6910] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5611] <... mkdir resumed>) = 0 [pid 6912] rt_sigprocmask(SIG_SETMASK, [] [pid 6911] <... futex resumed>) = 0 [pid 6910] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6912] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6911] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6910] <... futex resumed>) = 0 [pid 6912] memfd_create("syzkaller", 0 [pid 6910] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5611] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6913] set_robust_list(0x7fef94c889a0, 24 [pid 6912] <... memfd_create resumed>) = 3 [pid 5611] <... openat resumed>) = 3 [pid 6912] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fef8c868000 [pid 5611] ioctl(3, LOOP_CLR_FD [pid 6913] <... set_robust_list resumed>) = 0 [pid 5611] <... ioctl resumed>) = 0 [pid 6913] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5611] close(3 [pid 6913] memfd_create("syzkaller", 0 [pid 6912] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6913] <... memfd_create resumed>) = 3 [pid 6913] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fef8c868000 [pid 5611] <... close resumed>) = 0 [pid 6908] <... mount resumed>) = 0 [pid 5612] <... umount2 resumed>) = 0 [pid 5611] rt_sigprocmask(SIG_BLOCK, ~[] [ 143.652120][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 456 with max blocks 4 with error 28 [ 143.652151][ T12] EXT4-fs (loop3): This should not happen!! Data will be lost [ 143.652151][ T12] [ 143.659373][ T5612] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 143.693329][ T5612] EXT4-fs unmount: 195 callbacks suppressed [pid 6908] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5612] umount2("./51/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6908] chdir("./file1"ci2-upstream-fs/strace-static-x86_64: Process 6916 attached [pid 6913] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6912] <... write resumed>) = 524288 [pid 6908] <... chdir resumed>) = 0 [pid 5612] newfstatat(AT_FDCWD, "./51/file1" [pid 6916] set_robust_list(0x5555748a66e0, 24 [pid 6908] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5612] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6916] <... set_robust_list resumed>) = 0 [pid 6912] munmap(0x7fef8c868000, 138412032 [pid 6908] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5612] umount2("./51/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6916 [pid 6916] rt_sigprocmask(SIG_SETMASK, [] [pid 6908] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6908] <... futex resumed>) = 1 [pid 5612] openat(AT_FDCWD, "./51/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5611] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6916] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6916] chdir("./52" [pid 6908] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5612] <... openat resumed>) = 4 [pid 6912] <... munmap resumed>) = 0 [pid 6916] <... chdir resumed>) = 0 [pid 6916] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6907] <... futex resumed>) = 0 [pid 5612] fstat(4 [pid 6916] <... prctl resumed>) = 0 [pid 6907] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6916] setpgid(0, 0 [pid 6912] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6908] <... futex resumed>) = 0 [pid 6907] <... futex resumed>) = 1 [pid 6908] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 5612] getdents64(4 [pid 6916] <... setpgid resumed>) = 0 [pid 6916] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6916] <... openat resumed>) = 3 [pid 5612] getdents64(4 [pid 6912] <... openat resumed>) = 4 [pid 6916] write(3, "1000", 4 [pid 6907] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6916] <... write resumed>) = 4 [pid 5612] close(4 [pid 6916] close(3) = 0 [pid 5612] <... close resumed>) = 0 [pid 6916] symlink("/dev/binderfs", "./binderfs" [pid 6912] ioctl(4, LOOP_SET_FD, 3 [pid 6908] <... openat resumed>) = 4 [pid 6916] <... symlink resumed>) = 0 [pid 5612] rmdir("./51/file1" [pid 6916] write(1, "executing program\n", 18) = 18 [pid 6916] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5612] <... rmdir resumed>) = 0 executing program [pid 6908] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] umount2("./51/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6916] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60}, NULL, 8) = 0 [pid 6908] <... futex resumed>) = 1 [pid 6907] <... futex resumed>) = 0 [pid 6916] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6916] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6907] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6916] <... mmap resumed>) = 0x7fef94c68000 [pid 6912] <... ioctl resumed>) = 0 [pid 6908] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6907] <... futex resumed>) = 0 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6907] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] newfstatat(AT_FDCWD, "./51/binderfs" [pid 6916] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6916] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6916] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 5612] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6917 attached [pid 6908] <... openat resumed>) = 5 [pid 6916] <... clone3 resumed> => {parent_tid=[6917]}, 88) = 6917 [pid 6917] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6916] rt_sigprocmask(SIG_SETMASK, [] [pid 6917] <... rseq resumed>) = 0 [pid 6916] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6916] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6917] set_robust_list(0x7fef94c889a0, 24 [pid 6916] <... futex resumed>) = 0 [ 143.729859][ T6908] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 6912] close(3 [pid 6908] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] unlink("./51/binderfs" [pid 6912] <... close resumed>) = 0 [pid 6908] <... futex resumed>) = 1 [pid 6917] <... set_robust_list resumed>) = 0 [pid 6917] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6916] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6912] close(4 [pid 6908] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6907] <... futex resumed>) = 0 [pid 5612] <... unlink resumed>) = 0 [pid 6912] <... close resumed>) = 0 [pid 6917] memfd_create("syzkaller", 0 [pid 6912] mkdir("./file1", 0777 [pid 6907] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] getdents64(3, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6917] <... memfd_create resumed>) = 3 [pid 6917] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fef8c868000 [pid 6912] <... mkdir resumed>) = 0 [pid 6908] <... futex resumed>) = 0 [pid 6907] <... futex resumed>) = 1 [pid 5612] close(3) = 0 [pid 5612] rmdir("./51" [pid 6917] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6908] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 5612] <... rmdir resumed>) = 0 [pid 6907] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6912] mount("/dev/loop0", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6908] <... openat resumed>) = 6 [pid 6917] <... write resumed>) = 524288 [pid 6908] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] mkdir("./52", 0777 [pid 6917] munmap(0x7fef8c868000, 138412032 [pid 6913] <... write resumed>) = 524288 [pid 6908] <... futex resumed>) = 1 [pid 6917] <... munmap resumed>) = 0 [pid 6917] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6913] munmap(0x7fef8c868000, 138412032 [pid 6908] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6907] <... futex resumed>) = 0 [pid 6907] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6908] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6907] <... futex resumed>) = 0 [pid 6913] <... munmap resumed>) = 0 [pid 6907] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6908] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6917] <... openat resumed>) = 4 [pid 6908] <... mmap resumed>) = 0x200000000000 [pid 6917] ioctl(4, LOOP_SET_FD, 3 [pid 6908] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6907] <... futex resumed>) = 0 [pid 5612] <... mkdir resumed>) = 0 [pid 6908] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5612] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6917] <... ioctl resumed>) = 0 [pid 6913] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6912] <... mount resumed>) = 0 [pid 6907] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... openat resumed>) = 3 [pid 6917] close(3) = 0 [pid 6913] <... openat resumed>) = 4 [pid 6907] <... futex resumed>) = 1 [pid 5612] ioctl(3, LOOP_CLR_FD [pid 6917] close(4 [pid 6913] ioctl(4, LOOP_SET_FD, 3 [pid 6908] <... futex resumed>) = 0 [pid 6907] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6912] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5612] <... ioctl resumed>) = 0 [pid 6917] <... close resumed>) = 0 [pid 6913] <... ioctl resumed>) = 0 [pid 6912] <... openat resumed>) = 3 [pid 6908] sendfile(4, 5, NULL, 553647746 [pid 5612] close(3 [pid 6917] mkdir("./file1", 0777 [pid 6913] close(3 [pid 6917] <... mkdir resumed>) = 0 [pid 6913] <... close resumed>) = 0 [pid 6912] chdir("./file1" [pid 6917] mount("/dev/loop2", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6913] close(4 [pid 6912] <... chdir resumed>) = 0 [pid 6913] <... close resumed>) = 0 [pid 6912] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6913] mkdir("./file1", 0777 [pid 6912] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6913] <... mkdir resumed>) = 0 [pid 6913] mount("/dev/loop1", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6912] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6911] <... futex resumed>) = 0 [pid 6912] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6911] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6912] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6911] <... futex resumed>) = 0 [ 143.849848][ T6912] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 6912] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6911] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6912] <... openat resumed>) = 4 [pid 5612] <... close resumed>) = 0 [pid 5612] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6912] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 6923 attached [pid 6912] <... futex resumed>) = 1 [pid 6911] <... futex resumed>) = 0 [pid 6907] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6912] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6907] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6911] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6907] <... futex resumed>) = 0 [pid 6912] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6911] <... futex resumed>) = 0 [pid 6907] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6912] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6911] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6923] set_robust_list(0x5555748a66e0, 24 [pid 6912] <... openat resumed>) = 5 [pid 6907] <... mmap resumed>) = 0x7fef94c47000 [pid 5612] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6923 [pid 6923] <... set_robust_list resumed>) = 0 [pid 6923] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6917] <... mount resumed>) = 0 [pid 6913] <... mount resumed>) = 0 [pid 6912] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6907] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 5612] rt_sigprocmask(SIG_SETMASK, [] [pid 6917] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6913] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6912] <... futex resumed>) = 1 [pid 5612] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6911] <... futex resumed>) = 0 [pid 6907] <... mprotect resumed>) = 0 [pid 6911] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6923] chdir("./52" [pid 6917] <... openat resumed>) = 3 [pid 6913] <... openat resumed>) = 3 [pid 6912] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6911] <... futex resumed>) = 0 [pid 6907] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6917] chdir("./file1" [pid 6913] chdir("./file1" [pid 6912] <... openat resumed>) = 6 [pid 6911] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6907] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6923] <... chdir resumed>) = 0 [pid 6917] <... chdir resumed>) = 0 [pid 6913] <... chdir resumed>) = 0 [pid 6912] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6911] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6907] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 6925 attached [pid 6923] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6917] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6913] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6912] <... futex resumed>) = 0 [pid 6911] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6925] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6913] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6912] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6911] <... futex resumed>) = 0 [pid 6923] <... prctl resumed>) = 0 [pid 6912] <... mmap resumed>) = 0x200000000000 [pid 6923] setpgid(0, 0 [pid 6911] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6907] <... clone3 resumed> => {parent_tid=[6925]}, 88) = 6925 [pid 6925] <... rseq resumed>) = 0 [pid 6917] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6913] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6912] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6925] set_robust_list(0x7fef94c679a0, 24 [pid 6913] <... futex resumed>) = 1 [pid 6911] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6912] <... futex resumed>) = 0 [pid 6910] <... futex resumed>) = 0 [pid 6907] rt_sigprocmask(SIG_SETMASK, [] [pid 6925] <... set_robust_list resumed>) = 0 [pid 6917] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6913] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6912] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6911] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6910] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6923] <... setpgid resumed>) = 0 [pid 6907] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6925] rt_sigprocmask(SIG_SETMASK, [] [pid 6917] <... futex resumed>) = 1 [pid 6916] <... futex resumed>) = 0 [pid 6913] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6912] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6911] <... futex resumed>) = 0 [pid 6910] <... futex resumed>) = 0 [ 143.948384][ T6917] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.959084][ T6913] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 6907] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6925] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6923] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6917] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6916] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6913] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6912] sendfile(4, 5, NULL, 553647746 [pid 6911] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6910] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6916] <... futex resumed>) = 0 [pid 6907] <... futex resumed>) = 0 [pid 6923] <... openat resumed>) = 3 [pid 6916] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6923] write(3, "1000", 4) = 4 [pid 6907] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6923] close(3) = 0 [pid 6923] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6913] <... openat resumed>) = 4 [pid 6923] write(1, "executing program\n", 18) = 18 [pid 6923] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6923] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60}, NULL, 8) = 0 executing program [pid 6923] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6923] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c68000 [pid 6923] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6917] <... openat resumed>) = 4 [pid 6923] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6923] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0}ci2-upstream-fs/strace-static-x86_64: Process 6926 attached [pid 6913] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6926] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6923] <... clone3 resumed> => {parent_tid=[6926]}, 88) = 6926 [pid 6923] rt_sigprocmask(SIG_SETMASK, [] [pid 6913] <... futex resumed>) = 1 [pid 6910] <... futex resumed>) = 0 [pid 6917] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6910] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6917] <... futex resumed>) = 1 [pid 6913] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6910] <... futex resumed>) = 0 [pid 6916] <... futex resumed>) = 0 [pid 6926] <... rseq resumed>) = 0 [pid 6923] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6916] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6926] set_robust_list(0x7fef94c889a0, 24 [pid 6923] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6926] <... set_robust_list resumed>) = 0 [pid 6923] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6926] rt_sigprocmask(SIG_SETMASK, [] [pid 6910] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6926] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6926] memfd_create("syzkaller", 0 [pid 6913] <... openat resumed>) = 5 [pid 6926] <... memfd_create resumed>) = 3 [pid 6916] <... futex resumed>) = 0 [pid 6926] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 144.052330][ T6925] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 144.052899][ T6925] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 316 with error 28 [ 144.052925][ T6925] EXT4-fs (loop4): This should not happen!! Data will be lost [ 144.052925][ T6925] [ 144.052937][ T6925] EXT4-fs (loop4): Total free blocks count 0 [ 144.052949][ T6925] EXT4-fs (loop4): Free/Dirty block details [pid 6917] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6916] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6913] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6926] <... mmap resumed>) = 0x7fef8c868000 [pid 6925] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6913] <... futex resumed>) = 0 [pid 6911] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6910] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6908] <... sendfile resumed>) = 327680 [pid 6907] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6917] <... openat resumed>) = 5 [pid 6917] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6913] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6911] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6910] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6917] <... futex resumed>) = 1 [pid 6916] <... futex resumed>) = 0 [pid 6916] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6917] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6916] <... futex resumed>) = 0 [pid 6911] <... futex resumed>) = 0 [pid 6910] <... futex resumed>) = 0 [pid 6917] <... openat resumed>) = 6 [pid 6913] <... openat resumed>) = 6 [pid 6926] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6917] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6916] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6913] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6911] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6910] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6916] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6913] <... futex resumed>) = 0 [pid 6911] <... mmap resumed>) = 0x7fef94c47000 [pid 6908] +++ killed by SIGBUS +++ [pid 6917] <... futex resumed>) = 0 [pid 6916] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6913] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6911] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6910] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6926] <... write resumed>) = 524288 [pid 6925] +++ killed by SIGBUS +++ [pid 6917] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6907] +++ killed by SIGBUS +++ [pid 6926] munmap(0x7fef8c868000, 138412032) = 0 [ 144.052960][ T6925] EXT4-fs (loop4): free_blocks=20480 [ 144.052973][ T6925] EXT4-fs (loop4): dirty_blocks=320 [ 144.052984][ T6925] EXT4-fs (loop4): Block reservation details [ 144.052992][ T6925] EXT4-fs (loop4): i_reserved_data_blocks=20 [pid 6917] <... mmap resumed>) = 0x200000000000 [pid 6910] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6911] <... mprotect resumed>) = 0 [pid 6916] <... futex resumed>) = 0 [pid 6916] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6913] <... futex resumed>) = 0 [pid 6910] <... futex resumed>) = 1 [pid 6913] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6911] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6910] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6926] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6926] ioctl(4, LOOP_SET_FD, 3 [pid 6913] <... mmap resumed>) = 0x200000000000 [pid 6926] <... ioctl resumed>) = 0 [pid 6926] close(3) = 0 [pid 6926] close(4 [pid 6911] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6907, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6926] <... close resumed>) = 0 [pid 6926] mkdir("./file1", 0777 [pid 6917] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6913] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6911] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5614] umount2("./50", MNT_FORCE|UMOUNT_NOFOLLOWci2-upstream-fs/strace-static-x86_64: Process 6927 attached [pid 6926] <... mkdir resumed>) = 0 [pid 6917] <... futex resumed>) = 1 [pid 6916] <... futex resumed>) = 0 [pid 6913] <... futex resumed>) = 1 [pid 6910] <... futex resumed>) = 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6917] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6916] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6913] sendfile(4, 5, NULL, 553647746 [pid 6911] <... clone3 resumed> => {parent_tid=[6927]}, 88) = 6927 [pid 6910] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6917] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6916] <... futex resumed>) = 0 [pid 6927] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6926] mount("/dev/loop3", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6911] rt_sigprocmask(SIG_SETMASK, [] [pid 6910] <... futex resumed>) = 0 [pid 5614] <... openat resumed>) = 3 [pid 6916] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6927] <... rseq resumed>) = 0 [pid 6917] sendfile(4, 5, NULL, 553647746 [pid 6911] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6910] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6927] set_robust_list(0x7fef94c679a0, 24) = 0 [pid 6911] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] fstat(3 [pid 6927] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5614] getdents64(3 [pid 6911] <... futex resumed>) = 0 [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6911] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 144.207845][ T6927] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 144.208779][ T6927] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 404 with error 28 [ 144.208807][ T6927] EXT4-fs (loop0): This should not happen!! Data will be lost [ 144.208807][ T6927] [ 144.208821][ T6927] EXT4-fs (loop0): Total free blocks count 0 [ 144.208833][ T6927] EXT4-fs (loop0): Free/Dirty block details [pid 5614] umount2("./50/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6927] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6926] <... mount resumed>) = 0 [pid 6916] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6911] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6910] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6910] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6916] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6910] <... futex resumed>) = 0 [ 144.208846][ T6927] EXT4-fs (loop0): free_blocks=20480 [ 144.208857][ T6927] EXT4-fs (loop0): dirty_blocks=416 [ 144.208876][ T6927] EXT4-fs (loop0): Block reservation details [ 144.208886][ T6927] EXT4-fs (loop0): i_reserved_data_blocks=26 [ 144.252529][ T6926] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.269328][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 316 with max blocks 4 with error 28 [pid 6926] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6916] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6912] <... sendfile resumed>) = ? [pid 6916] <... mmap resumed>) = 0x7fef94c47000 [pid 6912] +++ killed by SIGBUS +++ [pid 6910] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6926] <... openat resumed>) = 3 [pid 6916] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6910] <... mmap resumed>) = 0x7fef94c47000 [pid 5614] <... umount2 resumed>) = 0 [pid 6927] +++ killed by SIGBUS +++ [pid 6926] chdir("./file1" [pid 6910] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6926] <... chdir resumed>) = 0 [pid 6916] <... mprotect resumed>) = 0 [pid 6910] <... mprotect resumed>) = 0 [pid 5614] umount2("./50/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6916] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6910] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6916] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6926] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6916] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6911] +++ killed by SIGBUS +++ [pid 6910] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5614] newfstatat(AT_FDCWD, "./50/file1"ci2-upstream-fs/strace-static-x86_64: Process 6930 attached [pid 6926] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6911, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5614] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6910] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 6926] <... futex resumed>) = 1 [pid 6923] <... futex resumed>) = 0 [pid 6923] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6926] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6923] <... futex resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6931 attached [pid 6923] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6910] <... clone3 resumed> => {parent_tid=[6931]}, 88) = 6931 [pid 6931] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6930] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6916] <... clone3 resumed> => {parent_tid=[6930]}, 88) = 6930 [pid 5614] umount2("./50/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6931] <... rseq resumed>) = 0 [pid 6930] <... rseq resumed>) = 0 [pid 6916] rt_sigprocmask(SIG_SETMASK, [] [pid 6910] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6931] set_robust_list(0x7fef94c679a0, 24 [pid 6930] set_robust_list(0x7fef94c679a0, 24 [pid 6926] <... openat resumed>) = 4 [pid 6916] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6910] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] <... restart_syscall resumed>) = 0 [pid 6931] <... set_robust_list resumed>) = 0 [pid 6930] <... set_robust_list resumed>) = 0 [pid 6926] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6916] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6910] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] openat(AT_FDCWD, "./50/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6931] rt_sigprocmask(SIG_SETMASK, [] [pid 6930] rt_sigprocmask(SIG_SETMASK, [] [pid 6926] <... futex resumed>) = 1 [pid 6923] <... futex resumed>) = 0 [pid 6916] <... futex resumed>) = 0 [pid 5614] <... openat resumed>) = 4 [pid 6931] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6930] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6923] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6916] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6910] <... futex resumed>) = 0 [pid 5614] fstat(4 [pid 6926] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6923] <... futex resumed>) = 0 [pid 6910] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6926] <... openat resumed>) = 5 [pid 6923] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] umount2("./51", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6926] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6923] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 144.274243][ T5614] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6926] <... futex resumed>) = 0 [pid 6923] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] getdents64(4 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6931] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6930] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [ 144.367410][ T6917] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 144.367749][ T6930] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 568 with error 28 [ 144.367773][ T6930] EXT4-fs (loop2): This should not happen!! Data will be lost [ 144.367773][ T6930] [ 144.367785][ T6930] EXT4-fs (loop2): Total free blocks count 0 [ 144.367797][ T6930] EXT4-fs (loop2): Free/Dirty block details [ 144.367808][ T6930] EXT4-fs (loop2): free_blocks=20480 [ 144.367845][ T6930] EXT4-fs (loop2): dirty_blocks=576 [ 144.367857][ T6930] EXT4-fs (loop2): Block reservation details [ 144.367867][ T6930] EXT4-fs (loop2): i_reserved_data_blocks=36 [ 144.368931][ T6931] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 144.370452][ T6931] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 468 with error 28 [pid 6926] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6923] <... futex resumed>) = 0 [pid 6917] <... sendfile resumed>) = 581632 [pid 6916] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6913] <... sendfile resumed>) = 479232 [pid 6910] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5609] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6926] <... openat resumed>) = 6 [pid 6923] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6917] +++ killed by SIGBUS +++ [pid 6913] +++ killed by SIGBUS +++ [pid 5614] getdents64(4 [pid 6931] +++ killed by SIGBUS +++ [pid 6926] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6910] +++ killed by SIGBUS +++ [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6930] +++ killed by SIGBUS +++ [pid 6923] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6916] +++ killed by SIGBUS +++ [pid 5609] <... openat resumed>) = 3 [pid 6926] <... futex resumed>) = 0 [pid 5614] close(4 [pid 5611] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6916, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5610] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6910, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 6926] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6923] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... close resumed>) = 0 [pid 5609] fstat(3 [pid 6926] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6923] <... futex resumed>) = 0 [pid 5614] rmdir("./50/file1" [pid 6926] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6923] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6926] <... mmap resumed>) = 0x200000000000 [pid 5609] getdents64(3 [pid 5614] <... rmdir resumed>) = 0 [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6926] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] umount2("./51/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5614] umount2("./50/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6926] <... futex resumed>) = 1 [pid 6923] <... futex resumed>) = 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6923] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] newfstatat(AT_FDCWD, "./50/binderfs" [pid 6926] sendfile(4, 5, NULL, 553647746 [pid 6923] <... futex resumed>) = 0 [pid 6923] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./50/binderfs") = 0 [pid 5614] getdents64(3, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5614] close(3) = 0 [pid 5610] umount2("./50", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5614] rmdir("./50" [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] umount2("./52", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5610] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5611] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5614] <... rmdir resumed>) = 0 [pid 5611] <... openat resumed>) = 3 [pid 5610] <... openat resumed>) = 3 [pid 5611] fstat(3 [pid 5610] fstat(3 [pid 5614] mkdir("./51", 0777 [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5611] getdents64(3, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5614] <... mkdir resumed>) = 0 [pid 5611] umount2("./52/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] getdents64(3, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5610] umount2("./50/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5614] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5614] ioctl(3, LOOP_CLR_FD) = 0 [ 144.370481][ T6931] EXT4-fs (loop1): This should not happen!! Data will be lost [ 144.370481][ T6931] [ 144.370494][ T6931] EXT4-fs (loop1): Total free blocks count 0 [ 144.370505][ T6931] EXT4-fs (loop1): Free/Dirty block details [ 144.370517][ T6931] EXT4-fs (loop1): free_blocks=20480 [ 144.370530][ T6931] EXT4-fs (loop1): dirty_blocks=480 [ 144.370541][ T6931] EXT4-fs (loop1): Block reservation details [ 144.370551][ T6931] EXT4-fs (loop1): i_reserved_data_blocks=30 [pid 5614] close(3) = 0 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6923] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5614] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6932 [pid 5614] rt_sigprocmask(SIG_SETMASK, []ci2-upstream-fs/strace-static-x86_64: Process 6932 attached [pid 6923] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6932] set_robust_list(0x5555748a66e0, 24 [pid 6923] <... futex resumed>) = 0 [pid 5609] <... umount2 resumed>) = 0 [pid 6932] <... set_robust_list resumed>) = 0 [pid 6923] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5609] umount2("./51/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6932] rt_sigprocmask(SIG_SETMASK, [] [pid 6923] <... mmap resumed>) = 0x7fef94c47000 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6932] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6923] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 5609] newfstatat(AT_FDCWD, "./51/file1" [pid 6932] chdir("./51" [pid 6923] <... mprotect resumed>) = 0 [pid 5609] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./51/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./51/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6923] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5609] <... openat resumed>) = 4 [pid 6923] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5609] fstat(4 [pid 6932] <... chdir resumed>) = 0 [ 144.556007][ T5609] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 144.569106][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [pid 6923] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6933 attached [pid 6932] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5611] <... umount2 resumed>) = 0 [pid 5609] getdents64(4 [pid 6933] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6932] <... prctl resumed>) = 0 [pid 6923] <... clone3 resumed> => {parent_tid=[6933]}, 88) = 6933 [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6933] <... rseq resumed>) = 0 [pid 6932] setpgid(0, 0 [pid 6923] rt_sigprocmask(SIG_SETMASK, [] [pid 5611] umount2("./52/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] getdents64(4 [pid 6933] set_robust_list(0x7fef94c679a0, 24 [pid 6932] <... setpgid resumed>) = 0 [pid 6923] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6933] <... set_robust_list resumed>) = 0 [pid 6932] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6923] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] newfstatat(AT_FDCWD, "./52/file1" [pid 5609] close(4 [pid 6933] rt_sigprocmask(SIG_SETMASK, [] [pid 6932] <... openat resumed>) = 3 [pid 6923] <... futex resumed>) = 0 [pid 5611] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5610] <... umount2 resumed>) = 0 [pid 5609] <... close resumed>) = 0 [pid 6933] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6932] write(3, "1000", 4 [ 144.610116][ T5610] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 144.615921][ T5611] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 144.630192][ T5611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.646572][ T5610] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.689579][ T6926] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 144.692732][ T6933] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 836 with error 28 [ 144.692760][ T6933] EXT4-fs (loop3): This should not happen!! Data will be lost [ 144.692760][ T6933] [ 144.692773][ T6933] EXT4-fs (loop3): Total free blocks count 0 [ 144.692785][ T6933] EXT4-fs (loop3): Free/Dirty block details [pid 6923] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] umount2("./52/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6932] <... write resumed>) = 4 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] umount2("./50/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] rmdir("./51/file1" [pid 6932] close(3 [pid 5611] openat(AT_FDCWD, "./52/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6932] <... close resumed>) = 0 [pid 5611] <... openat resumed>) = 4 [pid 5609] <... rmdir resumed>) = 0 [pid 6932] symlink("/dev/binderfs", "./binderfs" [pid 5611] fstat(4 [pid 6932] <... symlink resumed>) = 0 [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5610] newfstatat(AT_FDCWD, "./50/file1" [pid 6932] write(1, "executing program\n", 18 [pid 5611] getdents64(4 [pid 5610] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./51/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6932] <... write resumed>) = 18 [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5610] umount2("./50/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6932] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] getdents64(4 [pid 6932] <... futex resumed>) = 0 [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6932] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 5611] close(4 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6932] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 5611] <... close resumed>) = 0 [pid 5610] openat(AT_FDCWD, "./50/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5609] newfstatat(AT_FDCWD, "./51/binderfs" [pid 6932] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 5611] rmdir("./52/file1" [pid 6932] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5611] <... rmdir resumed>) = 0 [pid 5609] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6932] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5611] umount2("./52/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] unlink("./51/binderfs" [pid 6932] <... mmap resumed>) = 0x7fef94c68000 [pid 5610] <... openat resumed>) = 4 [pid 6932] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 5609] <... unlink resumed>) = 0 [pid 6932] <... mprotect resumed>) = 0 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] getdents64(3 [pid 6932] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5611] newfstatat(AT_FDCWD, "./52/binderfs" [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6932] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5611] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5610] fstat(4 [pid 5609] close(3 [pid 6932] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 5611] unlink("./52/binderfs" [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] <... close resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6934 attached [pid 5611] <... unlink resumed>) = 0 [pid 5610] getdents64(4 [pid 5609] rmdir("./51" [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5609] <... rmdir resumed>) = 0 [pid 6932] <... clone3 resumed> => {parent_tid=[6934]}, 88) = 6934 [pid 5611] getdents64(3 [pid 5610] getdents64(4 [pid 6934] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6932] rt_sigprocmask(SIG_SETMASK, [] [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6934] <... rseq resumed>) = 0 [pid 6932] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5611] close(3 [pid 5610] close(4 [pid 5609] mkdir("./52", 0777 [pid 6934] set_robust_list(0x7fef94c889a0, 24 [pid 6932] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... close resumed>) = 0 [pid 5610] <... close resumed>) = 0 [pid 5609] <... mkdir resumed>) = 0 [pid 5611] rmdir("./52" [pid 6934] <... set_robust_list resumed>) = 0 [pid 6932] <... futex resumed>) = 0 [pid 6934] rt_sigprocmask(SIG_SETMASK, [] [pid 6932] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5611] <... rmdir resumed>) = 0 [pid 5610] rmdir("./50/file1" [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6934] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6934] memfd_create("syzkaller", 0 [pid 5610] <... rmdir resumed>) = 0 [pid 5609] <... openat resumed>) = 3 [pid 6934] <... memfd_create resumed>) = 3 [pid 6934] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5611] mkdir("./53", 0777 [pid 5610] umount2("./50/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] ioctl(3, LOOP_CLR_FD [pid 6934] <... mmap resumed>) = 0x7fef8c868000 [pid 6923] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5611] <... mkdir resumed>) = 0 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] <... ioctl resumed>) = 0 [pid 5609] close(3 [pid 5611] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5610] newfstatat(AT_FDCWD, "./50/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] <... openat resumed>) = 3 [pid 5610] unlink("./50/binderfs" [pid 6933] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 5611] ioctl(3, LOOP_CLR_FD [pid 5610] <... unlink resumed>) = 0 [pid 5611] <... ioctl resumed>) = 0 [pid 5610] getdents64(3 [pid 5611] close(3 [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 executing program [pid 6934] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5610] close(3) = 0 [pid 6933] +++ killed by SIGBUS +++ [pid 5610] rmdir("./50" [pid 6926] <... sendfile resumed>) = ? [pid 5610] <... rmdir resumed>) = 0 [pid 5610] mkdir("./51", 0777 [pid 5609] <... close resumed>) = 0 [pid 6934] <... write resumed>) = 524288 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6926] +++ killed by SIGBUS +++ [pid 6923] +++ killed by SIGBUS +++ [pid 5612] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6923, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5612] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 6934] munmap(0x7fef8c868000, 138412032 [pid 5609] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5611] <... close resumed>) = 0 [pid 6934] <... munmap resumed>) = 0 [pid 5611] rt_sigprocmask(SIG_BLOCK, ~[] [ 144.692796][ T6933] EXT4-fs (loop3): free_blocks=20480 [ 144.692809][ T6933] EXT4-fs (loop3): dirty_blocks=848 [ 144.692820][ T6933] EXT4-fs (loop3): Block reservation details [ 144.692830][ T6933] EXT4-fs (loop3): i_reserved_data_blocks=53 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5611] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5610] <... mkdir resumed>) = 0 [pid 5611] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6934] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5610] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6934] <... openat resumed>) = 4 [pid 5610] <... openat resumed>) = 3 [pid 5609] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6935 [pid 6934] ioctl(4, LOOP_SET_FD, 3ci2-upstream-fs/strace-static-x86_64: Process 6936 attached ci2-upstream-fs/strace-static-x86_64: Process 6935 attached [pid 5611] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6936 [pid 6935] set_robust_list(0x5555748a66e0, 24 [pid 5611] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] <... restart_syscall resumed>) = 0 [pid 6935] <... set_robust_list resumed>) = 0 [pid 6934] <... ioctl resumed>) = 0 [pid 5611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] ioctl(3, LOOP_CLR_FD [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6935] rt_sigprocmask(SIG_SETMASK, [] [pid 6934] close(3 [pid 5610] <... ioctl resumed>) = 0 [pid 6935] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6934] <... close resumed>) = 0 [pid 5610] close(3 [pid 6935] chdir("./52" [pid 6934] close(4 [pid 5612] umount2("./52", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6936] set_robust_list(0x5555748a66e0, 24 [pid 6935] <... chdir resumed>) = 0 [pid 6936] <... set_robust_list resumed>) = 0 [pid 6934] <... close resumed>) = 0 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6936] rt_sigprocmask(SIG_SETMASK, [] [pid 6935] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6934] mkdir("./file1", 0777 [pid 6936] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5612] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6936] chdir("./53" [pid 6935] <... prctl resumed>) = 0 [pid 6934] <... mkdir resumed>) = 0 [pid 5612] <... openat resumed>) = 3 [pid 6936] <... chdir resumed>) = 0 [pid 6935] setpgid(0, 0 [pid 6934] mount("/dev/loop4", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5610] <... close resumed>) = 0 [pid 6936] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6935] <... setpgid resumed>) = 0 [pid 5612] fstat(3 [pid 6936] <... prctl resumed>) = 0 [pid 6935] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5610] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6936] setpgid(0, 0 [pid 6935] <... openat resumed>) = 3 [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5610] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6936] <... setpgid resumed>) = 0 [pid 6935] write(3, "1000", 4 [pid 6936] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6935] <... write resumed>) = 4 [pid 5612] getdents64(3 [pid 5610] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6936] <... openat resumed>) = 3 [pid 6935] close(3 [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6935] <... close resumed>) = 0 [pid 5612] umount2("./52/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6936] write(3, "1000", 4 [pid 6935] symlink("/dev/binderfs", "./binderfs"ci2-upstream-fs/strace-static-x86_64: Process 6939 attached [pid 6936] <... write resumed>) = 4 [pid 6935] <... symlink resumed>) = 0 [pid 6939] set_robust_list(0x5555748a66e0, 24 [pid 6936] close(3 [pid 6935] write(1, "executing program\n", 18 [pid 5610] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6939 executing program [pid 6936] <... close resumed>) = 0 [pid 6935] <... write resumed>) = 18 [pid 5610] rt_sigprocmask(SIG_SETMASK, [] [pid 6934] <... mount resumed>) = 0 [pid 6939] <... set_robust_list resumed>) = 0 [pid 6936] symlink("/dev/binderfs", "./binderfs" [pid 6935] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6939] rt_sigprocmask(SIG_SETMASK, [] [pid 6936] <... symlink resumed>) = 0 [pid 6935] <... futex resumed>) = 0 [pid 6939] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6939] chdir("./51" [pid 6935] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6934] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6936] write(1, "executing program\n", 18 [pid 6935] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6934] <... openat resumed>) = 3 [pid 6939] <... chdir resumed>) = 0 executing program [pid 6939] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6936] <... write resumed>) = 18 [pid 6935] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6934] chdir("./file1" [pid 6939] <... prctl resumed>) = 0 [pid 6936] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6935] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6934] <... chdir resumed>) = 0 [pid 6939] setpgid(0, 0 [pid 6936] <... futex resumed>) = 0 [pid 6935] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c68000 [pid 6939] <... setpgid resumed>) = 0 [pid 6939] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6936] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6935] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6936] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6935] <... mprotect resumed>) = 0 [pid 6936] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6935] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6934] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6936] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6939] <... openat resumed>) = 3 [pid 6936] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c68000 [pid 6935] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6934] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6936] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6939] write(3, "1000", 4 [pid 6936] <... mprotect resumed>) = 0 [pid 6935] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6934] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6932] <... futex resumed>) = 0 [pid 6934] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6932] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6939] <... write resumed>) = 4 [pid 6934] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6932] <... futex resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6940 attached [pid 6939] close(3 [pid 6936] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6935] <... clone3 resumed> => {parent_tid=[6940]}, 88) = 6940 [pid 6934] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6932] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6940] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6939] <... close resumed>) = 0 [pid 6936] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6935] rt_sigprocmask(SIG_SETMASK, [] [pid 6934] <... openat resumed>) = 4 [pid 6940] <... rseq resumed>) = 0 [pid 6939] symlink("/dev/binderfs", "./binderfs" [pid 6936] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6935] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6936] <... clone3 resumed> => {parent_tid=[6941]}, 88) = 6941 [pid 6939] <... symlink resumed>) = 0 [pid 6936] rt_sigprocmask(SIG_SETMASK, []ci2-upstream-fs/strace-static-x86_64: Process 6941 attached [pid 6940] set_robust_list(0x7fef94c889a0, 24 [pid 6935] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6936] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6936] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6936] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6935] <... futex resumed>) = 0 [pid 6940] <... set_robust_list resumed>) = 0 executing program [pid 6941] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6940] rt_sigprocmask(SIG_SETMASK, [] [pid 6939] write(1, "executing program\n", 18 [pid 6935] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6934] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6941] <... rseq resumed>) = 0 [pid 6940] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6939] <... write resumed>) = 18 [pid 6934] <... futex resumed>) = 1 [pid 6941] set_robust_list(0x7fef94c889a0, 24 [pid 6932] <... futex resumed>) = 0 [ 144.872251][ T6934] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 6941] <... set_robust_list resumed>) = 0 [pid 6940] memfd_create("syzkaller", 0 [pid 6939] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6934] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6932] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6941] rt_sigprocmask(SIG_SETMASK, [] [pid 6934] <... openat resumed>) = 5 [pid 6941] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6932] <... futex resumed>) = 0 [pid 6939] <... futex resumed>) = 0 [pid 6941] memfd_create("syzkaller", 0 [pid 6932] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6941] <... memfd_create resumed>) = 3 [pid 6941] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fef8c868000 [pid 6939] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6941] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6940] <... memfd_create resumed>) = 3 [pid 6939] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6934] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6940] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6934] <... futex resumed>) = 1 [pid 6939] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6940] <... mmap resumed>) = 0x7fef8c868000 [pid 6939] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6934] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6939] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c68000 [pid 6939] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6932] <... futex resumed>) = 0 [pid 5612] <... umount2 resumed>) = 0 [pid 6939] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6932] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] umount2("./52/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6939] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6939] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6934] <... futex resumed>) = 0 [pid 6932] <... futex resumed>) = 1 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6940] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6934] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6932] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] newfstatat(AT_FDCWD, "./52/file1" [pid 6939] <... clone3 resumed> => {parent_tid=[6942]}, 88) = 6942 [pid 6939] rt_sigprocmask(SIG_SETMASK, [] [pid 6934] <... openat resumed>) = 6 [pid 5612] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 144.927158][ T5612] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 144.938685][ T5612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [pid 6939] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6934] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] umount2("./52/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6939] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6939] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-upstream-fs/strace-static-x86_64: Process 6942 attached [pid 5612] openat(AT_FDCWD, "./52/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6942] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6934] <... futex resumed>) = 1 [pid 6932] <... futex resumed>) = 0 [pid 5612] <... openat resumed>) = 4 [pid 6942] <... rseq resumed>) = 0 [pid 6934] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6932] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] fstat(4 [pid 6942] set_robust_list(0x7fef94c889a0, 24 [pid 6941] <... write resumed>) = 524288 [pid 6940] <... write resumed>) = 524288 [pid 6934] <... mmap resumed>) = 0x200000000000 [pid 6932] <... futex resumed>) = 0 [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6942] <... set_robust_list resumed>) = 0 [pid 6941] munmap(0x7fef8c868000, 138412032 [pid 6940] munmap(0x7fef8c868000, 138412032 [pid 6934] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6932] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] getdents64(4 [pid 6942] rt_sigprocmask(SIG_SETMASK, [] [pid 6941] <... munmap resumed>) = 0 [pid 6934] <... futex resumed>) = 0 [pid 6932] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6942] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6940] <... munmap resumed>) = 0 [pid 6934] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6932] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] getdents64(4 [pid 6942] memfd_create("syzkaller", 0 [pid 6934] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6932] <... futex resumed>) = 0 [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6942] <... memfd_create resumed>) = 3 [pid 6934] sendfile(4, 5, NULL, 553647746 [pid 6932] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] close(4 [pid 6942] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6941] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6940] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6942] <... mmap resumed>) = 0x7fef8c868000 [pid 5612] <... close resumed>) = 0 [pid 6941] <... openat resumed>) = 4 [pid 6940] <... openat resumed>) = 4 [pid 5612] rmdir("./52/file1") = 0 [pid 6941] ioctl(4, LOOP_SET_FD, 3 [pid 6940] ioctl(4, LOOP_SET_FD, 3 [pid 6942] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6941] <... ioctl resumed>) = 0 [pid 6940] <... ioctl resumed>) = 0 [pid 5612] umount2("./52/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6941] close(3 [pid 6940] close(3 [pid 6941] <... close resumed>) = 0 [pid 6940] <... close resumed>) = 0 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6940] close(4 [pid 5612] newfstatat(AT_FDCWD, "./52/binderfs" [pid 6941] close(4 [pid 6940] <... close resumed>) = 0 [pid 5612] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6941] <... close resumed>) = 0 [pid 6940] mkdir("./file1", 0777 [pid 5612] unlink("./52/binderfs" [pid 6940] <... mkdir resumed>) = 0 [pid 6941] mkdir("./file1", 0777 [pid 5612] <... unlink resumed>) = 0 [pid 5612] getdents64(3 [pid 6941] <... mkdir resumed>) = 0 [pid 6940] mount("/dev/loop0", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5612] close(3 [pid 6941] mount("/dev/loop2", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5612] <... close resumed>) = 0 [pid 5612] rmdir("./52" [pid 6942] <... write resumed>) = 524288 [pid 5612] <... rmdir resumed>) = 0 [pid 6932] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6932] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] mkdir("./53", 0777 [pid 6932] <... futex resumed>) = 0 [pid 5612] <... mkdir resumed>) = 0 [pid 6942] munmap(0x7fef8c868000, 138412032 [pid 6932] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6942] <... munmap resumed>) = 0 [pid 6932] <... mmap resumed>) = 0x7fef94c47000 [pid 6932] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 5612] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6932] <... mprotect resumed>) = 0 [pid 5612] <... openat resumed>) = 3 [pid 6942] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6932] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5612] ioctl(3, LOOP_CLR_FD [pid 6942] <... openat resumed>) = 4 [pid 6940] <... mount resumed>) = 0 [pid 6942] ioctl(4, LOOP_SET_FD, 3 [pid 6940] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6932] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5612] <... ioctl resumed>) = 0 [pid 6940] <... openat resumed>) = 3 [pid 6932] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6940] chdir("./file1" [pid 5612] close(3 [pid 6940] <... chdir resumed>) = 0 [pid 6940] openat(AT_FDCWD, "/dev/loop0", O_RDWRci2-upstream-fs/strace-static-x86_64: Process 6947 attached [pid 6932] <... clone3 resumed> => {parent_tid=[6947]}, 88) = 6947 [pid 6932] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6932] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6932] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6947] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6942] <... ioctl resumed>) = 0 [pid 6947] <... rseq resumed>) = 0 [pid 6942] close(3 [pid 6947] set_robust_list(0x7fef94c679a0, 24 [pid 6942] <... close resumed>) = 0 [pid 6947] <... set_robust_list resumed>) = 0 [pid 6942] close(4 [pid 6947] rt_sigprocmask(SIG_SETMASK, [] [pid 6942] <... close resumed>) = 0 [pid 6947] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6942] mkdir("./file1", 0777) = 0 [pid 6940] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6942] mount("/dev/loop1", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6940] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6935] <... futex resumed>) = 0 [pid 6935] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6940] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [ 145.092875][ T6940] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.112335][ T6941] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.127299][ T6947] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [pid 6935] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6941] <... mount resumed>) = 0 [pid 6941] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6941] chdir("./file1" [pid 6932] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6941] <... chdir resumed>) = 0 [pid 6941] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5612] <... close resumed>) = 0 [pid 6941] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6941] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6941] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6936] <... futex resumed>) = 0 [pid 6936] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6941] <... futex resumed>) = 0 [pid 6936] <... futex resumed>) = 1 [pid 6941] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6936] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6947] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6934] <... sendfile resumed>) = 356352 [pid 5612] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6940] <... openat resumed>) = 4 [pid 6941] <... openat resumed>) = 4 [pid 6934] +++ killed by SIGBUS +++ [ 145.130252][ T6947] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 344 with error 28 [ 145.130282][ T6947] EXT4-fs (loop4): This should not happen!! Data will be lost [ 145.130282][ T6947] [ 145.130295][ T6947] EXT4-fs (loop4): Total free blocks count 0 [ 145.130308][ T6947] EXT4-fs (loop4): Free/Dirty block details [ 145.130320][ T6947] EXT4-fs (loop4): free_blocks=20480 [ 145.130334][ T6947] EXT4-fs (loop4): dirty_blocks=352 [ 145.130346][ T6947] EXT4-fs (loop4): Block reservation details ci2-upstream-fs/strace-static-x86_64: Process 6950 attached [pid 6941] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6935] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6941] <... futex resumed>) = 1 [pid 6936] <... futex resumed>) = 0 [pid 6935] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6950 [pid 6941] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6936] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6935] <... futex resumed>) = 0 [pid 5612] rt_sigprocmask(SIG_SETMASK, [] [pid 6950] set_robust_list(0x5555748a66e0, 24 [pid 6947] +++ killed by SIGBUS +++ [pid 6941] <... openat resumed>) = 5 [pid 6940] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6936] <... futex resumed>) = 0 [pid 6935] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6932] +++ killed by SIGBUS +++ [pid 5612] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6950] <... set_robust_list resumed>) = 0 [pid 6942] <... mount resumed>) = 0 [pid 6941] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6940] <... futex resumed>) = 0 [pid 6936] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6935] <... mmap resumed>) = 0x7fef94c47000 [pid 6950] rt_sigprocmask(SIG_SETMASK, [] [pid 6942] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6941] <... futex resumed>) = 0 [pid 6940] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6936] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6935] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6932, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6950] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6942] <... openat resumed>) = 3 [pid 6941] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6936] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6935] <... mprotect resumed>) = 0 [pid 5614] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 6950] chdir("./53" [pid 6942] chdir("./file1" [pid 6941] <... openat resumed>) = 6 [pid 6936] <... futex resumed>) = 0 [pid 6935] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5614] <... restart_syscall resumed>) = 0 [pid 6950] <... chdir resumed>) = 0 [pid 6942] <... chdir resumed>) = 0 [pid 6941] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6936] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6950] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6935] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6950] <... prctl resumed>) = 0 [pid 6942] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6941] <... futex resumed>) = 0 [pid 6936] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6935] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6950] setpgid(0, 0 [pid 6942] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6941] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6942] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] umount2("./51", MNT_FORCE|UMOUNT_NOFOLLOWci2-upstream-fs/strace-static-x86_64: Process 6951 attached [pid 6950] <... setpgid resumed>) = 0 [pid 6942] <... futex resumed>) = 1 [pid 6941] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6939] <... futex resumed>) = 0 [pid 6936] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6951] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6950] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6942] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6941] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6939] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6936] <... futex resumed>) = 0 [pid 6935] <... clone3 resumed> => {parent_tid=[6951]}, 88) = 6951 [pid 5614] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6951] <... rseq resumed>) = 0 [pid 6942] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6939] <... futex resumed>) = 0 [pid 6951] set_robust_list(0x7fef94c679a0, 24 [pid 6942] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6941] <... mmap resumed>) = 0x200000000000 [pid 6939] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6936] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6951] <... set_robust_list resumed>) = 0 [pid 6950] <... openat resumed>) = 3 [pid 6935] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] <... openat resumed>) = 3 [pid 6951] rt_sigprocmask(SIG_SETMASK, [] [pid 6941] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6935] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6941] <... futex resumed>) = 1 [pid 6936] <... futex resumed>) = 0 [pid 6935] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6951] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6942] <... openat resumed>) = 4 [pid 6941] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6936] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6935] <... futex resumed>) = 0 [pid 5614] fstat(3 [pid 6951] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6942] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6951] <... openat resumed>) = 5 [pid 6950] write(3, "1000", 4 [pid 6942] <... futex resumed>) = 1 [pid 6941] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6939] <... futex resumed>) = 0 [pid 6936] <... futex resumed>) = 0 [pid 6935] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] getdents64(3 [pid 6951] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6950] <... write resumed>) = 4 [pid 6942] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6941] sendfile(4, 5, NULL, 553647746 [pid 6939] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6936] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6935] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6951] <... futex resumed>) = 0 [pid 6942] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6939] <... futex resumed>) = 0 [pid 5614] umount2("./51/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6935] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6951] futex(0x7fef94d63e58, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6950] close(3 [pid 6942] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6939] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6942] <... openat resumed>) = 5 [pid 6942] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6950] <... close resumed>) = 0 [pid 6940] <... futex resumed>) = 0 [pid 6935] <... futex resumed>) = 1 [pid 6950] symlink("/dev/binderfs", "./binderfs" [pid 6940] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6935] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6950] <... symlink resumed>) = 0 [pid 6942] <... futex resumed>) = 1 [pid 6940] <... openat resumed>) = 6 [ 145.130357][ T6947] EXT4-fs (loop4): i_reserved_data_blocks=22 [ 145.215870][ T6942] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 6939] <... futex resumed>) = 0 [pid 6950] write(1, "executing program\n", 18 [pid 6942] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6940] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 executing program [pid 6939] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6942] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6939] <... futex resumed>) = 0 [pid 6950] <... write resumed>) = 18 [pid 6940] <... futex resumed>) = 1 [pid 6935] <... futex resumed>) = 0 [pid 6950] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6942] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6940] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6939] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6950] <... futex resumed>) = 0 [pid 6935] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6950] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6940] <... futex resumed>) = 0 [pid 6935] <... futex resumed>) = 1 [pid 6950] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6942] <... openat resumed>) = 6 [pid 6940] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6950] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6942] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6940] <... mmap resumed>) = 0x200000000000 [pid 6935] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6950] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6950] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c68000 [pid 6950] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6942] <... futex resumed>) = 1 [pid 6940] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6939] <... futex resumed>) = 0 [pid 6950] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6942] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6940] <... futex resumed>) = 1 [pid 6939] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6935] <... futex resumed>) = 0 [pid 6950] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6940] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6939] <... futex resumed>) = 0 [pid 6935] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6939] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6942] <... mmap resumed>) = 0x200000000000 [pid 6950] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6942] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6940] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6935] <... futex resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6952 attached [pid 6940] sendfile(4, 5, NULL, 553647746 [pid 6935] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6952] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6942] <... futex resumed>) = 1 [pid 6939] <... futex resumed>) = 0 [pid 6950] <... clone3 resumed> => {parent_tid=[6952]}, 88) = 6952 [pid 6952] <... rseq resumed>) = 0 [pid 6950] rt_sigprocmask(SIG_SETMASK, [] [pid 6942] sendfile(4, 5, NULL, 553647746 [pid 6939] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6952] set_robust_list(0x7fef94c889a0, 24 [pid 6950] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6939] <... futex resumed>) = 0 [pid 6939] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6950] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6952] <... set_robust_list resumed>) = 0 [pid 6950] <... futex resumed>) = 0 [pid 6952] rt_sigprocmask(SIG_SETMASK, [] [pid 6936] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6950] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6952] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6936] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6952] memfd_create("syzkaller", 0 [pid 6936] <... futex resumed>) = 0 [pid 6936] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c47000 [pid 6952] <... memfd_create resumed>) = 3 [pid 6936] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6952] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6936] <... mprotect resumed>) = 0 [pid 6952] <... mmap resumed>) = 0x7fef8c868000 [pid 6936] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6936] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 6953 attached => {parent_tid=[6953]}, 88) = 6953 [pid 6935] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6935] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6953] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6951] <... futex resumed>) = 0 [pid 6935] <... futex resumed>) = 1 [pid 6936] rt_sigprocmask(SIG_SETMASK, [] [ 145.304347][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 344 with max blocks 4 with error 28 [ 145.325002][ T5614] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6935] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6953] <... rseq resumed>) = 0 [pid 6939] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6936] <... rt_sigprocmask resumed>, NULL, 8) = 0 [ 145.358518][ T6951] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 145.362951][ T6951] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 60 with error 28 [ 145.362981][ T6951] EXT4-fs (loop0): This should not happen!! Data will be lost [ 145.362981][ T6951] [ 145.362995][ T6951] EXT4-fs (loop0): Total free blocks count 0 [ 145.363006][ T6951] EXT4-fs (loop0): Free/Dirty block details [pid 6952] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6951] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6940] <... sendfile resumed>) = 61440 [pid 6939] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6935] <... futex resumed>) = ? [pid 5614] <... umount2 resumed>) = 0 [pid 6939] <... futex resumed>) = 0 [pid 5614] umount2("./51/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6953] set_robust_list(0x7fef94c679a0, 24 [pid 6939] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6936] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6953] <... set_robust_list resumed>) = 0 [pid 6951] +++ killed by SIGBUS +++ [pid 6940] +++ killed by SIGBUS +++ [pid 6939] <... mmap resumed>) = 0x7fef94c47000 [pid 6936] <... futex resumed>) = 0 [pid 5614] newfstatat(AT_FDCWD, "./51/file1" [pid 6953] rt_sigprocmask(SIG_SETMASK, [] [pid 6939] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6936] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6953] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6939] <... mprotect resumed>) = 0 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6952] <... write resumed>) = 524288 [pid 6939] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6935] +++ killed by SIGBUS +++ [pid 5614] umount2("./51/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6935, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6939] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6939] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 145.363018][ T6951] EXT4-fs (loop0): free_blocks=20480 [ 145.363031][ T6951] EXT4-fs (loop0): dirty_blocks=64 [ 145.363042][ T6951] EXT4-fs (loop0): Block reservation details [ 145.363053][ T6951] EXT4-fs (loop0): i_reserved_data_blocks=4 [pid 5609] umount2("./52", MNT_FORCE|UMOUNT_NOFOLLOWci2-upstream-fs/strace-static-x86_64: Process 6954 attached [pid 6952] munmap(0x7fef8c868000, 138412032 [ 145.455453][ T6953] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 145.459490][ T6953] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 612 with error 28 [ 145.459518][ T6953] EXT4-fs (loop2): This should not happen!! Data will be lost [ 145.459518][ T6953] [ 145.459531][ T6953] EXT4-fs (loop2): Total free blocks count 0 [ 145.459542][ T6953] EXT4-fs (loop2): Free/Dirty block details [pid 5614] openat(AT_FDCWD, "./51/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6954] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6953] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6941] <... sendfile resumed>) = 630784 [pid 6936] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5614] <... openat resumed>) = 4 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6952] <... munmap resumed>) = 0 [pid 6939] <... clone3 resumed> => {parent_tid=[6954]}, 88) = 6954 [pid 5614] fstat(4 [pid 6939] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6954] <... rseq resumed>) = 0 [pid 6952] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6939] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] getdents64(4 [pid 6954] set_robust_list(0x7fef94c679a0, 24 [pid 5609] <... openat resumed>) = 3 [pid 6939] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6952] <... openat resumed>) = 4 [pid 6939] <... futex resumed>) = 0 [pid 5614] getdents64(4 [pid 5609] fstat(3 [pid 6954] <... set_robust_list resumed>) = 0 [pid 6952] ioctl(4, LOOP_SET_FD, 3 [pid 6939] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] getdents64(3 [pid 6941] +++ killed by SIGBUS +++ [pid 6954] rt_sigprocmask(SIG_SETMASK, [] [pid 6952] <... ioctl resumed>) = 0 [pid 5614] close(4 [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6954] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] <... close resumed>) = 0 [pid 6953] +++ killed by SIGBUS +++ [pid 6952] close(3 [pid 6936] +++ killed by SIGBUS +++ [ 145.459554][ T6953] EXT4-fs (loop2): free_blocks=20480 [ 145.459566][ T6953] EXT4-fs (loop2): dirty_blocks=624 [ 145.459576][ T6953] EXT4-fs (loop2): Block reservation details [ 145.459586][ T6953] EXT4-fs (loop2): i_reserved_data_blocks=39 [pid 5614] rmdir("./51/file1" [pid 5609] umount2("./52/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6952] <... close resumed>) = 0 [pid 5614] <... rmdir resumed>) = 0 [pid 6952] close(4 [pid 5611] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6936, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6952] <... close resumed>) = 0 [pid 5614] umount2("./51/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] umount2("./53", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6952] mkdir("./file1", 0777 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6952] <... mkdir resumed>) = 0 [pid 5614] newfstatat(AT_FDCWD, "./51/binderfs" [pid 5611] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6952] mount("/dev/loop3", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5614] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] <... openat resumed>) = 3 [pid 5611] fstat(3 [pid 6939] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5614] unlink("./51/binderfs" [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5614] <... unlink resumed>) = 0 [pid 5611] getdents64(3, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5614] getdents64(3 [pid 5611] umount2("./53/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5614] close(3) = 0 [pid 5614] rmdir("./51") = 0 [pid 5614] mkdir("./52", 0777) = 0 [pid 5614] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5614] ioctl(3, LOOP_CLR_FD) = 0 [ 145.555137][ T6942] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 145.558885][ T6954] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1240 with error 28 [ 145.558916][ T6954] EXT4-fs (loop1): This should not happen!! Data will be lost [ 145.558916][ T6954] [ 145.558930][ T6954] EXT4-fs (loop1): Total free blocks count 0 [ 145.558943][ T6954] EXT4-fs (loop1): Free/Dirty block details [pid 5614] close(3) = 0 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 145.558955][ T6954] EXT4-fs (loop1): free_blocks=20480 [ 145.558969][ T6954] EXT4-fs (loop1): dirty_blocks=1248 [ 145.558981][ T6954] EXT4-fs (loop1): Block reservation details [ 145.558991][ T6954] EXT4-fs (loop1): i_reserved_data_blocks=78 [ 145.635824][ T13] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 612 with max blocks 4 with error 28 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 6957 attached , child_tidptr=0x5555748a66d0) = 6957 [pid 6957] set_robust_list(0x5555748a66e0, 24 [pid 5614] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6957] <... set_robust_list resumed>) = 0 [pid 6957] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6957] chdir("./52") = 0 [pid 6957] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6957] setpgid(0, 0) = 0 [pid 6957] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6957] write(3, "1000", 4) = 4 [pid 6957] close(3) = 0 [ 145.646224][ T5611] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 145.650342][ T5609] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6957] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6957] write(1, "executing program\n", 18) = 18 executing program [pid 6957] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6954] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6957] <... futex resumed>) = 0 [pid 6957] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6942] <... sendfile resumed>) = 1269760 [pid 6957] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6957] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6942] +++ killed by SIGBUS +++ [pid 6957] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c68000 [pid 6957] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6957] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6954] +++ killed by SIGBUS +++ [pid 6939] +++ killed by SIGBUS +++ [pid 5609] <... umount2 resumed>) = 0 [pid 6957] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6952] <... mount resumed>) = 0 [pid 5610] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6939, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5609] umount2("./52/file1", MNT_FORCE|UMOUNT_NOFOLLOWci2-upstream-fs/strace-static-x86_64: Process 6958 attached ) = -1 EINVAL (Invalid argument) [pid 6958] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6957] <... clone3 resumed> => {parent_tid=[6958]}, 88) = 6958 [ 145.706270][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [pid 5609] newfstatat(AT_FDCWD, "./52/file1" [pid 6958] <... rseq resumed>) = 0 [pid 6957] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] umount2("./51", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6958] set_robust_list(0x7fef94c889a0, 24 [pid 6957] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6952] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5611] <... umount2 resumed>) = 0 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] umount2("./52/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6958] <... set_robust_list resumed>) = 0 [pid 6957] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6952] <... openat resumed>) = 3 [pid 5611] umount2("./53/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6958] rt_sigprocmask(SIG_SETMASK, [] [pid 6957] <... futex resumed>) = 0 [pid 6952] chdir("./file1" [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] <... openat resumed>) = 3 [pid 5609] openat(AT_FDCWD, "./52/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6958] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6957] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6952] <... chdir resumed>) = 0 [pid 5611] newfstatat(AT_FDCWD, "./53/file1" [pid 5610] fstat(3 [pid 5609] <... openat resumed>) = 4 [pid 6958] memfd_create("syzkaller", 0 [pid 6952] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] fstat(4 [pid 5611] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6958] <... memfd_create resumed>) = 3 [pid 6952] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5611] umount2("./53/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] getdents64(3 [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6958] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6952] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5609] getdents64(4 [pid 6958] <... mmap resumed>) = 0x7fef8c868000 [pid 5611] openat(AT_FDCWD, "./53/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5611] <... openat resumed>) = 4 [pid 6958] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6952] <... futex resumed>) = 1 [pid 6950] <... futex resumed>) = 0 [pid 5611] fstat(4 [pid 5610] umount2("./51/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] getdents64(4 [pid 6952] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6950] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6952] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6950] <... futex resumed>) = 0 [pid 5611] getdents64(4 [pid 5609] close(4 [pid 6952] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [ 145.750591][ T6952] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 6950] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5609] <... close resumed>) = 0 [pid 5609] rmdir("./52/file1" [pid 5611] getdents64(4, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5609] <... rmdir resumed>) = 0 [pid 5611] close(4) = 0 [pid 5611] rmdir("./53/file1" [pid 6952] <... openat resumed>) = 4 [pid 5609] umount2("./52/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6952] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6952] <... futex resumed>) = 1 [pid 6950] <... futex resumed>) = 0 [pid 5609] newfstatat(AT_FDCWD, "./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6950] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] unlink("./52/binderfs" [pid 6952] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6950] <... futex resumed>) = 0 [pid 6952] <... openat resumed>) = 5 [pid 6950] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6952] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6950] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5609] <... unlink resumed>) = 0 [pid 6958] <... write resumed>) = 524288 [pid 6952] <... futex resumed>) = 0 [pid 6950] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6958] munmap(0x7fef8c868000, 138412032 [pid 6952] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6950] <... futex resumed>) = 0 [pid 6952] <... openat resumed>) = 6 [pid 6950] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6952] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6950] <... futex resumed>) = 0 [pid 6952] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6950] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] getdents64(3 [pid 6950] <... futex resumed>) = 0 [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6958] <... munmap resumed>) = 0 [pid 6952] <... mmap resumed>) = 0x200000000000 [pid 6958] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6950] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] close(3 [pid 6958] <... openat resumed>) = 4 [pid 5609] <... close resumed>) = 0 [pid 6958] ioctl(4, LOOP_SET_FD, 3 [pid 5609] rmdir("./52" [pid 5611] <... rmdir resumed>) = 0 [pid 5609] <... rmdir resumed>) = 0 [pid 6952] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6958] <... ioctl resumed>) = 0 [pid 6952] <... futex resumed>) = 1 [pid 6950] <... futex resumed>) = 0 [pid 5611] umount2("./53/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] mkdir("./53", 0777 [pid 6950] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... mkdir resumed>) = 0 [pid 6958] close(3 [pid 6952] sendfile(4, 5, NULL, 553647746 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6958] <... close resumed>) = 0 [pid 6950] <... futex resumed>) = 0 [pid 6958] close(4 [pid 6950] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] newfstatat(AT_FDCWD, "./53/binderfs" [pid 6958] <... close resumed>) = 0 [pid 5611] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6958] mkdir("./file1", 0777 [pid 5611] unlink("./53/binderfs" [pid 5609] <... openat resumed>) = 3 [pid 6958] <... mkdir resumed>) = 0 [pid 5611] <... unlink resumed>) = 0 [pid 5609] ioctl(3, LOOP_CLR_FD) = 0 [pid 5611] getdents64(3 [pid 5609] close(3 [pid 6958] mount("/dev/loop4", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5611] close(3) = 0 [pid 5611] rmdir("./53") = 0 [ 145.823876][ T5610] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 5611] mkdir("./54", 0777 [pid 5609] <... close resumed>) = 0 [pid 5611] <... mkdir resumed>) = 0 [pid 5611] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 6950] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6950] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] ioctl(3, LOOP_CLR_FD [pid 6950] <... futex resumed>) = 0 [pid 5611] <... ioctl resumed>) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6950] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5609] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6950] <... mmap resumed>) = 0x7fef94c47000 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6950] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 5611] close(3 [pid 6950] <... mprotect resumed>) = 0 [pid 6950] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5609] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6961 [pid 6950] <... rt_sigprocmask resumed>, [], 8) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6961 attached [pid 6950] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5609] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6950] <... clone3 resumed> => {parent_tid=[6962]}, 88) = 6962 [pid 6950] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6962 attached [pid 6961] set_robust_list(0x5555748a66e0, 24 [pid 6950] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... umount2 resumed>) = 0 [pid 6950] <... futex resumed>) = 0 [pid 6961] <... set_robust_list resumed>) = 0 [pid 6950] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] umount2("./51/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6962] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6961] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 145.881460][ T5610] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [pid 6962] <... rseq resumed>) = 0 [pid 6961] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6958] <... mount resumed>) = 0 [pid 5611] <... close resumed>) = 0 [pid 5610] newfstatat(AT_FDCWD, "./51/file1" [pid 6962] set_robust_list(0x7fef94c679a0, 24 [pid 6961] chdir("./53" [pid 6958] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5611] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5610] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6962] <... set_robust_list resumed>) = 0 [pid 6961] <... chdir resumed>) = 0 [pid 6958] <... openat resumed>) = 3 [pid 6962] rt_sigprocmask(SIG_SETMASK, [] [pid 6961] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6958] chdir("./file1" [pid 5611] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5610] umount2("./51/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6962] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6961] <... prctl resumed>) = 0 [pid 6958] <... chdir resumed>) = 0 [pid 5611] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6961] setpgid(0, 0 [pid 6958] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5610] openat(AT_FDCWD, "./51/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORYci2-upstream-fs/strace-static-x86_64: Process 6963 attached [ 145.947018][ T6958] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.986377][ T6952] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 145.994177][ T6962] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 892 with error 28 [ 145.994206][ T6962] EXT4-fs (loop3): This should not happen!! Data will be lost [ 145.994206][ T6962] [ 145.994219][ T6962] EXT4-fs (loop3): Total free blocks count 0 [ 145.994231][ T6962] EXT4-fs (loop3): Free/Dirty block details [ 145.994244][ T6962] EXT4-fs (loop3): free_blocks=20480 [ 145.994256][ T6962] EXT4-fs (loop3): dirty_blocks=896 [pid 6961] <... setpgid resumed>) = 0 [pid 6962] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6958] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6950] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6952] <... sendfile resumed>) = 913408 [pid 5610] <... openat resumed>) = 4 [pid 6963] set_robust_list(0x5555748a66e0, 24 [pid 6961] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6958] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6963 [pid 5610] fstat(4 [pid 6963] <... set_robust_list resumed>) = 0 [pid 6961] <... openat resumed>) = 3 [pid 6958] <... futex resumed>) = 1 [pid 6957] <... futex resumed>) = 0 [pid 6952] +++ killed by SIGBUS +++ [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6963] rt_sigprocmask(SIG_SETMASK, [] [pid 6961] write(3, "1000", 4 [pid 6958] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6957] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] rt_sigprocmask(SIG_SETMASK, [] [pid 6957] <... futex resumed>) = 0 [pid 5610] getdents64(4 [pid 6963] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6961] <... write resumed>) = 4 [pid 6957] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6963] chdir("./54" [pid 6961] close(3 [pid 6958] <... openat resumed>) = 4 [pid 5610] getdents64(4 [pid 6963] <... chdir resumed>) = 0 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6963] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6961] <... close resumed>) = 0 [pid 5610] close(4 [pid 6963] setpgid(0, 0 [pid 6962] +++ killed by SIGBUS +++ [pid 6961] symlink("/dev/binderfs", "./binderfs" [pid 6958] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6950] +++ killed by SIGBUS +++ [pid 6963] <... setpgid resumed>) = 0 [pid 6961] <... symlink resumed>) = 0 [pid 5610] <... close resumed>) = 0 [pid 5612] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6950, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5610] rmdir("./51/file1" [pid 6963] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6961] write(1, "executing program\n", 18 [pid 6958] <... futex resumed>) = 1 [pid 6957] <... futex resumed>) = 0 [pid 5612] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 6961] <... write resumed>) = 18 executing program [pid 6958] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6957] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6963] <... openat resumed>) = 3 [pid 6957] <... futex resumed>) = 0 [pid 5610] <... rmdir resumed>) = 0 [pid 6963] write(3, "1000", 4 [pid 6957] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] umount2("./51/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6963] <... write resumed>) = 4 [pid 6961] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6958] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5612] <... restart_syscall resumed>) = 0 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6963] close(3 [pid 6961] <... futex resumed>) = 0 [pid 6958] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6963] <... close resumed>) = 0 [pid 6961] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6958] <... openat resumed>) = 5 [pid 5610] newfstatat(AT_FDCWD, "./51/binderfs" [pid 6963] symlink("/dev/binderfs", "./binderfs" [pid 6961] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6961] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6958] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] umount2("./53", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6963] <... symlink resumed>) = 0 [pid 6961] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6958] <... futex resumed>) = 1 [pid 6957] <... futex resumed>) = 0 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6961] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6958] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5612] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6961] <... mmap resumed>) = 0x7fef94c68000 [pid 6957] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... openat resumed>) = 3 [pid 5610] unlink("./51/binderfs" [pid 6963] write(1, "executing program\n", 18 [pid 6961] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 5612] fstat(3 [pid 6961] <... mprotect resumed>) = 0 [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6961] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6957] <... futex resumed>) = 1 [pid 5612] getdents64(3 [pid 6961] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6957] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6958] <... futex resumed>) = 0 [pid 5610] <... unlink resumed>) = 0 [pid 6958] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 5610] getdents64(3 [pid 6963] <... write resumed>) = 18 [pid 6961] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 5612] umount2("./53/file1", MNT_FORCE|UMOUNT_NOFOLLOWci2-upstream-fs/strace-static-x86_64: Process 6964 attached executing program [pid 6963] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6958] <... openat resumed>) = 6 [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6963] <... futex resumed>) = 0 [pid 6961] <... clone3 resumed> => {parent_tid=[6964]}, 88) = 6964 [pid 6961] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6961] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6961] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6964] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6963] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6958] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] close(3 [pid 6964] <... rseq resumed>) = 0 [pid 6963] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6958] <... futex resumed>) = 1 [pid 6957] <... futex resumed>) = 0 [pid 6964] set_robust_list(0x7fef94c889a0, 24 [pid 6963] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6958] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6957] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... close resumed>) = 0 [ 145.994267][ T6962] EXT4-fs (loop3): Block reservation details [ 145.994278][ T6962] EXT4-fs (loop3): i_reserved_data_blocks=56 [pid 6963] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6964] <... set_robust_list resumed>) = 0 [pid 6963] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6958] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6957] <... futex resumed>) = 0 [pid 5610] rmdir("./51" [pid 6964] rt_sigprocmask(SIG_SETMASK, [] [pid 6958] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6957] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6963] <... mmap resumed>) = 0x7fef94c68000 [pid 6963] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6964] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6958] <... mmap resumed>) = 0x200000000000 [pid 5610] <... rmdir resumed>) = 0 [pid 6964] memfd_create("syzkaller", 0 [pid 6963] <... mprotect resumed>) = 0 [pid 6958] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] mkdir("./52", 0777 [pid 6964] <... memfd_create resumed>) = 3 [pid 6963] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6958] <... futex resumed>) = 1 [pid 6957] <... futex resumed>) = 0 [pid 5612] <... umount2 resumed>) = 0 [pid 5610] <... mkdir resumed>) = 0 [pid 6964] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6963] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6958] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6957] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6964] <... mmap resumed>) = 0x7fef8c868000 [pid 6958] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6957] <... futex resumed>) = 0 [pid 5610] <... openat resumed>) = 3 [pid 6963] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6958] sendfile(4, 5, NULL, 553647746 [pid 6957] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] ioctl(3, LOOP_CLR_FD [pid 5612] umount2("./53/file1", MNT_FORCE|UMOUNT_NOFOLLOWci2-upstream-fs/strace-static-x86_64: Process 6965 attached [pid 5610] <... ioctl resumed>) = 0 [pid 6965] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] close(3 [pid 5612] newfstatat(AT_FDCWD, "./53/file1" [pid 6963] <... clone3 resumed> => {parent_tid=[6965]}, 88) = 6965 [pid 6963] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6963] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5612] umount2("./53/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6963] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6963] <... futex resumed>) = 0 [pid 5612] openat(AT_FDCWD, "./53/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6965] <... rseq resumed>) = 0 [pid 6963] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5612] <... openat resumed>) = 4 [pid 5612] fstat(4 [pid 6965] set_robust_list(0x7fef94c889a0, 24) = 0 [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6965] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] getdents64(4 [pid 6965] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5612] getdents64(4 [pid 6965] memfd_create("syzkaller", 0 [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5612] close(4) = 0 [pid 5612] rmdir("./53/file1" [pid 6965] <... memfd_create resumed>) = 3 [pid 5612] <... rmdir resumed>) = 0 [pid 6965] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fef8c868000 [pid 5612] umount2("./53/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5610] <... close resumed>) = 0 [pid 5612] newfstatat(AT_FDCWD, "./53/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5612] unlink("./53/binderfs") = 0 [ 146.124192][ T5612] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 146.128556][ T5612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [pid 5610] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5612] getdents64(3, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5610] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5612] close(3 [pid 5610] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 6966 attached [pid 5612] <... close resumed>) = 0 [pid 5612] rmdir("./53" [pid 6966] set_robust_list(0x5555748a66e0, 24 [pid 6965] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6964] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5610] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6966 [pid 5610] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] <... rmdir resumed>) = 0 [pid 6966] <... set_robust_list resumed>) = 0 [pid 6957] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5610] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6957] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6957] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6966] rt_sigprocmask(SIG_SETMASK, [] [pid 6957] <... mmap resumed>) = 0x7fef94c47000 [pid 6966] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6966] chdir("./52" [pid 6957] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6966] <... chdir resumed>) = 0 [pid 6957] <... mprotect resumed>) = 0 [pid 6957] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6957] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6966] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5612] mkdir("./54", 0777ci2-upstream-fs/strace-static-x86_64: Process 6967 attached [pid 6957] <... clone3 resumed> => {parent_tid=[6967]}, 88) = 6967 [pid 6957] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6957] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 6966] <... prctl resumed>) = 0 [pid 6964] <... write resumed>) = 524288 [pid 6957] <... futex resumed>) = 0 [pid 6957] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6964] munmap(0x7fef8c868000, 138412032 [pid 6967] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6966] setpgid(0, 0 [pid 6964] <... munmap resumed>) = 0 [pid 6966] <... setpgid resumed>) = 0 [pid 6967] <... rseq resumed>) = 0 [pid 6967] set_robust_list(0x7fef94c679a0, 24 [pid 6966] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6967] <... set_robust_list resumed>) = 0 [pid 6967] rt_sigprocmask(SIG_SETMASK, [] [pid 6964] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6967] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6967] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6966] <... openat resumed>) = 3 [pid 6965] <... write resumed>) = 524288 [pid 6964] <... openat resumed>) = 4 [pid 6958] <... sendfile resumed>) = 356352 [pid 5612] <... mkdir resumed>) = 0 [pid 6966] write(3, "1000", 4 [pid 6965] munmap(0x7fef8c868000, 138412032 [pid 6958] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6966] <... write resumed>) = 4 [pid 6965] <... munmap resumed>) = 0 [pid 5612] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6966] close(3 [pid 6958] <... futex resumed>) = ? [pid 6957] <... futex resumed>) = ? [pid 5612] <... openat resumed>) = 3 [pid 6967] +++ killed by SIGBUS +++ [pid 6966] <... close resumed>) = 0 [pid 6965] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6966] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6965] <... openat resumed>) = 4 [pid 6964] ioctl(4, LOOP_SET_FD, 3 [pid 5612] ioctl(3, LOOP_CLR_FD [pid 6965] ioctl(4, LOOP_SET_FD, 3 [pid 5612] <... ioctl resumed>) = 0 [pid 6965] <... ioctl resumed>) = 0 [ 146.231472][ T6967] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 146.233381][ T6967] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 348 with error 28 [ 146.233409][ T6967] EXT4-fs (loop4): This should not happen!! Data will be lost [ 146.233409][ T6967] [ 146.233422][ T6967] EXT4-fs (loop4): Total free blocks count 0 [ 146.233433][ T6967] EXT4-fs (loop4): Free/Dirty block details [pid 5612] close(3 [pid 6966] write(1, "executing program\n", 18 [pid 6964] <... ioctl resumed>) = 0 [pid 6958] +++ killed by SIGBUS +++ [pid 6957] +++ killed by SIGBUS +++ executing program [pid 6966] <... write resumed>) = 18 [pid 6965] close(3 [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6957, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6966] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6965] <... close resumed>) = 0 [pid 6965] close(4 [pid 6966] <... futex resumed>) = 0 [pid 6965] <... close resumed>) = 0 [pid 6966] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6965] mkdir("./file1", 0777 [pid 6966] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6966] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6965] <... mkdir resumed>) = 0 [pid 6966] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6966] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c68000 [pid 6965] mount("/dev/loop2", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5612] <... close resumed>) = 0 [pid 6966] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 5614] umount2("./52", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6966] <... mprotect resumed>) = 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6966] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5614] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5612] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6966] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6964] close(3 [pid 5614] <... openat resumed>) = 3 [pid 5612] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6964] <... close resumed>) = 0 [pid 6964] close(4 [pid 6966] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6964] <... close resumed>) = 0 [pid 5614] fstat(3 [pid 5612] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 6969 attached ci2-upstream-fs/strace-static-x86_64: Process 6968 attached [pid 6964] mkdir("./file1", 0777 [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6969] set_robust_list(0x5555748a66e0, 24 [pid 6968] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6966] <... clone3 resumed> => {parent_tid=[6968]}, 88) = 6968 [pid 6964] <... mkdir resumed>) = 0 [pid 6969] <... set_robust_list resumed>) = 0 [pid 6968] <... rseq resumed>) = 0 [pid 6966] rt_sigprocmask(SIG_SETMASK, [] [pid 6964] mount("/dev/loop0", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5614] getdents64(3 [pid 6969] rt_sigprocmask(SIG_SETMASK, [] [pid 6968] set_robust_list(0x7fef94c889a0, 24 [pid 6966] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5612] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6969 [pid 6969] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6968] <... set_robust_list resumed>) = 0 [pid 6966] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] umount2("./52/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5612] rt_sigprocmask(SIG_SETMASK, [] [pid 6969] chdir("./54" [pid 6968] rt_sigprocmask(SIG_SETMASK, [] [pid 6966] <... futex resumed>) = 0 [pid 5612] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6969] <... chdir resumed>) = 0 [pid 6968] <... rt_sigprocmask resumed>, NULL, 8) = 0 [ 146.233444][ T6967] EXT4-fs (loop4): free_blocks=20480 [ 146.233456][ T6967] EXT4-fs (loop4): dirty_blocks=368 [ 146.233468][ T6967] EXT4-fs (loop4): Block reservation details [ 146.233479][ T6967] EXT4-fs (loop4): i_reserved_data_blocks=22 [ 146.288745][ T6965] set_capacity_and_notify: 11 callbacks suppressed [ 146.288762][ T6965] loop2: detected capacity change from 0 to 1024 [ 146.295406][ T6964] loop0: detected capacity change from 0 to 1024 [pid 6966] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6969] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6968] memfd_create("syzkaller", 0 [pid 6969] <... prctl resumed>) = 0 [pid 6968] <... memfd_create resumed>) = 3 [pid 6969] setpgid(0, 0 [pid 6968] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6969] <... setpgid resumed>) = 0 [pid 6969] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6968] <... mmap resumed>) = 0x7fef8c868000 [pid 6965] <... mount resumed>) = 0 [pid 6969] <... openat resumed>) = 3 [pid 6965] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6969] write(3, "1000", 4 [pid 6965] <... openat resumed>) = 3 [pid 6969] <... write resumed>) = 4 [pid 6968] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6965] chdir("./file1" [pid 6964] <... mount resumed>) = 0 [pid 6969] close(3) = 0 [pid 6965] <... chdir resumed>) = 0 [pid 6964] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6965] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6965] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6963] <... futex resumed>) = 0 [pid 6965] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6963] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6963] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6969] symlink("/dev/binderfs", "./binderfs" [pid 6964] <... openat resumed>) = 3 [pid 6969] <... symlink resumed>) = 0 [pid 6965] <... openat resumed>) = 4 [pid 6964] chdir("./file1" [pid 6965] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6969] write(1, "executing program\n", 18 [pid 6964] <... chdir resumed>) = 0 executing program [pid 6969] <... write resumed>) = 18 [pid 6968] <... write resumed>) = 524288 [pid 6965] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6964] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6963] <... futex resumed>) = 0 [ 146.355593][ T6965] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.385491][ T6964] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 6969] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6968] munmap(0x7fef8c868000, 138412032 [pid 6965] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6963] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6965] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6963] <... futex resumed>) = 0 [pid 6965] <... openat resumed>) = 5 [pid 6963] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6965] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6969] <... futex resumed>) = 0 [pid 6968] <... munmap resumed>) = 0 [pid 6965] <... futex resumed>) = 1 [pid 6963] <... futex resumed>) = 0 [pid 6969] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60}, NULL, 8) = 0 [pid 6963] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6969] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6965] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6963] <... futex resumed>) = 0 [pid 6969] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6968] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6965] <... openat resumed>) = 6 [pid 6963] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6969] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c68000 [pid 6968] <... openat resumed>) = 4 [pid 6965] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6969] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6968] ioctl(4, LOOP_SET_FD, 3 [pid 6965] <... futex resumed>) = 1 [pid 6963] <... futex resumed>) = 0 [pid 6969] <... mprotect resumed>) = 0 [pid 6968] <... ioctl resumed>) = 0 [pid 6965] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6964] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6969] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6968] close(3 [pid 6963] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6969] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6968] <... close resumed>) = 0 [pid 6965] <... futex resumed>) = 0 [pid 6963] <... futex resumed>) = 1 [pid 6964] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6965] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6969] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6968] close(4 [pid 6964] <... futex resumed>) = 1 [pid 6963] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6961] <... futex resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 6974 attached [pid 6968] <... close resumed>) = 0 [pid 6965] <... mmap resumed>) = 0x200000000000 [ 146.403479][ T37] kauditd_printk_skb: 11 callbacks suppressed [ 146.403496][ T37] audit: type=1800 audit(1785844676.804:268): pid=6965 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 146.436610][ T6968] loop1: detected capacity change from 0 to 1024 [pid 6974] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6969] <... clone3 resumed> => {parent_tid=[6974]}, 88) = 6974 [pid 6968] mkdir("./file1", 0777 [pid 6965] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6969] rt_sigprocmask(SIG_SETMASK, [] [pid 6968] <... mkdir resumed>) = 0 [pid 6965] <... futex resumed>) = 1 [pid 6964] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6961] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6974] <... rseq resumed>) = 0 [pid 6969] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6961] <... futex resumed>) = 0 [pid 6968] mount("/dev/loop1", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6965] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6963] <... futex resumed>) = 0 [pid 6961] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6974] set_robust_list(0x7fef94c889a0, 24 [pid 6969] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6963] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6974] <... set_robust_list resumed>) = 0 [pid 6969] <... futex resumed>) = 0 [pid 6965] <... futex resumed>) = 0 [pid 6964] <... openat resumed>) = 4 [pid 6963] <... futex resumed>) = 1 [pid 6974] rt_sigprocmask(SIG_SETMASK, [] [pid 6969] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6965] sendfile(4, 5, NULL, 553647746 [pid 6963] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6974] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6964] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6974] memfd_create("syzkaller", 0) = 3 [pid 6964] <... futex resumed>) = 1 [pid 6974] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6964] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6961] <... futex resumed>) = 0 [pid 6964] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6961] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6974] <... mmap resumed>) = 0x7fef8c868000 [pid 6964] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6961] <... futex resumed>) = 0 [ 146.449142][ T5614] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 146.471537][ T37] audit: type=1800 audit(1785844676.874:269): pid=6964 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 146.489043][ T5614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [pid 6961] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6964] <... openat resumed>) = 5 [pid 6964] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6961] <... futex resumed>) = 0 [pid 6964] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6961] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6974] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6964] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6961] <... futex resumed>) = 0 [pid 6964] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6961] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6963] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6964] <... openat resumed>) = 6 [pid 6963] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6964] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6963] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5614] <... umount2 resumed>) = 0 [pid 6964] <... futex resumed>) = 1 [pid 6961] <... futex resumed>) = 0 [pid 6963] <... mmap resumed>) = 0x7fef94c47000 [pid 6961] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] umount2("./52/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6964] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6961] <... futex resumed>) = 0 [pid 6964] <... mmap resumed>) = 0x200000000000 [pid 6963] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6961] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6963] <... mprotect resumed>) = 0 [pid 5614] newfstatat(AT_FDCWD, "./52/file1" [pid 6974] <... write resumed>) = 524288 [pid 6968] <... mount resumed>) = 0 [pid 6964] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6963] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5614] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6968] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6964] <... futex resumed>) = 1 [pid 6963] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6961] <... futex resumed>) = 0 [pid 5614] umount2("./52/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6968] <... openat resumed>) = 3 [pid 6974] munmap(0x7fef8c868000, 138412032 [pid 6964] sendfile(4, 5, NULL, 553647746 [pid 6963] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6961] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000ci2-upstream-fs/strace-static-x86_64: Process 6977 attached [pid 6974] <... munmap resumed>) = 0 [pid 6968] chdir("./file1" [pid 6961] <... futex resumed>) = 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6977] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6974] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6968] <... chdir resumed>) = 0 [pid 6963] <... clone3 resumed> => {parent_tid=[6977]}, 88) = 6977 [pid 6961] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] openat(AT_FDCWD, "./52/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6977] <... rseq resumed>) = 0 [pid 6974] <... openat resumed>) = 4 [pid 6968] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6963] rt_sigprocmask(SIG_SETMASK, [] [pid 6977] set_robust_list(0x7fef94c679a0, 24 [pid 5614] <... openat resumed>) = 4 [pid 6977] <... set_robust_list resumed>) = 0 [pid 6974] ioctl(4, LOOP_SET_FD, 3 [pid 6968] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6963] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6977] rt_sigprocmask(SIG_SETMASK, [] [pid 6974] <... ioctl resumed>) = 0 [pid 6968] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6963] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] fstat(4 [pid 6977] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6966] <... futex resumed>) = 0 [pid 6963] <... futex resumed>) = 0 [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6968] <... futex resumed>) = 1 [pid 6974] close(3 [pid 6966] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6963] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6974] <... close resumed>) = 0 [ 146.576008][ T6968] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 6974] close(4 [pid 6977] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6974] <... close resumed>) = 0 [ 146.622631][ T6974] loop3: detected capacity change from 0 to 1024 [ 146.625275][ T6977] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 146.625983][ T6977] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 340 with error 28 [ 146.626011][ T6977] EXT4-fs (loop2): This should not happen!! Data will be lost [ 146.626011][ T6977] [ 146.626024][ T6977] EXT4-fs (loop2): Total free blocks count 0 [pid 6968] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6966] <... futex resumed>) = 0 [pid 5614] getdents64(4 [pid 6974] mkdir("./file1", 0777 [pid 6965] <... sendfile resumed>) = ? [pid 6963] <... futex resumed>) = ? [pid 6961] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6977] +++ killed by SIGBUS +++ [pid 6965] +++ killed by SIGBUS +++ [pid 6961] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 6974] <... mkdir resumed>) = 0 [pid 6961] <... futex resumed>) = 0 [pid 6974] mount("/dev/loop3", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6961] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6968] <... openat resumed>) = 4 [pid 6966] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6961] <... mmap resumed>) = 0x7fef94c47000 [pid 6961] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6961] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5614] getdents64(4 [pid 6961] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6961] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6961] <... clone3 resumed> => {parent_tid=[6978]}, 88) = 6978 ci2-upstream-fs/strace-static-x86_64: Process 6978 attached [pid 6961] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6961] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 146.626036][ T6977] EXT4-fs (loop2): Free/Dirty block details [ 146.626047][ T6977] EXT4-fs (loop2): free_blocks=20480 [ 146.626060][ T6977] EXT4-fs (loop2): dirty_blocks=352 [ 146.626071][ T6977] EXT4-fs (loop2): Block reservation details [ 146.626082][ T6977] EXT4-fs (loop2): i_reserved_data_blocks=22 [pid 6961] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] close(4 [pid 6978] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6968] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6963] +++ killed by SIGBUS +++ [pid 5614] <... close resumed>) = 0 [pid 6968] <... futex resumed>) = 1 [pid 6966] <... futex resumed>) = 0 [pid 5614] rmdir("./52/file1" [pid 5611] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6963, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6978] <... rseq resumed>) = 0 [pid 6968] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6966] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... rmdir resumed>) = 0 [pid 6978] set_robust_list(0x7fef94c679a0, 24) = 0 [pid 6968] <... openat resumed>) = 5 [pid 6966] <... futex resumed>) = 0 [pid 5614] umount2("./52/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6978] rt_sigprocmask(SIG_SETMASK, [] [pid 6966] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6978] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5611] umount2("./54", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5611] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5611] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5611] getdents64(3, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5611] umount2("./54/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6974] <... mount resumed>) = 0 [pid 6968] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6968] <... futex resumed>) = 1 [pid 6966] <... futex resumed>) = 0 [ 146.715154][ T37] audit: type=1800 audit(1785844677.114:270): pid=6968 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 146.759110][ T6978] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 146.764635][ T6978] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 704 with error 28 [ 146.764675][ T6978] EXT4-fs (loop0): This should not happen!! Data will be lost [ 146.764675][ T6978] [ 146.764689][ T6978] EXT4-fs (loop0): Total free blocks count 0 [ 146.764701][ T6978] EXT4-fs (loop0): Free/Dirty block details [ 146.764714][ T6978] EXT4-fs (loop0): free_blocks=20480 [ 146.764726][ T6978] EXT4-fs (loop0): dirty_blocks=704 [ 146.764737][ T6978] EXT4-fs (loop0): Block reservation details [pid 5614] newfstatat(AT_FDCWD, "./52/binderfs" [pid 6978] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6974] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6968] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6966] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6961] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5614] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6974] <... openat resumed>) = 3 [pid 6968] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6964] <... sendfile resumed>) = ? [pid 6966] <... futex resumed>) = 0 [pid 6968] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6966] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] unlink("./52/binderfs" [pid 6978] +++ killed by SIGBUS +++ [pid 6974] chdir("./file1" [pid 6968] <... openat resumed>) = 6 [pid 6974] <... chdir resumed>) = 0 [pid 6968] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6964] +++ killed by SIGBUS +++ [pid 6961] +++ killed by SIGBUS +++ [pid 5614] <... unlink resumed>) = 0 [pid 6968] <... futex resumed>) = 1 [pid 6966] <... futex resumed>) = 0 [pid 5614] getdents64(3 [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6961, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 6968] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6974] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6966] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6974] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6968] <... mmap resumed>) = 0x200000000000 [pid 6966] <... futex resumed>) = 0 [pid 6974] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6969] <... futex resumed>) = 0 [pid 6966] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6974] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6969] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6968] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] close(3 [pid 6969] <... futex resumed>) = 0 [pid 6968] <... futex resumed>) = 1 [pid 6966] <... futex resumed>) = 0 [pid 5614] <... close resumed>) = 0 [ 146.764748][ T6978] EXT4-fs (loop0): i_reserved_data_blocks=44 [ 146.770078][ T6974] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.865275][ T5611] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 5609] umount2("./53", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6974] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6969] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6968] sendfile(4, 5, NULL, 553647746 [pid 6966] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] rmdir("./52" [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6966] <... futex resumed>) = 0 [pid 5614] <... rmdir resumed>) = 0 [pid 5609] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3 [pid 6966] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] getdents64(3, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5614] mkdir("./53", 0777 [pid 5609] umount2("./53/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6974] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 5614] <... mkdir resumed>) = 0 [pid 5614] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6974] <... openat resumed>) = 4 [pid 5614] <... openat resumed>) = 3 [pid 5614] ioctl(3, LOOP_CLR_FD [pid 6974] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... ioctl resumed>) = 0 [pid 6974] <... futex resumed>) = 1 [pid 6969] <... futex resumed>) = 0 [pid 6974] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5614] close(3 [pid 6969] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6974] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6974] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC) = 5 [pid 6974] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6969] <... futex resumed>) = 0 [pid 6969] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] <... close resumed>) = 0 [pid 6974] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6969] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6969] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6969] <... futex resumed>) = 1 [pid 6974] <... futex resumed>) = 0 [pid 6969] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6974] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 6981 attached [pid 6974] <... openat resumed>) = 6 [pid 6981] set_robust_list(0x5555748a66e0, 24) = 0 [ 146.883766][ T5611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.885033][ T37] audit: type=1800 audit(1785844677.284:271): pid=6974 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop3" ino=15 res=0 errno=0 [pid 6981] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6974] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6966] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6974] <... futex resumed>) = 1 [pid 6966] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6981 [pid 6974] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6966] <... futex resumed>) = 0 [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 6966] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6969] <... futex resumed>) = 0 [pid 6966] <... mmap resumed>) = 0x7fef94c47000 [pid 6969] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6966] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6974] <... futex resumed>) = 0 [pid 6969] <... futex resumed>) = 1 [pid 6966] <... mprotect resumed>) = 0 [pid 6974] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6969] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6966] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6974] <... mmap resumed>) = 0x200000000000 [pid 6974] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6966] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6974] <... futex resumed>) = 1 [pid 6969] <... futex resumed>) = 0 [pid 6966] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 6982 attached [pid 6974] sendfile(4, 5, NULL, 553647746 [pid 6969] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6981] chdir("./53" [pid 6969] <... futex resumed>) = 0 [pid 6982] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6981] <... chdir resumed>) = 0 [pid 6969] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6966] <... clone3 resumed> => {parent_tid=[6982]}, 88) = 6982 [pid 5611] <... umount2 resumed>) = 0 [pid 6982] <... rseq resumed>) = 0 [pid 6981] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6966] rt_sigprocmask(SIG_SETMASK, [] [pid 5611] umount2("./54/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6982] set_robust_list(0x7fef94c679a0, 24 [pid 6981] <... prctl resumed>) = 0 [pid 6966] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6982] <... set_robust_list resumed>) = 0 [pid 6981] setpgid(0, 0 [pid 6966] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] newfstatat(AT_FDCWD, "./54/file1" [pid 6982] rt_sigprocmask(SIG_SETMASK, [] [pid 6981] <... setpgid resumed>) = 0 [pid 6966] <... futex resumed>) = 0 [pid 6982] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6981] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5611] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 146.950001][ T63] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 704 with max blocks 4 with error 28 [ 146.951750][ T5609] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6981] <... openat resumed>) = 3 [pid 6966] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] umount2("./54/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... umount2 resumed>) = 0 [pid 5609] umount2("./53/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./53/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./53/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./53/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] getdents64(4, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4 [pid 6981] write(3, "1000", 4 [pid 6969] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6981] <... write resumed>) = 4 [pid 6969] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6969] <... futex resumed>) = 0 [pid 5609] close(4 [pid 6969] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5609] <... close resumed>) = 0 [pid 6981] close(3 [pid 6969] <... mmap resumed>) = 0x7fef94c47000 [pid 5609] rmdir("./53/file1" [pid 6981] <... close resumed>) = 0 [pid 6969] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6981] symlink("/dev/binderfs", "./binderfs" [pid 6969] <... mprotect resumed>) = 0 [pid 5611] openat(AT_FDCWD, "./54/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5609] <... rmdir resumed>) = 0 [pid 6981] <... symlink resumed>) = 0 [pid 6969] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6981] write(1, "executing program\n", 18 [pid 6969] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6981] <... write resumed>) = 18 executing program [pid 6969] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5611] <... openat resumed>) = 4 [pid 5609] umount2("./53/binderfs", MNT_FORCE|UMOUNT_NOFOLLOWci2-upstream-fs/strace-static-x86_64: Process 6983 attached [ 147.007306][ T6968] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 147.009120][ T6982] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 728 with error 28 [ 147.009151][ T6982] EXT4-fs (loop1): This should not happen!! Data will be lost [ 147.009151][ T6982] [ 147.009165][ T6982] EXT4-fs (loop1): Total free blocks count 0 [ 147.009177][ T6982] EXT4-fs (loop1): Free/Dirty block details [pid 6981] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6983] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6982] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6981] <... futex resumed>) = 0 [pid 6969] <... clone3 resumed> => {parent_tid=[6983]}, 88) = 6983 [pid 6968] <... sendfile resumed>) = 745472 [pid 6966] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5611] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6982] +++ killed by SIGBUS +++ [pid 6968] +++ killed by SIGBUS +++ [pid 5611] getdents64(4, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5611] getdents64(4 [pid 6983] <... rseq resumed>) = 0 [pid 6981] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6969] rt_sigprocmask(SIG_SETMASK, [] [pid 6966] +++ killed by SIGBUS +++ [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5609] newfstatat(AT_FDCWD, "./53/binderfs" [pid 6981] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6969] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5611] close(4 [pid 5609] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6983] set_robust_list(0x7fef94c679a0, 24 [pid 6981] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6969] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... close resumed>) = 0 [pid 5609] unlink("./53/binderfs" [pid 6983] <... set_robust_list resumed>) = 0 [pid 6981] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6969] <... futex resumed>) = 0 [pid 5611] rmdir("./54/file1" [pid 5610] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6966, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5609] <... unlink resumed>) = 0 [pid 6983] rt_sigprocmask(SIG_SETMASK, [] [pid 6981] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6969] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] <... rmdir resumed>) = 0 [pid 5610] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 5609] getdents64(3 [pid 6983] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6981] <... mmap resumed>) = 0x7fef94c68000 [pid 5610] <... restart_syscall resumed>) = 0 [pid 6981] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 5611] umount2("./54/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6981] <... mprotect resumed>) = 0 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 147.009188][ T6982] EXT4-fs (loop1): free_blocks=20480 [ 147.009200][ T6982] EXT4-fs (loop1): dirty_blocks=736 [ 147.009212][ T6982] EXT4-fs (loop1): Block reservation details [ 147.009222][ T6982] EXT4-fs (loop1): i_reserved_data_blocks=46 [pid 5609] close(3 [pid 6981] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5611] newfstatat(AT_FDCWD, "./54/binderfs" [pid 5609] <... close resumed>) = 0 [pid 6981] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 5610] umount2("./52", MNT_FORCE|UMOUNT_NOFOLLOWci2-upstream-fs/strace-static-x86_64: Process 6984 attached [pid 5611] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] rmdir("./53" [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] <... rmdir resumed>) = 0 [pid 6981] <... clone3 resumed> => {parent_tid=[6984]}, 88) = 6984 [pid 5611] unlink("./54/binderfs" [pid 6981] rt_sigprocmask(SIG_SETMASK, [] [pid 6984] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6981] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] mkdir("./54", 0777 [pid 6984] <... rseq resumed>) = 0 [pid 6981] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6984] set_robust_list(0x7fef94c889a0, 24 [pid 6981] <... futex resumed>) = 0 [ 147.108919][ T6983] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 147.109434][ T6983] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 376 with error 28 [ 147.109451][ T6983] EXT4-fs (loop3): This should not happen!! Data will be lost [ 147.109451][ T6983] [ 147.109458][ T6983] EXT4-fs (loop3): Total free blocks count 0 [ 147.109465][ T6983] EXT4-fs (loop3): Free/Dirty block details [pid 5609] <... mkdir resumed>) = 0 [pid 6984] <... set_robust_list resumed>) = 0 [pid 6981] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6984] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5611] <... unlink resumed>) = 0 [pid 6984] memfd_create("syzkaller", 0 [pid 5611] getdents64(3 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6984] <... memfd_create resumed>) = 3 [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5609] <... openat resumed>) = 3 [pid 6984] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5611] close(3 [pid 5609] ioctl(3, LOOP_CLR_FD [pid 6984] <... mmap resumed>) = 0x7fef8c868000 [pid 5611] <... close resumed>) = 0 [pid 5609] <... ioctl resumed>) = 0 [pid 5611] rmdir("./54" [pid 6983] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 5611] <... rmdir resumed>) = 0 [pid 5609] close(3 [pid 6974] <... sendfile resumed>) = 389120 [pid 6984] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5611] mkdir("./55", 0777) = 0 [pid 5610] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6969] <... futex resumed>) = ? [pid 6983] +++ killed by SIGBUS +++ [pid 5611] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5611] ioctl(3, LOOP_CLR_FD) = 0 [pid 5611] close(3 [pid 6974] +++ killed by SIGBUS +++ [pid 6969] +++ killed by SIGBUS +++ [pid 5609] <... close resumed>) = 0 [pid 5612] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6969, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5612] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5610] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5610] getdents64(3 [pid 5609] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5612] umount2("./54", MNT_FORCE|UMOUNT_NOFOLLOWci2-upstream-fs/strace-static-x86_64: Process 6985 attached [pid 5610] umount2("./52/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6985] set_robust_list(0x5555748a66e0, 24 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6985] <... set_robust_list resumed>) = 0 [pid 5612] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6985] rt_sigprocmask(SIG_SETMASK, [] [pid 6984] <... write resumed>) = 524288 [pid 5612] <... openat resumed>) = 3 [pid 5609] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6985 [pid 6985] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6985] chdir("./54" [pid 5612] fstat(3 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6985] <... chdir resumed>) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5612] getdents64(3 [pid 6985] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6984] munmap(0x7fef8c868000, 138412032 [pid 6985] <... prctl resumed>) = 0 [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6985] setpgid(0, 0 [pid 6984] <... munmap resumed>) = 0 [pid 5612] umount2("./54/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] <... close resumed>) = 0 [pid 6985] <... setpgid resumed>) = 0 [pid 6985] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6984] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5611] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6984] <... openat resumed>) = 4 [pid 6985] <... openat resumed>) = 3 [pid 6984] ioctl(4, LOOP_SET_FD, 3 [pid 5611] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6985] write(3, "1000", 4 [pid 6984] <... ioctl resumed>) = 0 [pid 5611] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6985] <... write resumed>) = 4 [pid 6984] close(3 [pid 6985] close(3 [pid 6984] <... close resumed>) = 0 [pid 6985] <... close resumed>) = 0 [pid 6984] close(4 [pid 6985] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6984] <... close resumed>) = 0 [pid 6985] write(1, "executing program\n", 18 [pid 6984] mkdir("./file1", 0777 [pid 5611] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6986 [pid 6985] <... write resumed>) = 18 executing program ci2-upstream-fs/strace-static-x86_64: Process 6986 attached [pid 6985] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] rt_sigprocmask(SIG_SETMASK, [] [pid 6985] <... futex resumed>) = 0 [pid 6986] set_robust_list(0x5555748a66e0, 24 [pid 5611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6986] <... set_robust_list resumed>) = 0 [pid 6985] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6986] rt_sigprocmask(SIG_SETMASK, [] [pid 6985] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6986] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6985] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6986] chdir("./55" [pid 6985] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6986] <... chdir resumed>) = 0 [pid 6984] <... mkdir resumed>) = 0 [pid 6986] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6985] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6984] mount("/dev/loop4", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6986] setpgid(0, 0) = 0 [pid 6985] <... mmap resumed>) = 0x7fef94c68000 [pid 6986] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6985] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 [ 147.109472][ T6983] EXT4-fs (loop3): free_blocks=20480 [ 147.109479][ T6983] EXT4-fs (loop3): dirty_blocks=384 [ 147.109485][ T6983] EXT4-fs (loop3): Block reservation details [ 147.109491][ T6983] EXT4-fs (loop3): i_reserved_data_blocks=24 [ 147.195772][ T6984] loop4: detected capacity change from 0 to 1024 [pid 6986] <... openat resumed>) = 3 [pid 6985] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6985] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0}ci2-upstream-fs/strace-static-x86_64: Process 6987 attached => {parent_tid=[6987]}, 88) = 6987 [pid 6985] rt_sigprocmask(SIG_SETMASK, [] [pid 6987] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6985] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6986] write(3, "1000", 4 [pid 6985] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6987] <... rseq resumed>) = 0 [pid 6986] <... write resumed>) = 4 [pid 6986] close(3) = 0 [pid 6986] symlink("/dev/binderfs", "./binderfs" [pid 6987] set_robust_list(0x7fef94c889a0, 24 [pid 6986] <... symlink resumed>) = 0 [pid 6987] <... set_robust_list resumed>) = 0 [pid 6986] write(1, "executing program\n", 18 [pid 6985] <... futex resumed>) = 0 executing program [pid 6987] rt_sigprocmask(SIG_SETMASK, [] [pid 6986] <... write resumed>) = 18 [pid 6985] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6987] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6987] memfd_create("syzkaller", 0 [pid 6986] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6987] <... memfd_create resumed>) = 3 [pid 6987] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6986] <... futex resumed>) = 0 [pid 6987] <... mmap resumed>) = 0x7fef8c868000 [pid 6986] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60}, NULL, 8) = 0 [ 147.222051][ T5610] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 147.223932][ T177] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 376 with max blocks 4 with error 28 [ 147.228319][ T5612] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6986] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6984] <... mount resumed>) = 0 [pid 6984] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6984] chdir("./file1") = 0 [pid 6986] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c68000 [pid 6984] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6986] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6987] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6986] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6984] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6986] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6984] <... futex resumed>) = 1 [pid 6987] <... write resumed>) = 524288 [pid 6986] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6984] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6981] <... futex resumed>) = 0 [pid 5612] <... umount2 resumed>) = 0 [pid 5610] <... umount2 resumed>) = 0 [pid 6987] munmap(0x7fef8c868000, 138412032ci2-upstream-fs/strace-static-x86_64: Process 6990 attached ) = 0 [pid 6986] <... clone3 resumed> => {parent_tid=[6990]}, 88) = 6990 [pid 6981] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] umount2("./54/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] umount2("./52/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6987] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6986] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6987] <... openat resumed>) = 4 [pid 6986] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5612] newfstatat(AT_FDCWD, "./54/file1" [pid 5610] newfstatat(AT_FDCWD, "./52/file1" [pid 6990] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6987] ioctl(4, LOOP_SET_FD, 3 [pid 6986] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6984] <... futex resumed>) = 0 [pid 6981] <... futex resumed>) = 1 [pid 5612] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5610] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6987] <... ioctl resumed>) = 0 [pid 6986] <... futex resumed>) = 0 [pid 6981] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6987] close(3 [pid 6986] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5612] umount2("./54/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] umount2("./52/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6987] <... close resumed>) = 0 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 147.285397][ T5610] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.294691][ T6984] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 6987] close(4 [pid 6984] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 5612] openat(AT_FDCWD, "./54/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6990] <... rseq resumed>) = 0 [pid 6987] <... close resumed>) = 0 [pid 6990] set_robust_list(0x7fef94c889a0, 24 [pid 6987] mkdir("./file1", 0777 [pid 5612] <... openat resumed>) = 4 [pid 5610] openat(AT_FDCWD, "./52/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6990] <... set_robust_list resumed>) = 0 [pid 6987] <... mkdir resumed>) = 0 [pid 6984] <... openat resumed>) = 4 [pid 5610] <... openat resumed>) = 4 [pid 6990] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] fstat(4 [pid 6990] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6984] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6984] <... futex resumed>) = 1 [pid 6981] <... futex resumed>) = 0 [pid 5612] getdents64(4 [pid 6990] memfd_create("syzkaller", 0 [pid 6987] mount("/dev/loop0", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6984] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6981] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5610] fstat(4 [pid 6990] <... memfd_create resumed>) = 3 [pid 6984] <... openat resumed>) = 5 [pid 6981] <... futex resumed>) = 0 [pid 5612] getdents64(4 [pid 6990] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6984] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6981] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6990] <... mmap resumed>) = 0x7fef8c868000 [pid 6984] <... futex resumed>) = 0 [pid 6981] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5610] getdents64(4 [pid 6981] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] close(4 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5612] <... close resumed>) = 0 [pid 6984] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6981] <... futex resumed>) = 0 [pid 5612] rmdir("./54/file1" [pid 5610] getdents64(4 [pid 6984] <... openat resumed>) = 6 [pid 6981] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... rmdir resumed>) = 0 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 6990] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6984] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] close(4 [pid 6984] <... futex resumed>) = 1 [pid 6981] <... futex resumed>) = 0 [pid 5612] umount2("./54/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] <... close resumed>) = 0 [pid 6984] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6981] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 147.335969][ T6987] loop0: detected capacity change from 0 to 1024 [ 147.339968][ T37] audit: type=1800 audit(1785844677.734:272): pid=6984 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop4" ino=15 res=0 errno=0 [pid 5610] rmdir("./52/file1" [pid 6984] <... mmap resumed>) = 0x200000000000 [pid 6981] <... futex resumed>) = 0 [pid 5612] newfstatat(AT_FDCWD, "./54/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5612] unlink("./54/binderfs" [pid 6981] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6984] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6981] <... futex resumed>) = 0 [pid 6981] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6981] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6984] sendfile(4, 5, NULL, 553647746 [pid 6990] <... write resumed>) = 524288 [pid 6990] munmap(0x7fef8c868000, 138412032) = 0 [pid 5612] <... unlink resumed>) = 0 [pid 5610] <... rmdir resumed>) = 0 [pid 5612] getdents64(3, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6990] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6987] <... mount resumed>) = 0 [pid 5612] close(3 [pid 5610] umount2("./52/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6990] <... openat resumed>) = 4 [pid 6987] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5612] <... close resumed>) = 0 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6990] ioctl(4, LOOP_SET_FD, 3 [pid 6981] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5612] rmdir("./54" [pid 5610] newfstatat(AT_FDCWD, "./52/binderfs" [pid 6981] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... rmdir resumed>) = 0 [pid 6981] <... futex resumed>) = 0 [pid 5612] mkdir("./55", 0777 [pid 6990] <... ioctl resumed>) = 0 [pid 6987] <... openat resumed>) = 3 [pid 6981] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5610] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6987] chdir("./file1" [pid 6981] <... mmap resumed>) = 0x7fef94c47000 [pid 5610] unlink("./52/binderfs" [pid 6987] <... chdir resumed>) = 0 [pid 5612] <... mkdir resumed>) = 0 [pid 5610] <... unlink resumed>) = 0 [pid 5612] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6990] close(3 [pid 6987] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6981] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 5610] getdents64(3 [pid 6990] <... close resumed>) = 0 [pid 6990] close(4 [pid 6987] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5612] <... openat resumed>) = 3 [pid 6981] <... mprotect resumed>) = 0 [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 6990] <... close resumed>) = 0 [pid 5612] ioctl(3, LOOP_CLR_FD [pid 6990] mkdir("./file1", 0777 [pid 6987] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6981] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5612] <... ioctl resumed>) = 0 [pid 5610] close(3 [pid 6990] <... mkdir resumed>) = 0 [pid 6987] <... futex resumed>) = 1 [pid 6985] <... futex resumed>) = 0 [pid 5612] close(3 [pid 5610] <... close resumed>) = 0 [pid 6990] mount("/dev/loop2", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 6987] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6985] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6981] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5610] rmdir("./52" [pid 6987] <... openat resumed>) = 4 [pid 6985] <... futex resumed>) = 0 [pid 6981] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5610] <... rmdir resumed>) = 0 [ 147.466768][ T6987] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.489036][ T6990] loop2: detected capacity change from 0 to 1024 [pid 6985] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-upstream-fs/strace-static-x86_64: Process 6993 attached [pid 6987] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] mkdir("./53", 0777 [pid 6993] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6985] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5612] <... close resumed>) = 0 [pid 6985] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 147.539114][ T37] audit: type=1800 audit(1785844677.934:273): pid=6987 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop0" ino=15 res=0 errno=0 [pid 6985] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6993] <... rseq resumed>) = 0 [pid 6981] <... clone3 resumed> => {parent_tid=[6993]}, 88) = 6993 [pid 6987] <... futex resumed>) = 1 [pid 6985] <... futex resumed>) = 0 [pid 5612] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5610] <... mkdir resumed>) = 0 [pid 6993] set_robust_list(0x7fef94c679a0, 24 [pid 6987] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6985] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=34000000} [pid 6981] rt_sigprocmask(SIG_SETMASK, [] [pid 6993] <... set_robust_list resumed>) = 0 [pid 6981] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5612] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6993] rt_sigprocmask(SIG_SETMASK, [] [pid 6987] <... openat resumed>) = 5 [pid 6981] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6993] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6987] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6981] <... futex resumed>) = 0 [pid 5612] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5610] <... openat resumed>) = 3 [pid 6987] <... futex resumed>) = 1 [pid 6985] <... futex resumed>) = 0 [pid 6981] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6987] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [ 147.576514][ T6990] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.606190][ T6993] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 147.606532][ T6993] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1092 with error 28 [pid 6985] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] ioctl(3, LOOP_CLR_FDci2-upstream-fs/strace-static-x86_64: Process 6996 attached [pid 6993] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6990] <... mount resumed>) = 0 [pid 6987] <... openat resumed>) = 6 [pid 6985] <... futex resumed>) = 0 [pid 6984] <... sendfile resumed>) = 1118208 [pid 6981] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6996] set_robust_list(0x5555748a66e0, 24 [pid 6990] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6987] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6985] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6996 [pid 5610] <... ioctl resumed>) = 0 [pid 6996] <... set_robust_list resumed>) = 0 [pid 6993] +++ killed by SIGBUS +++ [pid 6990] <... openat resumed>) = 3 [pid 6987] <... futex resumed>) = 0 [pid 6985] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5612] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] close(3 [pid 6996] rt_sigprocmask(SIG_SETMASK, [] [pid 6990] chdir("./file1" [pid 6987] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6985] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6984] +++ killed by SIGBUS +++ [pid 6981] +++ killed by SIGBUS +++ [pid 5612] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6996] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6990] <... chdir resumed>) = 0 [pid 6987] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6985] <... futex resumed>) = 0 [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6981, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6996] chdir("./55" [pid 6990] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6987] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6985] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 6996] <... chdir resumed>) = 0 [pid 6990] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6987] <... mmap resumed>) = 0x200000000000 [pid 5610] <... close resumed>) = 0 [pid 6996] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6990] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6996] <... prctl resumed>) = 0 [pid 6990] <... futex resumed>) = 1 [pid 6987] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6986] <... futex resumed>) = 0 [pid 5610] <... rt_sigprocmask resumed>, [], 8) = 0 [ 147.606557][ T6993] EXT4-fs (loop4): This should not happen!! Data will be lost [ 147.606557][ T6993] [ 147.606570][ T6993] EXT4-fs (loop4): Total free blocks count 0 [ 147.606581][ T6993] EXT4-fs (loop4): Free/Dirty block details [ 147.606592][ T6993] EXT4-fs (loop4): free_blocks=20480 [ 147.606605][ T6993] EXT4-fs (loop4): dirty_blocks=1104 [ 147.606617][ T6993] EXT4-fs (loop4): Block reservation details [ 147.606628][ T6993] EXT4-fs (loop4): i_reserved_data_blocks=69 [pid 6996] setpgid(0, 0 [pid 6990] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6987] <... futex resumed>) = 1 [pid 6986] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6985] <... futex resumed>) = 0 [pid 5614] <... restart_syscall resumed>) = 0 [pid 5610] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6996] <... setpgid resumed>) = 0 [pid 6987] sendfile(4, 5, NULL, 553647746 [pid 6986] <... futex resumed>) = 0 [pid 6985] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6985] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-upstream-fs/strace-static-x86_64: Process 6997 attached [pid 6996] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6986] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] umount2("./53", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6997] set_robust_list(0x5555748a66e0, 24 [pid 6996] <... openat resumed>) = 3 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6996] write(3, "1000", 4) = 4 [pid 5610] <... clone resumed>, child_tidptr=0x5555748a66d0) = 6997 [pid 6996] close(3 [pid 6990] <... openat resumed>) = 4 [pid 5614] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5610] rt_sigprocmask(SIG_SETMASK, [] [pid 6997] <... set_robust_list resumed>) = 0 [pid 6996] <... close resumed>) = 0 [pid 6990] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... openat resumed>) = 3 [pid 5610] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6997] rt_sigprocmask(SIG_SETMASK, [] [pid 6996] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6997] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] fstat(3 [pid 6997] chdir("./53") = 0 [pid 6997] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6997] setpgid(0, 0) = 0 [pid 6990] <... futex resumed>) = 1 [pid 6986] <... futex resumed>) = 0 [pid 6997] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6990] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6986] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6990] <... openat resumed>) = 5 [pid 6986] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6990] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6997] <... openat resumed>) = 3 [pid 6996] write(1, "executing program\n", 18 [pid 6990] <... futex resumed>) = 1 [pid 6986] <... futex resumed>) = 0 [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 executing program [pid 6997] write(3, "1000", 4 [pid 6996] <... write resumed>) = 18 [pid 6990] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6986] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] getdents64(3 [pid 6997] <... write resumed>) = 4 [pid 6996] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6990] <... openat resumed>) = 6 [pid 6986] <... futex resumed>) = 0 [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6997] close(3 [pid 6996] <... futex resumed>) = 0 [pid 6990] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6986] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6996] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6990] <... futex resumed>) = 0 [pid 6986] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6996] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6990] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6986] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6997] <... close resumed>) = 0 [pid 6996] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6990] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6986] <... futex resumed>) = 0 [pid 6985] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5614] umount2("./53/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6997] symlink("/dev/binderfs", "./binderfs" [pid 6996] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6990] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6986] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6985] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6997] <... symlink resumed>) = 0 [pid 6996] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6990] <... mmap resumed>) = 0x200000000000 [pid 6985] <... futex resumed>) = 0 [pid 6997] write(1, "executing program\n", 18 [pid 6996] <... mmap resumed>) = 0x7fef94c68000 executing program [pid 6990] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6985] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6997] <... write resumed>) = 18 [pid 6996] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6990] <... futex resumed>) = 1 [pid 6985] <... mmap resumed>) = 0x7fef94c47000 [pid 6997] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6996] <... mprotect resumed>) = 0 [pid 6990] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6986] <... futex resumed>) = 0 [pid 6985] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6997] <... futex resumed>) = 0 [ 147.736461][ T37] audit: type=1800 audit(1785844678.134:274): pid=6990 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop2" ino=15 res=0 errno=0 [pid 6996] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6990] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6986] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6985] <... mprotect resumed>) = 0 [pid 6990] sendfile(4, 5, NULL, 553647746 [pid 6986] <... futex resumed>) = 0 [pid 6985] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6986] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6997] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60}, NULL, 8) = 0 [pid 6996] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6985] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6997] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6996] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6997] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6985] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 6998 attached [pid 6997] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0ci2-upstream-fs/strace-static-x86_64: Process 6999 attached ) = 0x7fef94c68000 [pid 6996] <... clone3 resumed> => {parent_tid=[6998]}, 88) = 6998 [pid 6999] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6998] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6997] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6996] rt_sigprocmask(SIG_SETMASK, [] [pid 6985] <... clone3 resumed> => {parent_tid=[6999]}, 88) = 6999 [pid 6996] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6999] <... rseq resumed>) = 0 [pid 6998] <... rseq resumed>) = 0 [pid 6997] <... mprotect resumed>) = 0 [pid 6996] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6985] rt_sigprocmask(SIG_SETMASK, [] [pid 6996] <... futex resumed>) = 0 [pid 6999] set_robust_list(0x7fef94c679a0, 24 [pid 6998] set_robust_list(0x7fef94c889a0, 24 [pid 6997] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6996] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6985] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6999] <... set_robust_list resumed>) = 0 [pid 6985] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6999] rt_sigprocmask(SIG_SETMASK, [] [pid 6998] <... set_robust_list resumed>) = 0 [pid 6997] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 6985] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6999] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6998] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6997] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0}ci2-upstream-fs/strace-static-x86_64: Process 7000 attached [pid 6998] memfd_create("syzkaller", 0 [pid 7000] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6998] <... memfd_create resumed>) = 3 [pid 6997] <... clone3 resumed> => {parent_tid=[7000]}, 88) = 7000 [pid 7000] <... rseq resumed>) = 0 [pid 6998] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6997] rt_sigprocmask(SIG_SETMASK, [] [pid 7000] set_robust_list(0x7fef94c889a0, 24 [pid 6998] <... mmap resumed>) = 0x7fef8c868000 [pid 6997] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6997] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 147.828969][ T5614] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 147.835817][ T6999] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 147.836904][ T6999] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 556 with error 28 [ 147.836930][ T6999] EXT4-fs (loop0): This should not happen!! Data will be lost [ 147.836930][ T6999] [pid 6997] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6986] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6986] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7000] <... set_robust_list resumed>) = 0 [pid 7000] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7000] memfd_create("syzkaller", 0 [pid 6986] <... futex resumed>) = 0 [pid 7000] <... memfd_create resumed>) = 3 [pid 7000] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fef8c868000 [pid 6986] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c47000 [pid 6998] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7000] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6986] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 6985] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6986] <... mprotect resumed>) = 0 [pid 6999] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6998] <... write resumed>) = 524288 [pid 6998] munmap(0x7fef8c868000, 138412032 [pid 6986] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6998] <... munmap resumed>) = 0 [pid 6998] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6998] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5614] <... umount2 resumed>) = 0 [pid 5614] umount2("./53/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7000] <... write resumed>) = 524288 [pid 6998] close(3 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./53/file1" [pid 6998] <... close resumed>) = 0 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6998] close(4 [pid 6987] <... sendfile resumed>) = ? [pid 6986] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5614] umount2("./53/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6999] +++ killed by SIGBUS +++ [pid 6998] <... close resumed>) = 0 [pid 6986] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6998] mkdir("./file1", 0777 [pid 6987] +++ killed by SIGBUS +++ [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ci2-upstream-fs/strace-static-x86_64: Process 7001 attached [pid 7000] munmap(0x7fef8c868000, 138412032 [pid 6998] <... mkdir resumed>) = 0 [pid 6986] <... clone3 resumed> => {parent_tid=[7001]}, 88) = 7001 [pid 5614] openat(AT_FDCWD, "./53/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6986] rt_sigprocmask(SIG_SETMASK, [] [pid 7000] <... munmap resumed>) = 0 [pid 6986] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7001] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 6998] mount("/dev/loop3", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5614] <... openat resumed>) = 4 [pid 6986] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 147.836943][ T6999] EXT4-fs (loop0): Total free blocks count 0 [ 147.836954][ T6999] EXT4-fs (loop0): Free/Dirty block details [ 147.836966][ T6999] EXT4-fs (loop0): free_blocks=20480 [ 147.836979][ T6999] EXT4-fs (loop0): dirty_blocks=560 [ 147.836990][ T6999] EXT4-fs (loop0): Block reservation details [ 147.837000][ T6999] EXT4-fs (loop0): i_reserved_data_blocks=35 [ 147.876435][ T5614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.922609][ T6998] loop3: detected capacity change from 0 to 1024 [pid 6986] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7001] <... rseq resumed>) = 0 [pid 7000] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6985] +++ killed by SIGBUS +++ [pid 5614] fstat(4 [pid 7001] set_robust_list(0x7fef94c679a0, 24 [pid 7000] <... openat resumed>) = 4 [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6985, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 7001] <... set_robust_list resumed>) = 0 [pid 7000] ioctl(4, LOOP_SET_FD, 3 [pid 5614] getdents64(4 [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 7001] rt_sigprocmask(SIG_SETMASK, [] [pid 7000] <... ioctl resumed>) = 0 [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5609] <... restart_syscall resumed>) = 0 [pid 7001] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] getdents64(4 [pid 7000] close(3 [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 7000] <... close resumed>) = 0 [pid 5614] close(4 [pid 7000] close(4 [pid 5614] <... close resumed>) = 0 [pid 5614] rmdir("./53/file1" [pid 7000] <... close resumed>) = 0 [pid 5614] <... rmdir resumed>) = 0 [pid 7000] mkdir("./file1", 0777) = 0 [pid 5614] umount2("./53/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7000] mount("/dev/loop1", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./53/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./53/binderfs") = 0 [pid 5614] getdents64(3 [pid 5609] umount2("./54", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6998] <... mount resumed>) = 0 [ 147.969651][ T7000] loop1: detected capacity change from 0 to 1024 [ 147.976623][ T7001] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 147.976819][ T7001] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 580 with error 28 [ 147.976841][ T7001] EXT4-fs (loop2): This should not happen!! Data will be lost [ 147.976841][ T7001] [ 147.976855][ T7001] EXT4-fs (loop2): Total free blocks count 0 [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [ 147.976866][ T7001] EXT4-fs (loop2): Free/Dirty block details [ 147.976877][ T7001] EXT4-fs (loop2): free_blocks=20480 [ 147.976890][ T7001] EXT4-fs (loop2): dirty_blocks=592 [ 147.976902][ T7001] EXT4-fs (loop2): Block reservation details [ 147.976913][ T7001] EXT4-fs (loop2): i_reserved_data_blocks=37 [ 147.993967][ T6998] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 7001] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7000] <... mount resumed>) = 0 [pid 6998] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6986] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5614] close(3 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6998] <... openat resumed>) = 3 [pid 5614] <... close resumed>) = 0 [pid 5614] rmdir("./53" [pid 7000] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6998] chdir("./file1" [pid 5614] <... rmdir resumed>) = 0 [pid 7000] <... openat resumed>) = 3 [pid 6998] <... chdir resumed>) = 0 [pid 6998] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5609] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7000] chdir("./file1" [pid 6998] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7000] <... chdir resumed>) = 0 [pid 6998] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6990] <... sendfile resumed>) = ? [pid 5614] mkdir("./54", 0777 [pid 5609] <... openat resumed>) = 3 [pid 7001] +++ killed by SIGBUS +++ [pid 7000] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6990] +++ killed by SIGBUS +++ [pid 5614] <... mkdir resumed>) = 0 [pid 5609] fstat(3 [pid 7000] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6998] <... futex resumed>) = 1 [pid 6996] <... futex resumed>) = 0 [pid 7000] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6998] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6996] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7000] <... futex resumed>) = 1 [pid 6998] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6997] <... futex resumed>) = 0 [pid 6996] <... futex resumed>) = 0 [pid 6986] +++ killed by SIGBUS +++ [pid 5614] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7000] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6998] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6997] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6996] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] <... openat resumed>) = 3 [pid 5609] getdents64(3 [pid 7000] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7000] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 6998] <... openat resumed>) = 4 [pid 6997] <... futex resumed>) = 0 [pid 5614] ioctl(3, LOOP_CLR_FD [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 7000] <... openat resumed>) = 4 [ 148.036822][ T7000] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5609] umount2("./54/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7000] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6997] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] <... ioctl resumed>) = 0 [pid 7000] <... futex resumed>) = 0 [pid 6998] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6997] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5614] close(3 [pid 7000] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6998] <... futex resumed>) = 1 [pid 6997] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6996] <... futex resumed>) = 0 [pid 7000] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7000] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6998] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 6997] <... futex resumed>) = 0 [pid 6996] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7000] <... openat resumed>) = 5 [pid 6998] <... openat resumed>) = 5 [pid 6997] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6996] <... futex resumed>) = 0 [pid 7000] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6998] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6996] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7000] <... futex resumed>) = 1 [pid 6997] <... futex resumed>) = 0 [pid 7000] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6998] <... futex resumed>) = 0 [pid 6997] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6996] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7000] <... openat resumed>) = 6 [pid 6998] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6997] <... futex resumed>) = 0 [pid 6996] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6998] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5614] <... close resumed>) = 0 [pid 7000] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6997] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6986, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 7000] <... futex resumed>) = 0 [pid 6998] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 6997] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6996] <... futex resumed>) = 0 [pid 5611] umount2("./55", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7000] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6998] <... openat resumed>) = 6 [pid 6997] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6996] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7000] <... mmap resumed>) = 0x200000000000 [pid 6997] <... futex resumed>) = 0 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6998] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5611] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7000] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6998] <... futex resumed>) = 1 [pid 6997] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6996] <... futex resumed>) = 0 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5611] <... openat resumed>) = 3 [pid 7000] <... futex resumed>) = 0 [pid 6998] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6997] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6996] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7000] sendfile(4, 5, NULL, 553647746 [pid 6998] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6997] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 6996] <... futex resumed>) = 0 [pid 5611] fstat(3 [pid 6998] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 6997] <... futex resumed>) = 0 [pid 6998] <... mmap resumed>) = 0x200000000000 [pid 6996] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6997] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] getdents64(3ci2-upstream-fs/strace-static-x86_64: Process 7006 attached [pid 6998] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 6998] <... futex resumed>) = 1 [pid 6996] <... futex resumed>) = 0 [pid 5614] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7006 [ 148.111557][ T37] audit: type=1800 audit(1785844678.504:275): pid=6998 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 148.111603][ T37] audit: type=1800 audit(1785844678.504:276): pid=7000 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop1" ino=15 res=0 errno=0 [pid 5611] umount2("./55/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7006] set_robust_list(0x5555748a66e0, 24 [pid 6998] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6996] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 7006] <... set_robust_list resumed>) = 0 [pid 7006] rt_sigprocmask(SIG_SETMASK, [] [pid 6998] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6996] <... futex resumed>) = 0 [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7006] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6998] sendfile(4, 5, NULL, 553647746 [pid 6996] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7006] chdir("./54") = 0 [pid 7006] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7006] setpgid(0, 0) = 0 [pid 7006] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7006] write(3, "1000", 4) = 4 [pid 7006] close(3) = 0 [pid 6997] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6997] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7006] symlink("/dev/binderfs", "./binderfs" [pid 6997] <... futex resumed>) = 0 [pid 7006] <... symlink resumed>) = 0 [pid 6997] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c47000 [pid 7006] write(1, "executing program\n", 18 executing program [pid 6997] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 7006] <... write resumed>) = 18 [pid 6997] <... mprotect resumed>) = 0 [ 148.164932][ T3414] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 556 with max blocks 4 with error 28 [ 148.176531][ T5609] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 7006] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 6997] rt_sigprocmask(SIG_BLOCK, ~[] [pid 6996] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6996] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7006] <... futex resumed>) = 0 [pid 6997] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7006] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 6997] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 6996] <... futex resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 7007 attached [pid 7006] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 6996] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7007] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 7006] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 6997] <... clone3 resumed> => {parent_tid=[7007]}, 88) = 7007 [pid 6996] <... mmap resumed>) = 0x7fef94c47000 [pid 7007] set_robust_list(0x7fef94c679a0, 24 [pid 7006] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6997] rt_sigprocmask(SIG_SETMASK, [] [pid 6996] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 7007] <... set_robust_list resumed>) = 0 [pid 7007] rt_sigprocmask(SIG_SETMASK, [] [pid 7006] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6996] <... mprotect resumed>) = 0 [pid 7006] <... mmap resumed>) = 0x7fef94c68000 [pid 7007] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] <... umount2 resumed>) = 0 [pid 6997] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6996] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7007] futex(0x7fef94d63e58, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6997] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7007] <... futex resumed>) = 0 [pid 7006] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 6997] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7006] <... mprotect resumed>) = 0 [pid 6996] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5609] umount2("./54/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6996] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ci2-upstream-fs/strace-static-x86_64: Process 7008 attached [pid 5609] newfstatat(AT_FDCWD, "./54/file1" [pid 7006] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5609] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 148.222154][ T63] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 580 with max blocks 4 with error 28 [ 148.236248][ T5611] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 6996] <... clone3 resumed> => {parent_tid=[7008]}, 88) = 7008 [pid 5609] umount2("./54/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6996] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7006] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7008] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7006] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 6996] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6996] <... futex resumed>) = 0 [pid 5609] openat(AT_FDCWD, "./54/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7008] <... rseq resumed>) = 0 [pid 6996] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-upstream-fs/strace-static-x86_64: Process 7009 attached [pid 7008] set_robust_list(0x7fef94c679a0, 24 [pid 7006] <... clone3 resumed> => {parent_tid=[7009]}, 88) = 7009 [pid 5609] <... openat resumed>) = 4 [pid 7009] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7008] <... set_robust_list resumed>) = 0 [pid 7007] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7006] rt_sigprocmask(SIG_SETMASK, [] [pid 5611] <... umount2 resumed>) = 0 [pid 5609] fstat(4 [ 148.288733][ T7007] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 148.288952][ T7007] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 292 with error 28 [ 148.288974][ T7007] EXT4-fs (loop1): This should not happen!! Data will be lost [ 148.288974][ T7007] [ 148.288987][ T7007] EXT4-fs (loop1): Total free blocks count 0 [ 148.288998][ T7007] EXT4-fs (loop1): Free/Dirty block details [pid 7008] rt_sigprocmask(SIG_SETMASK, [] [pid 7009] <... rseq resumed>) = 0 [pid 7008] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7006] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7000] <... sendfile resumed>) = ? [pid 6997] <... futex resumed>) = ? [pid 6996] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5611] umount2("./55/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7000] +++ killed by SIGBUS +++ [pid 7009] set_robust_list(0x7fef94c889a0, 24 [pid 7006] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] getdents64(4 [pid 7009] <... set_robust_list resumed>) = 0 [pid 7006] <... futex resumed>) = 0 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7009] rt_sigprocmask(SIG_SETMASK, [] [pid 7006] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 7009] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5611] newfstatat(AT_FDCWD, "./55/file1" [pid 7009] memfd_create("syzkaller", 0 [pid 5611] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] getdents64(4 [pid 7009] <... memfd_create resumed>) = 3 [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 7009] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5611] umount2("./55/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] close(4 [pid 7009] <... mmap resumed>) = 0x7fef8c868000 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] openat(AT_FDCWD, "./55/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5611] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 148.289009][ T7007] EXT4-fs (loop1): free_blocks=20480 [ 148.289022][ T7007] EXT4-fs (loop1): dirty_blocks=304 [ 148.289033][ T7007] EXT4-fs (loop1): Block reservation details [ 148.289044][ T7007] EXT4-fs (loop1): i_reserved_data_blocks=19 [pid 5611] getdents64(4 [pid 5609] <... close resumed>) = 0 [pid 5609] rmdir("./54/file1" [pid 7009] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7007] +++ killed by SIGBUS +++ [pid 6997] +++ killed by SIGBUS +++ [pid 5609] <... rmdir resumed>) = 0 [pid 5610] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6997, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5609] umount2("./54/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7009] <... write resumed>) = 524288 [pid 7008] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 6998] <... sendfile resumed>) = 827392 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] umount2("./53", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] newfstatat(AT_FDCWD, "./54/binderfs" [pid 7009] munmap(0x7fef8c868000, 138412032 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7009] <... munmap resumed>) = 0 [pid 7008] +++ killed by SIGBUS +++ [pid 6998] +++ killed by SIGBUS +++ [pid 5610] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5610] fstat(3 [pid 5609] unlink("./54/binderfs" [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] <... unlink resumed>) = 0 [pid 7009] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5610] getdents64(3 [pid 7009] <... openat resumed>) = 4 [pid 6996] +++ killed by SIGBUS +++ [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5609] getdents64(3 [pid 7009] ioctl(4, LOOP_SET_FD, 3 [pid 5612] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6996, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5610] umount2("./53/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7009] <... ioctl resumed>) = 0 [pid 5612] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5612] <... restart_syscall resumed>) = 0 [pid 5609] close(3 [pid 7009] close(3 [pid 5612] umount2("./55", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... close resumed>) = 0 [pid 7009] <... close resumed>) = 0 [pid 5609] rmdir("./54" [pid 7009] close(4 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] <... rmdir resumed>) = 0 [pid 7009] <... close resumed>) = 0 [pid 5612] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5612] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 148.372601][ T7008] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 148.379231][ T7008] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 804 with error 28 [ 148.379258][ T7008] EXT4-fs (loop3): This should not happen!! Data will be lost [ 148.379258][ T7008] [ 148.379269][ T7008] EXT4-fs (loop3): Total free blocks count 0 [ 148.379279][ T7008] EXT4-fs (loop3): Free/Dirty block details [ 148.379289][ T7008] EXT4-fs (loop3): free_blocks=20480 [ 148.379300][ T7008] EXT4-fs (loop3): dirty_blocks=816 [pid 5612] getdents64(3 [pid 5609] mkdir("./55", 0777 [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5609] <... mkdir resumed>) = 0 [pid 7009] mkdir("./file1", 0777 [pid 5612] umount2("./55/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7009] <... mkdir resumed>) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 7009] mount("/dev/loop4", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5609] ioctl(3, LOOP_CLR_FD) = 0 [pid 5609] close(3 [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5611] getdents64(4, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5611] close(4 [pid 5609] <... close resumed>) = 0 [pid 5611] <... close resumed>) = 0 [pid 5611] rmdir("./55/file1" [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5611] <... rmdir resumed>) = 0 [pid 5609] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5611] umount2("./55/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5611] newfstatat(AT_FDCWD, "./55/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] unlink("./55/binderfs") = 0 ci2-upstream-fs/strace-static-x86_64: Process 7012 attached [ 148.379310][ T7008] EXT4-fs (loop3): Block reservation details [ 148.379320][ T7008] EXT4-fs (loop3): i_reserved_data_blocks=51 [ 148.429670][ T7009] loop4: detected capacity change from 0 to 1024 [pid 5611] getdents64(3 [pid 7009] <... mount resumed>) = 0 [pid 5609] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7012 [pid 7012] set_robust_list(0x5555748a66e0, 24 [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [ 148.493745][ T63] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 804 with max blocks 4 with error 28 [ 148.494333][ T7009] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.500239][ T5612] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 148.501522][ T5610] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 7012] <... set_robust_list resumed>) = 0 [pid 5612] <... umount2 resumed>) = 0 [pid 5611] close(3 [pid 5610] <... umount2 resumed>) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7012] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] umount2("./55/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] umount2("./53/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5612] newfstatat(AT_FDCWD, "./55/file1" [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] <... close resumed>) = 0 [pid 7012] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7009] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7012] chdir("./55" [pid 7009] <... openat resumed>) = 3 [pid 5611] rmdir("./55" [pid 5610] newfstatat(AT_FDCWD, "./53/file1" [pid 7012] <... chdir resumed>) = 0 [pid 5612] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5610] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7012] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5612] umount2("./55/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] umount2("./53/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7009] chdir("./file1") = 0 [pid 7009] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7009] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7012] <... prctl resumed>) = 0 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] <... rmdir resumed>) = 0 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7009] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7006] <... futex resumed>) = 0 [pid 5610] openat(AT_FDCWD, "./53/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5612] openat(AT_FDCWD, "./55/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7012] setpgid(0, 0 [pid 7006] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7012] <... setpgid resumed>) = 0 [pid 5610] <... openat resumed>) = 4 [pid 5612] <... openat resumed>) = 4 [pid 7012] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7009] <... futex resumed>) = 0 [pid 7006] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] fstat(4 [pid 5611] mkdir("./56", 0777 [pid 5610] fstat(4 [pid 7009] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5611] <... mkdir resumed>) = 0 [pid 5610] getdents64(4 [pid 7009] <... openat resumed>) = 4 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5610] getdents64(4 [pid 7012] <... openat resumed>) = 3 [pid 7009] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] getdents64(4 [pid 5611] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5610] close(4 [pid 7012] write(3, "1000", 4 [pid 7009] <... futex resumed>) = 1 [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5611] <... openat resumed>) = 3 [pid 5610] <... close resumed>) = 0 [pid 5610] rmdir("./53/file1" [pid 7009] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7012] <... write resumed>) = 4 [pid 5612] getdents64(4 [pid 7012] close(3 [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5612] close(4 [pid 5610] <... rmdir resumed>) = 0 [pid 7012] <... close resumed>) = 0 [pid 7006] <... futex resumed>) = 0 [pid 7012] symlink("/dev/binderfs", "./binderfs" [pid 5612] <... close resumed>) = 0 [pid 7006] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] ioctl(3, LOOP_CLR_FD) = 0 [pid 7009] <... futex resumed>) = 0 [pid 7006] <... futex resumed>) = 1 [pid 5612] rmdir("./55/file1" [pid 5611] close(3 [pid 7012] <... symlink resumed>) = 0 [pid 7009] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7006] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... rmdir resumed>) = 0 [pid 7009] <... openat resumed>) = 5 [pid 5612] umount2("./55/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7009] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7009] <... futex resumed>) = 1 [pid 7006] <... futex resumed>) = 0 [pid 5612] newfstatat(AT_FDCWD, "./55/binderfs" [pid 5610] umount2("./53/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5612] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7006] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5612] unlink("./55/binderfs" [pid 7009] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 5612] <... unlink resumed>) = 0 [pid 7012] write(1, "executing program\n", 18 [pid 7009] <... openat resumed>) = 6 [pid 7006] <... futex resumed>) = 0 [pid 5610] newfstatat(AT_FDCWD, "./53/binderfs" executing program [ 148.517844][ T5610] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.578548][ T37] audit: type=1800 audit(1785844678.974:277): pid=7009 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop4" ino=15 res=0 errno=0 [pid 5612] getdents64(3 [pid 7012] <... write resumed>) = 18 [pid 7009] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7006] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5610] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7009] <... futex resumed>) = 0 [pid 7006] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5612] close(3 [pid 7012] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7009] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5610] unlink("./53/binderfs" [pid 5612] <... close resumed>) = 0 [pid 5612] rmdir("./55" [pid 7012] <... futex resumed>) = 0 [pid 7012] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 7006] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... rmdir resumed>) = 0 [pid 7006] <... futex resumed>) = 1 [pid 7009] <... futex resumed>) = 0 [pid 7012] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 7009] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7006] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] mkdir("./56", 0777 [pid 5611] <... close resumed>) = 0 [pid 5610] <... unlink resumed>) = 0 [pid 7009] <... mmap resumed>) = 0x200000000000 [pid 5612] <... mkdir resumed>) = 0 [pid 5611] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7009] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7006] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5611] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7012] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 5610] getdents64(3 [pid 5612] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7009] <... futex resumed>) = 0 [pid 5611] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 7012] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7009] sendfile(4, 5, NULL, 553647746 [pid 7006] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... openat resumed>) = 3 [pid 7012] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7006] <... futex resumed>) = 0 [pid 7006] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] ioctl(3, LOOP_CLR_FD [pid 7012] <... mmap resumed>) = 0x7fef94c68000 [pid 7012] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 5612] <... ioctl resumed>) = 0 [pid 5610] close(3 [pid 7012] <... mprotect resumed>) = 0 [pid 5610] <... close resumed>) = 0 [pid 5612] close(3 [pid 7012] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5610] rmdir("./53" [pid 7012] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5610] <... rmdir resumed>) = 0 [pid 7012] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0}ci2-upstream-fs/strace-static-x86_64: Process 7013 attached [pid 7013] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 7012] <... clone3 resumed> => {parent_tid=[7013]}, 88) = 7013 [pid 7013] set_robust_list(0x7fef94c889a0, 24) = 0 [pid 7013] rt_sigprocmask(SIG_SETMASK, [] [pid 7012] rt_sigprocmask(SIG_SETMASK, [] [pid 7013] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7013] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7012] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7012] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5610] mkdir("./54", 0777 [pid 5612] <... close resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 7014 attached [pid 7013] <... futex resumed>) = 0 [pid 7012] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5610] <... mkdir resumed>) = 0 [pid 7014] set_robust_list(0x5555748a66e0, 24 [pid 7013] memfd_create("syzkaller", 0 [pid 5612] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5611] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7014 [pid 5610] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7014] <... set_robust_list resumed>) = 0 [pid 7013] <... memfd_create resumed>) = 3 [pid 5612] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5611] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] <... openat resumed>) = 3 [pid 7014] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7013] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7014] chdir("./56" [pid 5610] ioctl(3, LOOP_CLR_FD [pid 7014] <... chdir resumed>) = 0 [pid 7013] <... mmap resumed>) = 0x7fef8c868000 [pid 5610] <... ioctl resumed>) = 0 [pid 7014] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5610] close(3ci2-upstream-fs/strace-static-x86_64: Process 7015 attached [pid 7014] <... prctl resumed>) = 0 [pid 5612] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7015 [pid 5612] rt_sigprocmask(SIG_SETMASK, [] [pid 7014] setpgid(0, 0 [pid 5612] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7014] <... setpgid resumed>) = 0 [pid 7014] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7015] set_robust_list(0x5555748a66e0, 24 [pid 7013] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7014] write(3, "1000", 4 [pid 7006] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7015] <... set_robust_list resumed>) = 0 [pid 7006] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7014] <... write resumed>) = 4 [pid 7006] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7015] rt_sigprocmask(SIG_SETMASK, [] [pid 7014] close(3 [pid 7006] <... mmap resumed>) = 0x7fef94c47000 [pid 7006] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 7015] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7014] <... close resumed>) = 0 [pid 7006] <... mprotect resumed>) = 0 [pid 7014] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7014] write(1, "executing program\n", 18) = 18 executing program [pid 7014] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7014] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60}, NULL, 8) = 0 [pid 7014] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 7015] chdir("./56" [pid 7006] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5610] <... close resumed>) = 0 [pid 7014] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7006] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7015] <... chdir resumed>) = 0 [pid 7014] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7015] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7014] <... mmap resumed>) = 0x7fef94c68000 [pid 7014] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7015] setpgid(0, 0 [pid 7014] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7015] <... setpgid resumed>) = 0 [pid 7006] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 7014] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7014] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 7015] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECci2-upstream-fs/strace-static-x86_64: Process 7017 attached ci2-upstream-fs/strace-static-x86_64: Process 7016 attached ) = 3 [pid 5610] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7017] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7016] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7014] <... clone3 resumed> => {parent_tid=[7016]}, 88) = 7016 [pid 7013] <... write resumed>) = 524288 [pid 7017] <... rseq resumed>) = 0 [pid 7015] write(3, "1000", 4 [pid 7014] rt_sigprocmask(SIG_SETMASK, [] [pid 7006] <... clone3 resumed> => {parent_tid=[7017]}, 88) = 7017 [pid 5610] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7017] set_robust_list(0x7fef94c679a0, 24 [pid 7016] <... rseq resumed>) = 0 [pid 7015] <... write resumed>) = 4 [pid 7014] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7006] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7017] <... set_robust_list resumed>) = 0 [pid 7016] set_robust_list(0x7fef94c889a0, 24 [pid 7015] close(3 [pid 7013] munmap(0x7fef8c868000, 138412032 [pid 7006] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7017] rt_sigprocmask(SIG_SETMASK, [] [pid 7016] <... set_robust_list resumed>) = 0 [pid 7015] <... close resumed>) = 0 [pid 7014] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7013] <... munmap resumed>) = 0 [pid 7006] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7017] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7015] symlink("/dev/binderfs", "./binderfs" [pid 7014] <... futex resumed>) = 0 [pid 7006] <... futex resumed>) = 0 [pid 7016] rt_sigprocmask(SIG_SETMASK, [] [pid 7014] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7016] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7016] memfd_create("syzkaller", 0) = 3 [pid 7016] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0ci2-upstream-fs/strace-static-x86_64: Process 7018 attached [ 148.760138][ T7017] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 148.764016][ T7017] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 780 with error 28 [ 148.764046][ T7017] EXT4-fs (loop4): This should not happen!! Data will be lost [ 148.764046][ T7017] [ 148.764059][ T7017] EXT4-fs (loop4): Total free blocks count 0 [ 148.764071][ T7017] EXT4-fs (loop4): Free/Dirty block details ) = 0x7fef8c868000 [pid 7015] <... symlink resumed>) = 0 [pid 7013] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7006] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7018] set_robust_list(0x5555748a66e0, 24 [pid 7015] write(1, "executing program\n", 18 [pid 7013] <... openat resumed>) = 4 executing program [pid 7018] <... set_robust_list resumed>) = 0 [pid 7015] <... write resumed>) = 18 [pid 7013] ioctl(4, LOOP_SET_FD, 3 [pid 5610] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7018 [pid 7018] rt_sigprocmask(SIG_SETMASK, [] [pid 7015] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7016] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7013] <... ioctl resumed>) = 0 [pid 5610] rt_sigprocmask(SIG_SETMASK, [] [pid 7015] <... futex resumed>) = 0 [pid 5610] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7017] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7018] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7015] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60}, NULL, 8) = 0 [pid 7018] chdir("./54" [pid 7015] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7015] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c68000 [pid 7016] <... write resumed>) = 524288 [pid 7018] <... chdir resumed>) = 0 [pid 7015] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 7013] close(3 [pid 7009] <... sendfile resumed>) = ? [pid 7006] <... futex resumed>) = ? [pid 7018] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7017] +++ killed by SIGBUS +++ [pid 7016] munmap(0x7fef8c868000, 138412032 [pid 7015] <... mprotect resumed>) = 0 [pid 7013] <... close resumed>) = 0 [pid 7018] <... prctl resumed>) = 0 [pid 7015] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7018] setpgid(0, 0 [pid 7016] <... munmap resumed>) = 0 [pid 7015] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7013] close(4 [pid 7018] <... setpgid resumed>) = 0 [pid 7013] <... close resumed>) = 0 [pid 7009] +++ killed by SIGBUS +++ [pid 7015] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 7006] +++ killed by SIGBUS +++ [pid 7016] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7013] mkdir("./file1", 0777 [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7006, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12 /* 0.12 s */} --- ci2-upstream-fs/strace-static-x86_64: Process 7019 attached [pid 7018] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7016] <... openat resumed>) = 4 [pid 7013] <... mkdir resumed>) = 0 [pid 5614] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [ 148.764084][ T7017] EXT4-fs (loop4): free_blocks=20480 [ 148.764097][ T7017] EXT4-fs (loop4): dirty_blocks=784 [ 148.764108][ T7017] EXT4-fs (loop4): Block reservation details [ 148.764118][ T7017] EXT4-fs (loop4): i_reserved_data_blocks=49 [pid 7016] ioctl(4, LOOP_SET_FD, 3 [pid 7013] mount("/dev/loop0", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7018] <... openat resumed>) = 3 [pid 7015] <... clone3 resumed> => {parent_tid=[7019]}, 88) = 7019 [pid 7015] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7019] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7015] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7019] <... rseq resumed>) = 0 [pid 7018] write(3, "1000", 4 [pid 7015] <... futex resumed>) = 0 [pid 7019] set_robust_list(0x7fef94c889a0, 24 [pid 7018] <... write resumed>) = 4 [pid 7019] <... set_robust_list resumed>) = 0 [pid 7015] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7019] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7018] close(3 [pid 5614] <... restart_syscall resumed>) = 0 [pid 7019] memfd_create("syzkaller", 0 [pid 7018] <... close resumed>) = 0 [pid 7016] <... ioctl resumed>) = 0 [pid 7019] <... memfd_create resumed>) = 3 [pid 7018] symlink("/dev/binderfs", "./binderfs" [pid 7016] close(3 [pid 5614] umount2("./54", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7018] <... symlink resumed>) = 0 [pid 7016] <... close resumed>) = 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7016] close(4) = 0 [pid 7016] mkdir("./file1", 0777 [pid 7019] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5614] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7016] <... mkdir resumed>) = 0 [pid 5614] <... openat resumed>) = 3 [pid 7019] <... mmap resumed>) = 0x7fef8c868000 [pid 7018] write(1, "executing program\n", 18 [pid 7016] mount("/dev/loop2", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5614] fstat(3 [pid 7018] <... write resumed>) = 18 [pid 7018] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 executing program [pid 7018] <... futex resumed>) = 0 [pid 5614] getdents64(3 [pid 7019] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7018] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 7018] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 5614] umount2("./54/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7018] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7018] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c68000 [pid 7018] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 7019] <... write resumed>) = 524288 [pid 7018] <... mprotect resumed>) = 0 [pid 7019] munmap(0x7fef8c868000, 138412032 [pid 7018] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7019] <... munmap resumed>) = 0 [pid 7018] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7019] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7018] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 7013] <... mount resumed>) = 0 [pid 7019] <... openat resumed>) = 4 ci2-upstream-fs/strace-static-x86_64: Process 7022 attached [pid 7019] ioctl(4, LOOP_SET_FD, 3 [pid 7013] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7022] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7016] <... mount resumed>) = 0 [pid 7022] <... rseq resumed>) = 0 [pid 7013] <... openat resumed>) = 3 [pid 7019] <... ioctl resumed>) = 0 [pid 7013] chdir("./file1" [pid 7016] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7013] <... chdir resumed>) = 0 [pid 7019] close(3 [pid 7016] <... openat resumed>) = 3 [pid 7022] set_robust_list(0x7fef94c889a0, 24 [pid 7019] <... close resumed>) = 0 [pid 7016] chdir("./file1" [pid 7022] <... set_robust_list resumed>) = 0 [pid 7019] close(4 [pid 7016] <... chdir resumed>) = 0 [pid 7013] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7022] rt_sigprocmask(SIG_SETMASK, [] [pid 7019] <... close resumed>) = 0 [pid 7018] <... clone3 resumed> => {parent_tid=[7022]}, 88) = 7022 [pid 7018] rt_sigprocmask(SIG_SETMASK, [] [pid 7022] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7019] mkdir("./file1", 0777 [pid 7018] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7016] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7013] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7022] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7019] <... mkdir resumed>) = 0 [pid 7018] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7013] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7022] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7022] memfd_create("syzkaller", 0 [pid 7016] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7013] <... futex resumed>) = 1 [pid 7012] <... futex resumed>) = 0 [pid 7022] <... memfd_create resumed>) = 3 [pid 7016] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7022] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7018] <... futex resumed>) = 0 [pid 7016] <... futex resumed>) = 1 [pid 7013] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [ 148.917270][ T7013] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.939932][ T7016] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 7012] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7022] <... mmap resumed>) = 0x7fef8c868000 [pid 7019] mount("/dev/loop3", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7016] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7014] <... futex resumed>) = 0 [pid 7012] <... futex resumed>) = 0 [pid 7018] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7013] <... openat resumed>) = 4 [pid 7014] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7012] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7016] <... futex resumed>) = 0 [pid 7014] <... futex resumed>) = 1 [pid 7013] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7012] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7016] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7014] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7013] <... futex resumed>) = 0 [pid 7012] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7013] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7012] <... futex resumed>) = 0 [pid 7013] <... openat resumed>) = 5 [pid 7016] <... openat resumed>) = 4 [pid 7013] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7012] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 7013] <... futex resumed>) = 0 [pid 7012] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7016] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7013] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7012] <... futex resumed>) = 0 [pid 7016] <... futex resumed>) = 1 [pid 7014] <... futex resumed>) = 0 [pid 7016] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7014] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7013] <... openat resumed>) = 6 [pid 7012] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7016] <... openat resumed>) = 5 [pid 7014] <... futex resumed>) = 0 [pid 7022] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7016] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7014] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7013] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7016] <... futex resumed>) = 0 [pid 7016] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7014] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7013] <... futex resumed>) = 1 [pid 7012] <... futex resumed>) = 0 [pid 7014] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7013] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7012] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7022] <... write resumed>) = 524288 [pid 7016] <... futex resumed>) = 0 [pid 7014] <... futex resumed>) = 1 [pid 7013] <... mmap resumed>) = 0x200000000000 [pid 7012] <... futex resumed>) = 0 [pid 7022] munmap(0x7fef8c868000, 138412032 [pid 7016] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7014] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7012] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7022] <... munmap resumed>) = 0 [pid 7016] <... openat resumed>) = 6 [pid 7013] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7012] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7016] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7013] <... futex resumed>) = 0 [pid 7012] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7022] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7016] <... futex resumed>) = 1 [pid 7014] <... futex resumed>) = 0 [pid 7013] sendfile(4, 5, NULL, 553647746 [pid 7012] <... futex resumed>) = 0 [pid 7022] <... openat resumed>) = 4 [pid 7016] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7014] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7012] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7022] ioctl(4, LOOP_SET_FD, 3 [pid 7016] <... mmap resumed>) = 0x200000000000 [pid 7014] <... futex resumed>) = 0 [pid 5614] <... umount2 resumed>) = 0 [ 148.955588][ T3414] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 780 with max blocks 4 with error 28 [ 148.957655][ T5614] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 7022] <... ioctl resumed>) = 0 [pid 7016] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7014] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] umount2("./54/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7016] <... futex resumed>) = 0 [pid 7014] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7014] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7016] sendfile(4, 5, NULL, 553647746 [pid 7014] <... futex resumed>) = 0 [pid 7014] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7022] close(3 [pid 5614] newfstatat(AT_FDCWD, "./54/file1" [pid 7022] <... close resumed>) = 0 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7022] close(4 [pid 5614] umount2("./54/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7022] <... close resumed>) = 0 [pid 7022] mkdir("./file1", 0777 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./54/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7022] <... mkdir resumed>) = 0 [pid 5614] <... openat resumed>) = 4 [pid 7022] mount("/dev/loop1", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5614] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5614] getdents64(4, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5614] getdents64(4, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5614] close(4) = 0 [pid 5614] rmdir("./54/file1" [pid 7019] <... mount resumed>) = 0 [pid 7012] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5614] <... rmdir resumed>) = 0 [pid 7014] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7012] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7014] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7012] <... futex resumed>) = 0 [pid 7019] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7014] <... futex resumed>) = 0 [pid 7012] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5614] umount2("./54/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7014] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7012] <... mmap resumed>) = 0x7fef94c47000 [pid 7014] <... mmap resumed>) = 0x7fef94c47000 [pid 7012] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 7019] <... openat resumed>) = 3 [pid 7014] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 7012] <... mprotect resumed>) = 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7019] chdir("./file1" [pid 7014] <... mprotect resumed>) = 0 [pid 5614] newfstatat(AT_FDCWD, "./54/binderfs" [pid 7012] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7019] <... chdir resumed>) = 0 [pid 7014] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7012] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7019] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7014] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7012] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5614] unlink("./54/binderfs"ci2-upstream-fs/strace-static-x86_64: Process 7029 attached [pid 7019] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7014] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5614] <... unlink resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 7030 attached [pid 7029] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7019] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7012] <... clone3 resumed> => {parent_tid=[7029]}, 88) = 7029 [ 149.067556][ T7019] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5614] getdents64(3 [pid 7030] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7029] <... rseq resumed>) = 0 [pid 7022] <... mount resumed>) = 0 [pid 7019] <... futex resumed>) = 1 [pid 7015] <... futex resumed>) = 0 [pid 7014] <... clone3 resumed> => {parent_tid=[7030]}, 88) = 7030 [pid 7012] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 7030] <... rseq resumed>) = 0 [pid 7029] set_robust_list(0x7fef94c679a0, 24 [pid 7022] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7019] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7015] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7014] rt_sigprocmask(SIG_SETMASK, [] [pid 7012] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] close(3 [pid 7030] set_robust_list(0x7fef94c679a0, 24 [pid 7029] <... set_robust_list resumed>) = 0 [pid 7022] <... openat resumed>) = 3 [pid 7019] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7015] <... futex resumed>) = 0 [pid 7014] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7012] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... close resumed>) = 0 [pid 7030] <... set_robust_list resumed>) = 0 [pid 7029] rt_sigprocmask(SIG_SETMASK, [] [pid 7022] chdir("./file1" [pid 7019] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7015] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7014] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7012] <... futex resumed>) = 0 [pid 5614] rmdir("./54" [pid 7030] rt_sigprocmask(SIG_SETMASK, [] [pid 7029] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7022] <... chdir resumed>) = 0 [pid 7014] <... futex resumed>) = 0 [pid 7012] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7030] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7022] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7019] <... openat resumed>) = 4 [pid 7014] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] <... rmdir resumed>) = 0 [ 149.119511][ T7022] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 7030] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7022] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7019] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7016] <... sendfile resumed>) = 1384448 [pid 5614] mkdir("./55", 0777 [pid 7029] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7022] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7019] <... futex resumed>) = 1 [pid 7015] <... futex resumed>) = 0 [pid 7014] <... futex resumed>) = ? [pid 7013] <... sendfile resumed>) = 237568 [pid 7012] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5614] <... mkdir resumed>) = 0 [pid 7030] +++ killed by SIGBUS +++ [pid 7022] <... futex resumed>) = 1 [pid 7019] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7018] <... futex resumed>) = 0 [ 149.171811][ T7029] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 149.172033][ T7029] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 232 with error 28 [ 149.172056][ T7029] EXT4-fs (loop0): This should not happen!! Data will be lost [ 149.172056][ T7029] [ 149.172070][ T7029] EXT4-fs (loop0): Total free blocks count 0 [ 149.172082][ T7029] EXT4-fs (loop0): Free/Dirty block details [pid 7015] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7022] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7019] <... openat resumed>) = 5 [pid 7018] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7015] <... futex resumed>) = 0 [pid 5614] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7029] +++ killed by SIGBUS +++ [pid 7019] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7018] <... futex resumed>) = 0 [pid 7016] +++ killed by SIGBUS +++ [pid 7015] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7014] +++ killed by SIGBUS +++ [pid 7022] <... openat resumed>) = 4 [pid 7019] <... futex resumed>) = 0 [pid 7018] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7015] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5614] <... openat resumed>) = 3 [pid 7022] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7019] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7013] +++ killed by SIGBUS +++ [pid 7012] +++ killed by SIGBUS +++ [pid 7022] <... futex resumed>) = 1 [pid 7018] <... futex resumed>) = 0 [pid 7015] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] ioctl(3, LOOP_CLR_FD [pid 5611] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7014, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 7019] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7022] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7018] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7015] <... futex resumed>) = 0 [pid 5614] <... ioctl resumed>) = 0 [pid 5611] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7012, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7022] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7018] <... futex resumed>) = 0 [pid 7015] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] close(3 [pid 5611] <... restart_syscall resumed>) = 0 [pid 5609] umount2("./55", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7022] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7018] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7022] <... openat resumed>) = 5 [pid 5609] <... openat resumed>) = 3 [pid 7022] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7018] <... futex resumed>) = 0 [pid 7022] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7018] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7022] <... openat resumed>) = 6 [pid 7018] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] umount2("./56", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7022] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7019] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 5609] fstat(3 [pid 7022] <... futex resumed>) = 1 [pid 7018] <... futex resumed>) = 0 [pid 7022] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7018] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7022] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7018] <... futex resumed>) = 0 [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7022] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 5614] <... close resumed>) = 0 [pid 7022] <... mmap resumed>) = 0x200000000000 [pid 7022] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7018] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7022] <... futex resumed>) = 0 [pid 7018] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7022] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7018] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7022] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7018] <... futex resumed>) = 0 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7022] sendfile(4, 5, NULL, 553647746 [pid 5611] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 149.172095][ T7029] EXT4-fs (loop0): free_blocks=20480 [ 149.172109][ T7029] EXT4-fs (loop0): dirty_blocks=240 [ 149.172120][ T7029] EXT4-fs (loop0): Block reservation details [ 149.172130][ T7029] EXT4-fs (loop0): i_reserved_data_blocks=15 [ 149.176050][ T7016] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [pid 7018] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5611] <... openat resumed>) = 3 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 7031 attached [pid 7019] <... openat resumed>) = 6 [pid 5614] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7031 [pid 5609] getdents64(3 [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 5611] fstat(3 [pid 7031] set_robust_list(0x5555748a66e0, 24 [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5611] getdents64(3 [pid 7031] <... set_robust_list resumed>) = 0 [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 7031] rt_sigprocmask(SIG_SETMASK, [] [pid 7015] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5611] umount2("./56/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7031] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7015] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7031] chdir("./55" [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 7031] <... chdir resumed>) = 0 [pid 7031] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7015] <... futex resumed>) = 0 [pid 7031] setpgid(0, 0) = 0 [pid 7015] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7031] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7015] <... mmap resumed>) = 0x7fef94c47000 [pid 7031] <... openat resumed>) = 3 [pid 7019] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7015] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 7031] write(3, "1000", 4 [pid 5609] umount2("./55/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7019] <... futex resumed>) = 0 [pid 7031] <... write resumed>) = 4 [pid 7019] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7031] close(3 [pid 7015] <... mprotect resumed>) = 0 [pid 7018] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7031] <... close resumed>) = 0 [pid 7031] symlink("/dev/binderfs", "./binderfs" [pid 7018] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7015] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7031] <... symlink resumed>) = 0 [pid 7018] <... futex resumed>) = 0 [pid 7015] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7031] write(1, "executing program\n", 18 [pid 7018] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 executing program [pid 7015] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 7018] <... mmap resumed>) = 0x7fef94c47000 ci2-upstream-fs/strace-static-x86_64: Process 7032 attached [pid 7031] <... write resumed>) = 18 [pid 7018] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 7031] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7018] <... mprotect resumed>) = 0 [pid 7015] <... clone3 resumed> => {parent_tid=[7032]}, 88) = 7032 [pid 7032] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7031] <... futex resumed>) = 0 [pid 7018] rt_sigprocmask(SIG_BLOCK, ~[] [ 149.176833][ T7030] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1352 with error 28 [ 149.176851][ T7030] EXT4-fs (loop2): This should not happen!! Data will be lost [ 149.176851][ T7030] [ 149.176859][ T7030] EXT4-fs (loop2): Total free blocks count 0 [ 149.176866][ T7030] EXT4-fs (loop2): Free/Dirty block details [ 149.176873][ T7030] EXT4-fs (loop2): free_blocks=20480 [ 149.176881][ T7030] EXT4-fs (loop2): dirty_blocks=1360 [ 149.176887][ T7030] EXT4-fs (loop2): Block reservation details [ 149.176893][ T7030] EXT4-fs (loop2): i_reserved_data_blocks=85 [pid 7015] rt_sigprocmask(SIG_SETMASK, [] [pid 7032] <... rseq resumed>) = 0 [pid 7031] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 7018] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7015] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7031] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 7018] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 7015] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7031] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 7032] set_robust_list(0x7fef94c679a0, 24ci2-upstream-fs/strace-static-x86_64: Process 7033 attached ) = 0 [pid 7031] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7018] <... clone3 resumed> => {parent_tid=[7033]}, 88) = 7033 [pid 7033] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7032] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7032] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 7018] rt_sigprocmask(SIG_SETMASK, [] [pid 7033] <... rseq resumed>) = 0 [pid 7018] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7033] set_robust_list(0x7fef94c679a0, 24 [pid 7018] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7033] <... set_robust_list resumed>) = 0 [pid 7032] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7018] <... futex resumed>) = 0 [pid 7015] <... futex resumed>) = 0 [pid 7033] rt_sigprocmask(SIG_SETMASK, [] [pid 7032] <... futex resumed>) = 0 [pid 7018] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7033] <... rt_sigprocmask resumed>, NULL, 8) = 0 [ 149.355466][ T5609] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 149.357492][ T5611] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 149.373543][ T7033] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 149.373752][ T7033] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 276 with error 28 [pid 7032] futex(0x7fef94d63e58, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7031] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7033] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7022] <... sendfile resumed>) = 282624 [pid 7031] <... mmap resumed>) = 0x7fef94c68000 [pid 7015] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7031] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 7015] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7031] <... mprotect resumed>) = 0 [pid 7031] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7018] <... futex resumed>) = ? [pid 7033] +++ killed by SIGBUS +++ [pid 7031] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 7022] +++ killed by SIGBUS +++ ci2-upstream-fs/strace-static-x86_64: Process 7034 attached [pid 7034] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 7031] <... clone3 resumed> => {parent_tid=[7034]}, 88) = 7034 [ 149.373774][ T7033] EXT4-fs (loop1): This should not happen!! Data will be lost [ 149.373774][ T7033] [ 149.373787][ T7033] EXT4-fs (loop1): Total free blocks count 0 [ 149.373805][ T7033] EXT4-fs (loop1): Free/Dirty block details [ 149.373817][ T7033] EXT4-fs (loop1): free_blocks=20480 [ 149.373830][ T7033] EXT4-fs (loop1): dirty_blocks=288 [ 149.373842][ T7033] EXT4-fs (loop1): Block reservation details [ 149.373852][ T7033] EXT4-fs (loop1): i_reserved_data_blocks=18 [pid 7034] set_robust_list(0x7fef94c889a0, 24 [pid 7031] rt_sigprocmask(SIG_SETMASK, [] [pid 7015] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7018] +++ killed by SIGBUS +++ [pid 5610] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7018, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 7015] <... futex resumed>) = 1 [pid 7031] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7034] <... set_robust_list resumed>) = 0 [pid 7034] rt_sigprocmask(SIG_SETMASK, [] [pid 7031] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7034] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7031] <... futex resumed>) = 0 [pid 7034] memfd_create("syzkaller", 0 [pid 7031] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7015] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] umount2("./54", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7034] <... memfd_create resumed>) = 3 [pid 7019] <... futex resumed>) = 0 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7034] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7019] sendfile(4, 5, NULL, 553647746 [pid 5610] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7034] <... mmap resumed>) = 0x7fef8c868000 [pid 5610] <... openat resumed>) = 3 [pid 5610] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] <... umount2 resumed>) = 0 [pid 5610] getdents64(3 [pid 5609] umount2("./55/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] umount2("./54/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] newfstatat(AT_FDCWD, "./55/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./55/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./55/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 7034] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] getdents64(4, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5611] <... umount2 resumed>) = 0 [pid 5609] getdents64(4, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4 [pid 5611] umount2("./56/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... close resumed>) = 0 [pid 5609] rmdir("./55/file1" [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] <... rmdir resumed>) = 0 [pid 5611] newfstatat(AT_FDCWD, "./56/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./55/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7034] <... write resumed>) = 524288 [pid 5611] umount2("./56/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] newfstatat(AT_FDCWD, "./55/binderfs" [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7034] munmap(0x7fef8c868000, 138412032 [pid 5609] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] openat(AT_FDCWD, "./56/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7034] <... munmap resumed>) = 0 [pid 5609] unlink("./55/binderfs" [pid 5611] <... openat resumed>) = 4 [pid 7034] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7015] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5611] fstat(4 [pid 5610] <... umount2 resumed>) = 0 [pid 5609] <... unlink resumed>) = 0 [pid 7034] <... openat resumed>) = 4 [pid 7034] ioctl(4, LOOP_SET_FD, 3 [pid 7015] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5610] umount2("./54/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] getdents64(3 [pid 7034] <... ioctl resumed>) = 0 [pid 7032] <... futex resumed>) = 0 [pid 7015] <... futex resumed>) = 1 [pid 5611] getdents64(4 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7015] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5610] newfstatat(AT_FDCWD, "./54/file1" [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5610] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] close(3 [pid 7034] close(3 [pid 5611] getdents64(4 [pid 5610] umount2("./54/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... close resumed>) = 0 [pid 7034] <... close resumed>) = 0 [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] rmdir("./55" [pid 7034] close(4 [pid 5609] <... rmdir resumed>) = 0 [pid 5611] close(4 [pid 5610] openat(AT_FDCWD, "./54/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7034] <... close resumed>) = 0 [pid 5611] <... close resumed>) = 0 [pid 7034] mkdir("./file1", 0777 [pid 5611] rmdir("./56/file1" [pid 5610] <... openat resumed>) = 4 [pid 7034] <... mkdir resumed>) = 0 [pid 5610] fstat(4 [pid 7034] mount("/dev/loop4", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5609] mkdir("./56", 0777 [pid 5611] <... rmdir resumed>) = 0 [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5611] umount2("./56/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... mkdir resumed>) = 0 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] getdents64(4 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5611] newfstatat(AT_FDCWD, "./56/binderfs" [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [ 149.394105][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.395051][ T5611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.478049][ T5610] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 149.490068][ T5610] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [pid 5611] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5610] getdents64(4 [pid 5609] <... openat resumed>) = 3 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5609] ioctl(3, LOOP_CLR_FD [pid 5611] unlink("./56/binderfs" [pid 5610] close(4 [pid 5609] <... ioctl resumed>) = 0 [pid 5610] <... close resumed>) = 0 [pid 5609] close(3 [pid 5611] <... unlink resumed>) = 0 [pid 5610] rmdir("./54/file1") = 0 [pid 5610] umount2("./54/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5610] newfstatat(AT_FDCWD, "./54/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5610] unlink("./54/binderfs") = 0 [pid 5611] getdents64(3 [pid 5610] getdents64(3 [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 7015] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5611] close(3 [pid 5610] close(3 [pid 5611] <... close resumed>) = 0 [pid 5610] <... close resumed>) = 0 [pid 5609] <... close resumed>) = 0 [pid 5611] rmdir("./56" [pid 5610] rmdir("./54" [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5611] <... rmdir resumed>) = 0 [pid 5610] <... rmdir resumed>) = 0 [pid 5609] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5610] mkdir("./55", 0777 [ 149.596915][ T7034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.600675][ T7019] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 149.601164][ T7032] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 316 with error 28 [ 149.601191][ T7032] EXT4-fs (loop3): This should not happen!! Data will be lost [ 149.601191][ T7032] [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5611] mkdir("./57", 0777ci2-upstream-fs/strace-static-x86_64: Process 7037 attached [pid 7034] <... mount resumed>) = 0 [pid 7032] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7019] <... sendfile resumed>) = 323584 [pid 5610] <... mkdir resumed>) = 0 [pid 7037] set_robust_list(0x5555748a66e0, 24 [pid 7034] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5609] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7037 [pid 7037] <... set_robust_list resumed>) = 0 [pid 7034] <... openat resumed>) = 3 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 7037] rt_sigprocmask(SIG_SETMASK, [] [pid 7034] chdir("./file1" [pid 5610] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7037] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7034] <... chdir resumed>) = 0 [pid 7019] +++ killed by SIGBUS +++ [pid 5610] <... openat resumed>) = 3 [pid 7037] chdir("./56" [pid 7034] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5610] ioctl(3, LOOP_CLR_FD [pid 7034] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7037] <... chdir resumed>) = 0 [pid 7034] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... ioctl resumed>) = 0 [pid 7037] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7034] <... futex resumed>) = 1 [pid 7031] <... futex resumed>) = 0 [pid 5610] close(3 [pid 7037] <... prctl resumed>) = 0 [pid 7034] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7031] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7037] setpgid(0, 0) = 0 [pid 7034] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7037] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7034] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7037] <... openat resumed>) = 3 [pid 7031] <... futex resumed>) = 0 [pid 7037] write(3, "1000", 4 [pid 7031] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7037] <... write resumed>) = 4 [pid 7034] <... openat resumed>) = 4 [pid 7032] +++ killed by SIGBUS +++ [pid 7015] +++ killed by SIGBUS +++ [pid 5611] <... mkdir resumed>) = 0 [pid 5610] <... close resumed>) = 0 [pid 7037] close(3 [pid 7034] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7037] <... close resumed>) = 0 [pid 7034] <... futex resumed>) = 1 [pid 7031] <... futex resumed>) = 0 [pid 5612] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7015, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5611] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5610] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7037] symlink("/dev/binderfs", "./binderfs" [pid 7034] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7031] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7034] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7031] <... futex resumed>) = 0 [pid 5611] <... openat resumed>) = 3 [pid 7037] <... symlink resumed>) = 0 [pid 5610] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7037] write(1, "executing program\n", 18 [pid 7034] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7031] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} executing program [pid 5611] ioctl(3, LOOP_CLR_FD [pid 7037] <... write resumed>) = 18 [pid 7034] <... openat resumed>) = 5 [pid 5612] umount2("./56", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7037] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7034] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7037] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 7034] <... futex resumed>) = 1 [pid 7031] <... futex resumed>) = 0 [pid 7031] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7037] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 7034] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7037] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 7031] <... futex resumed>) = 0 [pid 5612] <... openat resumed>) = 3 [pid 5611] <... ioctl resumed>) = 0 [ 149.622989][ T7032] EXT4-fs (loop3): Total free blocks count 0 [ 149.623009][ T7032] EXT4-fs (loop3): Free/Dirty block details [ 149.623022][ T7032] EXT4-fs (loop3): free_blocks=20480 [ 149.623036][ T7032] EXT4-fs (loop3): dirty_blocks=320 [ 149.623046][ T7032] EXT4-fs (loop3): Block reservation details [ 149.623057][ T7032] EXT4-fs (loop3): i_reserved_data_blocks=20 [pid 7031] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-upstream-fs/strace-static-x86_64: Process 7038 attached [pid 7037] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7034] <... openat resumed>) = 6 [pid 5612] fstat(3 [pid 5611] close(3 [pid 7037] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5610] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7038 [pid 7037] <... mmap resumed>) = 0x7fef94c68000 [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7037] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 7034] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7038] set_robust_list(0x5555748a66e0, 24 [pid 5612] getdents64(3 [pid 5610] rt_sigprocmask(SIG_SETMASK, [] [pid 7038] <... set_robust_list resumed>) = 0 [pid 7037] <... mprotect resumed>) = 0 [pid 7034] <... futex resumed>) = 1 [pid 7031] <... futex resumed>) = 0 [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5610] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7031] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7037] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7034] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7031] <... futex resumed>) = 0 [pid 5612] umount2("./56/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7037] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7034] <... mmap resumed>) = 0x200000000000 [pid 7031] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7037] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} => {parent_tid=[7039]}, 88) = 7039 [pid 7037] rt_sigprocmask(SIG_SETMASK, [] [pid 7034] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7037] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7034] <... futex resumed>) = 1 [pid 7037] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000ci2-upstream-fs/strace-static-x86_64: Process 7039 attached ) = 0 [pid 7034] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7038] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7037] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7031] <... futex resumed>) = 0 [pid 7038] chdir("./55" [pid 7031] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7034] <... futex resumed>) = 0 [pid 7031] <... futex resumed>) = 1 [pid 7034] sendfile(4, 5, NULL, 553647746 [pid 7031] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7039] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7038] <... chdir resumed>) = 0 [pid 7039] <... rseq resumed>) = 0 [pid 7038] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7039] set_robust_list(0x7fef94c889a0, 24) = 0 [pid 7038] <... prctl resumed>) = 0 [pid 5611] <... close resumed>) = 0 [pid 7039] rt_sigprocmask(SIG_SETMASK, [] [pid 7038] setpgid(0, 0 [pid 7039] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7038] <... setpgid resumed>) = 0 [pid 7038] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7039] memfd_create("syzkaller", 0 [pid 7038] <... openat resumed>) = 3 [pid 7039] <... memfd_create resumed>) = 3 [pid 5611] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7039] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7038] write(3, "1000", 4 [pid 7039] <... mmap resumed>) = 0x7fef8c868000 [pid 7038] <... write resumed>) = 4 [pid 5611] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5611] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7038] close(3) = 0 ci2-upstream-fs/strace-static-x86_64: Process 7040 attached [pid 7038] symlink("/dev/binderfs", "./binderfs" [pid 7040] set_robust_list(0x5555748a66e0, 24) = 0 [pid 7038] <... symlink resumed>) = 0 [pid 7040] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7040] chdir("./57" [pid 7038] write(1, "executing program\n", 18 [pid 5611] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7040 [pid 7038] <... write resumed>) = 18 executing program [pid 7040] <... chdir resumed>) = 0 [pid 7040] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7038] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] rt_sigprocmask(SIG_SETMASK, [] [pid 7040] setpgid(0, 0) = 0 [pid 7040] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7039] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7038] <... futex resumed>) = 0 [pid 5611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7040] <... openat resumed>) = 3 [pid 7038] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 7031] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7038] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 7031] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7038] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 7031] <... futex resumed>) = 0 [pid 7040] write(3, "1000", 4 [pid 7038] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7031] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7040] <... write resumed>) = 4 [pid 7038] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7040] close(3 [pid 7038] <... mmap resumed>) = 0x7fef94c68000 [pid 7031] <... mmap resumed>) = 0x7fef94c47000 [pid 7040] <... close resumed>) = 0 [pid 7040] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7040] write(1, "executing program\n", 18 [pid 7039] <... write resumed>) = 524288 [pid 7038] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 7031] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 7040] <... write resumed>) = 18 [pid 7040] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7040] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60}, NULL, 8) = 0 [pid 7040] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7040] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c68000 [pid 7040] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 executing program [pid 7040] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7039] munmap(0x7fef8c868000, 138412032 [pid 7038] <... mprotect resumed>) = 0 [pid 7031] <... mprotect resumed>) = 0 [pid 7040] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0}ci2-upstream-fs/strace-static-x86_64: Process 7041 attached [pid 7039] <... munmap resumed>) = 0 [pid 7038] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7031] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7040] <... clone3 resumed> => {parent_tid=[7041]}, 88) = 7041 [pid 7040] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7040] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7039] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7038] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7031] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7040] <... futex resumed>) = 0 [pid 7031] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 7040] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7039] <... openat resumed>) = 4 [pid 7038] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 7041] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5612] <... umount2 resumed>) = 0 [pid 7041] <... rseq resumed>) = 0 [pid 7041] set_robust_list(0x7fef94c889a0, 24 [pid 7039] ioctl(4, LOOP_SET_FD, 3 [pid 7041] <... set_robust_list resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 7043 attached ci2-upstream-fs/strace-static-x86_64: Process 7042 attached [pid 7041] rt_sigprocmask(SIG_SETMASK, [] [pid 7039] <... ioctl resumed>) = 0 [pid 7038] <... clone3 resumed> => {parent_tid=[7042]}, 88) = 7042 [pid 7041] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7038] rt_sigprocmask(SIG_SETMASK, [] [pid 7041] memfd_create("syzkaller", 0 [pid 7038] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7041] <... memfd_create resumed>) = 3 [pid 7038] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7041] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fef8c868000 [pid 7039] close(3 [pid 7038] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7042] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7031] <... clone3 resumed> => {parent_tid=[7043]}, 88) = 7043 [pid 5612] umount2("./56/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7043] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7042] <... rseq resumed>) = 0 [pid 7031] rt_sigprocmask(SIG_SETMASK, [] [pid 7043] <... rseq resumed>) = 0 [pid 7042] set_robust_list(0x7fef94c889a0, 24 [pid 7031] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7042] <... set_robust_list resumed>) = 0 [pid 7039] <... close resumed>) = 0 [pid 7031] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7043] set_robust_list(0x7fef94c679a0, 24) = 0 [pid 7031] <... futex resumed>) = 0 [pid 7043] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] newfstatat(AT_FDCWD, "./56/file1" [pid 7042] rt_sigprocmask(SIG_SETMASK, [] [pid 7039] close(4 [pid 7031] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7042] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7043] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7039] <... close resumed>) = 0 [pid 5612] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7039] mkdir("./file1", 0777) = 0 [pid 5612] umount2("./56/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7039] mount("/dev/loop0", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7042] memfd_create("syzkaller", 0 [pid 5612] openat(AT_FDCWD, "./56/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 7042] <... memfd_create resumed>) = 3 [pid 5612] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7041] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5612] getdents64(4 [pid 7042] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [ 149.790437][ T5612] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 149.807730][ T5612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [pid 5612] getdents64(4 [pid 7042] <... mmap resumed>) = 0x7fef8c868000 [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5612] close(4) = 0 [pid 5612] rmdir("./56/file1" [pid 7041] <... write resumed>) = 524288 [pid 7031] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 149.861383][ T7043] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 149.861584][ T7043] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 656 with error 28 [ 149.861635][ T7043] EXT4-fs (loop4): This should not happen!! Data will be lost [ 149.861635][ T7043] [ 149.861648][ T7043] EXT4-fs (loop4): Total free blocks count 0 [ 149.861660][ T7043] EXT4-fs (loop4): Free/Dirty block details [pid 7042] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7041] munmap(0x7fef8c868000, 138412032) = 0 [pid 7041] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5612] <... rmdir resumed>) = 0 [pid 7041] <... openat resumed>) = 4 [pid 5612] umount2("./56/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7041] ioctl(4, LOOP_SET_FD, 3 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7041] <... ioctl resumed>) = 0 [pid 5612] newfstatat(AT_FDCWD, "./56/binderfs" [pid 7041] close(3) = 0 [pid 7041] close(4 [pid 7042] <... write resumed>) = 524288 [pid 7041] <... close resumed>) = 0 [pid 7041] mkdir("./file1", 0777 [pid 7043] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7042] munmap(0x7fef8c868000, 138412032) = 0 [pid 7034] <... sendfile resumed>) = ? [pid 7034] +++ killed by SIGBUS +++ [pid 7042] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7041] <... mkdir resumed>) = 0 [pid 7039] <... mount resumed>) = 0 [pid 5612] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7043] +++ killed by SIGBUS +++ [pid 7042] <... openat resumed>) = 4 [pid 7031] +++ killed by SIGBUS +++ [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7031, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 7042] ioctl(4, LOOP_SET_FD, 3 [pid 7041] mount("/dev/loop2", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7039] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5612] unlink("./56/binderfs" [pid 7042] <... ioctl resumed>) = 0 [pid 7039] <... openat resumed>) = 3 [pid 5612] <... unlink resumed>) = 0 [pid 5614] umount2("./55", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7042] close(3 [pid 7039] chdir("./file1" [pid 5612] getdents64(3 [pid 7042] <... close resumed>) = 0 [pid 7042] close(4 [pid 7039] <... chdir resumed>) = 0 [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 7042] <... close resumed>) = 0 [ 149.861673][ T7043] EXT4-fs (loop4): free_blocks=20480 [ 149.861684][ T7043] EXT4-fs (loop4): dirty_blocks=656 [ 149.861695][ T7043] EXT4-fs (loop4): Block reservation details [ 149.861705][ T7043] EXT4-fs (loop4): i_reserved_data_blocks=41 [ 149.942602][ T7039] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 7039] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5614] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7042] mkdir("./file1", 0777 [pid 7039] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5614] <... openat resumed>) = 3 [pid 5612] close(3 [pid 7042] <... mkdir resumed>) = 0 [pid 5614] fstat(3 [pid 5612] <... close resumed>) = 0 [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5612] rmdir("./56" [pid 7039] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] getdents64(3 [pid 5612] <... rmdir resumed>) = 0 [pid 7042] mount("/dev/loop1", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5614] umount2("./55/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7039] <... futex resumed>) = 1 [pid 7037] <... futex resumed>) = 0 [pid 7039] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5612] mkdir("./57", 0777) = 0 [pid 5612] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7037] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5612] <... openat resumed>) = 3 [pid 7039] <... futex resumed>) = 0 [pid 7039] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7037] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] ioctl(3, LOOP_CLR_FD) = 0 [pid 5612] close(3 [pid 7041] <... mount resumed>) = 0 [pid 7039] <... openat resumed>) = 4 [pid 7041] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7041] chdir("./file1" [pid 7039] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7041] <... chdir resumed>) = 0 [pid 5612] <... close resumed>) = 0 [pid 7041] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7037] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5612] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7041] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7039] <... futex resumed>) = 0 [pid 7037] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7041] <... futex resumed>) = 1 [pid 7040] <... futex resumed>) = 0 [pid 5612] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7041] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7040] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7041] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7040] <... futex resumed>) = 0 [pid 7041] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7040] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 150.037904][ T7041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.060025][ T5614] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 7039] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7037] <... futex resumed>) = 0 [pid 5612] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7042] <... mount resumed>) = 0 [pid 7041] <... openat resumed>) = 4 [pid 7039] <... openat resumed>) = 5 [pid 7037] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-upstream-fs/strace-static-x86_64: Process 7050 attached [pid 7039] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7042] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7041] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7039] <... futex resumed>) = 1 [pid 7037] <... futex resumed>) = 0 [pid 7050] set_robust_list(0x5555748a66e0, 24) = 0 [pid 7039] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7037] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7050 [pid 7039] <... openat resumed>) = 6 [pid 7037] <... futex resumed>) = 0 [pid 7050] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] rt_sigprocmask(SIG_SETMASK, [] [pid 7050] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7042] <... openat resumed>) = 3 [pid 7041] <... futex resumed>) = 1 [pid 7040] <... futex resumed>) = 0 [pid 7039] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7037] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7050] chdir("./57" [pid 7042] chdir("./file1" [pid 7041] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7040] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7037] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7050] <... chdir resumed>) = 0 [pid 7042] <... chdir resumed>) = 0 [pid 7041] <... openat resumed>) = 5 [pid 7040] <... futex resumed>) = 0 [pid 7039] <... futex resumed>) = 0 [pid 7037] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7050] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7041] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7040] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7037] <... futex resumed>) = 0 [pid 7050] <... prctl resumed>) = 0 [pid 7041] <... futex resumed>) = 0 [pid 7040] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7037] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7050] setpgid(0, 0 [pid 7041] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7040] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7041] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7040] <... futex resumed>) = 0 [pid 7041] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7040] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7050] <... setpgid resumed>) = 0 [pid 7042] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7039] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7050] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7042] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7041] <... openat resumed>) = 6 [pid 7039] <... mmap resumed>) = 0x200000000000 [pid 7050] <... openat resumed>) = 3 [pid 7042] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7041] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7042] <... futex resumed>) = 1 [pid 7042] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7038] <... futex resumed>) = 0 [pid 7038] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7042] <... futex resumed>) = 0 [pid 7038] <... futex resumed>) = 1 [pid 7041] <... futex resumed>) = 1 [pid 7050] write(3, "1000", 4 [pid 7040] <... futex resumed>) = 0 [pid 7041] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7050] <... write resumed>) = 4 [pid 7041] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7040] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7041] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7040] <... futex resumed>) = 0 [ 150.097818][ T5614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.098274][ T7042] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 7050] close(3) = 0 [pid 7042] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7041] <... mmap resumed>) = 0x200000000000 [pid 7040] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7039] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7038] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7039] <... futex resumed>) = 1 [pid 7039] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7050] symlink("/dev/binderfs", "./binderfs" [pid 7042] <... openat resumed>) = 4 [pid 7041] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7040] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7037] <... futex resumed>) = 0 [pid 7037] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7050] <... symlink resumed>) = 0 [pid 7041] <... futex resumed>) = 0 [pid 7040] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7050] write(1, "executing program\n", 18 [pid 7039] <... futex resumed>) = 0 executing program [pid 7037] <... futex resumed>) = 1 [pid 7050] <... write resumed>) = 18 [pid 7042] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7041] sendfile(4, 5, NULL, 553647746 [pid 7040] <... futex resumed>) = 0 [pid 7039] sendfile(4, 5, NULL, 553647746 [pid 7037] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7042] <... futex resumed>) = 1 [pid 7040] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7038] <... futex resumed>) = 0 [pid 7050] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7042] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7038] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7050] <... futex resumed>) = 0 [pid 7042] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7038] <... futex resumed>) = 0 [pid 7050] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 7042] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7038] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] <... umount2 resumed>) = 0 [pid 7050] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 7042] <... openat resumed>) = 5 [pid 7050] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7050] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c68000 [pid 7042] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] umount2("./55/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7050] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 7042] <... futex resumed>) = 1 [pid 7038] <... futex resumed>) = 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7050] <... mprotect resumed>) = 0 [pid 5614] newfstatat(AT_FDCWD, "./55/file1" [pid 7042] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7038] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7050] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7042] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7038] <... futex resumed>) = 0 [pid 5614] umount2("./55/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7050] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7042] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7050] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 7042] <... openat resumed>) = 6 [pid 7038] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./55/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7042] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000ci2-upstream-fs/strace-static-x86_64: Process 7051 attached [pid 7050] <... clone3 resumed> => {parent_tid=[7051]}, 88) = 7051 [pid 5614] <... openat resumed>) = 4 [pid 7050] rt_sigprocmask(SIG_SETMASK, [] [pid 7042] <... futex resumed>) = 1 [pid 7038] <... futex resumed>) = 0 [pid 5614] fstat(4 [pid 7051] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7050] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7042] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7038] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7050] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7038] <... futex resumed>) = 0 [pid 7050] <... futex resumed>) = 0 [pid 7038] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7050] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7051] <... rseq resumed>) = 0 [pid 7042] <... mmap resumed>) = 0x200000000000 [pid 5614] getdents64(4 [pid 7042] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7051] set_robust_list(0x7fef94c889a0, 24 [pid 7042] <... futex resumed>) = 1 [pid 7038] <... futex resumed>) = 0 [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 7051] <... set_robust_list resumed>) = 0 [pid 7042] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7038] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] getdents64(4 [pid 7051] rt_sigprocmask(SIG_SETMASK, [] [pid 7042] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7038] <... futex resumed>) = 0 [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 7051] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7042] sendfile(4, 5, NULL, 553647746 [pid 7038] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] close(4 [pid 7051] memfd_create("syzkaller", 0 [pid 7040] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7037] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7051] <... memfd_create resumed>) = 3 [pid 7040] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7037] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7051] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7040] <... futex resumed>) = 0 [pid 7037] <... futex resumed>) = 0 [pid 5614] <... close resumed>) = 0 [pid 7051] <... mmap resumed>) = 0x7fef8c868000 [pid 7040] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7037] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5614] rmdir("./55/file1" [pid 7040] <... mmap resumed>) = 0x7fef94c47000 [pid 7040] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 7037] <... mmap resumed>) = 0x7fef94c47000 [pid 7040] <... mprotect resumed>) = 0 [pid 5614] <... rmdir resumed>) = 0 [pid 7040] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7037] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 7040] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7051] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7040] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 7037] <... mprotect resumed>) = 0 [pid 5614] umount2("./55/binderfs", MNT_FORCE|UMOUNT_NOFOLLOWci2-upstream-fs/strace-static-x86_64: Process 7052 attached [pid 7037] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7040] <... clone3 resumed> => {parent_tid=[7052]}, 88) = 7052 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7052] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7040] rt_sigprocmask(SIG_SETMASK, [] [pid 7037] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5614] newfstatat(AT_FDCWD, "./55/binderfs" [pid 7052] <... rseq resumed>) = 0 [pid 7040] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7052] set_robust_list(0x7fef94c679a0, 24 [pid 7040] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000ci2-upstream-fs/strace-static-x86_64: Process 7053 attached [pid 7052] <... set_robust_list resumed>) = 0 [pid 7040] <... futex resumed>) = 0 [pid 7038] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5614] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7052] rt_sigprocmask(SIG_SETMASK, [] [pid 7040] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7038] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] unlink("./55/binderfs" [pid 7053] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7052] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7038] <... futex resumed>) = 0 [pid 7037] <... clone3 resumed> => {parent_tid=[7053]}, 88) = 7053 [pid 7053] <... rseq resumed>) = 0 [pid 7038] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7037] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] <... unlink resumed>) = 0 [pid 7053] set_robust_list(0x7fef94c679a0, 24 [pid 7051] <... write resumed>) = 524288 [pid 7038] <... mmap resumed>) = 0x7fef94c47000 [pid 7037] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] getdents64(3 [pid 7053] <... set_robust_list resumed>) = 0 [pid 7038] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 7037] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 7053] rt_sigprocmask(SIG_SETMASK, [] [pid 7037] <... futex resumed>) = 0 [pid 7053] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7038] <... mprotect resumed>) = 0 [pid 7037] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] close(3) = 0 [pid 7053] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7038] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5614] rmdir("./55" [pid 7038] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5614] <... rmdir resumed>) = 0 [pid 7039] <... sendfile resumed>) = ? [pid 7037] <... futex resumed>) = ? [pid 7053] +++ killed by SIGBUS +++ [pid 7039] +++ killed by SIGBUS +++ [pid 7037] +++ killed by SIGBUS +++ [pid 7051] munmap(0x7fef8c868000, 138412032 [pid 7038] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 7054 attached [pid 7051] <... munmap resumed>) = 0 [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7037, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 7038] <... clone3 resumed> => {parent_tid=[7054]}, 88) = 7054 [pid 7038] rt_sigprocmask(SIG_SETMASK, [] [pid 7054] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7038] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] <... restart_syscall resumed>) = 0 [pid 7054] <... rseq resumed>) = 0 [pid 7051] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7038] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7054] set_robust_list(0x7fef94c679a0, 24 [pid 7038] <... futex resumed>) = 0 [pid 7054] <... set_robust_list resumed>) = 0 [pid 7051] <... openat resumed>) = 4 [pid 7038] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7054] rt_sigprocmask(SIG_SETMASK, [] [pid 7051] ioctl(4, LOOP_SET_FD, 3 [pid 5609] umount2("./56", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7054] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7051] <... ioctl resumed>) = 0 [pid 7040] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7051] close(3 [pid 5609] <... openat resumed>) = 3 [pid 7051] <... close resumed>) = 0 [pid 5609] fstat(3 [pid 7051] close(4 [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 150.297500][ T7041] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 150.300390][ T7052] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 340 with error 28 [ 150.300424][ T7052] EXT4-fs (loop2): This should not happen!! Data will be lost [ 150.300424][ T7052] [ 150.300437][ T7052] EXT4-fs (loop2): Total free blocks count 0 [pid 7051] <... close resumed>) = 0 [pid 5609] getdents64(3, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 7051] mkdir("./file1", 0777 [pid 5609] umount2("./56/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7051] <... mkdir resumed>) = 0 [pid 7051] mount("/dev/loop3", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7038] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5614] mkdir("./56", 0777) = 0 [ 150.300449][ T7052] EXT4-fs (loop2): Free/Dirty block details [ 150.300461][ T7052] EXT4-fs (loop2): free_blocks=20480 [ 150.300475][ T7052] EXT4-fs (loop2): dirty_blocks=352 [ 150.300486][ T7052] EXT4-fs (loop2): Block reservation details [ 150.300496][ T7052] EXT4-fs (loop2): i_reserved_data_blocks=22 [ 150.307562][ T7053] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 150.307776][ T7053] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 320 with error 28 [pid 5614] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5614] ioctl(3, LOOP_CLR_FD) = 0 [pid 5614] close(3 [pid 7054] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7042] <... sendfile resumed>) = 626688 [pid 7042] +++ killed by SIGBUS +++ [pid 5614] <... close resumed>) = 0 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 150.307799][ T7053] EXT4-fs (loop0): This should not happen!! Data will be lost [ 150.307799][ T7053] [ 150.307811][ T7053] EXT4-fs (loop0): Total free blocks count 0 [ 150.307823][ T7053] EXT4-fs (loop0): Free/Dirty block details [ 150.307835][ T7053] EXT4-fs (loop0): free_blocks=20480 [ 150.307848][ T7053] EXT4-fs (loop0): dirty_blocks=320 [ 150.307858][ T7053] EXT4-fs (loop0): Block reservation details [ 150.307869][ T7053] EXT4-fs (loop0): i_reserved_data_blocks=20 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7054] +++ killed by SIGBUS +++ [pid 7038] +++ killed by SIGBUS +++ [pid 5610] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7038, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5610] umount2("./55", MNT_FORCE|UMOUNT_NOFOLLOWci2-upstream-fs/strace-static-x86_64: Process 7057 attached [pid 7051] <... mount resumed>) = 0 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5614] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7057 [pid 5610] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] <... openat resumed>) = 3 [pid 7051] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7057] set_robust_list(0x5555748a66e0, 24 [pid 7051] <... openat resumed>) = 3 [pid 5610] fstat(3 [pid 7057] <... set_robust_list resumed>) = 0 [pid 7051] chdir("./file1") = 0 [pid 7057] rt_sigprocmask(SIG_SETMASK, [] [pid 7051] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7057] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7051] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5610] getdents64(3 [pid 7057] chdir("./56" [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 7051] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7051] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7050] <... futex resumed>) = 0 [pid 5610] umount2("./55/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7057] <... chdir resumed>) = 0 [pid 7050] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7051] <... futex resumed>) = 0 [pid 7050] <... futex resumed>) = 1 [pid 7057] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7051] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7050] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7057] <... prctl resumed>) = 0 [ 150.346655][ T7054] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 150.348954][ T7054] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 608 with error 28 [ 150.348984][ T7054] EXT4-fs (loop1): This should not happen!! Data will be lost [ 150.348984][ T7054] [ 150.348997][ T7054] EXT4-fs (loop1): Total free blocks count 0 [ 150.349008][ T7054] EXT4-fs (loop1): Free/Dirty block details [ 150.349021][ T7054] EXT4-fs (loop1): free_blocks=20480 [pid 7057] setpgid(0, 0) = 0 [pid 7057] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7057] write(3, "1000", 4) = 4 [pid 7057] close(3 [pid 7051] <... openat resumed>) = 4 [pid 7051] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7051] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7057] <... close resumed>) = 0 [pid 7057] symlink("/dev/binderfs", "./binderfs" [pid 7050] <... futex resumed>) = 0 [pid 7050] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7057] <... symlink resumed>) = 0 [pid 7057] write(1, "executing program\n", 18 [pid 7051] <... futex resumed>) = 0 [pid 7050] <... futex resumed>) = 1 executing program [pid 7057] <... write resumed>) = 18 [pid 7051] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7050] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 150.349034][ T7054] EXT4-fs (loop1): dirty_blocks=608 [ 150.349044][ T7054] EXT4-fs (loop1): Block reservation details [ 150.349056][ T7054] EXT4-fs (loop1): i_reserved_data_blocks=38 [ 150.449794][ T177] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 320 with max blocks 4 with error 28 [ 150.459640][ T5609] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 7057] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5609] <... umount2 resumed>) = 0 [pid 7057] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 7051] <... openat resumed>) = 5 [pid 5609] umount2("./56/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./56/file1" [pid 7057] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 5609] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7052] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7051] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7057] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 7051] <... futex resumed>) = 1 [pid 7050] <... futex resumed>) = 0 [pid 5609] umount2("./56/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7057] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7051] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7050] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7057] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7051] <... openat resumed>) = 6 [pid 7050] <... futex resumed>) = 0 [pid 5609] openat(AT_FDCWD, "./56/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7057] <... mmap resumed>) = 0x7fef94c68000 [pid 7051] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7050] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] <... openat resumed>) = 4 [pid 7057] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 7051] <... futex resumed>) = 0 [pid 7050] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5609] fstat(4 [pid 7057] <... mprotect resumed>) = 0 [pid 7051] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7050] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7057] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7051] <... mmap resumed>) = 0x200000000000 [pid 7050] <... futex resumed>) = 0 [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7057] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7051] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7050] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7041] <... sendfile resumed>) = ? [pid 5609] getdents64(4 [pid 7057] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 7052] +++ killed by SIGBUS +++ [pid 7051] <... futex resumed>) = 0 [pid 7050] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7041] +++ killed by SIGBUS +++ [pid 7040] +++ killed by SIGBUS +++ [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 ci2-upstream-fs/strace-static-x86_64: Process 7058 attached [pid 7051] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7050] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] getdents64(4 [pid 7057] <... clone3 resumed> => {parent_tid=[7058]}, 88) = 7058 [pid 7051] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7050] <... futex resumed>) = 0 [pid 5611] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7040, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 7058] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 7057] rt_sigprocmask(SIG_SETMASK, [] [pid 7051] sendfile(4, 5, NULL, 553647746 [pid 7050] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 5609] close(4 [pid 7058] <... rseq resumed>) = 0 [pid 7057] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7058] set_robust_list(0x7fef94c889a0, 24 [pid 5609] <... close resumed>) = 0 [pid 7058] <... set_robust_list resumed>) = 0 [pid 7057] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... restart_syscall resumed>) = 0 [pid 5609] rmdir("./56/file1" [pid 7058] rt_sigprocmask(SIG_SETMASK, [] [pid 7057] <... futex resumed>) = 0 [pid 5609] <... rmdir resumed>) = 0 [pid 7058] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7057] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5610] <... umount2 resumed>) = 0 [pid 7058] memfd_create("syzkaller", 0 [pid 5611] umount2("./57", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] umount2("./56/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7058] <... memfd_create resumed>) = 3 [pid 7058] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] umount2("./55/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7058] <... mmap resumed>) = 0x7fef8c868000 [ 150.463074][ T7051] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.570388][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 608 with max blocks 4 with error 28 [ 150.578481][ T5610] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 5611] <... openat resumed>) = 3 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./56/binderfs" [pid 5610] newfstatat(AT_FDCWD, "./55/file1" [pid 5609] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] fstat(3 [pid 5610] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./56/binderfs" [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5610] umount2("./55/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... unlink resumed>) = 0 [pid 7058] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5611] getdents64(3 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] getdents64(3 [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5610] openat(AT_FDCWD, "./55/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 7050] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5611] umount2("./57/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] <... openat resumed>) = 4 [pid 5609] close(3 [pid 7050] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5610] fstat(4 [pid 5609] <... close resumed>) = 0 [pid 7050] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c47000 [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] rmdir("./56" [pid 7050] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5610] getdents64(4 [pid 5609] <... rmdir resumed>) = 0 [pid 7050] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 7050] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5610] getdents64(4ci2-upstream-fs/strace-static-x86_64: Process 7059 attached [pid 7050] <... clone3 resumed> => {parent_tid=[7059]}, 88) = 7059 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5609] mkdir("./57", 0777 [pid 7050] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5610] close(4 [pid 5609] <... mkdir resumed>) = 0 [pid 7050] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7058] <... write resumed>) = 524288 [pid 7050] <... futex resumed>) = 0 [pid 5610] <... close resumed>) = 0 [pid 7050] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7059] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5610] rmdir("./55/file1" [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7059] <... rseq resumed>) = 0 [pid 5610] <... rmdir resumed>) = 0 [pid 5609] <... openat resumed>) = 3 [pid 7059] set_robust_list(0x7fef94c679a0, 24 [pid 7058] munmap(0x7fef8c868000, 138412032 [pid 5610] umount2("./55/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] ioctl(3, LOOP_CLR_FD [pid 7059] <... set_robust_list resumed>) = 0 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7059] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] newfstatat(AT_FDCWD, "./55/binderfs" [pid 5609] <... ioctl resumed>) = 0 [pid 7059] <... rt_sigprocmask resumed>, NULL, 8) = 0 [ 150.679963][ T7051] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 150.683169][ T7059] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 920 with error 28 [ 150.683200][ T7059] EXT4-fs (loop3): This should not happen!! Data will be lost [ 150.683200][ T7059] [ 150.683214][ T7059] EXT4-fs (loop3): Total free blocks count 0 [ 150.683227][ T7059] EXT4-fs (loop3): Free/Dirty block details [pid 7058] <... munmap resumed>) = 0 [pid 5610] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] close(3 [pid 7058] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5610] unlink("./55/binderfs" [pid 7058] <... openat resumed>) = 4 [pid 5610] <... unlink resumed>) = 0 [pid 7058] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7058] close(3 [pid 5610] getdents64(3 [pid 7058] <... close resumed>) = 0 [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 7058] close(4 [pid 5610] close(3 [pid 7058] <... close resumed>) = 0 [pid 5610] <... close resumed>) = 0 [pid 7058] mkdir("./file1", 0777 [pid 5610] rmdir("./55" [pid 7058] <... mkdir resumed>) = 0 [pid 7058] mount("/dev/loop4", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5609] <... close resumed>) = 0 [pid 5610] <... rmdir resumed>) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5610] mkdir("./56", 0777 [pid 5609] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5610] <... mkdir resumed>) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 7061 attached [pid 7050] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5610] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7061] set_robust_list(0x5555748a66e0, 24 [pid 5609] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7061 [pid 5610] <... openat resumed>) = 3 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] ioctl(3, LOOP_CLR_FD) = 0 [pid 5610] close(3 [pid 7061] <... set_robust_list resumed>) = 0 [pid 7061] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7059] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7051] <... sendfile resumed>) = 942080 [pid 7061] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7058] <... mount resumed>) = 0 [ 150.683240][ T7059] EXT4-fs (loop3): free_blocks=20480 [ 150.683253][ T7059] EXT4-fs (loop3): dirty_blocks=928 [ 150.683266][ T7059] EXT4-fs (loop3): Block reservation details [ 150.683278][ T7059] EXT4-fs (loop3): i_reserved_data_blocks=58 [ 150.719530][ T5611] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 150.762503][ T5611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [pid 7061] chdir("./57") = 0 [pid 7061] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7061] setpgid(0, 0) = 0 [pid 7059] +++ killed by SIGBUS +++ [pid 7058] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7051] +++ killed by SIGBUS +++ [pid 7061] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7058] <... openat resumed>) = 3 [pid 7058] chdir("./file1") = 0 [pid 7058] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7061] <... openat resumed>) = 3 [pid 7058] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7050] +++ killed by SIGBUS +++ [ 150.769578][ T7058] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5611] <... umount2 resumed>) = 0 [pid 5610] <... close resumed>) = 0 [pid 7061] write(3, "1000", 4 [pid 7058] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7050, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5610] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7061] <... write resumed>) = 4 [pid 7058] <... futex resumed>) = 1 [pid 7057] <... futex resumed>) = 0 [pid 5612] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 7058] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7057] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7061] close(3 [pid 5610] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7058] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7057] <... futex resumed>) = 0 [pid 5610] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7058] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7061] <... close resumed>) = 0 [pid 5612] <... restart_syscall resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 7063 attached [pid 5612] umount2("./57", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7063] set_robust_list(0x5555748a66e0, 24 [pid 7061] symlink("/dev/binderfs", "./binderfs" [pid 7057] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7063] <... set_robust_list resumed>) = 0 [pid 5612] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7063] rt_sigprocmask(SIG_SETMASK, [] [pid 7058] <... openat resumed>) = 4 [pid 5612] <... openat resumed>) = 3 [pid 7063] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5612] fstat(3 [pid 7063] chdir("./56" [pid 7061] <... symlink resumed>) = 0 [pid 7058] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7061] write(1, "executing program\n", 18 [pid 7058] <... futex resumed>) = 1 [pid 7063] <... chdir resumed>) = 0 [pid 7057] <... futex resumed>) = 0 [pid 5612] getdents64(3 [pid 5611] umount2("./57/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7063 [pid 7063] prctl(PR_SET_PDEATHSIG, SIGKILL executing program [pid 7058] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7057] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7063] <... prctl resumed>) = 0 [pid 7061] <... write resumed>) = 18 [pid 7058] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7057] <... futex resumed>) = 0 [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] rt_sigprocmask(SIG_SETMASK, [] [pid 7063] setpgid(0, 0 [pid 7061] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7058] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7057] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] newfstatat(AT_FDCWD, "./57/file1" [pid 5610] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7061] <... futex resumed>) = 0 [pid 7058] <... openat resumed>) = 5 [pid 7063] <... setpgid resumed>) = 0 [pid 7058] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7061] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 5612] umount2("./57/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7063] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7061] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 7058] <... futex resumed>) = 1 [pid 7057] <... futex resumed>) = 0 [pid 5611] umount2("./57/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7063] <... openat resumed>) = 3 [pid 7057] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7063] write(3, "1000", 4 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7063] <... write resumed>) = 4 [pid 7057] <... futex resumed>) = 0 [pid 5611] openat(AT_FDCWD, "./57/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7063] close(3 [pid 7057] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7063] <... close resumed>) = 0 [pid 7061] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 7058] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 5611] <... openat resumed>) = 4 [pid 7063] symlink("/dev/binderfs", "./binderfs" [pid 7061] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7058] <... openat resumed>) = 6 [pid 5611] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7061] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7063] <... symlink resumed>) = 0 [pid 7058] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] getdents64(4 executing program [pid 7063] write(1, "executing program\n", 18) = 18 [pid 7063] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7061] <... mmap resumed>) = 0x7fef94c68000 [pid 7058] <... futex resumed>) = 1 [pid 7057] <... futex resumed>) = 0 [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 7063] <... futex resumed>) = 0 [pid 7061] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 7058] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7057] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] getdents64(4 [pid 7063] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 7061] <... mprotect resumed>) = 0 [pid 7058] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7057] <... futex resumed>) = 0 [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 7063] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 5611] close(4 [pid 7057] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7063] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 7061] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7058] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 5611] <... close resumed>) = 0 [pid 7063] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7063] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7061] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7058] <... mmap resumed>) = 0x200000000000 [pid 5611] rmdir("./57/file1" [pid 7063] <... mmap resumed>) = 0x7fef94c68000 [pid 7061] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0}ci2-upstream-fs/strace-static-x86_64: Process 7064 attached [pid 7063] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 7058] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... rmdir resumed>) = 0 [pid 7063] <... mprotect resumed>) = 0 [pid 7061] <... clone3 resumed> => {parent_tid=[7064]}, 88) = 7064 [pid 7058] <... futex resumed>) = 1 [pid 7057] <... futex resumed>) = 0 [pid 7061] rt_sigprocmask(SIG_SETMASK, [] [pid 7058] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7057] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7061] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7058] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7064] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7063] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7061] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7058] sendfile(4, 5, NULL, 553647746 [pid 7057] <... futex resumed>) = 0 [pid 5611] umount2("./57/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7064] <... rseq resumed>) = 0 [pid 7063] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7061] <... futex resumed>) = 0 [pid 7057] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7064] set_robust_list(0x7fef94c889a0, 24 [pid 7063] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 7061] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7064] <... set_robust_list resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 7065 attached [pid 7064] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7063] <... clone3 resumed> => {parent_tid=[7065]}, 88) = 7065 [pid 5611] newfstatat(AT_FDCWD, "./57/binderfs" [pid 7065] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7064] memfd_create("syzkaller", 0 [pid 7063] rt_sigprocmask(SIG_SETMASK, [] [pid 7065] <... rseq resumed>) = 0 [pid 7063] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5611] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7065] set_robust_list(0x7fef94c889a0, 24 [pid 7063] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7065] <... set_robust_list resumed>) = 0 [pid 7065] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7065] memfd_create("syzkaller", 0 [pid 7063] <... futex resumed>) = 0 [pid 7065] <... memfd_create resumed>) = 3 [pid 7064] <... memfd_create resumed>) = 3 [pid 7063] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5611] unlink("./57/binderfs" [pid 7064] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7065] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7064] <... mmap resumed>) = 0x7fef8c868000 [pid 5611] <... unlink resumed>) = 0 [pid 7065] <... mmap resumed>) = 0x7fef8c868000 [pid 5611] getdents64(3, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5611] close(3 [pid 7064] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5611] <... close resumed>) = 0 [pid 5611] rmdir("./57") = 0 [pid 7065] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5611] mkdir("./58", 0777 [pid 7064] <... write resumed>) = 524288 [pid 7057] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5611] <... mkdir resumed>) = 0 [pid 7064] munmap(0x7fef8c868000, 138412032 [pid 7057] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7057] <... futex resumed>) = 0 [pid 7057] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5611] <... openat resumed>) = 3 [pid 7064] <... munmap resumed>) = 0 [pid 7057] <... mmap resumed>) = 0x7fef94c47000 [pid 7064] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7057] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 5611] ioctl(3, LOOP_CLR_FD [pid 7064] <... openat resumed>) = 4 [pid 7057] <... mprotect resumed>) = 0 [pid 5611] <... ioctl resumed>) = 0 [pid 7064] ioctl(4, LOOP_SET_FD, 3 [ 150.887514][ T5612] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 150.929503][ T5612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [pid 7057] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5611] close(3 [pid 7065] <... write resumed>) = 524288 [pid 7065] munmap(0x7fef8c868000, 138412032 [pid 7057] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5612] <... umount2 resumed>) = 0 [pid 7064] <... ioctl resumed>) = 0 [pid 7065] <... munmap resumed>) = 0 [pid 7064] close(3 [pid 7057] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5612] umount2("./57/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7065] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7064] <... close resumed>) = 0 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7064] close(4 [pid 7057] <... clone3 resumed> => {parent_tid=[7066]}, 88) = 7066 [pid 7064] <... close resumed>) = 0 [pid 7057] rt_sigprocmask(SIG_SETMASK, [] [pid 7064] mkdir("./file1", 0777 [pid 7057] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7065] <... openat resumed>) = 4 [pid 5612] newfstatat(AT_FDCWD, "./57/file1"ci2-upstream-fs/strace-static-x86_64: Process 7066 attached [pid 7065] ioctl(4, LOOP_SET_FD, 3 [pid 7064] <... mkdir resumed>) = 0 [pid 7057] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] <... close resumed>) = 0 [pid 7065] <... ioctl resumed>) = 0 [pid 5612] umount2("./57/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7057] <... futex resumed>) = 0 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7057] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7065] close(3 [pid 5611] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7064] mount("/dev/loop0", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5611] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7066] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7065] <... close resumed>) = 0 [pid 5612] openat(AT_FDCWD, "./57/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7066] <... rseq resumed>) = 0 [pid 7065] close(4 [pid 5612] <... openat resumed>) = 4 [pid 5611] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7066] set_robust_list(0x7fef94c679a0, 24 [pid 5612] fstat(4 [pid 7066] <... set_robust_list resumed>) = 0 [pid 7065] <... close resumed>) = 0 [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7066] rt_sigprocmask(SIG_SETMASK, [] [pid 7065] mkdir("./file1", 0777 [pid 5612] getdents64(4 [pid 7066] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7065] <... mkdir resumed>) = 0 [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 ci2-upstream-fs/strace-static-x86_64: Process 7067 attached [pid 5612] getdents64(4 [pid 5611] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7067 [pid 7067] set_robust_list(0x5555748a66e0, 24 [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 7065] mount("/dev/loop1", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5611] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] close(4 [pid 5611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7067] <... set_robust_list resumed>) = 0 [pid 5612] <... close resumed>) = 0 [pid 7067] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] rmdir("./57/file1" [pid 7067] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7064] <... mount resumed>) = 0 [pid 5612] <... rmdir resumed>) = 0 [pid 7064] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7064] chdir("./file1") = 0 [pid 7064] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7067] chdir("./58" [pid 7064] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7057] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7067] <... chdir resumed>) = 0 [pid 7064] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7067] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7064] <... futex resumed>) = 1 [pid 7061] <... futex resumed>) = 0 [pid 7067] <... prctl resumed>) = 0 [pid 7067] setpgid(0, 0 [pid 7064] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7061] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7067] <... setpgid resumed>) = 0 [pid 7067] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7061] <... futex resumed>) = 0 [ 151.012464][ T7066] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 151.012773][ T7066] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 520 with error 28 [ 151.012796][ T7066] EXT4-fs (loop4): This should not happen!! Data will be lost [ 151.012796][ T7066] [ 151.012809][ T7066] EXT4-fs (loop4): Total free blocks count 0 [ 151.012821][ T7066] EXT4-fs (loop4): Free/Dirty block details [pid 7067] <... openat resumed>) = 3 [pid 7061] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7067] write(3, "1000", 4 [pid 7064] <... openat resumed>) = 4 [pid 5612] umount2("./57/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7067] <... write resumed>) = 4 [pid 7067] close(3) = 0 [pid 7064] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7067] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7066] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7065] <... mount resumed>) = 0 [pid 7064] <... futex resumed>) = 1 [pid 7061] <... futex resumed>) = 0 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7067] write(1, "executing program\n", 18 [pid 7065] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7064] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL executing program [pid 7061] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7058] <... sendfile resumed>) = 536576 [pid 7067] <... write resumed>) = 18 [pid 7065] <... openat resumed>) = 3 [pid 7064] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7061] <... futex resumed>) = 0 [pid 7067] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7066] +++ killed by SIGBUS +++ [pid 7064] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7058] +++ killed by SIGBUS +++ [pid 7067] <... futex resumed>) = 0 [pid 7065] chdir("./file1" [pid 5612] newfstatat(AT_FDCWD, "./57/binderfs" [pid 7067] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 7065] <... chdir resumed>) = 0 [pid 7064] <... openat resumed>) = 5 [pid 7061] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7067] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 7065] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5612] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7067] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 7064] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7061] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7065] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5612] unlink("./57/binderfs" [pid 7067] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7065] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7064] <... futex resumed>) = 0 [pid 7061] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7057] +++ killed by SIGBUS +++ [pid 5612] <... unlink resumed>) = 0 [pid 7067] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7065] <... futex resumed>) = 1 [pid 7064] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7061] <... futex resumed>) = 0 [pid 7067] <... mmap resumed>) = 0x7fef94c68000 [pid 7065] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7057, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5612] getdents64(3 [pid 7067] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 7064] <... openat resumed>) = 6 [pid 7063] <... futex resumed>) = 0 [pid 7061] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 7067] <... mprotect resumed>) = 0 [pid 7064] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 7061] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7061] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7061] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7067] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7064] <... futex resumed>) = 0 [pid 7063] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... restart_syscall resumed>) = 0 [pid 5612] close(3 [pid 7067] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7064] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7063] <... futex resumed>) = 1 [pid 5612] <... close resumed>) = 0 [pid 7067] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 7065] <... futex resumed>) = 0 [pid 7064] <... mmap resumed>) = 0x200000000000 [pid 7063] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-upstream-fs/strace-static-x86_64: Process 7072 attached [pid 7065] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [ 151.012832][ T7066] EXT4-fs (loop4): free_blocks=20480 [ 151.013677][ T7066] EXT4-fs (loop4): dirty_blocks=528 [ 151.013702][ T7066] EXT4-fs (loop4): Block reservation details [ 151.013728][ T7066] EXT4-fs (loop4): i_reserved_data_blocks=33 [ 151.028664][ T7064] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.082130][ T7065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [pid 5612] rmdir("./57" [pid 7067] <... clone3 resumed> => {parent_tid=[7072]}, 88) = 7072 [pid 7064] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] umount2("./56", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5612] <... rmdir resumed>) = 0 [pid 7067] rt_sigprocmask(SIG_SETMASK, [] [pid 7064] <... futex resumed>) = 1 [pid 7061] <... futex resumed>) = 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7072] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7067] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7064] sendfile(4, 5, NULL, 553647746 [pid 7061] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5612] mkdir("./58", 0777 [pid 7072] <... rseq resumed>) = 0 [pid 7061] <... futex resumed>) = 0 [pid 7067] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7061] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] <... openat resumed>) = 3 [pid 7072] set_robust_list(0x7fef94c889a0, 24 [pid 7067] <... futex resumed>) = 0 [pid 5612] <... mkdir resumed>) = 0 [pid 7072] <... set_robust_list resumed>) = 0 [pid 7067] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5614] fstat(3 [pid 7072] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7072] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5612] <... openat resumed>) = 3 [pid 5612] ioctl(3, LOOP_CLR_FD) = 0 [pid 5614] getdents64(3, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5612] close(3 [pid 7072] memfd_create("syzkaller", 0 [pid 5614] umount2("./56/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7072] <... memfd_create resumed>) = 3 [pid 7065] <... openat resumed>) = 4 [pid 7072] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fef8c868000 [pid 7065] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5612] <... close resumed>) = 0 [pid 7065] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7063] <... futex resumed>) = 0 [pid 7063] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7065] <... futex resumed>) = 0 [pid 7063] <... futex resumed>) = 1 [pid 7065] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7063] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5612] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7072] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7065] <... openat resumed>) = 5 ci2-upstream-fs/strace-static-x86_64: Process 7073 attached [pid 5612] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7073 [pid 7073] set_robust_list(0x5555748a66e0, 24 [pid 5612] rt_sigprocmask(SIG_SETMASK, [] [pid 7073] <... set_robust_list resumed>) = 0 [pid 7073] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5612] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7073] chdir("./58") = 0 [pid 7073] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7065] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7073] <... prctl resumed>) = 0 [pid 7065] <... futex resumed>) = 1 [pid 7063] <... futex resumed>) = 0 [pid 7073] setpgid(0, 0) = 0 [pid 7073] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7063] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7065] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7073] <... openat resumed>) = 3 [pid 7063] <... futex resumed>) = 0 [pid 7061] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7073] write(3, "1000", 4 [pid 7063] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7061] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7073] <... write resumed>) = 4 [pid 7061] <... futex resumed>) = 0 [pid 7073] close(3) = 0 [pid 7073] symlink("/dev/binderfs", "./binderfs" [pid 7061] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c47000 [pid 7073] <... symlink resumed>) = 0 [pid 7072] <... write resumed>) = 524288 [pid 7065] <... openat resumed>) = 6 [pid 7061] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 7065] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7073] write(1, "executing program\n", 18 [pid 7065] <... futex resumed>) = 1 [pid 7063] <... futex resumed>) = 0 [pid 7061] <... mprotect resumed>) = 0 [pid 7065] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7063] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7073] <... write resumed>) = 18 [pid 7073] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7073] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 7063] <... futex resumed>) = 0 [pid 7065] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) executing program [pid 7063] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7073] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 7073] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7073] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c68000 [pid 7065] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7073] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7073] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7072] munmap(0x7fef8c868000, 138412032 [pid 7065] <... mmap resumed>) = 0x200000000000 [pid 7061] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7073] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 7061] <... rt_sigprocmask resumed>, [], 8) = 0 [ 151.203665][ T63] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 520 with max blocks 4 with error 28 [ 151.220039][ T5614] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost ci2-upstream-fs/strace-static-x86_64: Process 7074 attached [pid 7072] <... munmap resumed>) = 0 [pid 7065] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7061] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 7073] <... clone3 resumed> => {parent_tid=[7074]}, 88) = 7074 [pid 7073] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7073] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7073] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7065] <... futex resumed>) = 1 ci2-upstream-fs/strace-static-x86_64: Process 7075 attached [pid 7061] <... clone3 resumed> => {parent_tid=[7075]}, 88) = 7075 [pid 7075] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 7075] set_robust_list(0x7fef94c679a0, 24 [pid 7065] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7061] rt_sigprocmask(SIG_SETMASK, [] [pid 7075] <... set_robust_list resumed>) = 0 [pid 7074] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7072] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7075] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7075] futex(0x7fef94d63e58, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7072] <... openat resumed>) = 4 [pid 7061] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7063] <... futex resumed>) = 0 [pid 7063] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7061] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7061] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7074] <... rseq resumed>) = 0 [pid 7065] <... futex resumed>) = 0 [pid 7063] <... futex resumed>) = 1 [pid 7065] sendfile(4, 5, NULL, 553647746 [pid 7063] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7074] set_robust_list(0x7fef94c889a0, 24) = 0 [pid 7074] rt_sigprocmask(SIG_SETMASK, [] [pid 7072] ioctl(4, LOOP_SET_FD, 3 [pid 7074] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7074] memfd_create("syzkaller", 0 [pid 7072] <... ioctl resumed>) = 0 [pid 7075] <... futex resumed>) = 0 [pid 7074] <... memfd_create resumed>) = 3 [pid 7074] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7072] close(3 [pid 5614] <... umount2 resumed>) = 0 [pid 7074] <... mmap resumed>) = 0x7fef8c868000 [pid 7072] <... close resumed>) = 0 [pid 5614] umount2("./56/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7072] close(4 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7072] <... close resumed>) = 0 [pid 5614] newfstatat(AT_FDCWD, "./56/file1" [pid 7072] mkdir("./file1", 0777) = 0 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] umount2("./56/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7061] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 151.299234][ T7072] set_capacity_and_notify: 12 callbacks suppressed [ 151.299253][ T7072] loop2: detected capacity change from 0 to 1024 [ 151.300306][ T7064] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 151.300800][ T7075] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 856 with error 28 [ 151.300818][ T7075] EXT4-fs (loop0): This should not happen!! Data will be lost [ 151.300818][ T7075] [pid 5614] openat(AT_FDCWD, "./56/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7072] mount("/dev/loop2", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7063] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7063] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... openat resumed>) = 4 [pid 7074] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7063] <... futex resumed>) = 0 [pid 7063] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5614] fstat(4 [pid 7063] <... mmap resumed>) = 0x7fef94c47000 [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7063] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 5614] getdents64(4 [pid 7063] <... mprotect resumed>) = 0 [pid 7063] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 7074] <... write resumed>) = 524288 [pid 7063] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5614] getdents64(4 [pid 7075] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7072] <... mount resumed>) = 0 [pid 7064] <... sendfile resumed>) = 876544 [pid 7074] munmap(0x7fef8c868000, 138412032 [pid 7063] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 7078 attached [pid 7072] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7064] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [ 151.300826][ T7075] EXT4-fs (loop0): Total free blocks count 0 [ 151.300832][ T7075] EXT4-fs (loop0): Free/Dirty block details [ 151.300839][ T7075] EXT4-fs (loop0): free_blocks=20480 [ 151.300847][ T7075] EXT4-fs (loop0): dirty_blocks=864 [ 151.300853][ T7075] EXT4-fs (loop0): Block reservation details [ 151.300859][ T7075] EXT4-fs (loop0): i_reserved_data_blocks=54 [pid 7074] <... munmap resumed>) = 0 [pid 7078] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7072] <... openat resumed>) = 3 [pid 7064] <... futex resumed>) = ? [pid 7063] <... clone3 resumed> => {parent_tid=[7078]}, 88) = 7078 [pid 5614] close(4 [pid 7074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7072] chdir("./file1" [pid 7064] +++ killed by SIGBUS +++ [pid 7074] <... openat resumed>) = 4 [pid 7063] rt_sigprocmask(SIG_SETMASK, [] [pid 7072] <... chdir resumed>) = 0 [pid 5614] <... close resumed>) = 0 [pid 7063] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] rmdir("./56/file1") = 0 [pid 5614] umount2("./56/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7072] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7063] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] newfstatat(AT_FDCWD, "./56/binderfs" [pid 7072] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7063] <... futex resumed>) = 0 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./56/binderfs" [pid 7063] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7078] <... rseq resumed>) = 0 [pid 5614] <... unlink resumed>) = 0 [pid 5614] getdents64(3 [pid 7078] set_robust_list(0x7fef94c679a0, 24 [pid 7075] +++ killed by SIGBUS +++ [pid 7074] ioctl(4, LOOP_SET_FD, 3 [pid 7072] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7061] +++ killed by SIGBUS +++ [pid 7078] <... set_robust_list resumed>) = 0 [pid 7072] <... futex resumed>) = 1 [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7061, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 7078] rt_sigprocmask(SIG_SETMASK, [] [pid 7074] <... ioctl resumed>) = 0 [pid 7072] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7067] <... futex resumed>) = 0 [pid 5614] close(3 [pid 7078] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7067] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... close resumed>) = 0 [pid 5614] rmdir("./56" [pid 7072] <... futex resumed>) = 0 [pid 7067] <... futex resumed>) = 1 [pid 7072] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7067] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] <... rmdir resumed>) = 0 [pid 5609] umount2("./57", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3 [pid 5614] mkdir("./57", 0777 [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5614] <... mkdir resumed>) = 0 [pid 5609] getdents64(3 [pid 7074] close(3 [pid 7072] <... openat resumed>) = 4 [pid 7074] <... close resumed>) = 0 [pid 7072] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7074] close(4) = 0 [pid 7072] <... futex resumed>) = 1 [pid 7067] <... futex resumed>) = 0 [pid 7074] mkdir("./file1", 0777 [pid 7072] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7067] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7074] <... mkdir resumed>) = 0 [pid 7072] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7067] <... futex resumed>) = 0 [pid 7072] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7067] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7074] mount("/dev/loop3", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7072] <... openat resumed>) = 5 [pid 7063] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7072] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 7072] <... futex resumed>) = 1 [pid 7067] <... futex resumed>) = 0 [pid 5609] umount2("./57/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7072] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7067] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7072] <... openat resumed>) = 6 [pid 7067] <... futex resumed>) = 0 [pid 5614] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7067] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] <... openat resumed>) = 3 [ 151.451849][ T7074] loop3: detected capacity change from 0 to 1024 [ 151.454623][ T7078] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 151.455089][ T7078] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 360 with error 28 [ 151.455116][ T7078] EXT4-fs (loop1): This should not happen!! Data will be lost [ 151.455116][ T7078] [pid 7078] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7072] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7067] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7065] <... sendfile resumed>) = 372736 [pid 5614] ioctl(3, LOOP_CLR_FD [pid 7072] <... futex resumed>) = 0 [pid 7067] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7065] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... ioctl resumed>) = 0 [pid 7072] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7067] <... futex resumed>) = 0 [pid 7065] <... futex resumed>) = 0 [pid 5614] close(3 [pid 7072] <... mmap resumed>) = 0x200000000000 [pid 7067] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7065] +++ killed by SIGBUS +++ [pid 7072] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7067] <... futex resumed>) = 0 [pid 7067] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7072] sendfile(4, 5, NULL, 553647746 [pid 7067] <... futex resumed>) = 0 [pid 7078] +++ killed by SIGBUS +++ [pid 7067] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7063] +++ killed by SIGBUS +++ [pid 5610] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7063, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5610] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5614] <... close resumed>) = 0 [ 151.455129][ T7078] EXT4-fs (loop1): Total free blocks count 0 [ 151.455142][ T7078] EXT4-fs (loop1): Free/Dirty block details [ 151.455153][ T7078] EXT4-fs (loop1): free_blocks=20480 [ 151.455166][ T7078] EXT4-fs (loop1): dirty_blocks=368 [ 151.455178][ T7078] EXT4-fs (loop1): Block reservation details [ 151.455189][ T7078] EXT4-fs (loop1): i_reserved_data_blocks=23 [ 151.461042][ T37] kauditd_printk_skb: 12 callbacks suppressed [pid 5610] umount2("./56", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5610] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5610] <... openat resumed>) = 3 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 7080 attached [pid 5610] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5610] getdents64(3, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 7080] set_robust_list(0x5555748a66e0, 24) = 0 [pid 5614] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7080 [pid 5610] umount2("./56/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7080] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 7080] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7080] chdir("./57") = 0 [pid 7067] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7080] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7067] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7080] <... prctl resumed>) = 0 [pid 7067] <... futex resumed>) = 0 [pid 7080] setpgid(0, 0 [pid 7067] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c47000 [pid 7080] <... setpgid resumed>) = 0 [pid 7080] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7067] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7067] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7080] <... openat resumed>) = 3 [pid 7067] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 7082 attached [pid 7080] write(3, "1000", 4 [pid 7067] <... clone3 resumed> => {parent_tid=[7082]}, 88) = 7082 [pid 7082] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7080] <... write resumed>) = 4 [ 151.461061][ T37] audit: type=1800 audit(1785844681.854:290): pid=7072 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 151.576141][ T5609] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 7067] rt_sigprocmask(SIG_SETMASK, [] [pid 7082] <... rseq resumed>) = 0 [pid 7080] close(3 [pid 7067] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7080] <... close resumed>) = 0 [pid 7067] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7082] set_robust_list(0x7fef94c679a0, 24 [pid 7080] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7067] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7082] <... set_robust_list resumed>) = 0 [pid 7082] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 executing program [pid 7080] write(1, "executing program\n", 18) = 18 [pid 7080] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7080] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60}, NULL, 8) = 0 [pid 7080] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7080] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c68000 [pid 7080] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7080] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7080] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} => {parent_tid=[7083]}, 88) = 7083 [ 151.626074][ T13] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 360 with max blocks 4 with error 28 [ 151.642223][ T7082] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 151.642421][ T7082] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 300 with error 28 [ 151.642443][ T7082] EXT4-fs (loop2): This should not happen!! Data will be lost [pid 7080] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7067] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5609] <... umount2 resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 7083 attached [pid 7080] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] umount2("./57/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7080] <... futex resumed>) = 0 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7083] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7080] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5609] newfstatat(AT_FDCWD, "./57/file1" [pid 7083] <... rseq resumed>) = 0 [pid 5609] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7083] set_robust_list(0x7fef94c889a0, 24 [pid 5609] umount2("./57/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7083] <... set_robust_list resumed>) = 0 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7083] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] openat(AT_FDCWD, "./57/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7083] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] <... umount2 resumed>) = 0 [pid 5609] <... openat resumed>) = 4 [pid 7083] memfd_create("syzkaller", 0 [pid 5610] umount2("./56/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] fstat(4 [pid 7083] <... memfd_create resumed>) = 3 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7083] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5610] newfstatat(AT_FDCWD, "./56/file1" [pid 5609] getdents64(4 [pid 7083] <... mmap resumed>) = 0x7fef8c868000 [pid 5610] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5610] umount2("./56/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] getdents64(4 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5610] openat(AT_FDCWD, "./56/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5609] close(4 [pid 5610] <... openat resumed>) = 4 [pid 5610] fstat(4 [pid 5609] <... close resumed>) = 0 [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] rmdir("./57/file1") = 0 [pid 5610] getdents64(4, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5609] umount2("./57/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7083] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5610] getdents64(4, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5610] close(4 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] <... close resumed>) = 0 [pid 5610] rmdir("./56/file1" [pid 5609] newfstatat(AT_FDCWD, "./57/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5610] <... rmdir resumed>) = 0 [pid 5609] unlink("./57/binderfs" [pid 5610] umount2("./56/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... unlink resumed>) = 0 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] newfstatat(AT_FDCWD, "./56/binderfs" [pid 5609] getdents64(3 [pid 5610] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5609] close(3 [pid 5610] unlink("./56/binderfs" [pid 5609] <... close resumed>) = 0 [pid 5609] rmdir("./57" [pid 7082] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7074] <... mount resumed>) = 0 [pid 5609] <... rmdir resumed>) = 0 [pid 7067] ???( [pid 7083] <... write resumed>) = 524288 [pid 7074] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5609] mkdir("./58", 0777 [pid 7072] <... sendfile resumed>) = ? [pid 5610] <... unlink resumed>) = 0 [pid 5609] <... mkdir resumed>) = 0 [pid 7074] <... openat resumed>) = 3 [pid 7072] +++ killed by SIGBUS +++ [ 151.642443][ T7082] [ 151.642456][ T7082] EXT4-fs (loop2): Total free blocks count 0 [ 151.642468][ T7082] EXT4-fs (loop2): Free/Dirty block details [ 151.642484][ T7082] EXT4-fs (loop2): free_blocks=20480 [ 151.642497][ T7082] EXT4-fs (loop2): dirty_blocks=304 [ 151.642507][ T7082] EXT4-fs (loop2): Block reservation details [ 151.642518][ T7082] EXT4-fs (loop2): i_reserved_data_blocks=19 [ 151.649520][ T5610] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 7082] +++ killed by SIGBUS +++ [pid 7074] chdir("./file1" [pid 7067] +++ killed by SIGBUS +++ [pid 7083] munmap(0x7fef8c868000, 138412032 [pid 7074] <... chdir resumed>) = 0 [pid 5610] getdents64(3 [pid 5611] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7067, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7083] <... munmap resumed>) = 0 [pid 7074] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5609] <... openat resumed>) = 3 [pid 7083] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7074] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] close(3 [pid 5609] ioctl(3, LOOP_CLR_FD [pid 7074] <... futex resumed>) = 1 [pid 7073] <... futex resumed>) = 0 [pid 5611] umount2("./58", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7074] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7073] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7073] <... futex resumed>) = 0 [pid 5611] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7073] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... close resumed>) = 0 [pid 5609] <... ioctl resumed>) = 0 [pid 5611] <... openat resumed>) = 3 [pid 7083] <... openat resumed>) = 4 [pid 7074] <... openat resumed>) = 4 [pid 5611] fstat(3 [pid 5610] rmdir("./56" [pid 5609] close(3 [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7083] ioctl(4, LOOP_SET_FD, 3 [pid 7074] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] getdents64(3 [pid 5610] <... rmdir resumed>) = 0 [pid 7074] <... futex resumed>) = 1 [pid 7073] <... futex resumed>) = 0 [pid 7083] <... ioctl resumed>) = 0 [pid 7074] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7073] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5610] mkdir("./57", 0777 [pid 7083] close(3 [pid 5610] <... mkdir resumed>) = 0 [pid 7083] <... close resumed>) = 0 [pid 5610] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7083] close(4 [pid 5610] <... openat resumed>) = 3 [pid 7083] <... close resumed>) = 0 [pid 5610] ioctl(3, LOOP_CLR_FD [pid 7083] mkdir("./file1", 0777 [pid 5610] <... ioctl resumed>) = 0 [pid 5610] close(3 [pid 7083] <... mkdir resumed>) = 0 [pid 7074] <... openat resumed>) = 5 [pid 7073] <... futex resumed>) = 0 [pid 7074] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7073] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] umount2("./58/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7083] mount("/dev/loop4", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7074] <... futex resumed>) = 0 [pid 7073] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7074] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5610] <... close resumed>) = 0 [pid 5609] <... close resumed>) = 0 [pid 7073] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7074] <... futex resumed>) = 0 [pid 7073] <... futex resumed>) = 1 [pid 5610] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7074] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7073] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7074] <... openat resumed>) = 6 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[]ci2-upstream-fs/strace-static-x86_64: Process 7084 attached , [], 8) = 0 [pid 7084] set_robust_list(0x5555748a66e0, 24 [pid 7074] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7084] <... set_robust_list resumed>) = 0 [pid 7084] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7084 ci2-upstream-fs/strace-static-x86_64: Process 7085 attached [pid 7084] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7074] <... futex resumed>) = 1 [pid 7073] <... futex resumed>) = 0 [pid 7085] set_robust_list(0x5555748a66e0, 24 [pid 7084] chdir("./57" [pid 7074] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7073] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] rt_sigprocmask(SIG_SETMASK, [] [pid 7085] <... set_robust_list resumed>) = 0 [pid 7084] <... chdir resumed>) = 0 [pid 7074] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7073] <... futex resumed>) = 0 [pid 5610] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7085] rt_sigprocmask(SIG_SETMASK, [] [ 151.782289][ T37] audit: type=1800 audit(1785844682.184:291): pid=7074 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 151.788667][ T7083] loop4: detected capacity change from 0 to 1024 [pid 7084] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7083] <... mount resumed>) = 0 [pid 7074] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7073] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7085 [pid 7084] <... prctl resumed>) = 0 [pid 7085] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7084] setpgid(0, 0 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 7085] chdir("./58" [pid 7084] <... setpgid resumed>) = 0 [pid 7074] <... mmap resumed>) = 0x200000000000 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7085] <... chdir resumed>) = 0 [pid 7084] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7074] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7085] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7074] <... futex resumed>) = 1 [pid 7085] <... prctl resumed>) = 0 [pid 7073] <... futex resumed>) = 0 [pid 7085] setpgid(0, 0 [pid 7074] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7073] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7085] <... setpgid resumed>) = 0 [pid 7083] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7074] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7073] <... futex resumed>) = 0 [pid 7085] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7083] <... openat resumed>) = 3 [pid 7085] <... openat resumed>) = 3 [pid 7074] sendfile(4, 5, NULL, 553647746 [pid 7073] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7085] write(3, "1000", 4 [pid 7083] chdir("./file1" [pid 7085] <... write resumed>) = 4 [pid 7083] <... chdir resumed>) = 0 [pid 7085] close(3 [pid 7083] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7085] <... close resumed>) = 0 [pid 7083] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7085] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7083] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7085] write(1, "executing program\n", 18) = 18 [pid 7083] <... futex resumed>) = 1 [pid 7080] <... futex resumed>) = 0 [pid 7085] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7080] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7080] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7085] <... futex resumed>) = 0 [pid 7085] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 7083] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7085] <... rt_sigaction resumed>, NULL, 8) = 0 executing program [pid 7084] <... openat resumed>) = 3 [pid 7083] <... openat resumed>) = 4 [pid 7085] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7085] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7084] write(3, "1000", 4 [pid 7085] <... mmap resumed>) = 0x7fef94c68000 [ 151.856100][ T3414] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 300 with max blocks 4 with error 28 [ 151.856131][ T3414] EXT4-fs (loop2): This should not happen!! Data will be lost [ 151.856131][ T3414] [ 151.860397][ T5611] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 7085] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 7084] <... write resumed>) = 4 [pid 7083] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7085] <... mprotect resumed>) = 0 [pid 7084] close(3) = 0 [pid 7084] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7083] <... futex resumed>) = 1 [pid 7083] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7085] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7080] <... futex resumed>) = 0 [pid 7085] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 7080] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000ci2-upstream-fs/strace-static-x86_64: Process 7088 attached [pid 7084] write(1, "executing program\n", 18 [pid 7083] <... futex resumed>) = 0 [pid 7080] <... futex resumed>) = 1 [pid 5611] <... umount2 resumed>) = 0 [pid 7088] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7084] <... write resumed>) = 18 [pid 7088] <... rseq resumed>) = 0 executing program [pid 7088] set_robust_list(0x7fef94c889a0, 24 [pid 7084] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7083] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7080] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] umount2("./58/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7088] <... set_robust_list resumed>) = 0 [pid 7084] <... futex resumed>) = 0 [pid 7088] rt_sigprocmask(SIG_SETMASK, [] [pid 7084] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 7088] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7085] <... clone3 resumed> => {parent_tid=[7088]}, 88) = 7088 [pid 7084] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 7083] <... openat resumed>) = 5 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7088] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7085] rt_sigprocmask(SIG_SETMASK, [] [pid 7083] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7073] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5611] newfstatat(AT_FDCWD, "./58/file1" [pid 7085] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7073] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7085] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7073] <... futex resumed>) = 0 [pid 7085] <... futex resumed>) = 0 [pid 7073] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7085] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7083] <... futex resumed>) = 1 [pid 7080] <... futex resumed>) = 0 [pid 7073] <... mmap resumed>) = 0x7fef94c47000 [pid 5611] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7088] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7084] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 7083] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7080] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7088] memfd_create("syzkaller", 0 [pid 7084] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5611] umount2("./58/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7084] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7083] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7080] <... futex resumed>) = 0 [pid 7073] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7088] <... memfd_create resumed>) = 3 [pid 7084] <... mmap resumed>) = 0x7fef94c68000 [pid 7083] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7080] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7073] <... mprotect resumed>) = 0 [pid 5611] openat(AT_FDCWD, "./58/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7088] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7084] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 7088] <... mmap resumed>) = 0x7fef8c868000 [pid 7084] <... mprotect resumed>) = 0 [pid 7083] <... openat resumed>) = 6 [pid 7073] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5611] <... openat resumed>) = 4 [ 151.896559][ T37] audit: type=1800 audit(1785844682.294:292): pid=7083 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop4" ino=15 res=0 errno=0 [pid 7084] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7073] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5611] fstat(4 [pid 7084] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7084] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 7083] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7073] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5611] getdents64(4ci2-upstream-fs/strace-static-x86_64: Process 7090 attached ci2-upstream-fs/strace-static-x86_64: Process 7089 attached [pid 7088] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7083] <... futex resumed>) = 1 [pid 7080] <... futex resumed>) = 0 [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 7090] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7089] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7084] <... clone3 resumed> => {parent_tid=[7090]}, 88) = 7090 [pid 7083] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7080] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7073] <... clone3 resumed> => {parent_tid=[7089]}, 88) = 7089 [pid 5611] getdents64(4 [pid 7090] <... rseq resumed>) = 0 [pid 7088] <... write resumed>) = 524288 [pid 7083] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7080] <... futex resumed>) = 0 [pid 7073] rt_sigprocmask(SIG_SETMASK, [] [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 7090] set_robust_list(0x7fef94c889a0, 24 [pid 7089] <... rseq resumed>) = 0 [pid 7088] munmap(0x7fef8c868000, 138412032 [pid 7084] rt_sigprocmask(SIG_SETMASK, [] [pid 7083] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7080] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7073] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5611] close(4 [pid 7090] <... set_robust_list resumed>) = 0 [pid 7089] set_robust_list(0x7fef94c679a0, 24 [pid 7088] <... munmap resumed>) = 0 [pid 7084] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7083] <... mmap resumed>) = 0x200000000000 [pid 7073] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... close resumed>) = 0 [pid 7090] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7089] <... set_robust_list resumed>) = 0 [pid 7088] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7084] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7083] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7073] <... futex resumed>) = 0 [pid 5611] rmdir("./58/file1" [pid 7090] memfd_create("syzkaller", 0 [pid 7089] rt_sigprocmask(SIG_SETMASK, [] [pid 7090] <... memfd_create resumed>) = 3 [pid 7089] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7088] <... openat resumed>) = 4 [pid 7084] <... futex resumed>) = 0 [pid 7083] <... futex resumed>) = 1 [pid 7080] <... futex resumed>) = 0 [pid 7073] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] <... rmdir resumed>) = 0 [pid 7090] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7083] sendfile(4, 5, NULL, 553647746 [pid 7080] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7088] ioctl(4, LOOP_SET_FD, 3 [pid 5611] umount2("./58/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7080] <... futex resumed>) = 0 [pid 7090] <... mmap resumed>) = 0x7fef8c868000 [pid 7088] <... ioctl resumed>) = 0 [pid 7084] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7080] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7088] close(3) = 0 [pid 5611] newfstatat(AT_FDCWD, "./58/binderfs" [pid 7088] close(4 [pid 5611] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7088] <... close resumed>) = 0 [pid 5611] unlink("./58/binderfs") = 0 [pid 7088] mkdir("./file1", 0777) = 0 [pid 5611] getdents64(3, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5611] close(3) = 0 [pid 5611] rmdir("./58") = 0 [pid 7088] mount("/dev/loop0", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5611] mkdir("./59", 0777) = 0 [pid 7089] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [ 152.024712][ T7074] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 152.027768][ T7088] loop0: detected capacity change from 0 to 1024 [ 152.029768][ T7089] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 476 with error 28 [ 152.029796][ T7089] EXT4-fs (loop3): This should not happen!! Data will be lost [ 152.029796][ T7089] [pid 7073] <... futex resumed>) = ? [pid 7074] <... sendfile resumed>) = ? [pid 5611] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7074] +++ killed by SIGBUS +++ [pid 5611] <... openat resumed>) = 3 [pid 5611] ioctl(3, LOOP_CLR_FD) = 0 [pid 5611] close(3 [pid 7089] +++ killed by SIGBUS +++ [pid 7073] +++ killed by SIGBUS +++ [pid 5612] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7073, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5612] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 7080] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5612] umount2("./58", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5612] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5612] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7080] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] getdents64(3 [pid 7080] <... futex resumed>) = 0 [pid 7080] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 7080] <... mmap resumed>) = 0x7fef94c47000 [pid 7090] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7080] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 5612] umount2("./58/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7080] <... mprotect resumed>) = 0 [pid 7080] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7080] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 7090] <... write resumed>) = 524288 ci2-upstream-fs/strace-static-x86_64: Process 7093 attached [pid 7093] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7090] munmap(0x7fef8c868000, 138412032 [pid 7088] <... mount resumed>) = 0 [pid 7080] <... clone3 resumed> => {parent_tid=[7093]}, 88) = 7093 [pid 7093] <... rseq resumed>) = 0 [pid 7093] set_robust_list(0x7fef94c679a0, 24 [pid 7090] <... munmap resumed>) = 0 [pid 7080] rt_sigprocmask(SIG_SETMASK, [] [pid 7093] <... set_robust_list resumed>) = 0 [pid 7080] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7093] rt_sigprocmask(SIG_SETMASK, [] [pid 7080] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7093] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7080] <... futex resumed>) = 0 [pid 7090] openat(AT_FDCWD, "/dev/loop1", O_RDWR [ 152.029808][ T7089] EXT4-fs (loop3): Total free blocks count 0 [ 152.029819][ T7089] EXT4-fs (loop3): Free/Dirty block details [ 152.029831][ T7089] EXT4-fs (loop3): free_blocks=20480 [ 152.029844][ T7089] EXT4-fs (loop3): dirty_blocks=480 [ 152.029854][ T7089] EXT4-fs (loop3): Block reservation details [ 152.029863][ T7089] EXT4-fs (loop3): i_reserved_data_blocks=30 [pid 7088] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7080] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7090] <... openat resumed>) = 4 [pid 7088] <... openat resumed>) = 3 [pid 7088] chdir("./file1") = 0 [pid 7088] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5611] <... close resumed>) = 0 [pid 7088] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7088] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7085] <... futex resumed>) = 0 [pid 5611] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7085] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7088] <... futex resumed>) = 0 [pid 7085] <... futex resumed>) = 1 [pid 5611] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7088] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7085] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-upstream-fs/strace-static-x86_64: Process 7094 attached [pid 7090] ioctl(4, LOOP_SET_FD, 3 [pid 7094] set_robust_list(0x5555748a66e0, 24 [pid 7090] <... ioctl resumed>) = 0 [pid 7088] <... openat resumed>) = 4 [pid 7094] <... set_robust_list resumed>) = 0 [pid 7090] close(3 [pid 7088] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7094 [pid 7094] rt_sigprocmask(SIG_SETMASK, [] [pid 7090] <... close resumed>) = 0 [pid 7088] <... futex resumed>) = 1 [pid 7085] <... futex resumed>) = 0 [ 152.138818][ T7093] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 152.139808][ T7093] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 248 with error 28 [ 152.139836][ T7093] EXT4-fs (loop4): This should not happen!! Data will be lost [ 152.139836][ T7093] [ 152.139850][ T7093] EXT4-fs (loop4): Total free blocks count 0 [ 152.139862][ T7093] EXT4-fs (loop4): Free/Dirty block details [pid 5611] rt_sigprocmask(SIG_SETMASK, [] [pid 7094] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7090] close(4 [pid 7088] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7085] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7094] chdir("./59" [pid 7090] <... close resumed>) = 0 [pid 5611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7094] <... chdir resumed>) = 0 [pid 7090] mkdir("./file1", 0777 [pid 7088] <... openat resumed>) = 5 [pid 7085] <... futex resumed>) = 0 [pid 7094] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7090] <... mkdir resumed>) = 0 [pid 7088] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7085] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7094] setpgid(0, 0 [pid 7088] <... futex resumed>) = 0 [pid 7085] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7094] <... setpgid resumed>) = 0 [pid 7090] mount("/dev/loop1", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7080] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7094] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7088] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7085] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7094] <... openat resumed>) = 3 [pid 7088] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7085] <... futex resumed>) = 0 [pid 7094] write(3, "1000", 4 [pid 7088] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7085] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7094] <... write resumed>) = 4 [pid 7088] <... openat resumed>) = 6 [pid 7094] close(3) = 0 [ 152.139875][ T7093] EXT4-fs (loop4): free_blocks=20480 [ 152.139887][ T7093] EXT4-fs (loop4): dirty_blocks=256 [ 152.139962][ T7093] EXT4-fs (loop4): Block reservation details [ 152.139972][ T7093] EXT4-fs (loop4): i_reserved_data_blocks=16 [ 152.184449][ T7090] loop1: detected capacity change from 0 to 1024 [ 152.187112][ T37] audit: type=1800 audit(1785844682.584:293): pid=7088 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop0" ino=15 res=0 errno=0 [pid 7094] symlink("/dev/binderfs", "./binderfs" [pid 7088] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7088] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7085] <... futex resumed>) = 0 [pid 7085] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7088] <... futex resumed>) = 0 [pid 7085] <... futex resumed>) = 1 [pid 7088] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7085] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7088] <... mmap resumed>) = 0x200000000000 [pid 7088] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7085] <... futex resumed>) = 0 [pid 7088] sendfile(4, 5, NULL, 553647746 [pid 7085] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7085] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7094] <... symlink resumed>) = 0 [pid 7093] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7083] <... sendfile resumed>) = 258048 [pid 7083] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = ? [pid 7094] write(1, "executing program\n", 18 [pid 7093] +++ killed by SIGBUS +++ [pid 7083] +++ killed by SIGBUS +++ [pid 7094] <... write resumed>) = 18 executing program [pid 7094] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7080] +++ killed by SIGBUS +++ [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7080, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7094] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 5614] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 7094] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 7094] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7094] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c68000 [pid 5614] <... restart_syscall resumed>) = 0 [pid 5614] umount2("./57", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7094] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7094] <... mprotect resumed>) = 0 [pid 7090] <... mount resumed>) = 0 [pid 5614] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7090] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5614] <... openat resumed>) = 3 [pid 5614] fstat(3 [pid 7094] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7094] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7094] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 5614] getdents64(3 [pid 7090] <... openat resumed>) = 3 ci2-upstream-fs/strace-static-x86_64: Process 7097 attached [ 152.216666][ T5612] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 7090] chdir("./file1" [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 7097] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7094] <... clone3 resumed> => {parent_tid=[7097]}, 88) = 7097 [pid 7090] <... chdir resumed>) = 0 [pid 7085] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5614] umount2("./57/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5612] <... umount2 resumed>) = 0 [pid 7094] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7085] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7094] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7085] <... futex resumed>) = 0 [pid 7097] <... rseq resumed>) = 0 [pid 7094] <... futex resumed>) = 0 [pid 5612] umount2("./58/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7097] set_robust_list(0x7fef94c889a0, 24 [pid 7094] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7090] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7085] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7097] <... set_robust_list resumed>) = 0 [pid 7097] rt_sigprocmask(SIG_SETMASK, [] [pid 7090] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7085] <... mmap resumed>) = 0x7fef94c47000 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7097] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7085] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 5612] newfstatat(AT_FDCWD, "./58/file1" [pid 7097] memfd_create("syzkaller", 0 [pid 5612] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7085] <... mprotect resumed>) = 0 [pid 7097] <... memfd_create resumed>) = 3 [pid 7090] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] umount2("./58/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7097] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7090] <... futex resumed>) = 1 [pid 7085] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7084] <... futex resumed>) = 0 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7097] <... mmap resumed>) = 0x7fef8c868000 [pid 7090] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7084] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] openat(AT_FDCWD, "./58/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7090] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7085] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7084] <... futex resumed>) = 0 [pid 7090] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7084] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... openat resumed>) = 4 [pid 7085] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 7098 attached [pid 5612] fstat(4 [pid 7098] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7090] <... openat resumed>) = 4 [pid 7085] <... clone3 resumed> => {parent_tid=[7098]}, 88) = 7098 [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7098] <... rseq resumed>) = 0 [pid 7090] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7085] rt_sigprocmask(SIG_SETMASK, [] [pid 7090] <... futex resumed>) = 1 [pid 7084] <... futex resumed>) = 0 [pid 7098] set_robust_list(0x7fef94c679a0, 24 [pid 7090] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7085] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7084] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] getdents64(4 [pid 7098] <... set_robust_list resumed>) = 0 [pid 7084] <... futex resumed>) = 0 [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 7098] rt_sigprocmask(SIG_SETMASK, [] [pid 7090] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7085] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7098] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7090] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7085] <... futex resumed>) = 0 [pid 7097] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5612] getdents64(4 [pid 7090] <... openat resumed>) = 5 [pid 7085] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7090] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7084] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 7090] <... futex resumed>) = 0 [ 152.329832][ T37] audit: type=1800 audit(1785844682.724:294): pid=7090 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 152.353387][ T7098] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [pid 7084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5612] close(4 [pid 7090] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7084] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... close resumed>) = 0 [pid 7090] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5612] rmdir("./58/file1" [pid 7090] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7084] <... futex resumed>) = 0 [pid 5612] <... rmdir resumed>) = 0 [pid 7090] <... openat resumed>) = 6 [pid 7084] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] umount2("./58/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7090] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] newfstatat(AT_FDCWD, "./58/binderfs" [pid 7090] <... futex resumed>) = 1 [pid 7084] <... futex resumed>) = 0 [pid 7090] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7084] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7090] <... mmap resumed>) = 0x200000000000 [pid 7084] <... futex resumed>) = 0 [pid 7084] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] unlink("./58/binderfs" [pid 7090] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5612] <... unlink resumed>) = 0 [pid 7090] <... futex resumed>) = 0 [pid 7084] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7090] sendfile(4, 5, NULL, 553647746 [pid 7084] <... futex resumed>) = 0 [pid 7084] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] getdents64(3 [pid 7098] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 7088] <... sendfile resumed>) = 315392 [pid 5612] close(3) = 0 [pid 7088] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7088] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5612] rmdir("./58") = 0 [pid 7098] +++ killed by SIGBUS +++ [pid 7085] <... futex resumed>) = ? [pid 7088] <... futex resumed>) = ? [pid 5612] mkdir("./59", 0777) = 0 [pid 7088] +++ killed by SIGBUS +++ [pid 7085] +++ killed by SIGBUS +++ [ 152.354397][ T7098] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 304 with error 28 [ 152.354424][ T7098] EXT4-fs (loop0): This should not happen!! Data will be lost [ 152.354424][ T7098] [ 152.354436][ T7098] EXT4-fs (loop0): Total free blocks count 0 [ 152.354448][ T7098] EXT4-fs (loop0): Free/Dirty block details [ 152.354460][ T7098] EXT4-fs (loop0): free_blocks=20480 [ 152.354472][ T7098] EXT4-fs (loop0): dirty_blocks=304 [ 152.354484][ T7098] EXT4-fs (loop0): Block reservation details [pid 5612] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7085, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5612] ioctl(3, LOOP_CLR_FD [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 5612] <... ioctl resumed>) = 0 [pid 5609] <... restart_syscall resumed>) = 0 [pid 5612] close(3 [pid 7097] <... write resumed>) = 524288 [pid 7084] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7097] munmap(0x7fef8c868000, 138412032) = 0 [pid 7084] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] umount2("./58", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7097] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7084] <... futex resumed>) = 0 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 152.354495][ T7098] EXT4-fs (loop0): i_reserved_data_blocks=19 [ 152.434076][ T3414] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 248 with max blocks 4 with error 28 [ 152.434103][ T3414] EXT4-fs (loop4): This should not happen!! Data will be lost [ 152.434103][ T3414] [ 152.441092][ T5614] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 7097] <... openat resumed>) = 4 [pid 7084] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5609] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7097] ioctl(4, LOOP_SET_FD, 3 [pid 7084] <... mmap resumed>) = 0x7fef94c47000 [pid 5609] <... openat resumed>) = 3 [pid 7097] <... ioctl resumed>) = 0 [pid 7084] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5609] fstat(3 [pid 7084] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7084] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5609] getdents64(3 [pid 7084] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 ci2-upstream-fs/strace-static-x86_64: Process 7099 attached [pid 5612] <... close resumed>) = 0 [pid 5609] umount2("./58/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7099] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7084] <... clone3 resumed> => {parent_tid=[7099]}, 88) = 7099 [pid 7084] rt_sigprocmask(SIG_SETMASK, [] [pid 7099] <... rseq resumed>) = 0 [pid 7084] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5612] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7099] set_robust_list(0x7fef94c679a0, 24 [pid 7084] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7099] <... set_robust_list resumed>) = 0 [pid 7084] <... futex resumed>) = 0 [pid 5612] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7099] rt_sigprocmask(SIG_SETMASK, [] [pid 7084] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-upstream-fs/strace-static-x86_64: Process 7100 attached [pid 7099] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7100] set_robust_list(0x5555748a66e0, 24 [pid 5612] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7100 [pid 7100] <... set_robust_list resumed>) = 0 [pid 5612] rt_sigprocmask(SIG_SETMASK, [] [pid 7100] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] <... rt_sigprocmask resumed>, NULL, 8) = 0 [ 152.443489][ T7097] loop2: detected capacity change from 0 to 1024 [ 152.472499][ T7099] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 152.474650][ T7099] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 288 with error 28 [ 152.474677][ T7099] EXT4-fs (loop1): This should not happen!! Data will be lost [ 152.474677][ T7099] [ 152.474691][ T7099] EXT4-fs (loop1): Total free blocks count 0 [ 152.474703][ T7099] EXT4-fs (loop1): Free/Dirty block details [pid 7100] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7100] chdir("./59") = 0 [pid 7100] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7100] setpgid(0, 0) = 0 [pid 7100] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7097] close(3) = 0 [pid 7100] write(3, "1000", 4) = 4 [pid 7099] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7100] close(3) = 0 [pid 7100] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7100] write(1, "executing program\n", 18) = 18 [pid 7100] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7097] close(4 [pid 7100] <... futex resumed>) = 0 [pid 7084] <... futex resumed>) = ? [pid 7100] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 7099] +++ killed by SIGBUS +++ [pid 7097] <... close resumed>) = 0 [pid 7090] <... sendfile resumed>) = ? executing program [ 152.474714][ T7099] EXT4-fs (loop1): free_blocks=20480 [ 152.474727][ T7099] EXT4-fs (loop1): dirty_blocks=288 [ 152.474738][ T7099] EXT4-fs (loop1): Block reservation details [ 152.474749][ T7099] EXT4-fs (loop1): i_reserved_data_blocks=18 [ 152.526004][ T177] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 304 with max blocks 4 with error 28 [ 152.526035][ T177] EXT4-fs (loop0): This should not happen!! Data will be lost [ 152.526035][ T177] [pid 7100] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 5614] <... umount2 resumed>) = 0 [pid 5614] umount2("./57/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7100] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7100] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] newfstatat(AT_FDCWD, "./57/file1" [pid 7100] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7100] <... mmap resumed>) = 0x7fef94c68000 [pid 5614] umount2("./57/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7100] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 7097] mkdir("./file1", 0777 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7100] <... mprotect resumed>) = 0 [pid 7097] <... mkdir resumed>) = 0 [pid 7090] +++ killed by SIGBUS +++ [pid 7084] +++ killed by SIGBUS +++ [pid 5614] openat(AT_FDCWD, "./57/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 7100] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5614] fstat(4 [pid 7100] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 5610] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7084, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=6 /* 0.06 s */} --- ci2-upstream-fs/strace-static-x86_64: Process 7101 attached [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7100] <... clone3 resumed> => {parent_tid=[7101]}, 88) = 7101 [pid 5614] getdents64(4 [pid 7100] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 7101] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7100] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] getdents64(4 [pid 7101] <... rseq resumed>) = 0 [pid 7100] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 7101] set_robust_list(0x7fef94c889a0, 24 [pid 7100] <... futex resumed>) = 0 [pid 7101] <... set_robust_list resumed>) = 0 [pid 7100] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5614] close(4) = 0 [pid 7101] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] rmdir("./57/file1" [pid 7101] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] <... rmdir resumed>) = 0 [pid 7101] memfd_create("syzkaller", 0 [pid 5610] umount2("./57", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... umount2 resumed>) = 0 [pid 7101] <... memfd_create resumed>) = 3 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7101] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5610] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7101] <... mmap resumed>) = 0x7fef8c868000 [pid 5614] umount2("./57/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] <... openat resumed>) = 3 [pid 5609] umount2("./58/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] fstat(3 [pid 5609] newfstatat(AT_FDCWD, "./58/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] umount2("./58/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5614] newfstatat(AT_FDCWD, "./57/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5610] getdents64(3 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7097] mount("/dev/loop2", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5614] unlink("./57/binderfs" [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5609] openat(AT_FDCWD, "./58/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5614] <... unlink resumed>) = 0 [pid 5610] umount2("./57/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... openat resumed>) = 4 [pid 7101] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5609] fstat(4 [pid 5614] getdents64(3 [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5609] getdents64(4 [pid 5614] close(3 [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5614] <... close resumed>) = 0 [pid 5609] getdents64(4 [pid 5614] rmdir("./57" [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5614] <... rmdir resumed>) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./58/file1" [pid 5614] mkdir("./58", 0777 [pid 5609] <... rmdir resumed>) = 0 [pid 7101] <... write resumed>) = 524288 [pid 5614] <... mkdir resumed>) = 0 [pid 5609] umount2("./58/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./58/binderfs" [pid 5614] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5609] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 152.535605][ T5609] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 5614] <... openat resumed>) = 3 [pid 5609] unlink("./58/binderfs" [pid 7101] munmap(0x7fef8c868000, 138412032 [pid 5614] ioctl(3, LOOP_CLR_FD [pid 5609] <... unlink resumed>) = 0 [pid 7101] <... munmap resumed>) = 0 [pid 5614] <... ioctl resumed>) = 0 [pid 5609] getdents64(3 [pid 5614] close(3 [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5609] close(3 [pid 7101] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5609] <... close resumed>) = 0 [pid 7101] <... openat resumed>) = 4 [pid 5609] rmdir("./58" [pid 7101] ioctl(4, LOOP_SET_FD, 3 [pid 5609] <... rmdir resumed>) = 0 [pid 5609] mkdir("./59", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = 0 [pid 5609] close(3 [pid 7101] <... ioctl resumed>) = 0 [pid 7101] close(3) = 0 [pid 7101] close(4) = 0 [pid 7101] mkdir("./file1", 0777) = 0 [pid 7101] mount("/dev/loop3", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5614] <... close resumed>) = 0 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5610] <... umount2 resumed>) = 0 [pid 5609] <... close resumed>) = 0 [pid 5614] <... rt_sigprocmask resumed>, [], 8) = 0 [ 152.633015][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 288 with max blocks 4 with error 28 [ 152.633045][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 152.633045][ T12] [ 152.638600][ T5610] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 152.670578][ T7101] loop3: detected capacity change from 0 to 1024 [pid 5610] umount2("./57/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7101] <... mount resumed>) = 0 [pid 7097] <... mount resumed>) = 0 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7101] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7101] <... openat resumed>) = 3 [pid 5610] newfstatat(AT_FDCWD, "./57/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7101] chdir("./file1" [pid 5610] umount2("./57/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7101] <... chdir resumed>) = 0 [pid 7101] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7101] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5610] openat(AT_FDCWD, "./57/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7101] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... openat resumed>) = 4 [pid 5609] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7101] <... futex resumed>) = 1 [pid 5610] fstat(4 [pid 7101] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5610] getdents64(4, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5610] getdents64(4, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5610] close(4) = 0 ci2-upstream-fs/strace-static-x86_64: Process 7107 attached ci2-upstream-fs/strace-static-x86_64: Process 7106 attached [pid 7100] <... futex resumed>) = 0 [pid 7097] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7106] set_robust_list(0x5555748a66e0, 24 [pid 7100] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7107 [pid 7097] <... openat resumed>) = 3 [pid 5609] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7106 [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 7107] set_robust_list(0x5555748a66e0, 24 [pid 7106] <... set_robust_list resumed>) = 0 [pid 7101] <... futex resumed>) = 0 [pid 7100] <... futex resumed>) = 1 [pid 7097] chdir("./file1" [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] rmdir("./57/file1" [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 7107] <... set_robust_list resumed>) = 0 [pid 7106] rt_sigprocmask(SIG_SETMASK, [] [pid 7101] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7100] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7097] <... chdir resumed>) = 0 [pid 5610] <... rmdir resumed>) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7107] rt_sigprocmask(SIG_SETMASK, [] [pid 7106] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7097] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7107] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7106] chdir("./59" [pid 7097] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5610] umount2("./57/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7107] chdir("./58" [pid 7106] <... chdir resumed>) = 0 [pid 7101] <... openat resumed>) = 4 [pid 7097] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7106] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7107] <... chdir resumed>) = 0 [pid 7106] <... prctl resumed>) = 0 [pid 7097] <... futex resumed>) = 1 [pid 7094] <... futex resumed>) = 0 [pid 5610] newfstatat(AT_FDCWD, "./57/binderfs" [pid 7107] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7101] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7094] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7106] setpgid(0, 0 [pid 7097] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7094] <... futex resumed>) = 0 [pid 7106] <... setpgid resumed>) = 0 [pid 7107] <... prctl resumed>) = 0 [pid 7106] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7101] <... futex resumed>) = 1 [pid 7100] <... futex resumed>) = 0 [pid 7094] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] unlink("./57/binderfs" [pid 7107] setpgid(0, 0 [pid 7106] <... openat resumed>) = 3 [pid 7101] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7100] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... unlink resumed>) = 0 [pid 7107] <... setpgid resumed>) = 0 [pid 7106] write(3, "1000", 4 [pid 7101] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7100] <... futex resumed>) = 0 [pid 7107] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7106] <... write resumed>) = 4 [pid 7101] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7100] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] getdents64(3 [pid 7107] <... openat resumed>) = 3 [pid 7106] close(3 [pid 7101] <... openat resumed>) = 5 [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 7107] write(3, "1000", 4 [pid 7106] <... close resumed>) = 0 [pid 7101] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] close(3 [pid 7106] symlink("/dev/binderfs", "./binderfs" [pid 7107] <... write resumed>) = 4 [pid 7106] <... symlink resumed>) = 0 [pid 7101] <... futex resumed>) = 1 [pid 7100] <... futex resumed>) = 0 [pid 5610] <... close resumed>) = 0 [pid 7107] close(3 [pid 7101] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5610] rmdir("./57" [pid 7107] <... close resumed>) = 0 [pid 7101] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7100] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7107] symlink("/dev/binderfs", "./binderfs" [pid 7106] write(1, "executing program\n", 18 [pid 7101] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7100] <... futex resumed>) = 0 [pid 5610] <... rmdir resumed>) = 0 [pid 7107] <... symlink resumed>) = 0 [pid 7101] <... openat resumed>) = 6 [pid 7100] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} executing program executing program [pid 7107] write(1, "executing program\n", 18 [pid 7106] <... write resumed>) = 18 [pid 7107] <... write resumed>) = 18 [pid 7101] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7106] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] mkdir("./58", 0777 [pid 7107] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7101] <... futex resumed>) = 1 [pid 7107] <... futex resumed>) = 0 [pid 7106] <... futex resumed>) = 0 [pid 7100] <... futex resumed>) = 0 [pid 5610] <... mkdir resumed>) = 0 [pid 7101] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7107] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60}, NULL, 8) = 0 [pid 7106] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 7100] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7107] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 7106] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 5610] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7107] <... rt_sigprocmask resumed>, NULL, 8) = 0 [ 152.763260][ T37] audit: type=1800 audit(1785844683.164:295): pid=7101 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop3" ino=15 res=0 errno=0 [pid 7106] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 7101] <... futex resumed>) = 0 [pid 7100] <... futex resumed>) = 1 [pid 5610] <... openat resumed>) = 3 [pid 7107] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7101] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7107] <... mmap resumed>) = 0x7fef94c68000 [pid 7101] <... mmap resumed>) = 0x200000000000 [pid 7100] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] ioctl(3, LOOP_CLR_FD [pid 7107] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 7106] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7101] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... ioctl resumed>) = 0 [pid 7107] <... mprotect resumed>) = 0 [pid 7106] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7101] <... futex resumed>) = 1 [pid 7100] <... futex resumed>) = 0 [pid 5610] close(3 [pid 7107] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7106] <... mmap resumed>) = 0x7fef94c68000 [pid 7101] sendfile(4, 5, NULL, 553647746 [pid 7100] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7106] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 7100] <... futex resumed>) = 0 [pid 7100] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7107] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7106] <... mprotect resumed>) = 0 [pid 7094] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7107] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 7106] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7094] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000ci2-upstream-fs/strace-static-x86_64: Process 7108 attached [pid 7107] <... clone3 resumed> => {parent_tid=[7108]}, 88) = 7108 [pid 7106] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7094] <... futex resumed>) = 0 [pid 5610] <... close resumed>) = 0 [pid 7107] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7106] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 7094] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7108] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053ci2-upstream-fs/strace-static-x86_64: Process 7109 attached ) = 0 [pid 7107] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7094] <... mmap resumed>) = 0x7fef94c47000 [pid 5610] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7108] set_robust_list(0x7fef94c889a0, 24 [pid 7107] <... futex resumed>) = 0 [pid 7094] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 5610] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7109] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7108] <... set_robust_list resumed>) = 0 [pid 7106] <... clone3 resumed> => {parent_tid=[7109]}, 88) = 7109 [pid 7107] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7106] rt_sigprocmask(SIG_SETMASK, [] [pid 7094] <... mprotect resumed>) = 0 [pid 7108] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7108] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7106] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7097] <... openat resumed>) = 4 [pid 7094] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7109] <... rseq resumed>) = 0 [pid 7109] set_robust_list(0x7fef94c889a0, 24 [pid 7108] memfd_create("syzkaller", 0 [pid 7109] <... set_robust_list resumed>) = 0 [pid 7106] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7094] <... rt_sigprocmask resumed>, [], 8) = 0 ci2-upstream-fs/strace-static-x86_64: Process 7110 attached [pid 7109] rt_sigprocmask(SIG_SETMASK, [] [pid 7108] <... memfd_create resumed>) = 3 [pid 7106] <... futex resumed>) = 0 [pid 7097] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7094] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 7111 attached [pid 7106] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7097] <... futex resumed>) = 0 [pid 7111] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7110] set_robust_list(0x5555748a66e0, 24 [pid 7109] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7108] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7097] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7094] <... clone3 resumed> => {parent_tid=[7111]}, 88) = 7111 [pid 5610] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7110 [pid 7111] <... rseq resumed>) = 0 [pid 7110] <... set_robust_list resumed>) = 0 [pid 7109] memfd_create("syzkaller", 0 [pid 7108] <... mmap resumed>) = 0x7fef8c868000 [pid 7100] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7111] set_robust_list(0x7fef94c679a0, 24 [pid 7110] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] rt_sigprocmask(SIG_SETMASK, [] [pid 7100] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7111] <... set_robust_list resumed>) = 0 [pid 7110] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7109] <... memfd_create resumed>) = 3 [pid 7094] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7110] chdir("./58" [pid 7094] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7094] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7100] <... futex resumed>) = 0 [pid 7111] rt_sigprocmask(SIG_SETMASK, [] [pid 7110] <... chdir resumed>) = 0 [pid 7109] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7094] <... futex resumed>) = 0 [pid 7109] <... mmap resumed>) = 0x7fef8c868000 [pid 7100] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7094] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7111] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7110] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7111] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7110] <... prctl resumed>) = 0 [pid 7100] <... mmap resumed>) = 0x7fef94c47000 [pid 7111] <... openat resumed>) = 5 [pid 7110] setpgid(0, 0 [pid 7100] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 7110] <... setpgid resumed>) = 0 [pid 7100] <... mprotect resumed>) = 0 [pid 7111] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7110] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7111] <... futex resumed>) = 1 [pid 7094] <... futex resumed>) = 0 [pid 7111] futex(0x7fef94d63e58, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7100] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7094] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7100] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7097] <... futex resumed>) = 0 [pid 7094] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7097] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7100] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 7112 attached [pid 7097] <... openat resumed>) = 6 [ 152.863941][ T37] audit: type=1800 audit(1785844683.264:296): pid=7097 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop2" ino=15 res=0 errno=0 [pid 7108] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7100] <... clone3 resumed> => {parent_tid=[7112]}, 88) = 7112 [pid 7112] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7100] rt_sigprocmask(SIG_SETMASK, [] [pid 7097] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7094] <... futex resumed>) = 0 [pid 7112] <... rseq resumed>) = 0 [pid 7100] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7094] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7097] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7112] set_robust_list(0x7fef94c679a0, 24 [pid 7100] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7097] <... mmap resumed>) = 0x200000000000 [pid 7094] <... futex resumed>) = 0 [pid 7112] <... set_robust_list resumed>) = 0 [pid 7109] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7100] <... futex resumed>) = 0 [pid 7097] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7094] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7112] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7100] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7097] <... futex resumed>) = 0 [pid 7094] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7097] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7094] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7110] <... openat resumed>) = 3 [pid 7097] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7094] <... futex resumed>) = 0 [pid 7110] write(3, "1000", 4 [pid 7097] sendfile(4, 5, NULL, 553647746 [pid 7094] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7110] <... write resumed>) = 4 [pid 7110] close(3) = 0 [pid 7110] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7110] write(1, "executing program\n", 18) = 18 [pid 7108] <... write resumed>) = 524288 executing program [ 152.952599][ T7101] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 152.961571][ T7112] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 420 with error 28 [ 152.961600][ T7112] EXT4-fs (loop3): This should not happen!! Data will be lost [ 152.961600][ T7112] [ 152.961614][ T7112] EXT4-fs (loop3): Total free blocks count 0 [ 152.961626][ T7112] EXT4-fs (loop3): Free/Dirty block details [pid 7112] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7110] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7109] <... write resumed>) = 524288 [pid 7108] munmap(0x7fef8c868000, 138412032 [pid 7101] <... sendfile resumed>) = 430080 [pid 7100] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7094] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7110] <... futex resumed>) = 0 [pid 7109] munmap(0x7fef8c868000, 138412032 [pid 7108] <... munmap resumed>) = 0 [pid 7094] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7110] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 7109] <... munmap resumed>) = 0 [pid 7101] +++ killed by SIGBUS +++ [pid 7111] <... futex resumed>) = 0 [pid 7094] <... futex resumed>) = 1 [pid 7110] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 7094] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7110] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7108] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7110] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7109] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7108] <... openat resumed>) = 4 [pid 7112] +++ killed by SIGBUS +++ [pid 7110] <... mmap resumed>) = 0x7fef94c68000 [pid 7109] <... openat resumed>) = 4 [pid 7108] ioctl(4, LOOP_SET_FD, 3 [pid 7100] +++ killed by SIGBUS +++ [pid 7110] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 7109] ioctl(4, LOOP_SET_FD, 3 [pid 7108] <... ioctl resumed>) = 0 [ 152.961638][ T7112] EXT4-fs (loop3): free_blocks=20480 [ 152.961651][ T7112] EXT4-fs (loop3): dirty_blocks=432 [ 152.961663][ T7112] EXT4-fs (loop3): Block reservation details [ 152.961673][ T7112] EXT4-fs (loop3): i_reserved_data_blocks=27 [ 153.039371][ T7111] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [pid 7110] <... mprotect resumed>) = 0 [pid 7109] <... ioctl resumed>) = 0 [pid 5612] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7100, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 7108] close(3 [pid 7110] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7108] <... close resumed>) = 0 [pid 7110] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7108] close(4 [pid 7110] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 7109] close(3 [pid 7108] <... close resumed>) = 0 [pid 7109] <... close resumed>) = 0 [pid 7108] mkdir("./file1", 0777ci2-upstream-fs/strace-static-x86_64: Process 7113 attached [pid 7109] close(4 [pid 7108] <... mkdir resumed>) = 0 [pid 7113] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7110] <... clone3 resumed> => {parent_tid=[7113]}, 88) = 7113 [pid 7109] <... close resumed>) = 0 [pid 5612] umount2("./59", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7113] <... rseq resumed>) = 0 [pid 7110] rt_sigprocmask(SIG_SETMASK, [] [pid 7109] mkdir("./file1", 0777 [pid 7108] mount("/dev/loop4", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7113] set_robust_list(0x7fef94c889a0, 24 [pid 7110] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7109] <... mkdir resumed>) = 0 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7113] <... set_robust_list resumed>) = 0 [pid 7110] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7113] rt_sigprocmask(SIG_SETMASK, [] [pid 7110] <... futex resumed>) = 0 [pid 7109] mount("/dev/loop0", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5612] <... openat resumed>) = 3 [pid 7113] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7110] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7094] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5612] fstat(3 [pid 7113] memfd_create("syzkaller", 0 [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7113] <... memfd_create resumed>) = 3 [pid 5612] getdents64(3 [pid 7113] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fef8c868000 [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [ 153.039600][ T7111] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 220 with error 28 [ 153.039624][ T7111] EXT4-fs (loop2): This should not happen!! Data will be lost [ 153.039624][ T7111] [ 153.039638][ T7111] EXT4-fs (loop2): Total free blocks count 0 [ 153.039649][ T7111] EXT4-fs (loop2): Free/Dirty block details [ 153.039660][ T7111] EXT4-fs (loop2): free_blocks=20480 [ 153.039672][ T7111] EXT4-fs (loop2): dirty_blocks=224 [ 153.039683][ T7111] EXT4-fs (loop2): Block reservation details [pid 5612] umount2("./59/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7111] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7097] <... sendfile resumed>) = 229376 [pid 7113] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7097] ???() = ? [pid 7111] +++ killed by SIGBUS +++ [pid 7108] <... mount resumed>) = 0 [pid 7097] +++ killed by SIGBUS +++ [pid 7094] +++ killed by SIGBUS +++ [pid 7109] <... mount resumed>) = 0 [pid 7108] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5611] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7094, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 7108] chdir("./file1" [pid 5611] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 7108] <... chdir resumed>) = 0 [pid 7113] <... write resumed>) = 524288 [pid 7109] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7108] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5611] <... restart_syscall resumed>) = 0 [ 153.039694][ T7111] EXT4-fs (loop2): i_reserved_data_blocks=14 [ 153.053336][ T7108] loop4: detected capacity change from 0 to 1024 [ 153.055872][ T7109] loop0: detected capacity change from 0 to 1024 [pid 7108] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7113] munmap(0x7fef8c868000, 138412032 [pid 7109] <... openat resumed>) = 3 [pid 7108] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] umount2("./59", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7108] <... futex resumed>) = 1 [pid 7113] <... munmap resumed>) = 0 [pid 7109] chdir("./file1" [pid 7108] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7109] <... chdir resumed>) = 0 [pid 5611] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7109] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5611] <... openat resumed>) = 3 [pid 7113] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7109] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] fstat(3 [pid 7113] <... openat resumed>) = 4 [pid 7109] <... futex resumed>) = 1 [pid 7107] <... futex resumed>) = 0 [pid 7106] <... futex resumed>) = 0 [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7113] ioctl(4, LOOP_SET_FD, 3 [pid 7109] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7107] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7106] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] getdents64(3 [pid 7108] <... futex resumed>) = 0 [pid 7107] <... futex resumed>) = 1 [pid 7106] <... futex resumed>) = 0 [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 7109] <... openat resumed>) = 4 [pid 7108] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7107] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7106] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] umount2("./59/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7109] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7106] <... futex resumed>) = 0 [pid 7109] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7106] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7109] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7106] <... futex resumed>) = 0 [pid 7109] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7106] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7113] <... ioctl resumed>) = 0 [pid 7113] close(3) = 0 [pid 7113] close(4) = 0 [pid 7113] mkdir("./file1", 0777) = 0 [pid 7109] <... openat resumed>) = 5 [pid 7113] mount("/dev/loop1", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7109] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7106] <... futex resumed>) = 0 [pid 7106] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7109] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7106] <... futex resumed>) = 0 [ 153.156597][ T5612] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 7109] <... openat resumed>) = 6 [pid 7106] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7109] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7106] <... futex resumed>) = 0 [pid 7109] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7106] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7106] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7108] <... openat resumed>) = 4 [pid 7109] <... mmap resumed>) = 0x200000000000 [pid 7107] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7109] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7107] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7109] <... futex resumed>) = 1 [pid 7107] <... futex resumed>) = 0 [pid 7109] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7107] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7106] <... futex resumed>) = 0 [pid 7107] <... mmap resumed>) = 0x7fef94c47000 [pid 7106] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7109] <... futex resumed>) = 0 [pid 7107] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 7109] sendfile(4, 5, NULL, 553647746 [pid 7106] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7107] <... mprotect resumed>) = 0 [pid 7107] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5612] <... umount2 resumed>) = 0 [ 153.184596][ T37] audit: type=1800 audit(1785844683.584:297): pid=7109 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 153.195273][ T7113] loop1: detected capacity change from 0 to 1024 [ 153.221513][ T177] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 220 with max blocks 4 with error 28 [ 153.221543][ T177] EXT4-fs (loop2): This should not happen!! Data will be lost [ 153.221543][ T177] [pid 5612] umount2("./59/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5612] newfstatat(AT_FDCWD, "./59/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7107] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7108] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7107] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5612] umount2("./59/file1", MNT_FORCE|UMOUNT_NOFOLLOWci2-upstream-fs/strace-static-x86_64: Process 7118 attached [pid 7108] <... futex resumed>) = 0 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7108] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7107] <... clone3 resumed> => {parent_tid=[7118]}, 88) = 7118 [pid 5612] openat(AT_FDCWD, "./59/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7107] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] <... openat resumed>) = 4 [pid 7107] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5612] fstat(4 [pid 7118] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7107] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7118] <... rseq resumed>) = 0 [pid 7107] <... futex resumed>) = 0 [pid 5612] getdents64(4 [pid 7118] set_robust_list(0x7fef94c679a0, 24 [pid 7107] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 7118] <... set_robust_list resumed>) = 0 [pid 5612] getdents64(4 [pid 7118] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 7118] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5612] close(4 [pid 7118] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 5612] <... close resumed>) = 0 [pid 7118] <... openat resumed>) = 5 [pid 7113] <... mount resumed>) = 0 [pid 5612] rmdir("./59/file1") = 0 [pid 7118] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7113] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7107] <... futex resumed>) = 0 [pid 5612] umount2("./59/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7118] futex(0x7fef94d63e58, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7113] <... openat resumed>) = 3 [pid 7107] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7106] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7113] chdir("./file1" [pid 7108] <... futex resumed>) = 0 [pid 7107] <... futex resumed>) = 1 [pid 7108] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7107] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] newfstatat(AT_FDCWD, "./59/binderfs" [pid 7113] <... chdir resumed>) = 0 [pid 7106] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7113] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7108] <... openat resumed>) = 6 [pid 7106] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5612] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7113] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7108] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7106] <... mmap resumed>) = 0x7fef94c47000 [pid 7113] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7108] <... futex resumed>) = 1 [pid 7107] <... futex resumed>) = 0 [pid 7106] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 5612] unlink("./59/binderfs" [pid 7113] <... futex resumed>) = 1 [pid 7110] <... futex resumed>) = 0 [pid 7108] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7107] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... umount2 resumed>) = 0 [pid 7110] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7106] <... mprotect resumed>) = 0 [pid 7108] <... mmap resumed>) = 0x200000000000 [pid 7110] <... futex resumed>) = 0 [pid 7107] <... futex resumed>) = 0 [pid 5612] <... unlink resumed>) = 0 [pid 7110] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7113] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7108] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7107] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7106] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5612] getdents64(3 [pid 5611] umount2("./59/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7113] <... openat resumed>) = 4 [pid 7108] <... futex resumed>) = 0 [pid 7107] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7106] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 153.222620][ T37] audit: type=1800 audit(1785844683.624:298): pid=7108 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 153.271532][ T5611] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 7113] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7108] sendfile(4, 5, NULL, 553647746 [pid 7107] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7106] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 7110] <... futex resumed>) = 0 [pid 7113] <... futex resumed>) = 1 [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5611] newfstatat(AT_FDCWD, "./59/file1" [pid 7110] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7107] <... futex resumed>) = 0 [pid 7113] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC) = 5 [pid 7107] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7110] <... futex resumed>) = 0 [pid 5611] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5612] close(3 [pid 7110] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-upstream-fs/strace-static-x86_64: Process 7121 attached [ 153.313664][ T37] audit: type=1800 audit(1785844683.714:299): pid=7113 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop1" ino=15 res=0 errno=0 [pid 7113] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7110] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5612] <... close resumed>) = 0 [pid 5611] umount2("./59/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7113] <... futex resumed>) = 0 [pid 7121] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7113] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5612] rmdir("./59" [pid 7113] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7110] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7106] <... clone3 resumed> => {parent_tid=[7121]}, 88) = 7121 [pid 5611] openat(AT_FDCWD, "./59/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7121] <... rseq resumed>) = 0 [pid 7121] set_robust_list(0x7fef94c679a0, 24 [pid 5611] <... openat resumed>) = 4 [pid 7113] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7106] rt_sigprocmask(SIG_SETMASK, [] [pid 7110] <... futex resumed>) = 0 [pid 7106] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7121] <... set_robust_list resumed>) = 0 [pid 7121] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7121] futex(0x7fef94d63e58, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7113] <... openat resumed>) = 6 [pid 7110] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7106] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7121] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 153.369953][ T7121] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 153.370163][ T7121] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 844 with error 28 [ 153.370187][ T7121] EXT4-fs (loop0): This should not happen!! Data will be lost [ 153.370187][ T7121] [ 153.370201][ T7121] EXT4-fs (loop0): Total free blocks count 0 [ 153.370213][ T7121] EXT4-fs (loop0): Free/Dirty block details [pid 7106] <... futex resumed>) = 0 [pid 5611] fstat(4 [pid 7106] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7113] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7113] <... futex resumed>) = 1 [pid 5611] getdents64(4 [pid 7113] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7110] <... futex resumed>) = 0 [pid 7113] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7110] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7113] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7110] <... futex resumed>) = 0 [pid 7113] <... mmap resumed>) = 0x200000000000 [pid 7110] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7113] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7110] <... futex resumed>) = 0 [pid 7110] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7110] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7113] sendfile(4, 5, NULL, 553647746 [pid 7121] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7106] <... futex resumed>) = ? [ 153.370226][ T7121] EXT4-fs (loop0): free_blocks=20480 [ 153.370239][ T7121] EXT4-fs (loop0): dirty_blocks=848 [ 153.370250][ T7121] EXT4-fs (loop0): Block reservation details [ 153.370261][ T7121] EXT4-fs (loop0): i_reserved_data_blocks=53 [ 153.422709][ T7118] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [pid 7121] +++ killed by SIGBUS +++ [pid 7109] <... sendfile resumed>) = ? [pid 7109] +++ killed by SIGBUS +++ [pid 7107] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7106] +++ killed by SIGBUS +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7106, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 7107] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7118] <... futex resumed>) = 0 [pid 7107] <... futex resumed>) = 1 [pid 5609] <... restart_syscall resumed>) = 0 [pid 5609] umount2("./59", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] getdents64(3 [pid 7107] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7118] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7108] <... sendfile resumed>) = 303104 [pid 7108] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7107] <... futex resumed>) = ? [pid 7108] <... futex resumed>) = ? [pid 7108] +++ killed by SIGBUS +++ [pid 7118] +++ killed by SIGBUS +++ [pid 7107] +++ killed by SIGBUS +++ [pid 7110] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7110] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7107, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7110] <... futex resumed>) = 0 [pid 5614] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 7110] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c47000 [pid 7110] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7110] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7110] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5614] <... restart_syscall resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 7122 attached [pid 5614] umount2("./58", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7110] <... clone3 resumed> => {parent_tid=[7122]}, 88) = 7122 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7110] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7110] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] <... openat resumed>) = 3 [pid 7122] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7110] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] fstat(3 [pid 7122] <... rseq resumed>) = 0 [pid 7110] <... futex resumed>) = 0 [pid 7122] set_robust_list(0x7fef94c679a0, 24) = 0 [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7110] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7122] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5614] getdents64(3 [pid 7113] <... sendfile resumed>) = 270336 [pid 7122] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7113] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5612] <... rmdir resumed>) = 0 [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 7113] <... futex resumed>) = ? [pid 7110] <... futex resumed>) = ? [pid 5614] umount2("./58/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5612] mkdir("./60", 0777 [pid 5611] getdents64(4 [pid 5609] umount2("./59/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7113] +++ killed by SIGBUS +++ [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5611] close(4) = 0 [pid 5612] <... mkdir resumed>) = 0 [ 153.422905][ T7118] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 296 with error 28 [ 153.422928][ T7118] EXT4-fs (loop4): This should not happen!! Data will be lost [ 153.422928][ T7118] [ 153.422941][ T7118] EXT4-fs (loop4): Total free blocks count 0 [ 153.422953][ T7118] EXT4-fs (loop4): Free/Dirty block details [ 153.422965][ T7118] EXT4-fs (loop4): free_blocks=20480 [ 153.422978][ T7118] EXT4-fs (loop4): dirty_blocks=304 [ 153.422989][ T7118] EXT4-fs (loop4): Block reservation details [ 153.423000][ T7118] EXT4-fs (loop4): i_reserved_data_blocks=19 [pid 5611] rmdir("./59/file1" [pid 7122] +++ killed by SIGBUS +++ [pid 7110] +++ killed by SIGBUS +++ [pid 5612] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5611] <... rmdir resumed>) = 0 [pid 5612] <... openat resumed>) = 3 [pid 5611] umount2("./59/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5610] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7110, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5612] ioctl(3, LOOP_CLR_FD [pid 5611] newfstatat(AT_FDCWD, "./59/binderfs" [pid 5612] <... ioctl resumed>) = 0 [pid 5611] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5612] close(3 [pid 5611] unlink("./59/binderfs" [pid 5610] umount2("./58", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5611] <... unlink resumed>) = 0 [pid 5610] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5610] fstat(3 [pid 5611] getdents64(3 [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5610] getdents64(3 [pid 5611] close(3 [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5611] <... close resumed>) = 0 [pid 5610] umount2("./58/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] rmdir("./59") = 0 [pid 5611] mkdir("./60", 0777) = 0 [pid 5612] <... close resumed>) = 0 [pid 5612] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5612] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 7123 attached [pid 5611] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5612] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7123 [pid 5612] rt_sigprocmask(SIG_SETMASK, [] [pid 5611] <... openat resumed>) = 3 [pid 7123] set_robust_list(0x5555748a66e0, 24 [pid 5612] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5611] ioctl(3, LOOP_CLR_FD) = 0 [pid 7123] <... set_robust_list resumed>) = 0 [ 153.462917][ T7122] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 153.464153][ T7122] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 264 with error 28 [ 153.464181][ T7122] EXT4-fs (loop1): This should not happen!! Data will be lost [ 153.464181][ T7122] [ 153.464194][ T7122] EXT4-fs (loop1): Total free blocks count 0 [ 153.464206][ T7122] EXT4-fs (loop1): Free/Dirty block details [pid 7123] rt_sigprocmask(SIG_SETMASK, [] [pid 5611] close(3 [pid 7123] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7123] chdir("./60") = 0 [pid 7123] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7123] setpgid(0, 0) = 0 [pid 7123] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5614] <... umount2 resumed>) = 0 [pid 5614] umount2("./58/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./58/file1" [pid 7123] write(3, "1000", 4 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7123] <... write resumed>) = 4 [pid 5614] umount2("./58/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./58/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5614] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7123] close(3 [pid 5614] getdents64(4 [pid 7123] <... close resumed>) = 0 [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 7123] symlink("/dev/binderfs", "./binderfs" [pid 5614] getdents64(4 [pid 7123] <... symlink resumed>) = 0 [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 7123] write(1, "executing program\n", 18 executing program [pid 5614] close(4 [pid 7123] <... write resumed>) = 18 [pid 5614] <... close resumed>) = 0 [pid 5611] <... close resumed>) = 0 [pid 7123] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] rmdir("./58/file1" [pid 7123] <... futex resumed>) = 0 [pid 5614] <... rmdir resumed>) = 0 [pid 7123] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 5609] <... umount2 resumed>) = 0 [ 153.464219][ T7122] EXT4-fs (loop1): free_blocks=20480 [ 153.464232][ T7122] EXT4-fs (loop1): dirty_blocks=272 [ 153.464244][ T7122] EXT4-fs (loop1): Block reservation details [ 153.464254][ T7122] EXT4-fs (loop1): i_reserved_data_blocks=17 [ 153.521783][ T177] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 844 with max blocks 4 with error 28 [ 153.521813][ T177] EXT4-fs (loop0): This should not happen!! Data will be lost [ 153.521813][ T177] [pid 7123] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 5614] umount2("./58/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7123] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7123] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] newfstatat(AT_FDCWD, "./58/binderfs" [pid 5611] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7123] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./59/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7123] <... mmap resumed>) = 0x7fef94c68000 [pid 5614] unlink("./58/binderfs" [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ci2-upstream-fs/strace-static-x86_64: Process 7124 attached [pid 7123] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 5614] <... unlink resumed>) = 0 [pid 5609] newfstatat(AT_FDCWD, "./59/file1" [pid 7123] <... mprotect resumed>) = 0 [pid 5614] getdents64(3 [pid 5610] <... umount2 resumed>) = 0 [pid 5609] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7123] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5609] umount2("./59/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7123] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 5614] close(3 [pid 5611] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7124 [pid 5610] umount2("./58/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./59/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORYci2-upstream-fs/strace-static-x86_64: Process 7125 attached [pid 5614] <... close resumed>) = 0 [pid 5614] rmdir("./58" [pid 5611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] <... openat resumed>) = 4 [pid 7125] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7124] set_robust_list(0x5555748a66e0, 24 [pid 7123] <... clone3 resumed> => {parent_tid=[7125]}, 88) = 7125 [pid 5614] <... rmdir resumed>) = 0 [pid 5610] newfstatat(AT_FDCWD, "./58/file1" [pid 7124] <... set_robust_list resumed>) = 0 [pid 5609] fstat(4 [pid 7124] rt_sigprocmask(SIG_SETMASK, [] [pid 7123] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7125] <... rseq resumed>) = 0 [pid 7124] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7123] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] mkdir("./59", 0777 [pid 5610] umount2("./58/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7125] set_robust_list(0x7fef94c889a0, 24 [pid 7124] chdir("./60" [pid 7123] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... mkdir resumed>) = 0 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7125] <... set_robust_list resumed>) = 0 [pid 7123] <... futex resumed>) = 0 [pid 5609] getdents64(4 [pid 7125] rt_sigprocmask(SIG_SETMASK, [] [pid 7124] <... chdir resumed>) = 0 [pid 5614] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5610] openat(AT_FDCWD, "./58/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 153.526312][ T5614] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 153.527895][ T5609] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 153.570177][ T5610] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 7123] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7124] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 7125] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7124] <... prctl resumed>) = 0 [pid 5614] <... openat resumed>) = 3 [pid 5610] <... openat resumed>) = 4 [pid 5609] getdents64(4 [pid 7125] memfd_create("syzkaller", 0 [pid 7124] setpgid(0, 0 [pid 5614] ioctl(3, LOOP_CLR_FD [pid 5610] fstat(4 [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 7125] <... memfd_create resumed>) = 3 [pid 7124] <... setpgid resumed>) = 0 [pid 5614] <... ioctl resumed>) = 0 [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] close(4 [pid 7125] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7124] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5614] close(3 [pid 5610] getdents64(4 [pid 5609] <... close resumed>) = 0 [pid 7125] <... mmap resumed>) = 0x7fef8c868000 [pid 7124] <... openat resumed>) = 3 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5609] rmdir("./59/file1" [pid 7124] write(3, "1000", 4 [pid 5610] getdents64(4 [pid 5609] <... rmdir resumed>) = 0 [pid 7124] <... write resumed>) = 4 [pid 5614] <... close resumed>) = 0 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5609] umount2("./59/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7125] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7124] close(3 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5610] close(4 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7125] <... write resumed>) = 524288 [pid 7124] <... close resumed>) = 0 [pid 5614] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7125] munmap(0x7fef8c868000, 138412032 [pid 7124] symlink("/dev/binderfs", "./binderfs" [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5609] newfstatat(AT_FDCWD, "./59/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7124] <... symlink resumed>) = 0 [pid 5610] <... close resumed>) = 0 [pid 5609] unlink("./59/binderfs" [pid 5610] rmdir("./58/file1" [pid 5609] <... unlink resumed>) = 0 [pid 7125] <... munmap resumed>) = 0 [pid 5610] <... rmdir resumed>) = 0 [pid 5609] getdents64(3 [pid 7124] write(1, "executing program\n", 18 [pid 7125] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 7124] <... write resumed>) = 18 [pid 7124] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] close(3 [pid 7124] <... futex resumed>) = 0 [pid 7125] <... openat resumed>) = 4 [pid 7124] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60}, NULL, 8) = 0 executing program [pid 7124] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 5610] umount2("./58/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... close resumed>) = 0 [pid 7125] ioctl(4, LOOP_SET_FD, 3 [pid 7124] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7126 ci2-upstream-fs/strace-static-x86_64: Process 7126 attached [pid 7124] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] rmdir("./59" [pid 7124] <... mmap resumed>) = 0x7fef94c68000 [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7124] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 7126] set_robust_list(0x5555748a66e0, 24 [pid 7125] <... ioctl resumed>) = 0 [pid 7124] <... mprotect resumed>) = 0 [pid 5610] newfstatat(AT_FDCWD, "./58/binderfs" [pid 5609] <... rmdir resumed>) = 0 [pid 7126] <... set_robust_list resumed>) = 0 [pid 5610] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] mkdir("./60", 0777 [pid 7126] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] unlink("./58/binderfs" [pid 5609] <... mkdir resumed>) = 0 [pid 7126] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7125] close(3 [pid 7124] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5610] <... unlink resumed>) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7126] chdir("./59" [pid 7125] <... close resumed>) = 0 [pid 7124] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5610] getdents64(3 [pid 7126] <... chdir resumed>) = 0 [pid 7125] close(4 [pid 7124] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 5609] <... openat resumed>) = 3 [pid 7126] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7125] <... close resumed>) = 0 [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 7126] <... prctl resumed>) = 0 [pid 7125] mkdir("./file1", 0777 [pid 5609] ioctl(3, LOOP_CLR_FDci2-upstream-fs/strace-static-x86_64: Process 7127 attached [pid 7126] setpgid(0, 0 [pid 7125] <... mkdir resumed>) = 0 [pid 7124] <... clone3 resumed> => {parent_tid=[7127]}, 88) = 7127 [pid 5610] close(3 [pid 7127] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7126] <... setpgid resumed>) = 0 [pid 5610] <... close resumed>) = 0 [pid 5609] <... ioctl resumed>) = 0 [pid 7127] <... rseq resumed>) = 0 [pid 7126] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7125] mount("/dev/loop3", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7124] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] rmdir("./58" [pid 5609] close(3 [pid 7127] set_robust_list(0x7fef94c889a0, 24 [pid 7126] <... openat resumed>) = 3 [pid 7124] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7127] <... set_robust_list resumed>) = 0 [pid 7126] write(3, "1000", 4 [pid 7124] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... rmdir resumed>) = 0 [pid 7127] rt_sigprocmask(SIG_SETMASK, [] [pid 7126] <... write resumed>) = 4 [pid 7124] <... futex resumed>) = 0 [pid 5610] mkdir("./59", 0777 [pid 7127] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7126] close(3 [pid 7124] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5609] <... close resumed>) = 0 [pid 7127] memfd_create("syzkaller", 0 [pid 7126] <... close resumed>) = 0 [pid 5610] <... mkdir resumed>) = 0 [pid 7127] <... memfd_create resumed>) = 3 [pid 7126] symlink("/dev/binderfs", "./binderfs" [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7127] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7126] <... symlink resumed>) = 0 [pid 7127] <... mmap resumed>) = 0x7fef8c868000 [pid 7126] write(1, "executing program\n", 18 [pid 5609] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7125] <... mount resumed>) = 0 [pid 5610] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7125] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7126] <... write resumed>) = 18 [pid 7125] <... openat resumed>) = 3 [pid 7126] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 executing program [pid 7125] chdir("./file1" [pid 5610] <... openat resumed>) = 3 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7126] <... futex resumed>) = 0 [pid 7125] <... chdir resumed>) = 0 [pid 7126] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 7125] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5610] ioctl(3, LOOP_CLR_FD [pid 7126] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 7125] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7126] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 7125] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7127] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7126] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] <... ioctl resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 7130 attached [pid 7125] <... futex resumed>) = 1 [pid 7123] <... futex resumed>) = 0 [pid 7126] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7125] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7123] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] close(3 [pid 7130] set_robust_list(0x5555748a66e0, 24 [pid 7126] <... mmap resumed>) = 0x7fef94c68000 [pid 7123] <... futex resumed>) = 0 [pid 5609] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7130 [pid 7126] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 7125] <... openat resumed>) = 4 [pid 7123] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7130] <... set_robust_list resumed>) = 0 [pid 7126] <... mprotect resumed>) = 0 [pid 7125] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7130] rt_sigprocmask(SIG_SETMASK, [] [pid 7126] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7125] <... futex resumed>) = 1 [pid 7123] <... futex resumed>) = 0 [pid 7130] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7130] chdir("./60" [pid 7126] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7125] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7123] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... close resumed>) = 0 [pid 7130] <... chdir resumed>) = 0 [pid 7126] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 7125] <... openat resumed>) = 5 [pid 7123] <... futex resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 7131 attached [pid 7130] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7125] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7123] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7131] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7130] <... prctl resumed>) = 0 [pid 7126] <... clone3 resumed> => {parent_tid=[7131]}, 88) = 7131 [pid 7125] <... futex resumed>) = 0 [pid 7123] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7131] <... rseq resumed>) = 0 [pid 7130] setpgid(0, 0 [pid 7127] <... write resumed>) = 524288 [pid 7126] rt_sigprocmask(SIG_SETMASK, [] [pid 7125] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7123] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7131] set_robust_list(0x7fef94c889a0, 24 [pid 7130] <... setpgid resumed>) = 0 [pid 7127] munmap(0x7fef8c868000, 138412032 [pid 7126] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7123] <... futex resumed>) = 0 [pid 5610] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7131] <... set_robust_list resumed>) = 0 [pid 7130] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7127] <... munmap resumed>) = 0 [pid 7126] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7125] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7123] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7131] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7126] <... futex resumed>) = 0 [pid 7127] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7126] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7125] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7131] memfd_create("syzkaller", 0 [pid 7127] <... openat resumed>) = 4 ci2-upstream-fs/strace-static-x86_64: Process 7132 attached [pid 7131] <... memfd_create resumed>) = 3 [pid 7127] ioctl(4, LOOP_SET_FD, 3 [pid 7125] <... openat resumed>) = 6 [pid 7131] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7127] <... ioctl resumed>) = 0 [pid 7125] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7132 [pid 7127] close(3 [pid 5610] rt_sigprocmask(SIG_SETMASK, [] [pid 7132] set_robust_list(0x5555748a66e0, 24 [pid 7131] <... mmap resumed>) = 0x7fef8c868000 [pid 7127] <... close resumed>) = 0 [pid 7125] <... futex resumed>) = 1 [pid 7123] <... futex resumed>) = 0 [pid 7127] close(4 [pid 7123] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7132] <... set_robust_list resumed>) = 0 [pid 7127] <... close resumed>) = 0 [pid 7125] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7123] <... futex resumed>) = 0 [pid 7132] rt_sigprocmask(SIG_SETMASK, [] [pid 7127] mkdir("./file1", 0777 [pid 7132] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7131] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7130] <... openat resumed>) = 3 [pid 7125] <... mmap resumed>) = 0x200000000000 [pid 7123] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7132] chdir("./59" [pid 7130] write(3, "1000", 4 [pid 7125] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7127] <... mkdir resumed>) = 0 [pid 7130] <... write resumed>) = 4 [pid 7125] <... futex resumed>) = 1 [pid 7123] <... futex resumed>) = 0 [pid 7132] <... chdir resumed>) = 0 [pid 7130] close(3 [pid 7127] mount("/dev/loop2", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7125] sendfile(4, 5, NULL, 553647746 [pid 7123] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7132] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7130] <... close resumed>) = 0 [pid 7123] <... futex resumed>) = 0 [pid 7132] <... prctl resumed>) = 0 [pid 7130] symlink("/dev/binderfs", "./binderfs" [pid 7123] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7132] setpgid(0, 0) = 0 [pid 7132] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7130] <... symlink resumed>) = 0 [pid 7132] <... openat resumed>) = 3 [pid 7132] write(3, "1000", 4 executing program [pid 7130] write(1, "executing program\n", 18 [pid 7132] <... write resumed>) = 4 [pid 7130] <... write resumed>) = 18 [pid 7132] close(3 [pid 7131] <... write resumed>) = 524288 [pid 7130] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7132] <... close resumed>) = 0 [pid 7132] symlink("/dev/binderfs", "./binderfs" [pid 7130] <... futex resumed>) = 0 [pid 7130] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 7132] <... symlink resumed>) = 0 [pid 7130] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 7130] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7130] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c68000 [pid 7130] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7132] write(1, "executing program\n", 18 [pid 7131] munmap(0x7fef8c868000, 138412032 [pid 7130] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7131] <... munmap resumed>) = 0 [pid 7132] <... write resumed>) = 18 [pid 7130] <... rt_sigprocmask resumed>, [], 8) = 0 executing program [pid 7132] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7130] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0}ci2-upstream-fs/strace-static-x86_64: Process 7135 attached [pid 7132] <... futex resumed>) = 0 [pid 7135] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7132] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 7131] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7135] <... rseq resumed>) = 0 [pid 7131] <... openat resumed>) = 4 [pid 7135] set_robust_list(0x7fef94c889a0, 24 [pid 7130] <... clone3 resumed> => {parent_tid=[7135]}, 88) = 7135 [pid 7135] <... set_robust_list resumed>) = 0 [pid 7132] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 7131] ioctl(4, LOOP_SET_FD, 3 [pid 7130] rt_sigprocmask(SIG_SETMASK, [] [pid 7135] rt_sigprocmask(SIG_SETMASK, [] [pid 7132] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 7130] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7135] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7132] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7130] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7132] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7130] <... futex resumed>) = 0 [pid 7135] memfd_create("syzkaller", 0 [pid 7132] <... mmap resumed>) = 0x7fef94c68000 [pid 7130] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7135] <... memfd_create resumed>) = 3 [pid 7135] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7132] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 7135] <... mmap resumed>) = 0x7fef8c868000 [pid 7131] <... ioctl resumed>) = 0 [pid 7132] <... mprotect resumed>) = 0 [pid 7131] close(3 [pid 7132] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7131] <... close resumed>) = 0 [pid 7132] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7131] close(4 [pid 7132] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 7131] <... close resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 7136 attached [pid 7135] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7136] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 7131] mkdir("./file1", 0777 [pid 7123] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7136] set_robust_list(0x7fef94c889a0, 24) = 0 [pid 7131] <... mkdir resumed>) = 0 [pid 7123] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7136] rt_sigprocmask(SIG_SETMASK, [] [pid 7123] <... futex resumed>) = 0 [pid 7132] <... clone3 resumed> => {parent_tid=[7136]}, 88) = 7136 [pid 7131] mount("/dev/loop4", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7127] <... mount resumed>) = 0 [pid 7123] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7136] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7132] rt_sigprocmask(SIG_SETMASK, [] [pid 7127] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7136] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7132] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7123] <... mmap resumed>) = 0x7fef94c47000 [pid 7132] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7127] <... openat resumed>) = 3 [pid 7123] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 7136] <... futex resumed>) = 0 [pid 7132] <... futex resumed>) = 1 [pid 7127] chdir("./file1" [pid 7136] memfd_create("syzkaller", 0 [pid 7132] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7123] <... mprotect resumed>) = 0 [pid 7127] <... chdir resumed>) = 0 [pid 7136] <... memfd_create resumed>) = 3 [pid 7136] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fef8c868000 [pid 7135] <... write resumed>) = 524288 [pid 7127] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7123] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7127] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7123] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7123] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 7137 attached [pid 7127] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7135] munmap(0x7fef8c868000, 138412032 [pid 7127] <... futex resumed>) = 1 [pid 7124] <... futex resumed>) = 0 [pid 7137] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7135] <... munmap resumed>) = 0 [pid 7127] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7124] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7123] <... clone3 resumed> => {parent_tid=[7137]}, 88) = 7137 [pid 7137] <... rseq resumed>) = 0 [pid 7135] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7124] <... futex resumed>) = 0 [pid 7137] set_robust_list(0x7fef94c679a0, 24 [pid 7136] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7135] <... openat resumed>) = 4 [pid 7127] <... openat resumed>) = 4 [pid 7124] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7123] rt_sigprocmask(SIG_SETMASK, [] [pid 7137] <... set_robust_list resumed>) = 0 [pid 7135] ioctl(4, LOOP_SET_FD, 3 [pid 7123] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7137] rt_sigprocmask(SIG_SETMASK, [] [pid 7135] <... ioctl resumed>) = 0 [pid 7127] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7123] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7137] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7135] close(3 [pid 7127] <... futex resumed>) = 1 [pid 7124] <... futex resumed>) = 0 [pid 7123] <... futex resumed>) = 0 [pid 7135] <... close resumed>) = 0 [pid 7131] <... mount resumed>) = 0 [pid 7127] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7124] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7135] close(4) = 0 [pid 7123] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7135] mkdir("./file1", 0777 [pid 7127] <... openat resumed>) = 5 [pid 7124] <... futex resumed>) = 0 [pid 7135] <... mkdir resumed>) = 0 [pid 7131] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7127] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7124] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7131] <... openat resumed>) = 3 [pid 7124] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7124] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7124] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7135] mount("/dev/loop0", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7127] <... futex resumed>) = 0 [pid 7136] <... write resumed>) = 524288 [pid 7136] munmap(0x7fef8c868000, 138412032 [pid 7131] chdir("./file1" [pid 7127] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7131] <... chdir resumed>) = 0 [pid 7136] <... munmap resumed>) = 0 [pid 7127] <... openat resumed>) = 6 [pid 7136] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7137] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7125] <... sendfile resumed>) = 262144 [pid 7131] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7136] <... openat resumed>) = 4 [pid 7131] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7136] ioctl(4, LOOP_SET_FD, 3 [pid 7123] <... futex resumed>) = ? [pid 7137] +++ killed by SIGBUS +++ [pid 7136] <... ioctl resumed>) = 0 [pid 7136] close(3) = 0 [pid 7136] close(4) = 0 [pid 7136] mkdir("./file1", 0777) = 0 [pid 7125] +++ killed by SIGBUS +++ [pid 7123] +++ killed by SIGBUS +++ [ 153.967875][ T7137] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 153.972144][ T7137] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 252 with error 28 [ 153.972173][ T7137] EXT4-fs (loop3): This should not happen!! Data will be lost [ 153.972173][ T7137] [ 153.972187][ T7137] EXT4-fs (loop3): Total free blocks count 0 [ 153.972200][ T7137] EXT4-fs (loop3): Free/Dirty block details [pid 5612] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7123, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7136] mount("/dev/loop1", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7131] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7124] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7124] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7131] <... futex resumed>) = 1 [pid 7126] <... futex resumed>) = 0 [pid 7124] <... futex resumed>) = 0 [pid 7126] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7124] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7135] <... mount resumed>) = 0 [pid 7126] <... futex resumed>) = 0 [pid 7135] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7126] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7135] <... openat resumed>) = 3 [pid 7135] chdir("./file1") = 0 [pid 5612] umount2("./60", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7135] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5612] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7131] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7127] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7135] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7127] <... futex resumed>) = 0 [pid 7124] <... mmap resumed>) = 0x7fef94c47000 [pid 7135] <... futex resumed>) = 1 [pid 7130] <... futex resumed>) = 0 [pid 5612] <... openat resumed>) = 3 [pid 7135] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7131] <... openat resumed>) = 4 [pid 7130] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7127] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7124] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 5612] fstat(3 [pid 7135] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7130] <... futex resumed>) = 0 [pid 7124] <... mprotect resumed>) = 0 [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7135] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7131] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7130] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7124] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5612] getdents64(3, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5612] umount2("./60/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7131] <... futex resumed>) = 1 [pid 7126] <... futex resumed>) = 0 [pid 7124] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7131] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7126] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7124] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 7131] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7126] <... futex resumed>) = 0 [pid 7126] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7131] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNCci2-upstream-fs/strace-static-x86_64: Process 7144 attached [pid 7124] <... clone3 resumed> => {parent_tid=[7144]}, 88) = 7144 [pid 7124] rt_sigprocmask(SIG_SETMASK, [] [pid 7131] <... openat resumed>) = 5 [pid 7144] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7131] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7124] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7144] <... rseq resumed>) = 0 [pid 7136] <... mount resumed>) = 0 [pid 7131] <... futex resumed>) = 1 [pid 7126] <... futex resumed>) = 0 [pid 7124] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7144] set_robust_list(0x7fef94c679a0, 24 [pid 7126] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7124] <... futex resumed>) = 0 [ 153.972211][ T7137] EXT4-fs (loop3): free_blocks=20480 [ 153.972224][ T7137] EXT4-fs (loop3): dirty_blocks=256 [ 153.972234][ T7137] EXT4-fs (loop3): Block reservation details [ 153.972243][ T7137] EXT4-fs (loop3): i_reserved_data_blocks=16 [pid 7144] <... set_robust_list resumed>) = 0 [pid 7136] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7131] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7126] <... futex resumed>) = 0 [pid 7124] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7144] rt_sigprocmask(SIG_SETMASK, [] [pid 7131] <... openat resumed>) = 6 [pid 7144] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7144] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7136] <... openat resumed>) = 3 [pid 7135] <... openat resumed>) = 4 [pid 7126] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7135] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7144] <... mmap resumed>) = 0x200000000000 [pid 7136] chdir("./file1" [pid 7131] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7135] <... futex resumed>) = 1 [pid 7130] <... futex resumed>) = 0 [pid 7135] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7130] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7136] <... chdir resumed>) = 0 [pid 7135] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7131] <... futex resumed>) = 1 [pid 7130] <... futex resumed>) = 0 [pid 7126] <... futex resumed>) = 0 [pid 7144] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7136] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7135] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7131] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7130] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7126] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7144] <... futex resumed>) = 1 [pid 7136] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7126] <... futex resumed>) = 0 [pid 7124] <... futex resumed>) = 0 [pid 7144] futex(0x7fef94d63e58, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7135] <... openat resumed>) = 5 [pid 7126] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7124] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7135] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7124] <... futex resumed>) = 1 [pid 7135] <... futex resumed>) = 1 [pid 7130] <... futex resumed>) = 0 [pid 7127] <... futex resumed>) = 0 [pid 7124] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7127] sendfile(4, 5, NULL, 553647746 [pid 7135] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7130] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7135] <... openat resumed>) = 6 [pid 7130] <... futex resumed>) = 0 [pid 7130] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7135] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7130] <... futex resumed>) = 0 [pid 7135] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7130] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7135] <... mmap resumed>) = 0x200000000000 [pid 7130] <... futex resumed>) = 0 [pid 7130] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7131] <... mmap resumed>) = 0x200000000000 [pid 7136] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7135] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7131] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7136] <... futex resumed>) = 1 [pid 7135] <... futex resumed>) = 1 [pid 7132] <... futex resumed>) = 0 [pid 7131] <... futex resumed>) = 1 [pid 7130] <... futex resumed>) = 0 [pid 7126] <... futex resumed>) = 0 [pid 7136] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7132] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7131] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7135] sendfile(4, 5, NULL, 553647746 [pid 7130] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7126] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7136] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7132] <... futex resumed>) = 0 [pid 7131] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7126] <... futex resumed>) = 0 [pid 7136] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7132] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7131] sendfile(4, 5, NULL, 553647746 [pid 7126] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7130] <... futex resumed>) = 0 [ 154.092109][ T177] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 252 with max blocks 4 with error 28 [ 154.092141][ T177] EXT4-fs (loop3): This should not happen!! Data will be lost [ 154.092141][ T177] [ 154.093711][ T5612] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 7130] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7124] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7124] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7144] <... futex resumed>) = 0 [pid 7124] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7136] <... openat resumed>) = 4 [pid 5612] <... umount2 resumed>) = 0 [pid 5612] umount2("./60/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5612] newfstatat(AT_FDCWD, "./60/file1" [pid 7136] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7136] <... futex resumed>) = 1 [pid 7132] <... futex resumed>) = 0 [pid 7130] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5612] umount2("./60/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7132] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7130] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7132] <... futex resumed>) = 0 [pid 7130] <... futex resumed>) = 0 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 154.195119][ T7144] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 154.195302][ T7144] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 272 with error 28 [ 154.195323][ T7144] EXT4-fs (loop2): This should not happen!! Data will be lost [ 154.195323][ T7144] [ 154.195334][ T7144] EXT4-fs (loop2): Total free blocks count 0 [ 154.195344][ T7144] EXT4-fs (loop2): Free/Dirty block details [pid 7136] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7144] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7132] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7130] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7124] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5612] openat(AT_FDCWD, "./60/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7136] <... openat resumed>) = 5 [pid 7130] <... mmap resumed>) = 0x7fef94c47000 [pid 7126] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5612] <... openat resumed>) = 4 [pid 7127] <... sendfile resumed>) = ? [pid 7130] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 7127] +++ killed by SIGBUS +++ [pid 7126] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7136] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7130] <... mprotect resumed>) = 0 [pid 7126] <... futex resumed>) = 0 [pid 5612] fstat(4 [pid 7144] +++ killed by SIGBUS +++ [pid 7124] +++ killed by SIGBUS +++ [pid 7136] <... futex resumed>) = 1 [pid 7132] <... futex resumed>) = 0 [pid 7126] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7136] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7132] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7130] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7126] <... mmap resumed>) = 0x7fef94c47000 [pid 5612] getdents64(4 [pid 7132] <... futex resumed>) = 0 [pid 7126] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5611] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7124, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7136] <... openat resumed>) = 6 [pid 7132] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7130] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7126] <... mprotect resumed>) = 0 [pid 7136] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7130] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 7126] rt_sigprocmask(SIG_BLOCK, ~[] [ 154.195353][ T7144] EXT4-fs (loop2): free_blocks=20480 [ 154.195362][ T7144] EXT4-fs (loop2): dirty_blocks=288 [ 154.195370][ T7144] EXT4-fs (loop2): Block reservation details [ 154.195378][ T7144] EXT4-fs (loop2): i_reserved_data_blocks=18 [pid 5611] restart_syscall(<... resuming interrupted rt_sigprocmask ...>ci2-upstream-fs/strace-static-x86_64: Process 7145 attached [pid 7136] <... futex resumed>) = 1 [pid 7132] <... futex resumed>) = 0 [pid 7126] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5612] getdents64(4 [pid 5611] <... restart_syscall resumed>) = 0 [pid 7145] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7136] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7132] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7130] <... clone3 resumed> => {parent_tid=[7145]}, 88) = 7145 [pid 7126] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 ci2-upstream-fs/strace-static-x86_64: Process 7146 attached [pid 7145] <... rseq resumed>) = 0 [pid 7136] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7132] <... futex resumed>) = 0 [pid 7130] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] close(4 [pid 7145] set_robust_list(0x7fef94c679a0, 24 [pid 7136] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7132] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7146] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7130] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7126] <... clone3 resumed> => {parent_tid=[7146]}, 88) = 7146 [pid 5612] <... close resumed>) = 0 [pid 5611] umount2("./60", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7146] <... rseq resumed>) = 0 [pid 7145] <... set_robust_list resumed>) = 0 [pid 7136] <... mmap resumed>) = 0x200000000000 [pid 7130] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7126] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] rmdir("./60/file1" [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7146] set_robust_list(0x7fef94c679a0, 24 [pid 7145] rt_sigprocmask(SIG_SETMASK, [] [pid 7130] <... futex resumed>) = 0 [pid 7126] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5612] <... rmdir resumed>) = 0 [pid 5611] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7146] <... set_robust_list resumed>) = 0 [pid 7145] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7136] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7130] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7146] rt_sigprocmask(SIG_SETMASK, [] [pid 7136] <... futex resumed>) = 1 [pid 7132] <... futex resumed>) = 0 [pid 7126] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... openat resumed>) = 3 [pid 7146] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7136] sendfile(4, 5, NULL, 553647746 [pid 7132] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7126] <... futex resumed>) = 0 [pid 5612] umount2("./60/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] fstat(3 [pid 7132] <... futex resumed>) = 0 [pid 7126] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7132] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5612] newfstatat(AT_FDCWD, "./60/binderfs" [pid 5611] getdents64(3 [pid 5612] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5612] unlink("./60/binderfs" [pid 5611] umount2("./60/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5612] <... unlink resumed>) = 0 [pid 5612] getdents64(3, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5612] close(3) = 0 [pid 5612] rmdir("./60") = 0 [pid 7145] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7135] <... sendfile resumed>) = 311296 [pid 5612] mkdir("./61", 0777 [pid 7130] <... futex resumed>) = ? [pid 5612] <... mkdir resumed>) = 0 [ 154.365062][ T7145] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 154.365283][ T7145] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 300 with error 28 [ 154.365307][ T7145] EXT4-fs (loop0): This should not happen!! Data will be lost [ 154.365307][ T7145] [ 154.365321][ T7145] EXT4-fs (loop0): Total free blocks count 0 [ 154.365333][ T7145] EXT4-fs (loop0): Free/Dirty block details [pid 7135] +++ killed by SIGBUS +++ [pid 5612] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5612] ioctl(3, LOOP_CLR_FD) = 0 [pid 5612] close(3 [pid 7145] +++ killed by SIGBUS +++ [pid 7132] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7130] +++ killed by SIGBUS +++ [pid 7126] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7132] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7130, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7132] <... futex resumed>) = 0 [pid 7132] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c47000 [pid 5609] umount2("./60", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7132] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7132] <... mprotect resumed>) = 0 [pid 5609] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7132] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5609] <... openat resumed>) = 3 [pid 7132] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5612] <... close resumed>) = 0 [pid 5609] fstat(3 [pid 7132] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ci2-upstream-fs/strace-static-x86_64: Process 7147 attached [pid 5609] getdents64(3 [pid 7132] <... clone3 resumed> => {parent_tid=[7147]}, 88) = 7147 [pid 7147] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [ 154.365346][ T7145] EXT4-fs (loop0): free_blocks=20480 [ 154.365360][ T7145] EXT4-fs (loop0): dirty_blocks=304 [ 154.365372][ T7145] EXT4-fs (loop0): Block reservation details [ 154.365383][ T7145] EXT4-fs (loop0): i_reserved_data_blocks=19 [ 154.449594][ T7146] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [pid 7132] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 7147] <... rseq resumed>) = 0 [pid 5612] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7147] set_robust_list(0x7fef94c679a0, 24 [pid 5612] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5609] umount2("./60/file1", MNT_FORCE|UMOUNT_NOFOLLOWci2-upstream-fs/strace-static-x86_64: Process 7148 attached [pid 7147] <... set_robust_list resumed>) = 0 [pid 7132] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7148] set_robust_list(0x5555748a66e0, 24 [pid 7147] rt_sigprocmask(SIG_SETMASK, [] [pid 7148] <... set_robust_list resumed>) = 0 [pid 7147] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7148] rt_sigprocmask(SIG_SETMASK, [] [pid 7132] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7148] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7132] <... futex resumed>) = 0 [pid 7148] chdir("./61" [pid 5612] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7148 [pid 7148] <... chdir resumed>) = 0 [pid 7132] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7148] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7148] setpgid(0, 0) = 0 [ 154.451545][ T7146] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 816 with error 28 [ 154.451573][ T7146] EXT4-fs (loop4): This should not happen!! Data will be lost [ 154.451573][ T7146] [ 154.451587][ T7146] EXT4-fs (loop4): Total free blocks count 0 [ 154.451598][ T7146] EXT4-fs (loop4): Free/Dirty block details [ 154.451610][ T7146] EXT4-fs (loop4): free_blocks=20480 [ 154.451623][ T7146] EXT4-fs (loop4): dirty_blocks=832 [ 154.451634][ T7146] EXT4-fs (loop4): Block reservation details [ 154.451646][ T7146] EXT4-fs (loop4): i_reserved_data_blocks=52 [pid 7148] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7146] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7146] +++ killed by SIGBUS +++ [pid 7131] <... sendfile resumed>) = ? [pid 7132] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7131] +++ killed by SIGBUS +++ [pid 7126] +++ killed by SIGBUS +++ [pid 7148] <... openat resumed>) = 3 [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7126, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 7148] write(3, "1000", 4 [pid 5614] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 7148] <... write resumed>) = 4 [pid 5614] <... restart_syscall resumed>) = 0 [pid 7148] close(3) = 0 [pid 7148] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7147] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7136] <... sendfile resumed>) = 225280 [pid 5614] umount2("./59", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7148] write(1, "executing program\n", 18 [pid 7136] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 7148] <... write resumed>) = 18 [pid 7136] <... futex resumed>) = 0 [ 154.524848][ T55] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 272 with max blocks 4 with error 28 [ 154.524878][ T55] EXT4-fs (loop2): This should not happen!! Data will be lost [ 154.524878][ T55] [ 154.530013][ T7147] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 154.530230][ T7147] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 216 with error 28 [pid 5614] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7148] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... openat resumed>) = 3 [pid 7148] <... futex resumed>) = 0 [pid 7136] +++ killed by SIGBUS +++ [pid 7148] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60}, NULL, 8) = 0 [pid 5614] fstat(3 [pid 7148] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7148] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] getdents64(3, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 7148] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7147] +++ killed by SIGBUS +++ [pid 7132] +++ killed by SIGBUS +++ [pid 7148] <... mmap resumed>) = 0x7fef94c68000 [pid 5614] umount2("./59/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7148] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5610] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7132, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7148] rt_sigprocmask(SIG_BLOCK, ~[] [ 154.530253][ T7147] EXT4-fs (loop1): This should not happen!! Data will be lost [ 154.530253][ T7147] [ 154.530267][ T7147] EXT4-fs (loop1): Total free blocks count 0 [ 154.530279][ T7147] EXT4-fs (loop1): Free/Dirty block details [ 154.530291][ T7147] EXT4-fs (loop1): free_blocks=20480 [ 154.530303][ T7147] EXT4-fs (loop1): dirty_blocks=224 [ 154.530314][ T7147] EXT4-fs (loop1): Block reservation details [ 154.530326][ T7147] EXT4-fs (loop1): i_reserved_data_blocks=14 [pid 5610] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 7148] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5610] <... restart_syscall resumed>) = 0 [pid 7148] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0}ci2-upstream-fs/strace-static-x86_64: Process 7149 attached => {parent_tid=[7149]}, 88) = 7149 [pid 7148] rt_sigprocmask(SIG_SETMASK, [] [pid 7149] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7148] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] umount2("./59", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7149] <... rseq resumed>) = 0 [pid 7148] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7149] set_robust_list(0x7fef94c889a0, 24 [pid 7148] <... futex resumed>) = 0 [pid 5610] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7149] <... set_robust_list resumed>) = 0 [pid 7148] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5610] <... openat resumed>) = 3 [pid 7149] rt_sigprocmask(SIG_SETMASK, [] [pid 5611] <... umount2 resumed>) = 0 [pid 7149] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] fstat(3 [pid 5611] umount2("./60/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7149] memfd_create("syzkaller", 0 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7149] <... memfd_create resumed>) = 3 [pid 5611] newfstatat(AT_FDCWD, "./60/file1" [pid 7149] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5611] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5610] getdents64(3 [pid 7149] <... mmap resumed>) = 0x7fef8c868000 [pid 5611] umount2("./60/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5611] openat(AT_FDCWD, "./60/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5610] umount2("./59/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] <... openat resumed>) = 4 [pid 5611] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5611] getdents64(4, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5611] getdents64(4, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5611] close(4) = 0 [ 154.541499][ T5611] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 154.643141][ T177] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 300 with max blocks 4 with error 28 [ 154.643171][ T177] EXT4-fs (loop0): This should not happen!! Data will be lost [ 154.643171][ T177] [pid 7149] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5611] rmdir("./60/file1") = 0 [pid 5611] umount2("./60/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5611] newfstatat(AT_FDCWD, "./60/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] unlink("./60/binderfs") = 0 [pid 5611] getdents64(3, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5611] close(3) = 0 [pid 5611] rmdir("./60") = 0 [pid 5611] mkdir("./61", 0777 [pid 7149] <... write resumed>) = 524288 [pid 5611] <... mkdir resumed>) = 0 [pid 5609] <... umount2 resumed>) = 0 [pid 5609] umount2("./60/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7149] munmap(0x7fef8c868000, 138412032 [pid 5611] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7149] <... munmap resumed>) = 0 [ 154.666191][ T5609] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 154.686179][ T55] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 816 with max blocks 4 with error 28 [ 154.686209][ T55] EXT4-fs (loop4): This should not happen!! Data will be lost [ 154.686209][ T55] [ 154.695069][ T5614] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 7149] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5611] <... openat resumed>) = 3 [pid 5609] newfstatat(AT_FDCWD, "./60/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./60/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./60/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] getdents64(4, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./60/file1") = 0 [pid 5609] umount2("./60/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./60/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./60/binderfs") = 0 [pid 5609] getdents64(3, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5611] ioctl(3, LOOP_CLR_FD [pid 7149] <... openat resumed>) = 4 [pid 5609] rmdir("./60" [pid 5611] <... ioctl resumed>) = 0 [pid 5609] <... rmdir resumed>) = 0 [pid 7149] ioctl(4, LOOP_SET_FD, 3 [pid 5614] <... umount2 resumed>) = 0 [pid 5611] close(3) = 0 [pid 5614] umount2("./59/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5609] mkdir("./61", 0777 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5609] <... mkdir resumed>) = 0 [pid 5614] newfstatat(AT_FDCWD, "./59/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 7150 attached [pid 5614] umount2("./59/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7149] <... ioctl resumed>) = 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] <... openat resumed>) = 3 [pid 5614] openat(AT_FDCWD, "./59/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5609] ioctl(3, LOOP_CLR_FD [pid 5611] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7150 [pid 7150] set_robust_list(0x5555748a66e0, 24 [pid 7149] close(3 [pid 5609] <... ioctl resumed>) = 0 [pid 7150] <... set_robust_list resumed>) = 0 [pid 7149] <... close resumed>) = 0 [pid 5614] <... openat resumed>) = 4 [pid 5611] rt_sigprocmask(SIG_SETMASK, [] [pid 7150] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] close(3 [pid 7150] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7149] close(4 [pid 5614] fstat(4 [pid 5611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7150] chdir("./61" [pid 7149] <... close resumed>) = 0 [pid 7149] mkdir("./file1", 0777 [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 154.736776][ T177] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 216 with max blocks 4 with error 28 [ 154.736807][ T177] EXT4-fs (loop1): This should not happen!! Data will be lost [ 154.736807][ T177] [ 154.752873][ T5610] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 5614] getdents64(4 [pid 5610] <... umount2 resumed>) = 0 [pid 7150] <... chdir resumed>) = 0 [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 7150] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5614] getdents64(4 [pid 7150] <... prctl resumed>) = 0 [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5610] umount2("./59/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7150] setpgid(0, 0 [pid 7149] <... mkdir resumed>) = 0 [pid 5614] close(4 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7150] <... setpgid resumed>) = 0 [pid 5610] newfstatat(AT_FDCWD, "./59/file1" [pid 7150] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5614] <... close resumed>) = 0 [pid 5610] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7150] <... openat resumed>) = 3 [pid 5614] rmdir("./59/file1" [pid 5610] umount2("./59/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5614] <... rmdir resumed>) = 0 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7150] write(3, "1000", 4 [pid 5610] openat(AT_FDCWD, "./59/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7150] <... write resumed>) = 4 [pid 7149] mount("/dev/loop3", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5610] <... openat resumed>) = 4 [pid 7150] close(3 [pid 5614] umount2("./59/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] fstat(4 [pid 7150] <... close resumed>) = 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7150] symlink("/dev/binderfs", "./binderfs" [pid 5614] newfstatat(AT_FDCWD, "./59/binderfs" [pid 5610] getdents64(4 [pid 7150] <... symlink resumed>) = 0 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 7150] write(1, "executing program\n", 18 [pid 5614] unlink("./59/binderfs" [pid 5610] getdents64(4 [pid 5614] <... unlink resumed>) = 0 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5610] close(4 [pid 5614] getdents64(3 [pid 5610] <... close resumed>) = 0 executing program [pid 7150] <... write resumed>) = 18 [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5610] rmdir("./59/file1" [pid 7150] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] close(3 [pid 7150] <... futex resumed>) = 0 [pid 5614] <... close resumed>) = 0 [pid 5610] <... rmdir resumed>) = 0 [pid 5609] <... close resumed>) = 0 [pid 7150] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 5614] rmdir("./59" [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7150] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 5610] umount2("./59/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7150] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7150] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] newfstatat(AT_FDCWD, "./59/binderfs" [pid 5609] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5614] <... rmdir resumed>) = 0 [pid 5610] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7150] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5610] unlink("./59/binderfs" [pid 7150] <... mmap resumed>) = 0x7fef94c68000 [pid 5610] <... unlink resumed>) = 0 [pid 7150] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 5610] getdents64(3 [pid 7150] <... mprotect resumed>) = 0 [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5614] mkdir("./60", 0777 [pid 7150] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5610] close(3 [pid 7150] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5610] <... close resumed>) = 0 [pid 7150] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 5610] rmdir("./59"ci2-upstream-fs/strace-static-x86_64: Process 7153 attached [pid 5614] <... mkdir resumed>) = 0 [pid 5610] <... rmdir resumed>) = 0 [pid 5614] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7153] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7150] <... clone3 resumed> => {parent_tid=[7153]}, 88) = 7153 [pid 7149] <... mount resumed>) = 0 [pid 5614] <... openat resumed>) = 3 [pid 5614] ioctl(3, LOOP_CLR_FD [pid 7150] rt_sigprocmask(SIG_SETMASK, [] [pid 7149] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7150] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7150] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] mkdir("./60", 0777 [pid 7150] <... futex resumed>) = 0 [pid 7149] <... openat resumed>) = 3 [pid 5614] <... ioctl resumed>) = 0 [pid 5610] <... mkdir resumed>) = 0 [pid 5614] close(3 [pid 7153] <... rseq resumed>) = 0 [pid 7150] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-upstream-fs/strace-static-x86_64: Process 7154 attached [pid 7153] set_robust_list(0x7fef94c889a0, 24) = 0 [pid 7149] chdir("./file1") = 0 [pid 7154] set_robust_list(0x5555748a66e0, 24 [pid 7153] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] <... close resumed>) = 0 [pid 5610] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5609] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7154 [pid 7153] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7149] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7154] <... set_robust_list resumed>) = 0 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5610] <... openat resumed>) = 3 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 7154] rt_sigprocmask(SIG_SETMASK, [] [pid 7153] memfd_create("syzkaller", 0 [pid 5614] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5610] ioctl(3, LOOP_CLR_FD [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5610] <... ioctl resumed>) = 0 [pid 5610] close(3) = 0 [pid 5610] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7149] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5610] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7153] <... memfd_create resumed>) = 3 [pid 7149] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7154] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7154] chdir("./61" [pid 7149] <... futex resumed>) = 1 [pid 7148] <... futex resumed>) = 0 [pid 7148] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7153] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7148] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-upstream-fs/strace-static-x86_64: Process 7155 attached [pid 7149] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7154] <... chdir resumed>) = 0 [pid 7153] <... mmap resumed>) = 0x7fef8c868000 [pid 7154] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5614] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7155 [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 7154] setpgid(0, 0) = 0 [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7154] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7155] set_robust_list(0x5555748a66e0, 24 [pid 7154] <... openat resumed>) = 3 [pid 7155] <... set_robust_list resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 7156 attached [pid 7155] rt_sigprocmask(SIG_SETMASK, [] [pid 7156] set_robust_list(0x5555748a66e0, 24 [pid 7155] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7154] write(3, "1000", 4 [pid 7153] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7149] <... openat resumed>) = 4 [pid 5610] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7156 [pid 7154] <... write resumed>) = 4 [pid 7156] <... set_robust_list resumed>) = 0 [pid 7155] chdir("./60" [pid 7154] close(3 [pid 5610] rt_sigprocmask(SIG_SETMASK, [] [pid 7156] rt_sigprocmask(SIG_SETMASK, [] [pid 7149] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7154] <... close resumed>) = 0 [pid 7149] <... futex resumed>) = 1 [pid 7148] <... futex resumed>) = 0 [pid 7154] symlink("/dev/binderfs", "./binderfs" [pid 7148] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7149] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7148] <... futex resumed>) = 0 [pid 7156] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7149] <... openat resumed>) = 5 [pid 7148] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7154] <... symlink resumed>) = 0 [pid 7156] chdir("./60" [pid 7155] <... chdir resumed>) = 0 [pid 7156] <... chdir resumed>) = 0 [pid 7156] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7155] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7149] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7156] <... prctl resumed>) = 0 [pid 7156] setpgid(0, 0) = 0 [pid 7156] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7156] write(3, "1000", 4 [pid 7155] <... prctl resumed>) = 0 [pid 7154] write(1, "executing program\n", 18 [pid 7149] <... futex resumed>) = 1 [pid 7148] <... futex resumed>) = 0 [pid 7155] setpgid(0, 0 [pid 7154] <... write resumed>) = 18 [pid 7148] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 executing program [pid 7149] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7155] <... setpgid resumed>) = 0 [pid 7156] <... write resumed>) = 4 [pid 7154] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7149] <... openat resumed>) = 6 [pid 7148] <... futex resumed>) = 0 [pid 7148] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7155] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7156] close(3 [pid 7154] <... futex resumed>) = 0 [pid 7156] <... close resumed>) = 0 [pid 7156] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7156] write(1, "executing program\n", 18) = 18 [pid 7156] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7154] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 7156] <... futex resumed>) = 0 [pid 7156] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60}, NULL, 8) = 0 [pid 7154] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 7156] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 7155] <... openat resumed>) = 3 [pid 7156] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7156] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c68000 executing program [pid 7156] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7155] write(3, "1000", 4 [pid 7154] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 7153] <... write resumed>) = 524288 [pid 7149] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7155] <... write resumed>) = 4 [pid 7156] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7155] close(3 [pid 7154] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7153] munmap(0x7fef8c868000, 138412032 [pid 7149] <... futex resumed>) = 1 [pid 7148] <... futex resumed>) = 0 [pid 7156] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7155] <... close resumed>) = 0 [pid 7154] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7149] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7148] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7156] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 7155] symlink("/dev/binderfs", "./binderfs" [pid 7154] <... mmap resumed>) = 0x7fef94c68000 ci2-upstream-fs/strace-static-x86_64: Process 7157 attached [pid 7153] <... munmap resumed>) = 0 [pid 7149] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7148] <... futex resumed>) = 0 [pid 7155] <... symlink resumed>) = 0 [pid 7154] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 7148] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7149] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7155] write(1, "executing program\n", 18 [pid 7154] <... mprotect resumed>) = 0 executing program [pid 7156] <... clone3 resumed> => {parent_tid=[7157]}, 88) = 7157 [pid 7157] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7155] <... write resumed>) = 18 [pid 7154] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7153] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7149] <... mmap resumed>) = 0x200000000000 [pid 7155] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7154] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7155] <... futex resumed>) = 0 [pid 7153] <... openat resumed>) = 4 [pid 7157] <... rseq resumed>) = 0 [pid 7156] rt_sigprocmask(SIG_SETMASK, [] [pid 7154] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 7149] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7157] set_robust_list(0x7fef94c889a0, 24 [pid 7155] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 7153] ioctl(4, LOOP_SET_FD, 3ci2-upstream-fs/strace-static-x86_64: Process 7158 attached [pid 7156] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7155] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 7157] <... set_robust_list resumed>) = 0 [pid 7153] <... ioctl resumed>) = 0 [pid 7149] <... futex resumed>) = 1 [pid 7148] <... futex resumed>) = 0 [pid 7158] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7156] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7155] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 7148] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7157] rt_sigprocmask(SIG_SETMASK, [] [pid 7155] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7149] sendfile(4, 5, NULL, 553647746 [pid 7148] <... futex resumed>) = 0 [pid 7155] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7148] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7156] <... futex resumed>) = 0 [pid 7156] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7157] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7158] <... rseq resumed>) = 0 [pid 7157] memfd_create("syzkaller", 0 [pid 7155] <... mmap resumed>) = 0x7fef94c68000 [pid 7154] <... clone3 resumed> => {parent_tid=[7158]}, 88) = 7158 [pid 7158] set_robust_list(0x7fef94c889a0, 24 [pid 7153] close(3 [pid 7158] <... set_robust_list resumed>) = 0 [pid 7153] <... close resumed>) = 0 [pid 7154] rt_sigprocmask(SIG_SETMASK, [] [pid 7158] rt_sigprocmask(SIG_SETMASK, [] [pid 7157] <... memfd_create resumed>) = 3 [pid 7155] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 7154] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7153] close(4 [pid 7158] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7153] <... close resumed>) = 0 [pid 7158] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7155] <... mprotect resumed>) = 0 [pid 7154] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7153] mkdir("./file1", 0777 [pid 7158] <... futex resumed>) = 0 [pid 7154] <... futex resumed>) = 1 [pid 7157] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7155] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7153] <... mkdir resumed>) = 0 [pid 7158] memfd_create("syzkaller", 0 [pid 7157] <... mmap resumed>) = 0x7fef8c868000 [pid 7155] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7154] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7155] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 7158] <... memfd_create resumed>) = 3 [pid 7153] mount("/dev/loop2", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"...ci2-upstream-fs/strace-static-x86_64: Process 7159 attached [pid 7158] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fef8c868000 [pid 7155] <... clone3 resumed> => {parent_tid=[7159]}, 88) = 7159 [pid 7155] rt_sigprocmask(SIG_SETMASK, [] [pid 7159] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 7155] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7157] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7159] set_robust_list(0x7fef94c889a0, 24 [pid 7155] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7159] <... set_robust_list resumed>) = 0 [pid 7155] <... futex resumed>) = 0 [pid 7159] rt_sigprocmask(SIG_SETMASK, [] [pid 7155] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7159] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7159] memfd_create("syzkaller", 0) = 3 [pid 7159] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7158] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7159] <... mmap resumed>) = 0x7fef8c868000 [pid 7148] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7148] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7148] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7159] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7148] <... mmap resumed>) = 0x7fef94c47000 [pid 7148] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7157] <... write resumed>) = 524288 [pid 7148] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7158] <... write resumed>) = 524288 [pid 7148] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7148] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 7162 attached [pid 7157] munmap(0x7fef8c868000, 138412032 [pid 7148] <... clone3 resumed> => {parent_tid=[7162]}, 88) = 7162 [pid 7162] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7158] munmap(0x7fef8c868000, 138412032 [pid 7157] <... munmap resumed>) = 0 [pid 7148] rt_sigprocmask(SIG_SETMASK, [] [pid 7162] <... rseq resumed>) = 0 [pid 7158] <... munmap resumed>) = 0 [pid 7153] <... mount resumed>) = 0 [pid 7148] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7157] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7162] set_robust_list(0x7fef94c679a0, 24 [pid 7158] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7157] <... openat resumed>) = 4 [pid 7153] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7148] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7162] <... set_robust_list resumed>) = 0 [pid 7158] <... openat resumed>) = 4 [pid 7157] ioctl(4, LOOP_SET_FD, 3 [pid 7148] <... futex resumed>) = 0 [pid 7162] rt_sigprocmask(SIG_SETMASK, [] [pid 7159] <... write resumed>) = 524288 [pid 7158] ioctl(4, LOOP_SET_FD, 3 [pid 7157] <... ioctl resumed>) = 0 [pid 7153] <... openat resumed>) = 3 [pid 7148] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7162] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7158] <... ioctl resumed>) = 0 [pid 7153] chdir("./file1") = 0 [pid 7157] close(3 [pid 7153] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7159] munmap(0x7fef8c868000, 138412032 [pid 7158] close(3 [pid 7157] <... close resumed>) = 0 [pid 7153] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7162] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7158] <... close resumed>) = 0 [pid 7149] <... sendfile resumed>) = 385024 [pid 7157] close(4) = 0 [pid 7149] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7158] close(4) = 0 [pid 7158] mkdir("./file1", 0777 [pid 7149] <... futex resumed>) = ? [pid 7148] <... futex resumed>) = ? [pid 7149] +++ killed by SIGBUS +++ [pid 7158] <... mkdir resumed>) = 0 [ 155.137481][ T7149] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 155.139412][ T7162] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 376 with error 28 [ 155.139441][ T7162] EXT4-fs (loop3): This should not happen!! Data will be lost [ 155.139441][ T7162] [ 155.139454][ T7162] EXT4-fs (loop3): Total free blocks count 0 [ 155.139466][ T7162] EXT4-fs (loop3): Free/Dirty block details [pid 7158] mount("/dev/loop0", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7157] mkdir("./file1", 0777 [pid 7153] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7159] <... munmap resumed>) = 0 [pid 7153] <... futex resumed>) = 1 [pid 7150] <... futex resumed>) = 0 [pid 7157] <... mkdir resumed>) = 0 [pid 7153] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7150] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7162] +++ killed by SIGBUS +++ [pid 7157] mount("/dev/loop1", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7150] <... futex resumed>) = 0 [pid 7148] +++ killed by SIGBUS +++ [pid 7150] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7148, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7153] <... openat resumed>) = 4 [pid 7159] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7153] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7159] <... openat resumed>) = 4 [pid 7153] <... futex resumed>) = 1 [pid 7150] <... futex resumed>) = 0 [pid 7159] ioctl(4, LOOP_SET_FD, 3 [pid 7150] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7153] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7159] <... ioctl resumed>) = 0 [pid 7153] <... openat resumed>) = 5 [pid 7150] <... futex resumed>) = 0 [pid 7159] close(3 [pid 7150] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7159] <... close resumed>) = 0 [pid 7159] close(4 [pid 7153] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7159] <... close resumed>) = 0 [pid 7153] <... futex resumed>) = 1 [pid 7159] mkdir("./file1", 0777 [pid 7153] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7150] <... futex resumed>) = 0 [pid 7159] <... mkdir resumed>) = 0 [pid 7150] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7153] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7150] <... futex resumed>) = 0 [pid 7159] mount("/dev/loop4", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7153] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7150] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] umount2("./61", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7158] <... mount resumed>) = 0 [pid 7153] <... openat resumed>) = 6 [pid 5612] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7158] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5612] <... openat resumed>) = 3 [ 155.139478][ T7162] EXT4-fs (loop3): free_blocks=20480 [ 155.139491][ T7162] EXT4-fs (loop3): dirty_blocks=384 [ 155.139502][ T7162] EXT4-fs (loop3): Block reservation details [ 155.139513][ T7162] EXT4-fs (loop3): i_reserved_data_blocks=24 [pid 7158] <... openat resumed>) = 3 [pid 5612] fstat(3 [pid 7158] chdir("./file1" [pid 7153] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7157] <... mount resumed>) = 0 [pid 7158] <... chdir resumed>) = 0 [pid 7153] <... futex resumed>) = 1 [pid 7150] <... futex resumed>) = 0 [pid 5612] getdents64(3 [pid 7158] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7153] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7158] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7153] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7150] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 7158] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7157] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7153] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7150] <... futex resumed>) = 0 [pid 5612] umount2("./61/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7158] <... futex resumed>) = 1 [pid 7157] <... openat resumed>) = 3 [pid 7154] <... futex resumed>) = 0 [pid 7153] <... mmap resumed>) = 0x200000000000 [pid 7150] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7158] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7154] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7157] chdir("./file1" [pid 7153] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7157] <... chdir resumed>) = 0 [pid 7154] <... futex resumed>) = 0 [pid 7153] <... futex resumed>) = 1 [pid 7157] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7154] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7150] <... futex resumed>) = 0 [pid 7157] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7153] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7159] <... mount resumed>) = 0 [pid 7158] <... openat resumed>) = 4 [pid 7150] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7158] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7159] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7158] <... futex resumed>) = 1 [pid 7154] <... futex resumed>) = 0 [pid 7153] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7150] <... futex resumed>) = 0 [pid 7159] <... openat resumed>) = 3 [pid 7158] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7157] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7154] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7153] sendfile(4, 5, NULL, 553647746 [pid 7159] chdir("./file1" [pid 7157] <... futex resumed>) = 1 [pid 7156] <... futex resumed>) = 0 [pid 7150] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7159] <... chdir resumed>) = 0 [pid 7158] <... openat resumed>) = 5 [pid 7156] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7154] <... futex resumed>) = 0 [pid 7159] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7158] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7157] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7159] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7156] <... futex resumed>) = 0 [pid 7154] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7159] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7156] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7159] <... futex resumed>) = 1 [pid 7158] <... futex resumed>) = 0 [pid 7155] <... futex resumed>) = 0 [pid 7154] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7159] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7158] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7157] <... openat resumed>) = 4 [pid 7155] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7154] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7159] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7155] <... futex resumed>) = 0 [pid 7154] <... futex resumed>) = 0 [pid 7158] <... openat resumed>) = 6 [pid 7158] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7157] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7159] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7158] <... futex resumed>) = 0 [pid 7157] <... futex resumed>) = 1 [pid 7155] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7154] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 7159] <... openat resumed>) = 4 [pid 7158] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7157] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7156] <... futex resumed>) = 0 [pid 7154] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7150] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5612] <... umount2 resumed>) = 0 [pid 7159] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7158] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7156] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7154] <... futex resumed>) = 0 [pid 7150] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] umount2("./61/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7159] <... futex resumed>) = 1 [pid 7158] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7155] <... futex resumed>) = 0 [pid 7154] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7150] <... futex resumed>) = 0 [pid 7159] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7157] <... futex resumed>) = 0 [pid 7156] <... futex resumed>) = 1 [pid 7155] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7150] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7158] <... mmap resumed>) = 0x200000000000 [pid 7159] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7157] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7156] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7155] <... futex resumed>) = 0 [pid 7150] <... mmap resumed>) = 0x7fef94c47000 [pid 5612] newfstatat(AT_FDCWD, "./61/file1" [pid 7159] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7158] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7157] <... openat resumed>) = 5 [pid 7155] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7150] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 5612] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7159] <... openat resumed>) = 5 [pid 7158] <... futex resumed>) = 1 [pid 7157] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7154] <... futex resumed>) = 0 [pid 7150] <... mprotect resumed>) = 0 [pid 7159] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7158] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7157] <... futex resumed>) = 1 [pid 7156] <... futex resumed>) = 0 [pid 7154] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7150] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5612] umount2("./61/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7159] <... futex resumed>) = 1 [pid 7158] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7157] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7156] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7155] <... futex resumed>) = 0 [pid 7154] <... futex resumed>) = 0 [pid 7150] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 155.302326][ T5612] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 7159] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7158] sendfile(4, 5, NULL, 553647746 [pid 7157] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7156] <... futex resumed>) = 0 [pid 7155] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7154] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7150] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5612] openat(AT_FDCWD, "./61/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORYci2-upstream-fs/strace-static-x86_64: Process 7169 attached [pid 7159] <... openat resumed>) = 6 [pid 7157] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7156] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7155] <... futex resumed>) = 0 [pid 7169] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5612] <... openat resumed>) = 4 [pid 7157] <... openat resumed>) = 6 [pid 7169] <... rseq resumed>) = 0 [pid 7155] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7150] <... clone3 resumed> => {parent_tid=[7169]}, 88) = 7169 [pid 5612] fstat(4 [pid 7169] set_robust_list(0x7fef94c679a0, 24 [pid 7159] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7157] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7150] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7169] <... set_robust_list resumed>) = 0 [pid 7159] <... futex resumed>) = 1 [pid 7157] <... futex resumed>) = 1 [pid 7156] <... futex resumed>) = 0 [pid 7155] <... futex resumed>) = 0 [pid 7150] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5612] getdents64(4 [pid 7169] rt_sigprocmask(SIG_SETMASK, [] [pid 7159] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7157] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7156] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7155] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7169] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7159] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7157] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7156] <... futex resumed>) = 0 [pid 7155] <... futex resumed>) = 0 [pid 7150] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 7156] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7159] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7150] <... futex resumed>) = 0 [pid 7159] <... mmap resumed>) = 0x200000000000 [pid 7157] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 5612] getdents64(4 [pid 7155] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7150] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 7159] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7157] <... mmap resumed>) = 0x200000000000 [pid 5612] close(4 [pid 7159] <... futex resumed>) = 1 [pid 7157] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7155] <... futex resumed>) = 0 [pid 5612] <... close resumed>) = 0 [pid 7169] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7159] sendfile(4, 5, NULL, 553647746 [pid 7157] <... futex resumed>) = 1 [pid 7156] <... futex resumed>) = 0 [pid 7155] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7154] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7153] <... sendfile resumed>) = 851968 [ 155.393457][ T7169] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 155.393664][ T7169] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 832 with error 28 [ 155.393687][ T7169] EXT4-fs (loop2): This should not happen!! Data will be lost [ 155.393687][ T7169] [ 155.393700][ T7169] EXT4-fs (loop2): Total free blocks count 0 [ 155.393713][ T7169] EXT4-fs (loop2): Free/Dirty block details [pid 5612] rmdir("./61/file1" [pid 7157] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7156] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7155] <... futex resumed>) = 0 [pid 7154] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7150] <... futex resumed>) = ? [pid 5612] <... rmdir resumed>) = 0 [pid 7157] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7156] <... futex resumed>) = 0 [pid 7155] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7154] <... futex resumed>) = 0 [pid 7153] +++ killed by SIGBUS +++ [pid 7157] sendfile(4, 5, NULL, 553647746 [pid 7156] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7154] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5612] umount2("./61/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7154] <... mmap resumed>) = 0x7fef94c47000 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7154] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 5612] newfstatat(AT_FDCWD, "./61/binderfs" [pid 7154] <... mprotect resumed>) = 0 [pid 7154] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5612] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7154] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7154] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5612] unlink("./61/binderfs" [pid 7169] +++ killed by SIGBUS +++ [pid 7150] +++ killed by SIGBUS +++ [pid 5612] <... unlink resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 7170 attached [pid 7170] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5612] getdents64(3 [pid 5611] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7150, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 7170] <... rseq resumed>) = 0 [pid 7154] <... clone3 resumed> => {parent_tid=[7170]}, 88) = 7170 [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5611] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 7170] set_robust_list(0x7fef94c679a0, 24 [pid 7154] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] close(3 [pid 5611] <... restart_syscall resumed>) = 0 [pid 7170] <... set_robust_list resumed>) = 0 [pid 7154] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5612] <... close resumed>) = 0 [pid 7170] rt_sigprocmask(SIG_SETMASK, [] [pid 7154] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [ 155.393725][ T7169] EXT4-fs (loop2): free_blocks=20480 [ 155.393738][ T7169] EXT4-fs (loop2): dirty_blocks=832 [ 155.393750][ T7169] EXT4-fs (loop2): Block reservation details [ 155.393761][ T7169] EXT4-fs (loop2): i_reserved_data_blocks=52 [pid 5612] rmdir("./61" [pid 7154] <... futex resumed>) = 0 [pid 5612] <... rmdir resumed>) = 0 [pid 5611] umount2("./61", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7170] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7154] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5612] mkdir("./62", 0777 [pid 5611] <... openat resumed>) = 3 [pid 5612] <... mkdir resumed>) = 0 [pid 5611] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5612] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5611] getdents64(3 [pid 5612] <... openat resumed>) = 3 [pid 5612] ioctl(3, LOOP_CLR_FD [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5612] <... ioctl resumed>) = 0 [pid 5612] close(3 [pid 5611] umount2("./61/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7156] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7155] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7156] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 155.514553][ T7170] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 155.516346][ T7170] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1112 with error 28 [ 155.516373][ T7170] EXT4-fs (loop0): This should not happen!! Data will be lost [ 155.516373][ T7170] [ 155.518317][ T7170] EXT4-fs (loop0): Total free blocks count 0 [pid 7156] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7155] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7154] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7170] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7158] <... sendfile resumed>) = 1138688 [pid 7156] <... mmap resumed>) = 0x7fef94c47000 [pid 7155] <... futex resumed>) = 0 [pid 7155] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7156] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 7155] <... mmap resumed>) = 0x7fef94c47000 [pid 7155] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7158] +++ killed by SIGBUS +++ [pid 7156] <... mprotect resumed>) = 0 [pid 7155] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7156] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7155] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7155] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} => {parent_tid=[7171]}, 88) = 7171 ci2-upstream-fs/strace-static-x86_64: Process 7171 attached [pid 7155] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5612] <... close resumed>) = 0 [ 155.518335][ T7170] EXT4-fs (loop0): Free/Dirty block details [ 155.518347][ T7170] EXT4-fs (loop0): free_blocks=20480 [ 155.518360][ T7170] EXT4-fs (loop0): dirty_blocks=1136 [ 155.518371][ T7170] EXT4-fs (loop0): Block reservation details [ 155.518381][ T7170] EXT4-fs (loop0): i_reserved_data_blocks=70 [pid 7155] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5612] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7171] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7170] +++ killed by SIGBUS +++ [pid 7156] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7154] +++ killed by SIGBUS +++ [pid 7171] <... rseq resumed>) = 0 [pid 7156] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 7155] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7154, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=17 /* 0.17 s */} --- ci2-upstream-fs/strace-static-x86_64: Process 7172 attached [pid 7171] set_robust_list(0x7fef94c679a0, 24 [pid 5612] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 7173 attached [pid 7172] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7171] <... set_robust_list resumed>) = 0 [pid 7156] <... clone3 resumed> => {parent_tid=[7172]}, 88) = 7172 [pid 7172] <... rseq resumed>) = 0 [pid 7171] rt_sigprocmask(SIG_SETMASK, [] [pid 7156] rt_sigprocmask(SIG_SETMASK, [] [pid 7173] set_robust_list(0x5555748a66e0, 24 [pid 7172] set_robust_list(0x7fef94c679a0, 24 [pid 7171] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7156] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5612] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7173 [pid 7173] <... set_robust_list resumed>) = 0 [pid 7172] <... set_robust_list resumed>) = 0 [pid 7156] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [ 155.605796][ T5611] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 5612] rt_sigprocmask(SIG_SETMASK, [] [pid 7173] rt_sigprocmask(SIG_SETMASK, [] [pid 7172] rt_sigprocmask(SIG_SETMASK, [] [pid 7156] <... futex resumed>) = 0 [pid 5612] <... rt_sigprocmask resumed>, NULL, 8) = 0 [ 155.648170][ T7171] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 155.650863][ T7171] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 504 with error 28 [ 155.662258][ T7171] EXT4-fs (loop4): This should not happen!! Data will be lost [ 155.662258][ T7171] [ 155.662278][ T7171] EXT4-fs (loop4): Total free blocks count 0 [ 155.662290][ T7171] EXT4-fs (loop4): Free/Dirty block details [pid 5609] umount2("./61", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7173] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7172] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7156] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7155] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5611] <... umount2 resumed>) = 0 [pid 7173] chdir("./62" [pid 5611] umount2("./61/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7173] <... chdir resumed>) = 0 [pid 7173] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7173] <... prctl resumed>) = 0 [pid 5611] newfstatat(AT_FDCWD, "./61/file1" [pid 5609] <... openat resumed>) = 3 [pid 7173] setpgid(0, 0 [ 155.662301][ T7171] EXT4-fs (loop4): free_blocks=20480 [ 155.662322][ T7171] EXT4-fs (loop4): dirty_blocks=512 [ 155.662333][ T7171] EXT4-fs (loop4): Block reservation details [ 155.662344][ T7171] EXT4-fs (loop4): i_reserved_data_blocks=32 [ 155.729661][ T7172] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [pid 5609] fstat(3 [pid 7173] <... setpgid resumed>) = 0 [pid 5611] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7171] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7159] <... sendfile resumed>) = 520192 [ 155.731874][ T7172] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1208 with error 28 [ 155.731902][ T7172] EXT4-fs (loop1): This should not happen!! Data will be lost [ 155.731902][ T7172] [ 155.731915][ T7172] EXT4-fs (loop1): Total free blocks count 0 [ 155.731927][ T7172] EXT4-fs (loop1): Free/Dirty block details [ 155.731938][ T7172] EXT4-fs (loop1): free_blocks=20480 [ 155.731950][ T7172] EXT4-fs (loop1): dirty_blocks=1216 [ 155.731961][ T7172] EXT4-fs (loop1): Block reservation details [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7173] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7172] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7157] <... sendfile resumed>) = 1241088 [pid 7156] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5611] umount2("./61/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] getdents64(3 [pid 7173] <... openat resumed>) = 3 [pid 7159] +++ killed by SIGBUS +++ [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 7172] +++ killed by SIGBUS +++ [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] umount2("./61/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7173] write(3, "1000", 4 [pid 7157] +++ killed by SIGBUS +++ [pid 5611] openat(AT_FDCWD, "./61/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7171] +++ killed by SIGBUS +++ [pid 7155] +++ killed by SIGBUS +++ [pid 7173] <... write resumed>) = 4 [pid 7156] +++ killed by SIGBUS +++ [pid 5611] <... openat resumed>) = 4 [pid 7173] close(3 [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7155, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5611] fstat(4 [pid 5610] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7156, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 7173] <... close resumed>) = 0 [pid 5614] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7173] symlink("/dev/binderfs", "./binderfs" [pid 5610] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 7173] <... symlink resumed>) = 0 [pid 5614] <... restart_syscall resumed>) = 0 [pid 5611] getdents64(4 [pid 5610] <... restart_syscall resumed>) = 0 [pid 7173] write(1, "executing program\n", 18 [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 7173] <... write resumed>) = 18 [pid 5611] getdents64(4 [pid 7173] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 7173] <... futex resumed>) = 0 executing program [pid 5611] close(4 [pid 7173] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 5614] umount2("./60", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] <... close resumed>) = 0 [pid 7173] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7173] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 5614] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5611] rmdir("./61/file1" [pid 7173] <... rt_sigprocmask resumed>, NULL, 8) = 0 [ 155.731972][ T7172] EXT4-fs (loop1): i_reserved_data_blocks=76 [pid 7173] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5614] <... openat resumed>) = 3 [pid 7173] <... mmap resumed>) = 0x7fef94c68000 [pid 7173] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 5614] fstat(3 [pid 5610] umount2("./60", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7173] <... mprotect resumed>) = 0 [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7173] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5614] getdents64(3 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7173] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5611] <... rmdir resumed>) = 0 [pid 5610] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7173] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 5614] umount2("./60/file1", MNT_FORCE|UMOUNT_NOFOLLOWci2-upstream-fs/strace-static-x86_64: Process 7174 attached [pid 5611] umount2("./61/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] <... openat resumed>) = 3 [pid 7174] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7173] <... clone3 resumed> => {parent_tid=[7174]}, 88) = 7174 [pid 7174] <... rseq resumed>) = 0 [pid 7173] rt_sigprocmask(SIG_SETMASK, [] [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7174] set_robust_list(0x7fef94c889a0, 24 [pid 7173] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5611] newfstatat(AT_FDCWD, "./61/binderfs" [pid 7174] <... set_robust_list resumed>) = 0 [pid 7173] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7174] rt_sigprocmask(SIG_SETMASK, [] [pid 7173] <... futex resumed>) = 0 [pid 5610] fstat(3 [pid 7174] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7173] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5611] unlink("./61/binderfs" [pid 7174] memfd_create("syzkaller", 0 [pid 5611] <... unlink resumed>) = 0 [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7174] <... memfd_create resumed>) = 3 [pid 5610] getdents64(3 [pid 7174] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fef8c868000 [pid 5611] getdents64(3, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5611] close(3 [pid 5610] umount2("./60/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] <... close resumed>) = 0 [pid 5611] rmdir("./61") = 0 [pid 7174] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5611] mkdir("./62", 0777) = 0 [pid 5611] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 7174] <... write resumed>) = 524288 [pid 5611] ioctl(3, LOOP_CLR_FD [pid 5609] <... umount2 resumed>) = 0 [pid 5611] <... ioctl resumed>) = 0 [pid 5609] umount2("./61/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7174] munmap(0x7fef8c868000, 138412032 [pid 5611] close(3 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 155.833029][ T5609] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 5609] newfstatat(AT_FDCWD, "./61/file1" [pid 7174] <... munmap resumed>) = 0 [pid 5609] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 155.882081][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 504 with max blocks 4 with error 28 [ 155.882109][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 155.882109][ T12] [ 155.882715][ T55] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1208 with max blocks 4 with error 28 [ 155.882729][ T55] EXT4-fs (loop1): This should not happen!! Data will be lost [ 155.882729][ T55] [pid 7174] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5609] umount2("./61/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7174] <... openat resumed>) = 4 [pid 5611] <... close resumed>) = 0 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7174] ioctl(4, LOOP_SET_FD, 3 [pid 5611] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5609] openat(AT_FDCWD, "./61/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5611] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7174] <... ioctl resumed>) = 0 [pid 5611] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5610] <... umount2 resumed>) = 0 [pid 5609] <... openat resumed>) = 4 [pid 5609] fstat(4 [pid 5614] <... umount2 resumed>) = 0 [pid 5610] umount2("./60/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] getdents64(4 [pid 7174] close(3 [pid 5610] newfstatat(AT_FDCWD, "./60/file1" [pid 7174] <... close resumed>) = 0 [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5610] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] getdents64(4 [pid 7174] close(4ci2-upstream-fs/strace-static-x86_64: Process 7175 attached ) = 0 [pid 5614] umount2("./60/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] umount2("./60/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7175] set_robust_list(0x5555748a66e0, 24 [pid 7174] mkdir("./file1", 0777 [pid 5614] newfstatat(AT_FDCWD, "./60/file1" [pid 5611] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7175 [pid 5610] openat(AT_FDCWD, "./60/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5609] close(4 [pid 7175] <... set_robust_list resumed>) = 0 [pid 7174] <... mkdir resumed>) = 0 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] rt_sigprocmask(SIG_SETMASK, [] [pid 7175] rt_sigprocmask(SIG_SETMASK, [] [pid 7174] mount("/dev/loop3", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5614] umount2("./60/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] <... openat resumed>) = 4 [pid 5609] <... close resumed>) = 0 [pid 7175] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] rmdir("./61/file1" [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] <... rmdir resumed>) = 0 [pid 7175] chdir("./62" [pid 5614] openat(AT_FDCWD, "./60/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7175] <... chdir resumed>) = 0 [pid 5614] <... openat resumed>) = 4 [pid 5610] fstat(4 [pid 5609] umount2("./61/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7175] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5614] fstat(4 [pid 7175] <... prctl resumed>) = 0 [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5614] getdents64(4, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 7175] setpgid(0, 0) = 0 [pid 5614] getdents64(4 [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7175] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5610] getdents64(4 [pid 7175] <... openat resumed>) = 3 [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 7175] write(3, "1000", 4 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5614] close(4 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] getdents64(4 [pid 5614] <... close resumed>) = 0 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 7175] <... write resumed>) = 4 [pid 5614] rmdir("./60/file1" [pid 5610] close(4 [pid 5609] newfstatat(AT_FDCWD, "./61/binderfs" [pid 7175] close(3 [pid 5614] <... rmdir resumed>) = 0 [pid 5610] <... close resumed>) = 0 [pid 5610] rmdir("./60/file1" [pid 5609] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 155.889219][ T5610] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 155.901733][ T5614] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 5614] umount2("./60/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./60/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./60/binderfs" [pid 7175] <... close resumed>) = 0 [pid 5610] <... rmdir resumed>) = 0 [pid 5609] unlink("./61/binderfs" [pid 7175] symlink("/dev/binderfs", "./binderfs" [pid 5610] umount2("./60/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... unlink resumed>) = 0 [pid 7175] <... symlink resumed>) = 0 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7175] write(1, "executing program\n", 18 [pid 5610] newfstatat(AT_FDCWD, "./60/binderfs" executing program [pid 5609] getdents64(3 [pid 7175] <... write resumed>) = 18 [pid 5610] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 7175] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] unlink("./60/binderfs" [pid 5609] close(3 [pid 7175] <... futex resumed>) = 0 [pid 5614] <... unlink resumed>) = 0 [pid 7175] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 5609] <... close resumed>) = 0 [pid 7175] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 5609] rmdir("./61" [pid 5614] getdents64(3 [pid 5609] <... rmdir resumed>) = 0 [pid 7175] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5610] <... unlink resumed>) = 0 [pid 5609] mkdir("./62", 0777 [pid 7175] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7174] <... mount resumed>) = 0 [pid 5610] getdents64(3 [pid 5614] close(3) = 0 [pid 5614] rmdir("./60" [pid 7175] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5614] <... rmdir resumed>) = 0 [pid 7174] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5609] <... mkdir resumed>) = 0 [pid 7175] <... mmap resumed>) = 0x7fef94c68000 [pid 7175] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 7174] <... openat resumed>) = 3 [pid 5610] close(3 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7175] <... mprotect resumed>) = 0 [pid 7174] chdir("./file1" [pid 5610] <... close resumed>) = 0 [pid 5609] <... openat resumed>) = 3 [pid 7175] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7174] <... chdir resumed>) = 0 [pid 5614] mkdir("./61", 0777 [pid 5610] rmdir("./60" [pid 5609] ioctl(3, LOOP_CLR_FD [pid 7175] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7174] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7175] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 7174] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5614] <... mkdir resumed>) = 0 [pid 5609] <... ioctl resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 7178 attached [pid 7174] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7175] <... clone3 resumed> => {parent_tid=[7178]}, 88) = 7178 [pid 7174] <... futex resumed>) = 1 [pid 5609] close(3 [pid 7178] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7175] rt_sigprocmask(SIG_SETMASK, [] [pid 7174] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7173] <... futex resumed>) = 0 [pid 5614] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7178] <... rseq resumed>) = 0 [pid 7175] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7173] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... openat resumed>) = 3 [pid 7178] set_robust_list(0x7fef94c889a0, 24) = 0 [pid 7174] <... futex resumed>) = 0 [pid 7173] <... futex resumed>) = 1 [pid 7175] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7174] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7173] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7178] rt_sigprocmask(SIG_SETMASK, [] [pid 7175] <... futex resumed>) = 0 [pid 5614] ioctl(3, LOOP_CLR_FD [pid 7178] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7175] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7178] memfd_create("syzkaller", 0 [pid 5614] <... ioctl resumed>) = 0 [pid 7178] <... memfd_create resumed>) = 3 [pid 5614] close(3 [pid 7174] <... openat resumed>) = 4 [pid 7178] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5609] <... close resumed>) = 0 [pid 5614] <... close resumed>) = 0 [pid 5610] <... rmdir resumed>) = 0 [pid 7178] <... mmap resumed>) = 0x7fef8c868000 [pid 7174] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7174] <... futex resumed>) = 1 [pid 7173] <... futex resumed>) = 0 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5609] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7174] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7173] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7174] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7173] <... futex resumed>) = 0 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5610] mkdir("./61", 0777 [pid 7173] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... mkdir resumed>) = 0 [pid 7174] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC) = 5 [pid 7174] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000ci2-upstream-fs/strace-static-x86_64: Process 7179 attached ) = 1 [pid 7173] <... futex resumed>) = 0 [pid 7173] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5609] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7179 [pid 7174] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7173] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] rt_sigprocmask(SIG_SETMASK, []ci2-upstream-fs/strace-static-x86_64: Process 7180 attached [pid 7174] <... openat resumed>) = 6 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7174] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7180 [pid 5610] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7179] set_robust_list(0x5555748a66e0, 24 [pid 7174] <... futex resumed>) = 1 [pid 7173] <... futex resumed>) = 0 [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] <... openat resumed>) = 3 [pid 7178] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7174] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7173] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] ioctl(3, LOOP_CLR_FD [pid 7179] <... set_robust_list resumed>) = 0 [pid 7174] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7173] <... futex resumed>) = 0 [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7180] set_robust_list(0x5555748a66e0, 24 [pid 7174] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7173] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7180] <... set_robust_list resumed>) = 0 [pid 7179] rt_sigprocmask(SIG_SETMASK, [] [pid 7174] <... mmap resumed>) = 0x200000000000 [pid 5610] <... ioctl resumed>) = 0 [pid 7174] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7173] <... futex resumed>) = 0 [pid 7174] <... futex resumed>) = 1 [pid 7173] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7174] sendfile(4, 5, NULL, 553647746 [pid 7173] <... futex resumed>) = 0 [pid 7180] rt_sigprocmask(SIG_SETMASK, [] [pid 7173] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7180] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7179] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] close(3 [pid 7180] chdir("./61") = 0 [pid 7179] chdir("./62" [pid 7180] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7179] <... chdir resumed>) = 0 [pid 5610] <... close resumed>) = 0 [pid 7180] <... prctl resumed>) = 0 [pid 7179] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7180] setpgid(0, 0 [pid 7179] <... prctl resumed>) = 0 [pid 7180] <... setpgid resumed>) = 0 [pid 7179] setpgid(0, 0 [pid 7180] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7179] <... setpgid resumed>) = 0 [pid 7179] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7178] <... write resumed>) = 524288 [pid 7179] <... openat resumed>) = 3 [pid 7179] write(3, "1000", 4 [pid 7178] munmap(0x7fef8c868000, 138412032 [pid 7179] <... write resumed>) = 4 [pid 5610] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7179] close(3) = 0 [pid 5610] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7179] symlink("/dev/binderfs", "./binderfs" [pid 5610] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 7181 attached [pid 7178] <... munmap resumed>) = 0 [pid 7179] <... symlink resumed>) = 0 [pid 7179] write(1, "executing program\n", 18 [pid 7178] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7181] set_robust_list(0x5555748a66e0, 24 [pid 7178] <... openat resumed>) = 4 [pid 7181] <... set_robust_list resumed>) = 0 [pid 7179] <... write resumed>) = 18 [pid 7180] <... openat resumed>) = 3 [pid 7179] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7181] rt_sigprocmask(SIG_SETMASK, [] [pid 7179] <... futex resumed>) = 0 executing program [pid 7181] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7180] write(3, "1000", 4 [pid 7179] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 7178] ioctl(4, LOOP_SET_FD, 3 [pid 7181] chdir("./61" [pid 7180] <... write resumed>) = 4 [pid 7181] <... chdir resumed>) = 0 [pid 7180] close(3 [pid 7179] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 7178] <... ioctl resumed>) = 0 [pid 5610] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7181 [pid 7180] <... close resumed>) = 0 [pid 7181] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7179] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 5610] rt_sigprocmask(SIG_SETMASK, [] [pid 7181] <... prctl resumed>) = 0 [pid 7180] symlink("/dev/binderfs", "./binderfs" [pid 7179] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7178] close(3 [pid 7181] setpgid(0, 0 [pid 7180] <... symlink resumed>) = 0 [pid 7179] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7178] <... close resumed>) = 0 [pid 5610] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7178] close(4 [pid 7179] <... mmap resumed>) = 0x7fef94c68000 [pid 7181] <... setpgid resumed>) = 0 [pid 7181] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7178] <... close resumed>) = 0 [pid 7181] <... openat resumed>) = 3 [pid 7180] write(1, "executing program\n", 18 [pid 7179] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 7178] mkdir("./file1", 0777 [pid 7173] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7173] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7173] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c47000 [pid 7173] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 7178] <... mkdir resumed>) = 0 executing program [pid 7180] <... write resumed>) = 18 [pid 7179] <... mprotect resumed>) = 0 [pid 7173] <... mprotect resumed>) = 0 [pid 7181] write(3, "1000", 4 [pid 7180] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7179] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7173] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7173] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 7182 attached [pid 7181] <... write resumed>) = 4 [pid 7180] <... futex resumed>) = 0 [pid 7179] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7181] close(3 [pid 7180] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 7182] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7179] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 7178] mount("/dev/loop2", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"...ci2-upstream-fs/strace-static-x86_64: Process 7183 attached [pid 7182] <... rseq resumed>) = 0 [pid 7181] <... close resumed>) = 0 [pid 7180] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 7173] <... clone3 resumed> => {parent_tid=[7182]}, 88) = 7182 [pid 7181] symlink("/dev/binderfs", "./binderfs" [pid 7180] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 7179] <... clone3 resumed> => {parent_tid=[7183]}, 88) = 7183 [pid 7182] set_robust_list(0x7fef94c679a0, 24 [pid 7173] rt_sigprocmask(SIG_SETMASK, [] [pid 7182] <... set_robust_list resumed>) = 0 [pid 7181] <... symlink resumed>) = 0 [pid 7180] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7179] rt_sigprocmask(SIG_SETMASK, [] [pid 7173] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7183] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7182] rt_sigprocmask(SIG_SETMASK, [] [pid 7180] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7179] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7173] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7183] <... rseq resumed>) = 0 [pid 7182] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7181] write(1, "executing program\n", 18 [pid 7180] <... mmap resumed>) = 0x7fef94c68000 [pid 7179] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7173] <... futex resumed>) = 0 executing program [pid 7183] set_robust_list(0x7fef94c889a0, 24 [pid 7181] <... write resumed>) = 18 [pid 7180] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 7179] <... futex resumed>) = 0 [pid 7173] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7183] <... set_robust_list resumed>) = 0 [pid 7181] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7179] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7183] rt_sigprocmask(SIG_SETMASK, [] [pid 7180] <... mprotect resumed>) = 0 [pid 7183] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7181] <... futex resumed>) = 0 [pid 7183] memfd_create("syzkaller", 0 [pid 7181] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60}, NULL, 8) = 0 [pid 7182] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7181] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 7180] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7174] <... sendfile resumed>) = 557056 [pid 7183] <... memfd_create resumed>) = 3 [pid 7181] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7173] <... futex resumed>) = ? [pid 7183] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7181] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7174] +++ killed by SIGBUS +++ [pid 7183] <... mmap resumed>) = 0x7fef8c868000 [pid 7181] <... mmap resumed>) = 0x7fef94c68000 [pid 7181] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7181] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7181] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} => {parent_tid=[7186]}, 88) = 7186 [pid 7181] rt_sigprocmask(SIG_SETMASK, [] [pid 7182] +++ killed by SIGBUS +++ [pid 7181] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7173] +++ killed by SIGBUS +++ [pid 7181] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7173, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7181] <... futex resumed>) = 0 [pid 5612] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 7181] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7183] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5612] <... restart_syscall resumed>) = 0 [pid 5612] umount2("./62", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 156.161026][ T7182] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 156.163287][ T7182] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 540 with error 28 [ 156.163317][ T7182] EXT4-fs (loop3): This should not happen!! Data will be lost [ 156.163317][ T7182] [ 156.163330][ T7182] EXT4-fs (loop3): Total free blocks count 0 [ 156.163343][ T7182] EXT4-fs (loop3): Free/Dirty block details [pid 5612] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5612] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5612] getdents64(3, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5612] umount2("./62/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7180] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7180] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0}ci2-upstream-fs/strace-static-x86_64: Process 7187 attached ci2-upstream-fs/strace-static-x86_64: Process 7186 attached [pid 7186] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7180] <... clone3 resumed> => {parent_tid=[7187]}, 88) = 7187 [pid 7187] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7186] <... rseq resumed>) = 0 [pid 7180] rt_sigprocmask(SIG_SETMASK, [] [pid 7186] set_robust_list(0x7fef94c889a0, 24 [pid 7180] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7187] <... rseq resumed>) = 0 [pid 7186] <... set_robust_list resumed>) = 0 [pid 7180] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7187] set_robust_list(0x7fef94c889a0, 24 [pid 7183] <... write resumed>) = 524288 [pid 7187] <... set_robust_list resumed>) = 0 [pid 7186] rt_sigprocmask(SIG_SETMASK, [] [pid 7180] <... futex resumed>) = 0 [pid 7186] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7187] rt_sigprocmask(SIG_SETMASK, [] [pid 7180] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7187] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7186] memfd_create("syzkaller", 0 [pid 7187] memfd_create("syzkaller", 0 [pid 7186] <... memfd_create resumed>) = 3 [pid 7183] munmap(0x7fef8c868000, 138412032 [pid 7187] <... memfd_create resumed>) = 3 [pid 7187] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7183] <... munmap resumed>) = 0 [pid 7187] <... mmap resumed>) = 0x7fef8c868000 [pid 7186] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fef8c868000 [pid 7183] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7183] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7187] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7183] close(3 [pid 7186] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7178] <... mount resumed>) = 0 [pid 7183] <... close resumed>) = 0 [pid 7178] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7183] close(4 [pid 7178] chdir("./file1" [pid 7183] <... close resumed>) = 0 [pid 7178] <... chdir resumed>) = 0 [pid 7183] mkdir("./file1", 0777) = 0 [ 156.163355][ T7182] EXT4-fs (loop3): free_blocks=20480 [ 156.163368][ T7182] EXT4-fs (loop3): dirty_blocks=544 [ 156.163379][ T7182] EXT4-fs (loop3): Block reservation details [ 156.163389][ T7182] EXT4-fs (loop3): i_reserved_data_blocks=34 [pid 7183] mount("/dev/loop0", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7178] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7187] <... write resumed>) = 524288 [pid 7178] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7186] <... write resumed>) = 524288 [pid 7187] munmap(0x7fef8c868000, 138412032) = 0 [pid 7186] munmap(0x7fef8c868000, 138412032) = 0 [pid 7187] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7187] ioctl(4, LOOP_SET_FD, 3 [pid 7178] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7186] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7178] <... futex resumed>) = 1 [pid 7186] <... openat resumed>) = 4 [pid 7178] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7186] ioctl(4, LOOP_SET_FD, 3 [pid 7187] <... ioctl resumed>) = 0 [pid 7186] <... ioctl resumed>) = 0 [pid 7175] <... futex resumed>) = 0 [pid 7175] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7186] close(3 [pid 7175] <... futex resumed>) = 1 [pid 7187] close(3 [pid 7186] <... close resumed>) = 0 [pid 7175] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7187] <... close resumed>) = 0 [pid 7186] close(4 [pid 7187] close(4 [pid 7186] <... close resumed>) = 0 [pid 7178] <... futex resumed>) = 0 [pid 7187] <... close resumed>) = 0 [pid 7186] mkdir("./file1", 0777 [pid 7178] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7187] mkdir("./file1", 0777 [pid 7186] <... mkdir resumed>) = 0 [pid 7178] <... openat resumed>) = 4 [pid 5612] <... umount2 resumed>) = 0 [pid 5612] umount2("./62/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7187] <... mkdir resumed>) = 0 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7178] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [ 156.241889][ T13] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 540 with max blocks 4 with error 28 [ 156.241910][ T13] EXT4-fs (loop3): This should not happen!! Data will be lost [ 156.241910][ T13] [ 156.242925][ T5612] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 5612] newfstatat(AT_FDCWD, "./62/file1" [pid 7187] mount("/dev/loop4", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7186] mount("/dev/loop1", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7178] <... futex resumed>) = 1 [pid 7175] <... futex resumed>) = 0 [pid 7178] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7175] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7178] <... openat resumed>) = 5 [pid 7175] <... futex resumed>) = 0 [pid 5612] umount2("./62/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7178] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7175] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7183] <... mount resumed>) = 0 [pid 7178] <... futex resumed>) = 0 [pid 7175] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7183] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7178] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7175] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] openat(AT_FDCWD, "./62/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7183] <... openat resumed>) = 3 [pid 7178] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7175] <... futex resumed>) = 0 [pid 5612] <... openat resumed>) = 4 [pid 7183] chdir("./file1" [pid 7178] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7175] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] fstat(4 [pid 7183] <... chdir resumed>) = 0 [pid 7178] <... openat resumed>) = 6 [pid 7183] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7178] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7183] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7178] <... futex resumed>) = 1 [pid 7175] <... futex resumed>) = 0 [pid 5612] getdents64(4 [pid 7183] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7178] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7175] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 7183] <... futex resumed>) = 1 [pid 7179] <... futex resumed>) = 0 [pid 7178] <... mmap resumed>) = 0x200000000000 [pid 7175] <... futex resumed>) = 0 [pid 5612] getdents64(4 [pid 7183] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7179] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7178] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 7183] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7179] <... futex resumed>) = 0 [pid 7178] <... futex resumed>) = 0 [pid 7175] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] close(4 [pid 7187] <... mount resumed>) = 0 [pid 7186] <... mount resumed>) = 0 [pid 7183] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7179] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7178] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7186] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7183] <... openat resumed>) = 4 [pid 7175] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5612] <... close resumed>) = 0 [pid 7187] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7186] <... openat resumed>) = 3 [pid 7175] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] rmdir("./62/file1" [pid 7187] <... openat resumed>) = 3 [pid 7186] chdir("./file1" [pid 7178] <... futex resumed>) = 0 [pid 7175] <... futex resumed>) = 1 [pid 7187] chdir("./file1" [pid 7186] <... chdir resumed>) = 0 [pid 7183] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7178] sendfile(4, 5, NULL, 553647746 [pid 7175] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... rmdir resumed>) = 0 [pid 7187] <... chdir resumed>) = 0 [pid 7186] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7183] <... futex resumed>) = 1 [pid 7187] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7183] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7179] <... futex resumed>) = 0 [pid 5612] umount2("./62/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7183] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7179] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7183] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7179] <... futex resumed>) = 0 [pid 7187] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7186] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7183] <... openat resumed>) = 5 [pid 7179] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] newfstatat(AT_FDCWD, "./62/binderfs" [pid 7187] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7186] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7183] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7179] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5612] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7183] <... futex resumed>) = 0 [pid 7179] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7187] <... futex resumed>) = 1 [pid 7186] <... futex resumed>) = 1 [pid 7183] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7181] <... futex resumed>) = 0 [pid 7180] <... futex resumed>) = 0 [pid 7179] <... futex resumed>) = 0 [pid 5612] unlink("./62/binderfs" [pid 7187] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7186] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7183] <... openat resumed>) = 6 [pid 7181] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7180] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7179] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... unlink resumed>) = 0 [pid 7187] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7186] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7183] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7180] <... futex resumed>) = 0 [pid 7179] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7187] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7186] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7183] <... futex resumed>) = 0 [pid 7181] <... futex resumed>) = 0 [pid 7180] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7179] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] getdents64(3 [pid 7183] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7181] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7179] <... futex resumed>) = 0 [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 7187] <... openat resumed>) = 4 [pid 7186] <... openat resumed>) = 4 [pid 7183] <... mmap resumed>) = 0x200000000000 [pid 7179] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] close(3 [pid 7187] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7186] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7183] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7175] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7187] <... futex resumed>) = 1 [pid 7186] <... futex resumed>) = 1 [pid 7183] <... futex resumed>) = 1 [pid 7181] <... futex resumed>) = 0 [pid 7180] <... futex resumed>) = 0 [pid 7179] <... futex resumed>) = 0 [pid 7175] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... close resumed>) = 0 [pid 7187] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7186] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7183] sendfile(4, 5, NULL, 553647746 [pid 7181] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7180] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7179] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7175] <... futex resumed>) = 0 [pid 5612] rmdir("./62" [pid 7187] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7186] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7179] <... futex resumed>) = 0 [pid 7180] <... futex resumed>) = 0 [pid 7175] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5612] <... rmdir resumed>) = 0 [pid 7181] <... futex resumed>) = 0 [pid 7181] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7180] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7179] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7175] <... mmap resumed>) = 0x7fef94c47000 [pid 7187] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7186] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7175] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 5612] mkdir("./63", 0777 [pid 7187] <... openat resumed>) = 5 [pid 7187] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7186] <... openat resumed>) = 5 [pid 5612] <... mkdir resumed>) = 0 [pid 7187] <... futex resumed>) = 1 [pid 7180] <... futex resumed>) = 0 [pid 7175] <... mprotect resumed>) = 0 [pid 7187] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7186] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7180] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7175] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7187] <... openat resumed>) = 6 [pid 7186] <... futex resumed>) = 1 [pid 7181] <... futex resumed>) = 0 [pid 7180] <... futex resumed>) = 0 [pid 5612] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7181] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7180] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... openat resumed>) = 3 [pid 7187] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7186] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7181] <... futex resumed>) = 0 [pid 7175] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5612] ioctl(3, LOOP_CLR_FD [pid 7187] <... futex resumed>) = 1 [pid 7180] <... futex resumed>) = 0 [pid 7175] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5612] <... ioctl resumed>) = 0 [pid 7187] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7181] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7180] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] close(3ci2-upstream-fs/strace-static-x86_64: Process 7194 attached [pid 7187] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7180] <... futex resumed>) = 0 [pid 7187] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7180] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7175] <... clone3 resumed> => {parent_tid=[7194]}, 88) = 7194 [pid 7194] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7187] <... mmap resumed>) = 0x200000000000 [pid 7186] <... openat resumed>) = 6 [pid 7179] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5612] <... close resumed>) = 0 [pid 7194] <... rseq resumed>) = 0 [pid 7187] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7186] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7179] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7194] set_robust_list(0x7fef94c679a0, 24 [pid 7187] <... futex resumed>) = 1 [pid 7186] <... futex resumed>) = 1 [pid 7181] <... futex resumed>) = 0 [pid 7180] <... futex resumed>) = 0 [pid 7179] <... futex resumed>) = 0 [pid 7175] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7194] <... set_robust_list resumed>) = 0 [pid 7194] rt_sigprocmask(SIG_SETMASK, [] [pid 7187] sendfile(4, 5, NULL, 553647746 [pid 7186] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7181] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7180] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7179] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7175] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5612] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7194] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7186] <... mmap resumed>) = 0x200000000000 [pid 7181] <... futex resumed>) = 0 [pid 7180] <... futex resumed>) = 0 [pid 7179] <... mmap resumed>) = 0x7fef94c47000 [pid 7175] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7181] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7180] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7179] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 7175] <... futex resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 7195 attached [pid 7186] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7181] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7186] <... futex resumed>) = 0 [pid 7181] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7179] <... mprotect resumed>) = 0 [pid 7175] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7195] set_robust_list(0x5555748a66e0, 24 [pid 7186] sendfile(4, 5, NULL, 553647746 [pid 7181] <... futex resumed>) = 0 [pid 7179] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5612] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7195 [pid 7181] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7179] <... rt_sigprocmask resumed>, [], 8) = 0 [ 156.558569][ T7194] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 156.558698][ T7194] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 296 with error 28 [ 156.558711][ T7194] EXT4-fs (loop2): This should not happen!! Data will be lost [ 156.558711][ T7194] [ 156.558719][ T7194] EXT4-fs (loop2): Total free blocks count 0 [ 156.558726][ T7194] EXT4-fs (loop2): Free/Dirty block details [pid 7179] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5612] rt_sigprocmask(SIG_SETMASK, [] [pid 7195] <... set_robust_list resumed>) = 0 [pid 7194] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- ci2-upstream-fs/strace-static-x86_64: Process 7196 attached [pid 7195] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5612] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7195] chdir("./63" [pid 7179] <... clone3 resumed> => {parent_tid=[7196]}, 88) = 7196 [pid 7178] <... sendfile resumed>) = 307200 [pid 7196] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7195] <... chdir resumed>) = 0 [pid 7175] <... futex resumed>) = ? [pid 7196] <... rseq resumed>) = 0 [pid 7195] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7179] rt_sigprocmask(SIG_SETMASK, [] [pid 7178] +++ killed by SIGBUS +++ [pid 7196] set_robust_list(0x7fef94c679a0, 24 [pid 7195] <... prctl resumed>) = 0 [pid 7194] +++ killed by SIGBUS +++ [pid 7180] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7179] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7196] <... set_robust_list resumed>) = 0 [pid 7195] setpgid(0, 0 [pid 7180] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7179] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7196] rt_sigprocmask(SIG_SETMASK, [] [pid 7195] <... setpgid resumed>) = 0 [pid 7180] <... futex resumed>) = 0 [pid 7181] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7196] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7195] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7180] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7179] <... futex resumed>) = 0 [pid 7195] <... openat resumed>) = 3 [ 156.558733][ T7194] EXT4-fs (loop2): free_blocks=20480 [ 156.558741][ T7194] EXT4-fs (loop2): dirty_blocks=304 [ 156.558748][ T7194] EXT4-fs (loop2): Block reservation details [ 156.558753][ T7194] EXT4-fs (loop2): i_reserved_data_blocks=19 [pid 7181] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7180] <... mmap resumed>) = 0x7fef94c47000 [pid 7179] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7175] +++ killed by SIGBUS +++ [pid 7195] write(3, "1000", 4 [pid 7181] <... futex resumed>) = 0 [pid 7181] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5611] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7175, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 7181] <... mmap resumed>) = 0x7fef94c47000 [pid 7195] <... write resumed>) = 4 [pid 7180] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 7195] close(3 [pid 7181] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 7180] <... mprotect resumed>) = 0 [pid 5611] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 7195] <... close resumed>) = 0 [pid 7181] <... mprotect resumed>) = 0 [pid 7180] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5611] <... restart_syscall resumed>) = 0 [pid 7195] symlink("/dev/binderfs", "./binderfs" [pid 7180] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7195] <... symlink resumed>) = 0 [ 156.655924][ T7196] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 156.656117][ T7196] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 316 with error 28 [ 156.656139][ T7196] EXT4-fs (loop0): This should not happen!! Data will be lost [ 156.656139][ T7196] [ 156.656153][ T7196] EXT4-fs (loop0): Total free blocks count 0 [ 156.656165][ T7196] EXT4-fs (loop0): Free/Dirty block details [pid 7180] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 7197 attached [pid 7181] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5611] umount2("./62", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7197] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7195] write(1, "executing program\n", 18 [pid 7181] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7180] <... clone3 resumed> => {parent_tid=[7197]}, 88) = 7197 [pid 7196] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7195] <... write resumed>) = 18 [pid 7181] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 7179] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5611] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORYci2-upstream-fs/strace-static-x86_64: Process 7198 attached [pid 7197] <... rseq resumed>) = 0 executing program [pid 7195] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7180] rt_sigprocmask(SIG_SETMASK, [] [pid 7195] <... futex resumed>) = 0 [pid 7183] <... sendfile resumed>) = ? [pid 7181] <... clone3 resumed> => {parent_tid=[7198]}, 88) = 7198 [pid 5611] <... openat resumed>) = 3 [pid 7198] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7197] set_robust_list(0x7fef94c679a0, 24 [pid 7196] +++ killed by SIGBUS +++ [pid 7195] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 7183] +++ killed by SIGBUS +++ [pid 7181] rt_sigprocmask(SIG_SETMASK, [] [pid 7180] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5611] fstat(3 [pid 7198] <... rseq resumed>) = 0 [pid 7197] <... set_robust_list resumed>) = 0 [pid 7181] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7180] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7198] set_robust_list(0x7fef94c679a0, 24 [pid 7195] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7198] <... set_robust_list resumed>) = 0 [pid 7197] rt_sigprocmask(SIG_SETMASK, [] [pid 7195] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 7181] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7180] <... futex resumed>) = 0 [pid 5611] getdents64(3 [pid 7198] rt_sigprocmask(SIG_SETMASK, [] [pid 7197] <... rt_sigprocmask resumed>, NULL, 8) = 0 [ 156.656178][ T7196] EXT4-fs (loop0): free_blocks=20480 [ 156.656190][ T7196] EXT4-fs (loop0): dirty_blocks=320 [ 156.656202][ T7196] EXT4-fs (loop0): Block reservation details [ 156.656213][ T7196] EXT4-fs (loop0): i_reserved_data_blocks=20 [ 156.769093][ T7197] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 156.773248][ T7197] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 340 with error 28 [ 156.773279][ T7197] EXT4-fs (loop4): This should not happen!! Data will be lost [ 156.773279][ T7197] [ 156.773292][ T7197] EXT4-fs (loop4): Total free blocks count 0 [ 156.773304][ T7197] EXT4-fs (loop4): Free/Dirty block details [pid 7195] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7181] <... futex resumed>) = 0 [ 156.773316][ T7197] EXT4-fs (loop4): free_blocks=20480 [ 156.773328][ T7197] EXT4-fs (loop4): dirty_blocks=352 [ 156.773339][ T7197] EXT4-fs (loop4): Block reservation details [ 156.773350][ T7197] EXT4-fs (loop4): i_reserved_data_blocks=22 [ 156.842249][ T7198] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 156.843125][ T7198] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 476 with error 28 [pid 7180] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7179] +++ killed by SIGBUS +++ [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 7198] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7197] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7195] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7187] <... sendfile resumed>) = 348160 [pid 7181] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7195] <... mmap resumed>) = 0x7fef94c68000 [pid 5611] umount2("./62/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7179, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 7195] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 7187] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7195] <... mprotect resumed>) = 0 [pid 7187] <... futex resumed>) = 0 [pid 7195] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7180] <... futex resumed>) = ? [pid 7197] +++ killed by SIGBUS +++ [pid 7195] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7187] +++ killed by SIGBUS +++ [pid 5609] umount2("./62", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7195] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ci2-upstream-fs/strace-static-x86_64: Process 7199 attached [pid 7180] +++ killed by SIGBUS +++ [pid 5609] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 7195] <... clone3 resumed> => {parent_tid=[7199]}, 88) = 7199 [pid 7199] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7195] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] fstat(3 [pid 7195] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7180, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7199] <... rseq resumed>) = 0 [pid 7195] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7199] set_robust_list(0x7fef94c889a0, 24 [pid 7195] <... futex resumed>) = 0 [pid 5614] umount2("./61", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] getdents64(3 [pid 7199] <... set_robust_list resumed>) = 0 [pid 7195] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7199] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 7199] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5609] umount2("./62/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7199] memfd_create("syzkaller", 0 [pid 5614] <... openat resumed>) = 3 [pid 7199] <... memfd_create resumed>) = 3 [pid 5614] fstat(3 [pid 7199] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7199] <... mmap resumed>) = 0x7fef8c868000 [pid 5614] getdents64(3, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5614] umount2("./61/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7198] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7181] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7186] <... sendfile resumed>) = 487424 [pid 7186] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7186] +++ killed by SIGBUS +++ [pid 7199] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7198] +++ killed by SIGBUS +++ [pid 7181] +++ killed by SIGBUS +++ [pid 5610] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7181, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4 /* 0.04 s */} --- [ 156.843152][ T7198] EXT4-fs (loop1): This should not happen!! Data will be lost [ 156.843152][ T7198] [ 156.843165][ T7198] EXT4-fs (loop1): Total free blocks count 0 [ 156.843177][ T7198] EXT4-fs (loop1): Free/Dirty block details [ 156.843189][ T7198] EXT4-fs (loop1): free_blocks=20480 [ 156.843210][ T7198] EXT4-fs (loop1): dirty_blocks=480 [ 156.843221][ T7198] EXT4-fs (loop1): Block reservation details [ 156.843232][ T7198] EXT4-fs (loop1): i_reserved_data_blocks=30 [pid 5610] umount2("./61", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5610] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7199] <... write resumed>) = 524288 [pid 7199] munmap(0x7fef8c868000, 138412032 [pid 5610] <... openat resumed>) = 3 [pid 7199] <... munmap resumed>) = 0 [pid 5610] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5610] getdents64(3 [pid 7199] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7199] ioctl(4, LOOP_SET_FD, 3 [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5610] umount2("./61/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7199] <... ioctl resumed>) = 0 [ 156.922922][ T3414] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 296 with max blocks 4 with error 28 [ 156.922951][ T3414] EXT4-fs (loop2): This should not happen!! Data will be lost [ 156.922951][ T3414] [ 156.928786][ T5611] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 156.932982][ T5614] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 7199] close(3) = 0 [pid 7199] close(4) = 0 [pid 7199] mkdir("./file1", 0777) = 0 [ 156.934412][ T5609] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 156.975932][ T7199] set_capacity_and_notify: 15 callbacks suppressed [ 156.975950][ T7199] loop3: detected capacity change from 0 to 1024 [pid 7199] mount("/dev/loop3", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5614] <... umount2 resumed>) = 0 [pid 5614] umount2("./61/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./61/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] umount2("./61/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./61/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5614] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5614] getdents64(4, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5614] getdents64(4, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5614] close(4) = 0 [pid 5614] rmdir("./61/file1" [pid 5611] <... umount2 resumed>) = 0 [pid 5614] <... rmdir resumed>) = 0 [pid 5611] umount2("./62/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5611] newfstatat(AT_FDCWD, "./62/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] umount2("./62/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5614] umount2("./61/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] openat(AT_FDCWD, "./62/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5609] <... umount2 resumed>) = 0 [pid 5614] newfstatat(AT_FDCWD, "./61/binderfs" [pid 5609] umount2("./62/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5614] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] <... openat resumed>) = 4 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5614] unlink("./61/binderfs" [pid 5611] fstat(4 [pid 5609] newfstatat(AT_FDCWD, "./62/file1" [pid 5614] <... unlink resumed>) = 0 [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] getdents64(3 [pid 5611] getdents64(4 [pid 5609] umount2("./62/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7199] <... mount resumed>) = 0 [pid 5614] close(3 [pid 5611] getdents64(4 [pid 5609] openat(AT_FDCWD, "./62/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5609] <... openat resumed>) = 4 [pid 5611] close(4) = 0 [pid 5609] fstat(4 [pid 5614] <... close resumed>) = 0 [pid 5611] rmdir("./62/file1" [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5611] <... rmdir resumed>) = 0 [pid 7199] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5614] rmdir("./61" [pid 5609] getdents64(4 [pid 7199] <... openat resumed>) = 3 [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 7199] chdir("./file1" [pid 5614] <... rmdir resumed>) = 0 [pid 5609] getdents64(4 [pid 7199] <... chdir resumed>) = 0 [pid 7199] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5611] umount2("./62/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] close(4 [pid 7199] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5611] newfstatat(AT_FDCWD, "./62/binderfs" [pid 5609] <... close resumed>) = 0 [pid 5614] mkdir("./62", 0777 [pid 5611] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] rmdir("./62/file1" [pid 7199] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... mkdir resumed>) = 0 [pid 5611] unlink("./62/binderfs" [pid 5610] <... umount2 resumed>) = 0 [ 157.064633][ T5610] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 5609] <... rmdir resumed>) = 0 [pid 7199] <... futex resumed>) = 1 [pid 7195] <... futex resumed>) = 0 [pid 5611] <... unlink resumed>) = 0 [pid 5610] umount2("./61/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7199] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7195] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7199] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7195] <... futex resumed>) = 0 [pid 5611] getdents64(3 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5614] <... openat resumed>) = 3 [pid 5609] umount2("./62/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7199] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7195] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5614] ioctl(3, LOOP_CLR_FD [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5610] newfstatat(AT_FDCWD, "./61/file1" [pid 5614] <... ioctl resumed>) = 0 [pid 5611] close(3 [pid 5609] newfstatat(AT_FDCWD, "./62/binderfs" [pid 5614] close(3 [pid 5611] <... close resumed>) = 0 [pid 5610] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7199] <... openat resumed>) = 4 [pid 5609] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7199] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7195] <... futex resumed>) = 0 [pid 7199] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5614] <... close resumed>) = 0 [pid 5611] rmdir("./62" [pid 5610] umount2("./61/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] unlink("./62/binderfs" [pid 7195] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] <... unlink resumed>) = 0 [pid 7195] <... futex resumed>) = 1 [pid 5614] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7195] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] openat(AT_FDCWD, "./61/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5609] getdents64(3ci2-upstream-fs/strace-static-x86_64: Process 7202 attached [pid 5611] <... rmdir resumed>) = 0 [pid 5610] <... openat resumed>) = 4 [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 7199] <... futex resumed>) = 0 [pid 5610] fstat(4 [pid 5609] close(3 [pid 7202] set_robust_list(0x5555748a66e0, 24 [pid 7199] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] <... close resumed>) = 0 [pid 7202] <... set_robust_list resumed>) = 0 [pid 7199] <... openat resumed>) = 5 [pid 5614] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7202 [pid 5611] mkdir("./63", 0777 [pid 5610] getdents64(4 [pid 7202] rt_sigprocmask(SIG_SETMASK, [] [pid 7199] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5609] rmdir("./62" [pid 7202] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7199] <... futex resumed>) = 1 [pid 7195] <... futex resumed>) = 0 [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5611] <... mkdir resumed>) = 0 [pid 5610] getdents64(4 [pid 5609] <... rmdir resumed>) = 0 [pid 7202] chdir("./62" [pid 7195] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 7202] <... chdir resumed>) = 0 [pid 7199] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7195] <... futex resumed>) = 0 [pid 5611] <... openat resumed>) = 3 [pid 5610] close(4 [pid 5609] mkdir("./63", 0777 [pid 7202] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7199] <... openat resumed>) = 6 [pid 7195] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7202] <... prctl resumed>) = 0 [pid 7199] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... close resumed>) = 0 [pid 5609] <... mkdir resumed>) = 0 [pid 7202] setpgid(0, 0 [pid 7199] <... futex resumed>) = 1 [pid 7195] <... futex resumed>) = 0 [pid 5610] rmdir("./61/file1" [pid 7202] <... setpgid resumed>) = 0 [pid 7199] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7202] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7195] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... rmdir resumed>) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7202] <... openat resumed>) = 3 [pid 7202] write(3, "1000", 4 [pid 7199] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7195] <... futex resumed>) = 0 [pid 5610] umount2("./61/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... openat resumed>) = 3 [pid 7202] <... write resumed>) = 4 [pid 7199] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7195] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] ioctl(3, LOOP_CLR_FD [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7202] close(3 [pid 7199] <... mmap resumed>) = 0x200000000000 [pid 5611] <... ioctl resumed>) = 0 [pid 5610] newfstatat(AT_FDCWD, "./61/binderfs" [pid 5609] ioctl(3, LOOP_CLR_FD [pid 7202] <... close resumed>) = 0 [pid 7202] symlink("/dev/binderfs", "./binderfs" [pid 5611] close(3 [pid 5610] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] <... ioctl resumed>) = 0 [pid 7202] <... symlink resumed>) = 0 [pid 5610] unlink("./61/binderfs" [pid 5609] close(3 [pid 7202] write(1, "executing program\n", 18 executing program [pid 7199] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... unlink resumed>) = 0 [pid 7202] <... write resumed>) = 18 [ 157.142787][ T37] kauditd_printk_skb: 15 callbacks suppressed [ 157.142805][ T37] audit: type=1800 audit(1785844687.544:315): pid=7199 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop3" ino=15 res=0 errno=0 [pid 7199] <... futex resumed>) = 1 [pid 7195] <... futex resumed>) = 0 [pid 5610] getdents64(3 [pid 7202] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7199] sendfile(4, 5, NULL, 553647746 [pid 7195] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... close resumed>) = 0 [pid 7202] <... futex resumed>) = 0 [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 7195] <... futex resumed>) = 0 [pid 5611] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5609] <... close resumed>) = 0 [pid 7202] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 7195] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] close(3 [pid 7202] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 5611] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7202] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 5610] <... close resumed>) = 0 [pid 5611] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7202] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] rmdir("./61" [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[]ci2-upstream-fs/strace-static-x86_64: Process 7203 attached [pid 7202] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5610] <... rmdir resumed>) = 0 [pid 5609] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7203] set_robust_list(0x5555748a66e0, 24 [pid 7202] <... mmap resumed>) = 0x7fef94c68000 [pid 7203] <... set_robust_list resumed>) = 0 [pid 7202] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 5610] mkdir("./62", 0777 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 7204 attached [pid 7203] rt_sigprocmask(SIG_SETMASK, [] [pid 7202] <... mprotect resumed>) = 0 [pid 5610] <... mkdir resumed>) = 0 [pid 7203] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7202] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7204] set_robust_list(0x5555748a66e0, 24 [pid 7203] chdir("./63" [pid 5611] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7203 [pid 7204] <... set_robust_list resumed>) = 0 [pid 7203] <... chdir resumed>) = 0 [pid 7202] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5610] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5609] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7204 [pid 7204] rt_sigprocmask(SIG_SETMASK, [] [pid 7203] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7202] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 5611] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] <... openat resumed>) = 3 ci2-upstream-fs/strace-static-x86_64: Process 7205 attached [pid 7204] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7203] <... prctl resumed>) = 0 [pid 5611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] ioctl(3, LOOP_CLR_FD [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 7204] chdir("./63" [pid 7203] setpgid(0, 0 [pid 7205] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7204] <... chdir resumed>) = 0 [pid 7203] <... setpgid resumed>) = 0 [pid 5610] <... ioctl resumed>) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7205] <... rseq resumed>) = 0 [pid 7204] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7203] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7202] <... clone3 resumed> => {parent_tid=[7205]}, 88) = 7205 [pid 7205] set_robust_list(0x7fef94c889a0, 24 [pid 7204] <... prctl resumed>) = 0 [pid 7202] rt_sigprocmask(SIG_SETMASK, [] [pid 7205] <... set_robust_list resumed>) = 0 [pid 7204] setpgid(0, 0 [pid 7203] <... openat resumed>) = 3 [pid 5610] close(3 [pid 7205] rt_sigprocmask(SIG_SETMASK, [] [pid 7204] <... setpgid resumed>) = 0 [pid 7203] write(3, "1000", 4 [pid 7202] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7205] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7204] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7205] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7203] <... write resumed>) = 4 [pid 7202] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7205] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7204] <... openat resumed>) = 3 [pid 7203] close(3 [pid 7195] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7205] memfd_create("syzkaller", 0 [pid 7204] write(3, "1000", 4 [pid 7203] <... close resumed>) = 0 [pid 7202] <... futex resumed>) = 0 [pid 7195] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7205] <... memfd_create resumed>) = 3 [pid 7204] <... write resumed>) = 4 [pid 7203] symlink("/dev/binderfs", "./binderfs" [pid 7202] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7195] <... futex resumed>) = 0 [pid 5610] <... close resumed>) = 0 [pid 7205] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7204] close(3 [pid 7203] <... symlink resumed>) = 0 [pid 7195] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7205] <... mmap resumed>) = 0x7fef8c868000 [pid 7204] <... close resumed>) = 0 [pid 7195] <... mmap resumed>) = 0x7fef94c47000 [pid 7204] symlink("/dev/binderfs", "./binderfs" [pid 7203] write(1, "executing program\n", 18 executing program [pid 7195] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 7204] <... symlink resumed>) = 0 [pid 7203] <... write resumed>) = 18 [pid 7195] <... mprotect resumed>) = 0 [pid 5610] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7195] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5610] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7205] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7204] write(1, "executing program\n", 18 [pid 7203] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7195] <... rt_sigprocmask resumed>, [], 8) = 0 executing program [pid 5610] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7204] <... write resumed>) = 18 [pid 7203] <... futex resumed>) = 0 [pid 7195] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 7207 attached ci2-upstream-fs/strace-static-x86_64: Process 7206 attached [pid 7204] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7203] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 7207] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7206] set_robust_list(0x5555748a66e0, 24 [pid 7204] <... futex resumed>) = 0 [pid 7203] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 7195] <... clone3 resumed> => {parent_tid=[7207]}, 88) = 7207 [pid 7207] <... rseq resumed>) = 0 [pid 7206] <... set_robust_list resumed>) = 0 [pid 7204] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 7203] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 7195] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7206 [pid 7207] set_robust_list(0x7fef94c679a0, 24 [pid 7206] rt_sigprocmask(SIG_SETMASK, [] [pid 7204] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 7203] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7195] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7207] <... set_robust_list resumed>) = 0 [pid 5610] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7195] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7206] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7205] <... write resumed>) = 524288 [pid 7204] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 7203] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7207] rt_sigprocmask(SIG_SETMASK, [] [pid 7206] chdir("./62" [pid 7205] munmap(0x7fef8c868000, 138412032 [pid 7204] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7203] <... mmap resumed>) = 0x7fef94c68000 [pid 7195] <... futex resumed>) = 0 [pid 7207] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7205] <... munmap resumed>) = 0 [pid 7204] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7195] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7203] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7206] <... chdir resumed>) = 0 [pid 7204] <... mmap resumed>) = 0x7fef94c68000 [pid 7203] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7204] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 7206] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7203] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7204] <... mprotect resumed>) = 0 [pid 7206] <... prctl resumed>) = 0 [pid 7205] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7203] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0}ci2-upstream-fs/strace-static-x86_64: Process 7208 attached [pid 7206] setpgid(0, 0 [pid 7205] <... openat resumed>) = 4 [pid 7204] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7208] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 7208] set_robust_list(0x7fef94c889a0, 24) = 0 [pid 7208] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 157.351096][ T7207] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 157.367575][ T7207] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 384 with error 28 [ 157.367606][ T7207] EXT4-fs (loop3): This should not happen!! Data will be lost [ 157.367606][ T7207] [ 157.367618][ T7207] EXT4-fs (loop3): Total free blocks count 0 [pid 7208] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7206] <... setpgid resumed>) = 0 [pid 7206] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7205] ioctl(4, LOOP_SET_FD, 3 [pid 7204] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7203] <... clone3 resumed> => {parent_tid=[7208]}, 88) = 7208 [pid 7205] <... ioctl resumed>) = 0 [pid 7204] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 7203] rt_sigprocmask(SIG_SETMASK, [] [pid 7206] write(3, "1000", 4 [pid 7205] close(3 [pid 7203] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7206] <... write resumed>) = 4 [pid 7205] <... close resumed>) = 0 [pid 7203] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7195] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7208] <... futex resumed>) = 0 [pid 7206] close(3 [pid 7205] close(4 [pid 7203] <... futex resumed>) = 1 [pid 7208] memfd_create("syzkaller", 0 [pid 7206] <... close resumed>) = 0 [pid 7205] <... close resumed>) = 0 [pid 7203] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7206] symlink("/dev/binderfs", "./binderfs" [pid 7208] <... memfd_create resumed>) = 3 [pid 7206] <... symlink resumed>) = 0 [pid 7205] mkdir("./file1", 0777 [pid 7208] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7206] write(1, "executing program\n", 18 [pid 7205] <... mkdir resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 7209 attached [pid 7208] <... mmap resumed>) = 0x7fef8c868000 [pid 7206] <... write resumed>) = 18 executing program [pid 7205] mount("/dev/loop4", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7207] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7206] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7209] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7206] <... futex resumed>) = 0 [pid 7199] <... sendfile resumed>) = ? [pid 7209] <... rseq resumed>) = 0 [pid 7206] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 7199] +++ killed by SIGBUS +++ [pid 7208] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7209] set_robust_list(0x7fef94c889a0, 24 [pid 7206] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 7204] <... clone3 resumed> => {parent_tid=[7209]}, 88) = 7209 [pid 7209] <... set_robust_list resumed>) = 0 [pid 7206] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 7209] rt_sigprocmask(SIG_SETMASK, [] [pid 7206] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7204] rt_sigprocmask(SIG_SETMASK, [] [pid 7209] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7207] +++ killed by SIGBUS +++ [pid 7206] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7204] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7195] +++ killed by SIGBUS +++ [pid 7209] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7206] <... mmap resumed>) = 0x7fef94c68000 [pid 7204] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7195, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 7209] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 157.367638][ T7207] EXT4-fs (loop3): Free/Dirty block details [ 157.367840][ T7207] EXT4-fs (loop3): free_blocks=20480 [ 157.367855][ T7207] EXT4-fs (loop3): dirty_blocks=400 [ 157.367865][ T7207] EXT4-fs (loop3): Block reservation details [ 157.367876][ T7207] EXT4-fs (loop3): i_reserved_data_blocks=25 [ 157.396304][ T7205] loop4: detected capacity change from 0 to 1024 [pid 7206] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 7204] <... futex resumed>) = 0 [pid 7206] <... mprotect resumed>) = 0 [pid 7204] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7208] <... write resumed>) = 524288 [pid 7209] memfd_create("syzkaller", 0) = 3 [pid 7209] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7206] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7209] <... mmap resumed>) = 0x7fef8c868000 [pid 7206] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7206] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0}ci2-upstream-fs/strace-static-x86_64: Process 7210 attached [pid 7210] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7208] munmap(0x7fef8c868000, 138412032 [pid 7206] <... clone3 resumed> => {parent_tid=[7210]}, 88) = 7210 [pid 7210] <... rseq resumed>) = 0 [pid 7208] <... munmap resumed>) = 0 [pid 7206] rt_sigprocmask(SIG_SETMASK, [] [pid 7210] set_robust_list(0x7fef94c889a0, 24 [pid 7209] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7206] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7210] <... set_robust_list resumed>) = 0 [pid 7208] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7210] rt_sigprocmask(SIG_SETMASK, [] [pid 7206] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7210] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7208] <... openat resumed>) = 4 [pid 7206] <... futex resumed>) = 0 [pid 7210] memfd_create("syzkaller", 0 [pid 7208] ioctl(4, LOOP_SET_FD, 3 [pid 7206] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5612] umount2("./63", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7210] <... memfd_create resumed>) = 3 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7210] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7209] <... write resumed>) = 524288 [pid 7210] <... mmap resumed>) = 0x7fef8c868000 [pid 7208] <... ioctl resumed>) = 0 [pid 7205] <... mount resumed>) = 0 [pid 5612] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 7209] munmap(0x7fef8c868000, 138412032 [pid 7205] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7209] <... munmap resumed>) = 0 [pid 7205] <... openat resumed>) = 3 [pid 7205] chdir("./file1") = 0 [pid 7205] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7209] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7205] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7209] <... openat resumed>) = 4 [pid 7209] ioctl(4, LOOP_SET_FD, 3 [pid 7205] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7208] close(3 [pid 7209] <... ioctl resumed>) = 0 [pid 7208] <... close resumed>) = 0 [pid 7205] <... futex resumed>) = 1 [pid 7202] <... futex resumed>) = 0 [pid 7208] close(4 [pid 5612] fstat(3 [pid 7208] <... close resumed>) = 0 [pid 7208] mkdir("./file1", 0777 [pid 7205] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7202] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7208] <... mkdir resumed>) = 0 [pid 7202] <... futex resumed>) = 0 [pid 7202] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7209] close(3 [pid 7205] <... openat resumed>) = 4 [pid 5612] getdents64(3 [pid 7205] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7209] <... close resumed>) = 0 [pid 7208] mount("/dev/loop2", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 7209] close(4) = 0 [pid 7205] <... futex resumed>) = 1 [pid 7202] <... futex resumed>) = 0 [pid 5612] umount2("./63/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7210] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7209] mkdir("./file1", 0777 [pid 7205] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7202] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7209] <... mkdir resumed>) = 0 [pid 7205] <... openat resumed>) = 5 [pid 7202] <... futex resumed>) = 0 [pid 7205] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7202] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7210] <... write resumed>) = 524288 [pid 7209] mount("/dev/loop0", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7205] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7210] munmap(0x7fef8c868000, 138412032 [pid 7208] <... mount resumed>) = 0 [pid 7202] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7202] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7205] <... futex resumed>) = 0 [pid 7202] <... futex resumed>) = 1 [pid 7210] <... munmap resumed>) = 0 [pid 7205] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7202] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7210] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7208] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7210] <... openat resumed>) = 4 [pid 7208] <... openat resumed>) = 3 [pid 7210] ioctl(4, LOOP_SET_FD, 3 [pid 7208] chdir("./file1") = 0 [pid 7210] <... ioctl resumed>) = 0 [ 157.535344][ T7208] loop2: detected capacity change from 0 to 1024 [ 157.549360][ T7209] loop0: detected capacity change from 0 to 1024 [ 157.558113][ T37] audit: type=1800 audit(1785844687.954:316): pid=7205 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop4" ino=15 res=0 errno=0 [pid 7208] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7205] <... openat resumed>) = 6 [pid 7205] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7210] close(3 [pid 7205] <... futex resumed>) = 1 [pid 7202] <... futex resumed>) = 0 [pid 7210] <... close resumed>) = 0 [pid 7208] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7205] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7202] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7210] close(4 [pid 7208] <... futex resumed>) = 1 [pid 7203] <... futex resumed>) = 0 [pid 7202] <... futex resumed>) = 0 [pid 7202] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7208] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7205] <... mmap resumed>) = 0x200000000000 [ 157.609359][ T7210] loop1: detected capacity change from 0 to 1024 [ 157.633535][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 384 with max blocks 4 with error 28 [pid 7203] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7209] <... mount resumed>) = 0 [pid 7205] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7203] <... futex resumed>) = 0 [pid 7203] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7205] <... futex resumed>) = 1 [pid 7202] <... futex resumed>) = 0 [pid 7209] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7208] <... openat resumed>) = 4 [pid 7205] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7202] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7209] <... openat resumed>) = 3 [pid 7205] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7202] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7209] chdir("./file1" [pid 7208] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7205] sendfile(4, 5, NULL, 553647746 [pid 7210] <... close resumed>) = 0 [pid 7208] <... futex resumed>) = 1 [pid 7208] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7210] mkdir("./file1", 0777 [pid 7203] <... futex resumed>) = 0 [pid 7210] <... mkdir resumed>) = 0 [pid 7209] <... chdir resumed>) = 0 [pid 7203] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7209] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7208] <... futex resumed>) = 0 [pid 7203] <... futex resumed>) = 1 [pid 7210] mount("/dev/loop1", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7203] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7209] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7208] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC) = 5 [pid 7209] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7204] <... futex resumed>) = 0 [pid 7209] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7208] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7204] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7209] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7208] <... futex resumed>) = 1 [pid 7203] <... futex resumed>) = 0 [ 157.633567][ T12] EXT4-fs (loop3): This should not happen!! Data will be lost [ 157.633567][ T12] [ 157.639590][ T5612] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 157.680132][ T37] audit: type=1800 audit(1785844688.074:317): pid=7208 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop2" ino=15 res=0 errno=0 [pid 7204] <... futex resumed>) = 0 [pid 7203] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7204] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7203] <... futex resumed>) = 0 [pid 7203] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7209] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7208] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000) = 6 [pid 7208] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7203] <... futex resumed>) = 0 [pid 7202] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7208] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7203] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7202] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7208] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7203] <... futex resumed>) = 0 [pid 7202] <... futex resumed>) = 0 [pid 7208] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7203] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7208] <... mmap resumed>) = 0x200000000000 [pid 7202] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7208] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7202] <... mmap resumed>) = 0x7fef94c47000 [pid 7209] <... openat resumed>) = 4 [pid 7210] <... mount resumed>) = 0 [pid 7208] <... futex resumed>) = 1 [pid 7202] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 5612] <... umount2 resumed>) = 0 [pid 7203] <... futex resumed>) = 0 [pid 7203] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7203] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7208] sendfile(4, 5, NULL, 553647746 [pid 7202] <... mprotect resumed>) = 0 [pid 7209] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] umount2("./63/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7210] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7209] <... futex resumed>) = 1 [pid 7204] <... futex resumed>) = 0 [pid 7202] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5612] newfstatat(AT_FDCWD, "./63/file1" [pid 7210] <... openat resumed>) = 3 [pid 7209] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7204] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7202] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7209] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7204] <... futex resumed>) = 0 [pid 7209] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7204] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7210] chdir("./file1" [pid 7202] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 7209] <... openat resumed>) = 5 ci2-upstream-fs/strace-static-x86_64: Process 7219 attached [pid 7210] <... chdir resumed>) = 0 [pid 5612] umount2("./63/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7210] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7209] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7202] <... clone3 resumed> => {parent_tid=[7219]}, 88) = 7219 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7219] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7210] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7209] <... futex resumed>) = 1 [pid 7204] <... futex resumed>) = 0 [pid 7202] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] openat(AT_FDCWD, "./63/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7219] <... rseq resumed>) = 0 [pid 7210] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7209] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7204] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7202] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7219] set_robust_list(0x7fef94c679a0, 24 [pid 7210] <... futex resumed>) = 1 [pid 7209] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7206] <... futex resumed>) = 0 [pid 7204] <... futex resumed>) = 0 [pid 7202] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... openat resumed>) = 4 [pid 7219] <... set_robust_list resumed>) = 0 [pid 7210] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7209] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7206] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7204] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7202] <... futex resumed>) = 0 [ 157.764395][ T37] audit: type=1800 audit(1785844688.154:318): pid=7209 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop0" ino=15 res=0 errno=0 [pid 7202] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7219] rt_sigprocmask(SIG_SETMASK, [] [pid 7210] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7219] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7210] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7209] <... openat resumed>) = 6 [pid 5612] fstat(4 [pid 7206] <... futex resumed>) = 0 [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7206] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7209] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7219] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7210] <... openat resumed>) = 4 [pid 7209] <... futex resumed>) = 1 [pid 7205] <... sendfile resumed>) = 290816 [pid 7204] <... futex resumed>) = 0 [pid 7203] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 157.807908][ T7219] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 157.813712][ T7219] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 280 with error 28 [ 157.813741][ T7219] EXT4-fs (loop4): This should not happen!! Data will be lost [ 157.813741][ T7219] [ 157.813754][ T7219] EXT4-fs (loop4): Total free blocks count 0 [ 157.813764][ T7219] EXT4-fs (loop4): Free/Dirty block details [pid 5612] getdents64(4 [pid 7209] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7204] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7210] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7206] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7203] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 7202] <... futex resumed>) = ? [pid 7210] <... futex resumed>) = 0 [pid 7209] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7206] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7204] <... futex resumed>) = 0 [pid 7203] <... futex resumed>) = 0 [pid 7205] +++ killed by SIGBUS +++ [pid 5612] getdents64(4 [pid 7206] <... futex resumed>) = 0 [pid 7204] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7203] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7209] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7206] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7203] <... mmap resumed>) = 0x7fef94c47000 [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 7203] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 5612] close(4 [pid 7210] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 5612] <... close resumed>) = 0 [pid 7203] <... mprotect resumed>) = 0 [pid 7210] <... openat resumed>) = 5 [pid 7203] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5612] rmdir("./63/file1" [pid 7203] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7210] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7203] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 7210] <... futex resumed>) = 1 [pid 7209] <... mmap resumed>) = 0x200000000000 [pid 7206] <... futex resumed>) = 0 [pid 7210] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULLci2-upstream-fs/strace-static-x86_64: Process 7220 attached [pid 7203] <... clone3 resumed> => {parent_tid=[7220]}, 88) = 7220 [pid 7203] rt_sigprocmask(SIG_SETMASK, [] [pid 7220] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7219] +++ killed by SIGBUS +++ [pid 7209] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7206] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7202] +++ killed by SIGBUS +++ [pid 5612] <... rmdir resumed>) = 0 [pid 7220] <... rseq resumed>) = 0 [pid 7210] <... futex resumed>) = 0 [pid 7209] <... futex resumed>) = 1 [pid 7206] <... futex resumed>) = 1 [pid 7204] <... futex resumed>) = 0 [pid 7203] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7202, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5612] umount2("./63/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7220] set_robust_list(0x7fef94c679a0, 24 [pid 7210] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7209] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7206] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7204] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7203] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7220] <... set_robust_list resumed>) = 0 [pid 7204] <... futex resumed>) = 0 [pid 7220] rt_sigprocmask(SIG_SETMASK, [] [pid 7204] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7220] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7210] <... openat resumed>) = 6 [pid 7209] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7203] <... futex resumed>) = 0 [pid 5612] newfstatat(AT_FDCWD, "./63/binderfs" [pid 7209] sendfile(4, 5, NULL, 553647746 [pid 7203] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7210] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] umount2("./62", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5612] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7210] <... futex resumed>) = 1 [pid 7206] <... futex resumed>) = 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5612] unlink("./63/binderfs" [pid 7210] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7206] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 157.813775][ T7219] EXT4-fs (loop4): free_blocks=20480 [ 157.813788][ T7219] EXT4-fs (loop4): dirty_blocks=288 [ 157.813799][ T7219] EXT4-fs (loop4): Block reservation details [ 157.813809][ T7219] EXT4-fs (loop4): i_reserved_data_blocks=18 [ 157.820534][ T37] audit: type=1800 audit(1785844688.214:319): pid=7210 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop1" ino=15 res=0 errno=0 [pid 7206] <... futex resumed>) = 0 [pid 5614] <... openat resumed>) = 3 [pid 5612] <... unlink resumed>) = 0 [pid 7210] <... mmap resumed>) = 0x200000000000 [pid 7206] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7204] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5614] fstat(3 [ 157.932987][ T7220] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 157.935387][ T7220] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1612 with error 28 [ 157.935420][ T7220] EXT4-fs (loop2): This should not happen!! Data will be lost [ 157.935420][ T7220] [ 157.935434][ T7220] EXT4-fs (loop2): Total free blocks count 0 [ 157.935446][ T7220] EXT4-fs (loop2): Free/Dirty block details [pid 5612] getdents64(3 [pid 7220] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7210] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7208] <... sendfile resumed>) = ? [pid 7204] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7203] <... futex resumed>) = ? [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 7210] <... futex resumed>) = 1 [pid 7206] <... futex resumed>) = 0 [pid 7204] <... futex resumed>) = 0 [pid 5614] getdents64(3 [pid 5612] close(3 [pid 7220] +++ killed by SIGBUS +++ [pid 7208] +++ killed by SIGBUS +++ [pid 7204] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 7204] <... mmap resumed>) = 0x7fef94c47000 [pid 5614] umount2("./62/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7206] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7204] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 7206] <... futex resumed>) = 0 [pid 7206] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7204] <... mprotect resumed>) = 0 [pid 7210] sendfile(4, 5, NULL, 553647746 [pid 7204] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5612] <... close resumed>) = 0 [pid 7204] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7204] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5612] rmdir("./63"ci2-upstream-fs/strace-static-x86_64: Process 7221 attached [pid 7204] <... clone3 resumed> => {parent_tid=[7221]}, 88) = 7221 [pid 7221] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7204] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] <... rmdir resumed>) = 0 [pid 7221] <... rseq resumed>) = 0 [pid 7204] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7203] +++ killed by SIGBUS +++ [pid 7221] set_robust_list(0x7fef94c679a0, 24 [pid 7204] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7221] <... set_robust_list resumed>) = 0 [pid 7204] <... futex resumed>) = 0 [pid 5611] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7203, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 7221] rt_sigprocmask(SIG_SETMASK, [] [pid 5611] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 7221] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7204] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] mkdir("./64", 0777) = 0 [pid 5611] <... restart_syscall resumed>) = 0 [pid 5612] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5611] umount2("./63", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 157.935458][ T7220] EXT4-fs (loop2): free_blocks=20480 [ 157.935471][ T7220] EXT4-fs (loop2): dirty_blocks=1616 [ 157.935481][ T7220] EXT4-fs (loop2): Block reservation details [ 157.935491][ T7220] EXT4-fs (loop2): i_reserved_data_blocks=101 [pid 5611] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5612] ioctl(3, LOOP_CLR_FD [pid 5611] <... openat resumed>) = 3 [ 158.027379][ T7209] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 158.030239][ T7221] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 604 with error 28 [ 158.030271][ T7221] EXT4-fs (loop0): This should not happen!! Data will be lost [ 158.030271][ T7221] [ 158.030286][ T7221] EXT4-fs (loop0): Total free blocks count 0 [ 158.030298][ T7221] EXT4-fs (loop0): Free/Dirty block details [ 158.030310][ T7221] EXT4-fs (loop0): free_blocks=20480 [ 158.030323][ T7221] EXT4-fs (loop0): dirty_blocks=608 [pid 7221] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7209] <... sendfile resumed>) = 618496 [pid 7206] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5612] <... ioctl resumed>) = 0 [pid 7206] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] close(3 [pid 5611] fstat(3 [pid 7206] <... futex resumed>) = 0 [pid 7204] <... futex resumed>) = ? [pid 7221] +++ killed by SIGBUS +++ [pid 7209] +++ killed by SIGBUS +++ [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7206] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c47000 [pid 7206] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 5611] getdents64(3 [pid 7204] +++ killed by SIGBUS +++ [pid 7206] <... mprotect resumed>) = 0 [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 7206] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5611] umount2("./63/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7204, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 7206] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7206] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 7222 attached => {parent_tid=[7222]}, 88) = 7222 [pid 7222] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [ 158.030332][ T7221] EXT4-fs (loop0): Block reservation details [ 158.030342][ T7221] EXT4-fs (loop0): i_reserved_data_blocks=38 [ 158.074706][ T3414] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 280 with max blocks 4 with error 28 [ 158.074741][ T3414] EXT4-fs (loop4): This should not happen!! Data will be lost [ 158.074741][ T3414] [ 158.080735][ T5614] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 7206] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] <... close resumed>) = 0 [pid 7222] set_robust_list(0x7fef94c679a0, 24 [pid 7206] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7222] <... set_robust_list resumed>) = 0 [pid 7206] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] umount2("./63", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7222] rt_sigprocmask(SIG_SETMASK, [] [pid 7206] <... futex resumed>) = 0 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7222] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7206] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5612] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5609] <... openat resumed>) = 3 [pid 5612] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5609] fstat(3 [pid 5612] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] getdents64(3 [pid 5612] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7223 [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5612] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5609] umount2("./63/file1", MNT_FORCE|UMOUNT_NOFOLLOWci2-upstream-fs/strace-static-x86_64: Process 7223 attached [ 158.114633][ T7222] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 158.117355][ T7222] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 500 with error 28 [ 158.117384][ T7222] EXT4-fs (loop1): This should not happen!! Data will be lost [ 158.117384][ T7222] [ 158.117397][ T7222] EXT4-fs (loop1): Total free blocks count 0 [ 158.117409][ T7222] EXT4-fs (loop1): Free/Dirty block details [ 158.117421][ T7222] EXT4-fs (loop1): free_blocks=20480 [pid 5614] <... umount2 resumed>) = 0 [pid 5614] umount2("./62/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7223] set_robust_list(0x5555748a66e0, 24 [pid 5614] newfstatat(AT_FDCWD, "./62/file1" [pid 7223] <... set_robust_list resumed>) = 0 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7223] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] umount2("./62/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7223] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7223] chdir("./64" [pid 5614] openat(AT_FDCWD, "./62/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7223] <... chdir resumed>) = 0 [pid 5614] <... openat resumed>) = 4 [pid 7223] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5614] fstat(4 [pid 7223] <... prctl resumed>) = 0 [pid 7206] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7223] setpgid(0, 0 [pid 5614] getdents64(4 [pid 7223] <... setpgid resumed>) = 0 [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 7223] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5614] getdents64(4 [pid 7223] <... openat resumed>) = 3 [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5614] close(4) = 0 [pid 7223] write(3, "1000", 4 [pid 5614] rmdir("./62/file1" [pid 7223] <... write resumed>) = 4 [pid 5614] <... rmdir resumed>) = 0 [pid 7223] close(3) = 0 [pid 7223] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5614] umount2("./62/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7223] write(1, "executing program\n", 18 [pid 7222] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7210] <... sendfile resumed>) = 516096 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./62/binderfs" [pid 7223] <... write resumed>) = 18 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7223] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] unlink("./62/binderfs" [pid 7223] <... futex resumed>) = 0 [pid 5614] <... unlink resumed>) = 0 [pid 7223] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 7210] +++ killed by SIGBUS +++ [pid 5614] getdents64(3 [pid 7223] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 7223] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 7223] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c68000 [pid 5614] close(3 [pid 7222] +++ killed by SIGBUS +++ [pid 7206] +++ killed by SIGBUS +++ executing program [pid 5614] <... close resumed>) = 0 [pid 7223] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5610] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7206, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7223] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5610] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 7223] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 5614] rmdir("./62" [pid 5610] <... restart_syscall resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 7224 attached [pid 5609] <... umount2 resumed>) = 0 [pid 7224] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7223] <... clone3 resumed> => {parent_tid=[7224]}, 88) = 7224 [pid 5614] <... rmdir resumed>) = 0 [pid 7224] <... rseq resumed>) = 0 [pid 7223] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] umount2("./62", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] umount2("./63/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7224] set_robust_list(0x7fef94c889a0, 24 [pid 7223] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7224] <... set_robust_list resumed>) = 0 [pid 7223] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] mkdir("./63", 0777 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7224] rt_sigprocmask(SIG_SETMASK, [] [pid 7223] <... futex resumed>) = 0 [pid 5614] <... mkdir resumed>) = 0 [pid 5611] <... umount2 resumed>) = 0 [pid 5614] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5611] umount2("./63/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5614] <... openat resumed>) = 3 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] newfstatat(AT_FDCWD, "./63/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] umount2("./63/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] ioctl(3, LOOP_CLR_FD [pid 5611] openat(AT_FDCWD, "./63/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5614] <... ioctl resumed>) = 0 [pid 5611] <... openat resumed>) = 4 [pid 5614] close(3 [pid 5611] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5611] getdents64(4, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5611] getdents64(4, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5611] close(4 [pid 7223] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5611] <... close resumed>) = 0 [pid 5610] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7224] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5611] rmdir("./63/file1" [pid 5610] <... openat resumed>) = 3 [pid 5609] newfstatat(AT_FDCWD, "./63/file1" [pid 5611] <... rmdir resumed>) = 0 [pid 5610] fstat(3 [pid 5609] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] umount2("./63/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7224] memfd_create("syzkaller", 0 [pid 5610] getdents64(3 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 158.117434][ T7222] EXT4-fs (loop1): dirty_blocks=512 [ 158.117446][ T7222] EXT4-fs (loop1): Block reservation details [ 158.117457][ T7222] EXT4-fs (loop1): i_reserved_data_blocks=32 [ 158.170307][ T5611] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 158.187907][ T5609] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 7224] <... memfd_create resumed>) = 3 [pid 5611] umount2("./63/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5609] openat(AT_FDCWD, "./63/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7224] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] umount2("./62/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... openat resumed>) = 4 [pid 7224] <... mmap resumed>) = 0x7fef8c868000 [pid 5611] newfstatat(AT_FDCWD, "./63/binderfs" [pid 5609] fstat(4 [pid 5611] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5614] <... close resumed>) = 0 [pid 5611] unlink("./63/binderfs") = 0 [pid 5609] getdents64(4 [pid 5611] getdents64(3 [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5609] getdents64(4 [pid 5611] close(3 [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5611] <... close resumed>) = 0 [pid 5609] close(4 [pid 7224] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5611] rmdir("./63" [pid 5609] <... close resumed>) = 0 [pid 5614] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5611] <... rmdir resumed>) = 0 [pid 5609] rmdir("./63/file1") = 0 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5611] mkdir("./64", 0777 [pid 5609] umount2("./63/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7224] <... write resumed>) = 524288 [pid 5611] <... mkdir resumed>) = 0 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./63/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./63/binderfs") = 0 ci2-upstream-fs/strace-static-x86_64: Process 7225 attached [pid 5611] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5609] getdents64(3, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5614] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7225 [pid 5611] ioctl(3, LOOP_CLR_FD [pid 5609] close(3 [pid 5611] <... ioctl resumed>) = 0 [pid 5609] <... close resumed>) = 0 [pid 7225] set_robust_list(0x5555748a66e0, 24 [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 5611] close(3 [pid 5609] rmdir("./63" [pid 7225] <... set_robust_list resumed>) = 0 [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] <... rmdir resumed>) = 0 [pid 7225] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5609] mkdir("./64", 0777) = 0 [pid 7225] chdir("./63" [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = 0 [pid 7225] <... chdir resumed>) = 0 [pid 5609] close(3 [pid 7225] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7225] setpgid(0, 0) = 0 [pid 7225] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5611] <... close resumed>) = 0 [pid 5611] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5611] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7225] write(3, "1000", 4) = 4 [pid 5611] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7226 ci2-upstream-fs/strace-static-x86_64: Process 7226 attached [pid 7225] close(3 [pid 5611] rt_sigprocmask(SIG_SETMASK, [] [pid 7225] <... close resumed>) = 0 [pid 5611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7225] symlink("/dev/binderfs", "./binderfs" [pid 7226] set_robust_list(0x5555748a66e0, 24 [pid 7225] <... symlink resumed>) = 0 [pid 7224] munmap(0x7fef8c868000, 138412032 [pid 5609] <... close resumed>) = 0 [pid 7226] <... set_robust_list resumed>) = 0 [pid 7225] write(1, "executing program\n", 18 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7226] rt_sigprocmask(SIG_SETMASK, [] [pid 7225] <... write resumed>) = 18 [pid 7226] <... rt_sigprocmask resumed>, NULL, 8) = 0 executing program [pid 7224] <... munmap resumed>) = 0 [pid 5609] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7226] chdir("./64" [pid 7225] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7224] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7226] <... chdir resumed>) = 0 [pid 7225] <... futex resumed>) = 0 [pid 5610] <... umount2 resumed>) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7226] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7225] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 5610] umount2("./62/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7226] <... prctl resumed>) = 0 [pid 7225] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ci2-upstream-fs/strace-static-x86_64: Process 7227 attached [pid 7226] setpgid(0, 0 [pid 7225] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 7224] <... openat resumed>) = 4 [pid 5610] newfstatat(AT_FDCWD, "./62/file1" [pid 5609] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7227 [pid 7227] set_robust_list(0x5555748a66e0, 24 [pid 7226] <... setpgid resumed>) = 0 [pid 7225] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 7227] <... set_robust_list resumed>) = 0 [pid 7226] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7225] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7224] ioctl(4, LOOP_SET_FD, 3 [pid 5610] umount2("./62/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7227] rt_sigprocmask(SIG_SETMASK, [] [pid 7226] <... openat resumed>) = 3 [pid 7225] <... mmap resumed>) = 0x7fef94c68000 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7227] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7226] write(3, "1000", 4 [pid 7225] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 7224] <... ioctl resumed>) = 0 [pid 5610] openat(AT_FDCWD, "./62/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7227] chdir("./64" [pid 7226] <... write resumed>) = 4 [pid 7225] <... mprotect resumed>) = 0 [ 158.302297][ T55] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 500 with max blocks 4 with error 28 [ 158.302327][ T55] EXT4-fs (loop1): This should not happen!! Data will be lost [ 158.302327][ T55] [ 158.320448][ T5610] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost executing program [pid 5610] <... openat resumed>) = 4 [pid 7227] <... chdir resumed>) = 0 [pid 7226] close(3 [pid 7225] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7224] close(3 [pid 5610] fstat(4 [pid 7227] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7226] <... close resumed>) = 0 [pid 7225] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7227] <... prctl resumed>) = 0 [pid 7226] symlink("/dev/binderfs", "./binderfs" [pid 7225] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 5610] getdents64(4ci2-upstream-fs/strace-static-x86_64: Process 7228 attached [pid 7227] setpgid(0, 0 [pid 7226] <... symlink resumed>) = 0 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 7228] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7227] <... setpgid resumed>) = 0 [pid 7226] write(1, "executing program\n", 18 [pid 7225] <... clone3 resumed> => {parent_tid=[7228]}, 88) = 7228 [pid 5610] getdents64(4 [pid 7228] <... rseq resumed>) = 0 [pid 7227] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7226] <... write resumed>) = 18 [pid 7225] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 7228] set_robust_list(0x7fef94c889a0, 24 [pid 7227] <... openat resumed>) = 3 [pid 7226] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7225] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] close(4 [pid 7228] <... set_robust_list resumed>) = 0 [pid 7224] <... close resumed>) = 0 [pid 7228] rt_sigprocmask(SIG_SETMASK, [] [pid 7227] write(3, "1000", 4 [pid 7226] <... futex resumed>) = 0 [pid 7225] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7224] close(4 [pid 5610] <... close resumed>) = 0 [pid 7228] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7227] <... write resumed>) = 4 [pid 7226] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 7225] <... futex resumed>) = 0 [pid 7224] <... close resumed>) = 0 [pid 5610] rmdir("./62/file1" [pid 7228] memfd_create("syzkaller", 0 [pid 7227] close(3 [pid 7226] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 7225] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7224] mkdir("./file1", 0777 [pid 5610] <... rmdir resumed>) = 0 [pid 7228] <... memfd_create resumed>) = 3 [pid 7227] <... close resumed>) = 0 [pid 7226] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 7228] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7226] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7228] <... mmap resumed>) = 0x7fef8c868000 [pid 7227] symlink("/dev/binderfs", "./binderfs" [pid 7226] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7224] <... mkdir resumed>) = 0 [pid 5610] umount2("./62/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7227] <... symlink resumed>) = 0 [pid 7226] <... mmap resumed>) = 0x7fef94c68000 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7226] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 5610] newfstatat(AT_FDCWD, "./62/binderfs" [pid 7226] <... mprotect resumed>) = 0 [pid 5610] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7228] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7227] write(1, "executing program\n", 18 [pid 7226] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7224] mount("/dev/loop3", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... executing program [pid 5610] unlink("./62/binderfs" [pid 7228] <... write resumed>) = 524288 [pid 7227] <... write resumed>) = 18 [pid 7226] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7226] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 7227] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7228] munmap(0x7fef8c868000, 138412032 [pid 7227] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 7226] <... clone3 resumed> => {parent_tid=[7229]}, 88) = 7229 ci2-upstream-fs/strace-static-x86_64: Process 7229 attached [pid 7228] <... munmap resumed>) = 0 [pid 7227] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 7226] rt_sigprocmask(SIG_SETMASK, [] [pid 7227] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 7226] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7226] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 158.367304][ T7224] loop3: detected capacity change from 0 to 1024 [pid 7226] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7229] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7228] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7227] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7229] <... rseq resumed>) = 0 [pid 7228] <... openat resumed>) = 4 [pid 7227] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7229] set_robust_list(0x7fef94c889a0, 24 [pid 7228] ioctl(4, LOOP_SET_FD, 3 [pid 7227] <... mmap resumed>) = 0x7fef94c68000 [pid 7229] <... set_robust_list resumed>) = 0 [pid 7228] <... ioctl resumed>) = 0 [pid 7227] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 7229] rt_sigprocmask(SIG_SETMASK, [] [pid 7228] close(3 [pid 7227] <... mprotect resumed>) = 0 [pid 7229] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7227] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7229] memfd_create("syzkaller", 0 [pid 7227] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7229] <... memfd_create resumed>) = 3 [pid 7228] <... close resumed>) = 0 [pid 7227] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 7229] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7228] close(4ci2-upstream-fs/strace-static-x86_64: Process 7232 attached ) = 0 [pid 7229] <... mmap resumed>) = 0x7fef8c868000 [pid 7228] mkdir("./file1", 0777 [pid 7227] <... clone3 resumed> => {parent_tid=[7232]}, 88) = 7232 [pid 7227] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7232] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7227] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7232] <... rseq resumed>) = 0 [pid 7227] <... futex resumed>) = 0 [pid 7232] set_robust_list(0x7fef94c889a0, 24 [pid 7227] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7232] <... set_robust_list resumed>) = 0 [pid 7229] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7232] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7232] memfd_create("syzkaller", 0) = 3 [pid 7224] <... mount resumed>) = 0 [pid 7232] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7224] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7232] <... mmap resumed>) = 0x7fef8c868000 [pid 7224] <... openat resumed>) = 3 [pid 7224] chdir("./file1") = 0 [pid 7224] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7224] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7229] <... write resumed>) = 524288 [pid 7224] <... futex resumed>) = 1 [pid 7223] <... futex resumed>) = 0 [pid 7229] munmap(0x7fef8c868000, 138412032 [pid 7223] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7229] <... munmap resumed>) = 0 [pid 7224] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7232] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7229] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7228] <... mkdir resumed>) = 0 [pid 7223] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... unlink resumed>) = 0 [pid 7229] <... openat resumed>) = 4 [pid 7229] ioctl(4, LOOP_SET_FD, 3 [pid 7228] mount("/dev/loop4", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5610] getdents64(3 [pid 7229] <... ioctl resumed>) = 0 [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5610] close(3 [pid 7229] close(3 [pid 5610] <... close resumed>) = 0 [pid 7229] <... close resumed>) = 0 [pid 5610] rmdir("./62" [pid 7229] close(4) = 0 [ 158.433948][ T7228] loop4: detected capacity change from 0 to 1024 [pid 7229] mkdir("./file1", 0777 [pid 7232] <... write resumed>) = 524288 [pid 7224] <... openat resumed>) = 4 [pid 7232] munmap(0x7fef8c868000, 138412032) = 0 [pid 7232] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7232] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7224] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7223] <... futex resumed>) = 0 [pid 7232] close(3 [pid 7224] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7223] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7232] <... close resumed>) = 0 [pid 7224] <... openat resumed>) = 5 [pid 7223] <... futex resumed>) = 0 [pid 7232] close(4) = 0 [pid 7232] mkdir("./file1", 0777 [pid 7224] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7223] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7224] <... futex resumed>) = 0 [pid 7223] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7224] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7223] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7228] <... mount resumed>) = 0 [pid 7223] <... futex resumed>) = 0 [pid 7224] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7224] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7223] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7224] <... openat resumed>) = 6 [pid 5610] <... rmdir resumed>) = 0 [pid 7224] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7223] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5610] mkdir("./63", 0777 [pid 7232] <... mkdir resumed>) = 0 [pid 7229] <... mkdir resumed>) = 0 [pid 7224] <... futex resumed>) = 0 [pid 7223] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7229] mount("/dev/loop2", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [ 158.494044][ T7229] loop2: detected capacity change from 0 to 1024 [ 158.497952][ T37] audit: type=1800 audit(1785844688.894:320): pid=7224 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 158.531684][ T7232] loop0: detected capacity change from 0 to 1024 [pid 7228] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7224] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 5610] <... mkdir resumed>) = 0 [pid 7232] mount("/dev/loop0", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7228] <... openat resumed>) = 3 [pid 7223] <... futex resumed>) = 0 [pid 7224] <... mmap resumed>) = 0x200000000000 [pid 7223] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7228] chdir("./file1" [pid 7224] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7223] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7228] <... chdir resumed>) = 0 [pid 7224] <... futex resumed>) = 0 [pid 7223] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7228] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7224] sendfile(4, 5, NULL, 553647746 [pid 7223] <... futex resumed>) = 0 [pid 7228] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7223] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... openat resumed>) = 3 [pid 5610] ioctl(3, LOOP_CLR_FD [pid 7228] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... ioctl resumed>) = 0 [pid 5610] close(3 [pid 7228] <... futex resumed>) = 1 [pid 7225] <... futex resumed>) = 0 [pid 7228] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7225] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7228] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7225] <... futex resumed>) = 0 [pid 7228] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7225] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7228] <... openat resumed>) = 4 [pid 7228] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7225] <... futex resumed>) = 0 [pid 7223] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7225] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7223] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7228] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7225] <... futex resumed>) = 0 [pid 7223] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7228] <... openat resumed>) = 5 [pid 7225] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7223] <... mmap resumed>) = 0x7fef94c47000 [pid 7228] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7223] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 7228] <... futex resumed>) = 1 [pid 7225] <... futex resumed>) = 0 [pid 7232] <... mount resumed>) = 0 [pid 7228] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7225] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7223] <... mprotect resumed>) = 0 [pid 5610] <... close resumed>) = 0 [pid 7232] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7228] <... openat resumed>) = 6 [pid 7225] <... futex resumed>) = 0 [pid 7223] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7232] <... openat resumed>) = 3 [pid 7229] <... mount resumed>) = 0 [pid 7228] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7225] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7232] chdir("./file1" [pid 7229] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7228] <... futex resumed>) = 0 [pid 7225] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7223] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5610] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7232] <... chdir resumed>) = 0 [pid 7229] <... openat resumed>) = 3 [pid 7228] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7225] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [ 158.638787][ T37] audit: type=1800 audit(1785844689.034:321): pid=7228 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop4" ino=15 res=0 errno=0 [pid 7223] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 7232] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7229] chdir("./file1" [pid 7228] <... mmap resumed>) = 0x200000000000 [pid 7225] <... futex resumed>) = 0 [pid 5610] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 7239 attached [pid 7232] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7229] <... chdir resumed>) = 0 [pid 7228] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7225] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-upstream-fs/strace-static-x86_64: Process 7240 attached [pid 7239] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7232] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7229] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7228] <... futex resumed>) = 0 [pid 7225] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7223] <... clone3 resumed> => {parent_tid=[7239]}, 88) = 7239 [pid 7240] set_robust_list(0x5555748a66e0, 24 [pid 7239] <... rseq resumed>) = 0 [pid 7232] <... futex resumed>) = 1 [pid 7228] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7227] <... futex resumed>) = 0 [pid 7225] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7229] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7240] <... set_robust_list resumed>) = 0 [pid 7239] set_robust_list(0x7fef94c679a0, 24 [pid 7228] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7232] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7227] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7225] <... futex resumed>) = 0 [pid 7223] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7240 [pid 7240] rt_sigprocmask(SIG_SETMASK, [] [pid 7239] <... set_robust_list resumed>) = 0 [pid 7229] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7228] sendfile(4, 5, NULL, 553647746 [pid 7227] <... futex resumed>) = 0 [pid 7225] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7223] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] rt_sigprocmask(SIG_SETMASK, [] [pid 7239] rt_sigprocmask(SIG_SETMASK, [] [pid 7229] <... futex resumed>) = 1 [pid 7227] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7226] <... futex resumed>) = 0 [pid 7223] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7240] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7232] <... openat resumed>) = 4 [pid 7229] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7226] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7226] <... futex resumed>) = 0 [pid 7240] chdir("./63" [pid 7239] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7232] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7229] <... openat resumed>) = 4 [ 158.721192][ T37] audit: type=1800 audit(1785844689.114:322): pid=7232 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 158.735517][ T37] audit: type=1800 audit(1785844689.134:323): pid=7229 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop2" ino=15 res=0 errno=0 [pid 7226] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7223] <... futex resumed>) = 0 [pid 7240] <... chdir resumed>) = 0 [pid 7232] <... futex resumed>) = 1 [pid 7229] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7227] <... futex resumed>) = 0 [pid 7225] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7240] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7232] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7229] <... futex resumed>) = 0 [pid 7227] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7226] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7225] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7240] <... prctl resumed>) = 0 [pid 7232] <... openat resumed>) = 5 [pid 7229] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7227] <... futex resumed>) = 0 [pid 7226] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7225] <... futex resumed>) = 0 [pid 7223] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7240] setpgid(0, 0 [pid 7232] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7229] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7227] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7240] <... setpgid resumed>) = 0 [ 158.737394][ T7239] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 158.737592][ T7239] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1024 with error 28 [ 158.737615][ T7239] EXT4-fs (loop3): This should not happen!! Data will be lost [ 158.737615][ T7239] [ 158.737628][ T7239] EXT4-fs (loop3): Total free blocks count 0 [ 158.737640][ T7239] EXT4-fs (loop3): Free/Dirty block details [ 158.737651][ T7239] EXT4-fs (loop3): free_blocks=20480 [pid 7232] <... futex resumed>) = 0 [pid 7229] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7226] <... futex resumed>) = 0 [pid 7225] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7240] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7232] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7229] <... openat resumed>) = 5 [pid 7227] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7226] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7225] <... mmap resumed>) = 0x7fef94c47000 [pid 7239] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7229] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7227] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7226] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7225] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 7224] <... sendfile resumed>) = ? [pid 7240] <... openat resumed>) = 3 [pid 7232] <... futex resumed>) = 0 [pid 7229] <... futex resumed>) = 0 [pid 7227] <... futex resumed>) = 1 [pid 7226] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7225] <... mprotect resumed>) = 0 [pid 7223] <... futex resumed>) = ? [pid 7232] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7229] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7227] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7226] <... futex resumed>) = 0 [pid 7225] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7224] +++ killed by SIGBUS +++ [pid 7240] write(3, "1000", 4 [pid 7232] <... openat resumed>) = 6 [pid 7229] <... openat resumed>) = 6 [pid 7226] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7225] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7240] <... write resumed>) = 4 [pid 7239] +++ killed by SIGBUS +++ [pid 7223] +++ killed by SIGBUS +++ [pid 7240] close(3 [pid 7232] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7229] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7225] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 7241 attached [pid 7240] <... close resumed>) = 0 [pid 7232] <... futex resumed>) = 1 [pid 7229] <... futex resumed>) = 1 [pid 7227] <... futex resumed>) = 0 [pid 7226] <... futex resumed>) = 0 [pid 5612] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7223, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 7241] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7240] symlink("/dev/binderfs", "./binderfs" [pid 7232] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7229] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7227] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7226] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [ 158.737665][ T7239] EXT4-fs (loop3): dirty_blocks=1024 [ 158.737676][ T7239] EXT4-fs (loop3): Block reservation details [ 158.737687][ T7239] EXT4-fs (loop3): i_reserved_data_blocks=64 [pid 7225] <... clone3 resumed> => {parent_tid=[7241]}, 88) = 7241 [pid 7241] <... rseq resumed>) = 0 [pid 7240] <... symlink resumed>) = 0 [pid 7229] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7227] <... futex resumed>) = 0 [pid 7226] <... futex resumed>) = 0 [pid 7225] rt_sigprocmask(SIG_SETMASK, [] [pid 7241] set_robust_list(0x7fef94c679a0, 24 [pid 7240] write(1, "executing program\n", 18 [pid 7232] <... mmap resumed>) = 0x200000000000 [pid 7229] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7227] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7226] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7225] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7241] <... set_robust_list resumed>) = 0 [pid 7240] <... write resumed>) = 18 [pid 7229] <... mmap resumed>) = 0x200000000000 [pid 7241] rt_sigprocmask(SIG_SETMASK, [] [pid 7232] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7225] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7240] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7241] <... rt_sigprocmask resumed>, NULL, 8) = 0 executing program [pid 7240] <... futex resumed>) = 0 [pid 7225] <... futex resumed>) = 0 [pid 7232] <... futex resumed>) = 1 [pid 7227] <... futex resumed>) = 0 [pid 7227] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7225] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7240] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 7227] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7240] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 7232] sendfile(4, 5, NULL, 553647746 [pid 7240] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7229] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7240] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7229] <... futex resumed>) = 1 [pid 7226] <... futex resumed>) = 0 [pid 7240] <... mmap resumed>) = 0x7fef94c68000 [pid 7229] sendfile(4, 5, NULL, 553647746 [pid 7226] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] umount2("./64", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7240] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 7226] <... futex resumed>) = 0 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7240] <... mprotect resumed>) = 0 [pid 7240] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7226] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7240] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5612] <... openat resumed>) = 3 [pid 7240] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 5612] fstat(3ci2-upstream-fs/strace-static-x86_64: Process 7242 attached [pid 7240] <... clone3 resumed> => {parent_tid=[7242]}, 88) = 7242 [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 158.906767][ T7241] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 158.908756][ T7241] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 444 with error 28 [ 158.908787][ T7241] EXT4-fs (loop4): This should not happen!! Data will be lost [ 158.908787][ T7241] [ 158.908801][ T7241] EXT4-fs (loop4): Total free blocks count 0 [ 158.908813][ T7241] EXT4-fs (loop4): Free/Dirty block details [pid 5612] getdents64(3 [pid 7242] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7240] rt_sigprocmask(SIG_SETMASK, [] [pid 7227] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7225] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 7242] <... rseq resumed>) = 0 [pid 7240] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7227] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] umount2("./64/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7242] set_robust_list(0x7fef94c889a0, 24 [pid 7240] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7227] <... futex resumed>) = 0 [pid 7242] <... set_robust_list resumed>) = 0 [pid 7240] <... futex resumed>) = 0 [pid 7227] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7240] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7227] <... mmap resumed>) = 0x7fef94c47000 [pid 7242] rt_sigprocmask(SIG_SETMASK, [] [pid 7227] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 7242] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7227] <... mprotect resumed>) = 0 [pid 7242] memfd_create("syzkaller", 0 [pid 7241] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7227] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7226] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7228] <... sendfile resumed>) = ? [pid 7227] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7226] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7242] <... memfd_create resumed>) = 3 [pid 7242] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7227] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 7226] <... futex resumed>) = 0 [pid 7241] +++ killed by SIGBUS +++ [pid 7242] <... mmap resumed>) = 0x7fef8c868000 [pid 7226] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0ci2-upstream-fs/strace-static-x86_64: Process 7243 attached ) = 0x7fef94c47000 [ 158.908826][ T7241] EXT4-fs (loop4): free_blocks=20480 [ 158.908839][ T7241] EXT4-fs (loop4): dirty_blocks=448 [ 158.908850][ T7241] EXT4-fs (loop4): Block reservation details [ 158.908861][ T7241] EXT4-fs (loop4): i_reserved_data_blocks=28 [pid 7243] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7227] <... clone3 resumed> => {parent_tid=[7243]}, 88) = 7243 [pid 7226] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 7243] <... rseq resumed>) = 0 [pid 7227] rt_sigprocmask(SIG_SETMASK, [] [pid 7226] <... mprotect resumed>) = 0 [pid 7243] set_robust_list(0x7fef94c679a0, 24 [pid 7227] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7226] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7243] <... set_robust_list resumed>) = 0 [pid 7227] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7226] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7243] rt_sigprocmask(SIG_SETMASK, [] [pid 7242] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7228] +++ killed by SIGBUS +++ [pid 7227] <... futex resumed>) = 0 [pid 7225] +++ killed by SIGBUS +++ [pid 7243] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7227] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7226] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7225, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14 /* 0.14 s */} --- ci2-upstream-fs/strace-static-x86_64: Process 7244 attached [pid 7226] <... clone3 resumed> => {parent_tid=[7244]}, 88) = 7244 [pid 7244] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 7226] rt_sigprocmask(SIG_SETMASK, [] [pid 7244] set_robust_list(0x7fef94c679a0, 24 [pid 7226] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7244] <... set_robust_list resumed>) = 0 [pid 7244] rt_sigprocmask(SIG_SETMASK, [] [pid 7226] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7244] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7226] <... futex resumed>) = 0 [pid 7226] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] umount2("./63", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 159.032021][ T5612] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 159.053321][ T7243] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 159.053522][ T7243] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 224 with error 28 [ 159.053545][ T7243] EXT4-fs (loop0): This should not happen!! Data will be lost [ 159.053545][ T7243] [pid 7242] <... write resumed>) = 524288 [pid 5614] fstat(3 [pid 7243] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7232] <... sendfile resumed>) = 233472 [pid 7232] +++ killed by SIGBUS +++ [pid 7227] <... futex resumed>) = ? [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7242] munmap(0x7fef8c868000, 138412032) = 0 [pid 7242] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5614] getdents64(3 [pid 7242] <... openat resumed>) = 4 [pid 7243] +++ killed by SIGBUS +++ [pid 7242] ioctl(4, LOOP_SET_FD, 3 [pid 7227] +++ killed by SIGBUS +++ [pid 7242] <... ioctl resumed>) = 0 [pid 7242] close(3 [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 7226] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5614] umount2("./63/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7227, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7244] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7242] <... close resumed>) = 0 [pid 7242] close(4) = 0 [pid 7242] mkdir("./file1", 0777) = 0 [ 159.053559][ T7243] EXT4-fs (loop0): Total free blocks count 0 [ 159.053571][ T7243] EXT4-fs (loop0): Free/Dirty block details [ 159.053584][ T7243] EXT4-fs (loop0): free_blocks=20480 [ 159.053597][ T7243] EXT4-fs (loop0): dirty_blocks=240 [ 159.053608][ T7243] EXT4-fs (loop0): Block reservation details [ 159.053618][ T7243] EXT4-fs (loop0): i_reserved_data_blocks=15 [ 159.065936][ T7244] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [pid 7242] mount("/dev/loop1", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5612] <... umount2 resumed>) = 0 [pid 5612] umount2("./64/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] umount2("./64", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5612] newfstatat(AT_FDCWD, "./64/file1" [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5612] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5612] umount2("./64/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] <... openat resumed>) = 3 [pid 5612] openat(AT_FDCWD, "./64/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(3 [pid 5612] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5612] getdents64(4, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(3 [pid 5612] getdents64(4 [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5609] umount2("./64/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5612] close(4) = 0 [pid 5612] rmdir("./64/file1") = 0 [pid 5612] umount2("./64/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5612] newfstatat(AT_FDCWD, "./64/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5612] unlink("./64/binderfs") = 0 [pid 5612] getdents64(3 [pid 7242] <... mount resumed>) = 0 [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5612] close(3) = 0 [ 159.069468][ T7244] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 392 with error 28 [ 159.069496][ T7244] EXT4-fs (loop2): This should not happen!! Data will be lost [ 159.069496][ T7244] [ 159.069510][ T7244] EXT4-fs (loop2): Total free blocks count 0 [ 159.069521][ T7244] EXT4-fs (loop2): Free/Dirty block details [ 159.069533][ T7244] EXT4-fs (loop2): free_blocks=20480 [ 159.069546][ T7244] EXT4-fs (loop2): dirty_blocks=400 [pid 5612] rmdir("./64") = 0 [pid 7242] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5612] mkdir("./65", 0777 [pid 7242] chdir("./file1" [pid 5612] <... mkdir resumed>) = 0 [pid 7242] <... chdir resumed>) = 0 [pid 7242] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5612] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7242] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... openat resumed>) = 3 [pid 7242] <... futex resumed>) = 1 [pid 7240] <... futex resumed>) = 0 [pid 7240] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7242] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7240] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] ioctl(3, LOOP_CLR_FD [pid 7244] +++ killed by SIGBUS +++ [pid 7229] <... sendfile resumed>) = ? [pid 5612] <... ioctl resumed>) = 0 [pid 5612] close(3 [pid 7242] <... openat resumed>) = 4 [pid 7229] +++ killed by SIGBUS +++ [pid 7226] +++ killed by SIGBUS +++ [pid 5611] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7226, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5611] umount2("./64", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7242] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7242] <... futex resumed>) = 1 [pid 7240] <... futex resumed>) = 0 [pid 5611] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7240] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... openat resumed>) = 3 [pid 7242] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7240] <... futex resumed>) = 0 [pid 5611] fstat(3 [pid 7242] <... openat resumed>) = 5 [pid 7240] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 159.069557][ T7244] EXT4-fs (loop2): Block reservation details [ 159.069568][ T7244] EXT4-fs (loop2): i_reserved_data_blocks=25 [ 159.124717][ T7242] loop1: detected capacity change from 0 to 1024 [ 159.214802][ T5614] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 5611] getdents64(3 [pid 7242] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 7242] <... futex resumed>) = 1 [pid 7240] <... futex resumed>) = 0 [pid 7242] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7240] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] umount2("./64/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7240] <... futex resumed>) = 1 [pid 7242] <... futex resumed>) = 0 [pid 7240] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... close resumed>) = 0 [pid 7242] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000) = 6 [ 159.223705][ T37] audit: type=1800 audit(1785844689.624:324): pid=7242 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 159.255138][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 224 with max blocks 4 with error 28 [ 159.255167][ T12] EXT4-fs (loop0): This should not happen!! Data will be lost [ 159.255167][ T12] [pid 7242] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7242] <... futex resumed>) = 1 [pid 7240] <... futex resumed>) = 0 [pid 5612] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7242] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7240] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7242] <... mmap resumed>) = 0x200000000000 [pid 7240] <... futex resumed>) = 0 [pid 5614] <... umount2 resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 7247 attached [pid 7240] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] umount2("./63/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7242] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7240] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7242] <... futex resumed>) = 0 [pid 7240] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] newfstatat(AT_FDCWD, "./63/file1" [pid 5612] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7247 [pid 7247] set_robust_list(0x5555748a66e0, 24 [pid 7242] sendfile(4, 5, NULL, 553647746 [pid 7240] <... futex resumed>) = 0 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5612] rt_sigprocmask(SIG_SETMASK, [] [pid 7247] <... set_robust_list resumed>) = 0 [pid 7240] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] umount2("./63/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7247] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5612] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7247] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] openat(AT_FDCWD, "./63/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7247] chdir("./65" [pid 5614] <... openat resumed>) = 4 [pid 5614] fstat(4 [pid 7247] <... chdir resumed>) = 0 [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7247] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5614] getdents64(4 [pid 7247] <... prctl resumed>) = 0 [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 7247] setpgid(0, 0) = 0 [ 159.258307][ T5609] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 159.302190][ T55] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 392 with max blocks 4 with error 28 [ 159.302222][ T55] EXT4-fs (loop2): This should not happen!! Data will be lost [ 159.302222][ T55] [pid 5614] getdents64(4 [pid 7247] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 7247] <... openat resumed>) = 3 [pid 5614] close(4) = 0 [pid 7247] write(3, "1000", 4 [pid 5614] rmdir("./63/file1" [pid 7247] <... write resumed>) = 4 [pid 5614] <... rmdir resumed>) = 0 [pid 7247] close(3 [pid 5614] umount2("./63/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7247] <... close resumed>) = 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7247] symlink("/dev/binderfs", "./binderfs" [pid 5614] newfstatat(AT_FDCWD, "./63/binderfs" [pid 7247] <... symlink resumed>) = 0 [pid 7240] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7240] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7247] write(1, "executing program\n", 18 [pid 7240] <... futex resumed>) = 0 executing program [pid 5614] unlink("./63/binderfs" [pid 7247] <... write resumed>) = 18 [pid 7240] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5614] <... unlink resumed>) = 0 [pid 7240] <... mmap resumed>) = 0x7fef94c47000 [pid 5614] getdents64(3 [pid 7240] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [ 159.306763][ T5611] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 7240] <... mprotect resumed>) = 0 [pid 5614] close(3 [pid 7240] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5614] <... close resumed>) = 0 [pid 7240] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5614] rmdir("./63") = 0 [pid 7240] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5614] mkdir("./64", 0777ci2-upstream-fs/strace-static-x86_64: Process 7248 attached ) = 0 [pid 7240] <... clone3 resumed> => {parent_tid=[7248]}, 88) = 7248 [pid 5611] <... umount2 resumed>) = 0 [pid 7248] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7240] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7240] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7248] <... rseq resumed>) = 0 [pid 7240] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... openat resumed>) = 3 [pid 7247] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] umount2("./64/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7248] set_robust_list(0x7fef94c679a0, 24 [pid 7247] <... futex resumed>) = 0 [pid 7240] <... futex resumed>) = 0 [pid 5614] ioctl(3, LOOP_CLR_FD [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] <... umount2 resumed>) = 0 [pid 7248] <... set_robust_list resumed>) = 0 [pid 7247] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 7240] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] <... ioctl resumed>) = 0 [pid 5611] newfstatat(AT_FDCWD, "./64/file1" [pid 7248] rt_sigprocmask(SIG_SETMASK, [] [pid 7247] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 5614] close(3 [pid 5611] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./64/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7247] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 7248] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5611] umount2("./64/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7247] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7247] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c68000 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./64/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] openat(AT_FDCWD, "./64/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 7247] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5614] <... close resumed>) = 0 [pid 5609] umount2("./64/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] fstat(4 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7247] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5609] openat(AT_FDCWD, "./64/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5611] getdents64(4 [pid 5609] <... openat resumed>) = 4 [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 7247] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7247] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5611] getdents64(4 [pid 5609] fstat(4 [pid 7240] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5614] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7247] <... clone3 resumed> => {parent_tid=[7249]}, 88) = 7249 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5611] close(4 [pid 5609] getdents64(4ci2-upstream-fs/strace-static-x86_64: Process 7249 attached [pid 7247] rt_sigprocmask(SIG_SETMASK, [] [pid 5611] <... close resumed>) = 0 [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 ci2-upstream-fs/strace-static-x86_64: Process 7250 attached [pid 7247] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5611] rmdir("./64/file1" [pid 5609] getdents64(4 [pid 7249] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7247] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... rmdir resumed>) = 0 [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 7249] <... rseq resumed>) = 0 [pid 7247] <... futex resumed>) = 0 [pid 5609] close(4 [pid 7249] set_robust_list(0x7fef94c889a0, 24 [pid 7247] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5609] <... close resumed>) = 0 [pid 7250] set_robust_list(0x5555748a66e0, 24 [pid 7249] <... set_robust_list resumed>) = 0 [pid 5611] umount2("./64/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7250] <... set_robust_list resumed>) = 0 [pid 7249] rt_sigprocmask(SIG_SETMASK, [] [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] rmdir("./64/file1" [pid 7250] rt_sigprocmask(SIG_SETMASK, [] [pid 7249] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7250 [pid 5611] newfstatat(AT_FDCWD, "./64/binderfs" [pid 5609] <... rmdir resumed>) = 0 [pid 7250] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7249] memfd_create("syzkaller", 0 [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 5611] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./64/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7250] chdir("./64" [pid 7249] <... memfd_create resumed>) = 3 [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5611] unlink("./64/binderfs" [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7250] <... chdir resumed>) = 0 [pid 7249] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5611] <... unlink resumed>) = 0 [pid 7250] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7249] <... mmap resumed>) = 0x7fef8c868000 [pid 7248] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7242] <... sendfile resumed>) = 446464 [pid 5611] getdents64(3 [pid 5609] newfstatat(AT_FDCWD, "./64/binderfs" [pid 7250] <... prctl resumed>) = 0 [pid 5609] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7250] setpgid(0, 0 [ 159.449045][ T7242] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 159.452219][ T7248] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 436 with error 28 [ 159.452250][ T7248] EXT4-fs (loop1): This should not happen!! Data will be lost [ 159.452250][ T7248] [ 159.452264][ T7248] EXT4-fs (loop1): Total free blocks count 0 [ 159.452276][ T7248] EXT4-fs (loop1): Free/Dirty block details [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5609] unlink("./64/binderfs" [pid 7250] <... setpgid resumed>) = 0 [pid 7250] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7242] +++ killed by SIGBUS +++ [pid 5611] close(3 [pid 5609] <... unlink resumed>) = 0 [pid 7250] <... openat resumed>) = 3 [pid 5611] <... close resumed>) = 0 [pid 7250] write(3, "1000", 4 [pid 7249] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5611] rmdir("./64" [pid 5609] getdents64(3 [pid 7250] <... write resumed>) = 4 [pid 7248] +++ killed by SIGBUS +++ [pid 7240] +++ killed by SIGBUS +++ [pid 5611] <... rmdir resumed>) = 0 [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 7250] close(3 [pid 7249] <... write resumed>) = 524288 [pid 5611] mkdir("./65", 0777 [pid 5610] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7240, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5609] close(3 [pid 7250] <... close resumed>) = 0 [pid 7249] munmap(0x7fef8c868000, 138412032 [pid 5611] <... mkdir resumed>) = 0 [pid 5610] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 5609] <... close resumed>) = 0 [pid 7250] symlink("/dev/binderfs", "./binderfs" [pid 7249] <... munmap resumed>) = 0 [pid 5611] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5610] <... restart_syscall resumed>) = 0 [pid 5609] rmdir("./64" [pid 7250] <... symlink resumed>) = 0 [pid 5611] <... openat resumed>) = 3 [pid 7249] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5609] <... rmdir resumed>) = 0 [pid 7249] <... openat resumed>) = 4 [pid 5611] ioctl(3, LOOP_CLR_FD [pid 7250] write(1, "executing program\n", 18 [pid 7249] ioctl(4, LOOP_SET_FD, 3 [pid 5611] <... ioctl resumed>) = 0 executing program [pid 5610] umount2("./63", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7250] <... write resumed>) = 18 [pid 7249] <... ioctl resumed>) = 0 [pid 5611] close(3 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] mkdir("./65", 0777 [pid 7250] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5610] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5609] <... mkdir resumed>) = 0 [pid 5610] <... openat resumed>) = 3 [pid 7250] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 7249] close(3 [pid 5610] fstat(3 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7250] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 7249] <... close resumed>) = 0 [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7249] close(4 [pid 5610] getdents64(3 [pid 5609] <... openat resumed>) = 3 [pid 7250] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 7249] <... close resumed>) = 0 [ 159.452288][ T7248] EXT4-fs (loop1): free_blocks=20480 [ 159.452301][ T7248] EXT4-fs (loop1): dirty_blocks=448 [ 159.452312][ T7248] EXT4-fs (loop1): Block reservation details [ 159.452322][ T7248] EXT4-fs (loop1): i_reserved_data_blocks=28 [pid 7250] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7249] mkdir("./file1", 0777 [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5609] ioctl(3, LOOP_CLR_FD [pid 5610] umount2("./63/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... ioctl resumed>) = 0 [pid 7250] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7249] <... mkdir resumed>) = 0 [pid 7250] <... mmap resumed>) = 0x7fef94c68000 [pid 5609] close(3 [pid 7250] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 7249] mount("/dev/loop3", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7250] <... mprotect resumed>) = 0 [pid 5611] <... close resumed>) = 0 [pid 5611] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7250] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5611] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5611] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7250] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7250] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0}ci2-upstream-fs/strace-static-x86_64: Process 7251 attached => {parent_tid=[7251]}, 88) = 7251 [pid 7250] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7250] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000ci2-upstream-fs/strace-static-x86_64: Process 7252 attached ) = 0 [pid 7251] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7250] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5611] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7252 [pid 7252] set_robust_list(0x5555748a66e0, 24) = 0 [pid 7251] <... rseq resumed>) = 0 [pid 5611] rt_sigprocmask(SIG_SETMASK, [] [pid 7252] rt_sigprocmask(SIG_SETMASK, [] [pid 7251] set_robust_list(0x7fef94c889a0, 24 [pid 5611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] <... close resumed>) = 0 [pid 7252] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7251] <... set_robust_list resumed>) = 0 [pid 7252] chdir("./65" [pid 7251] rt_sigprocmask(SIG_SETMASK, [] [pid 7252] <... chdir resumed>) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7252] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7251] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7252] <... prctl resumed>) = 0 [pid 7251] memfd_create("syzkaller", 0 [pid 5609] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7252] setpgid(0, 0) = 0 [pid 7252] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7252] <... openat resumed>) = 3 [pid 7251] <... memfd_create resumed>) = 3 [pid 7251] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fef8c868000 [pid 7252] write(3, "1000", 4) = 4 ci2-upstream-fs/strace-static-x86_64: Process 7255 attached [pid 7252] close(3 [pid 7251] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7249] <... mount resumed>) = 0 [pid 5609] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7255 [pid 7255] set_robust_list(0x5555748a66e0, 24 [pid 7252] <... close resumed>) = 0 [pid 7251] <... write resumed>) = 524288 [pid 7249] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 7255] <... set_robust_list resumed>) = 0 [pid 7255] rt_sigprocmask(SIG_SETMASK, [] [pid 7249] <... openat resumed>) = 3 [ 159.591856][ T5610] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 7255] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7252] symlink("/dev/binderfs", "./binderfs" [pid 7251] munmap(0x7fef8c868000, 138412032 [pid 7249] chdir("./file1" [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7255] chdir("./65" [pid 7252] <... symlink resumed>) = 0 [pid 7249] <... chdir resumed>) = 0 [pid 7255] <... chdir resumed>) = 0 [pid 7249] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7255] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 executing program [pid 7252] write(1, "executing program\n", 18 [pid 7251] <... munmap resumed>) = 0 [pid 7249] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7255] setpgid(0, 0 [pid 7252] <... write resumed>) = 18 [pid 5610] <... umount2 resumed>) = 0 [pid 7249] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7255] <... setpgid resumed>) = 0 [pid 7252] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7255] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7251] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7249] <... futex resumed>) = 1 [pid 7247] <... futex resumed>) = 0 [pid 7255] <... openat resumed>) = 3 [pid 7252] <... futex resumed>) = 0 [pid 7251] <... openat resumed>) = 4 [pid 7249] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7247] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] umount2("./63/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7255] write(3, "1000", 4 [pid 7252] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 7251] ioctl(4, LOOP_SET_FD, 3 [pid 7249] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7247] <... futex resumed>) = 0 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7255] <... write resumed>) = 4 [pid 7252] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 7251] <... ioctl resumed>) = 0 [pid 7249] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7247] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] newfstatat(AT_FDCWD, "./63/file1" [pid 7255] close(3 [pid 7252] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 7251] close(3 [pid 7249] <... openat resumed>) = 4 [pid 7255] <... close resumed>) = 0 [pid 7251] <... close resumed>) = 0 [pid 7252] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7255] symlink("/dev/binderfs", "./binderfs" [pid 7251] close(4 [pid 7252] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7249] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] umount2("./63/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7251] <... close resumed>) = 0 [pid 7255] <... symlink resumed>) = 0 [pid 7252] <... mmap resumed>) = 0x7fef94c68000 [pid 7251] mkdir("./file1", 0777 [pid 7249] <... futex resumed>) = 1 [pid 7247] <... futex resumed>) = 0 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7255] write(1, "executing program\n", 18 [pid 7252] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 7251] <... mkdir resumed>) = 0 [pid 7249] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7247] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] openat(AT_FDCWD, "./63/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7255] <... write resumed>) = 18 [pid 7247] <... futex resumed>) = 0 [pid 7252] <... mprotect resumed>) = 0 executing program [pid 7247] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7252] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5610] <... openat resumed>) = 4 [pid 7251] mount("/dev/loop4", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7255] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7252] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7249] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5610] fstat(4 [pid 7255] <... futex resumed>) = 0 [pid 7252] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0}ci2-upstream-fs/strace-static-x86_64: Process 7256 attached [pid 7255] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7256] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7255] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 7252] <... clone3 resumed> => {parent_tid=[7256]}, 88) = 7256 [pid 7249] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 5610] getdents64(4 [pid 7256] <... rseq resumed>) = 0 [pid 7255] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 7252] rt_sigprocmask(SIG_SETMASK, [] [pid 7249] <... openat resumed>) = 5 [pid 7256] set_robust_list(0x7fef94c889a0, 24 [pid 7255] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7252] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7249] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 7256] <... set_robust_list resumed>) = 0 [pid 7255] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7252] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7249] <... futex resumed>) = 1 [pid 7247] <... futex resumed>) = 0 [pid 5610] getdents64(4 [pid 7255] <... mmap resumed>) = 0x7fef94c68000 [pid 7252] <... futex resumed>) = 0 [pid 7249] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7247] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7252] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7247] <... futex resumed>) = 0 [pid 7256] rt_sigprocmask(SIG_SETMASK, [] [pid 7255] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 7249] <... openat resumed>) = 6 [pid 7247] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 7256] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7255] <... mprotect resumed>) = 0 [pid 7249] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7256] memfd_create("syzkaller", 0 [pid 7249] <... futex resumed>) = 1 [pid 7247] <... futex resumed>) = 0 [pid 7249] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7247] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] close(4 [pid 7256] <... memfd_create resumed>) = 3 [pid 7255] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7247] <... futex resumed>) = 0 [pid 7256] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7255] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7247] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... close resumed>) = 0 [pid 7249] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7256] <... mmap resumed>) = 0x7fef8c868000 [pid 7255] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 5610] rmdir("./63/file1"ci2-upstream-fs/strace-static-x86_64: Process 7259 attached [pid 7249] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 7259] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7255] <... clone3 resumed> => {parent_tid=[7259]}, 88) = 7259 [pid 7251] <... mount resumed>) = 0 [pid 7255] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7255] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7259] <... rseq resumed>) = 0 [pid 7255] <... futex resumed>) = 0 [pid 7255] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7249] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7259] set_robust_list(0x7fef94c889a0, 24 [pid 7251] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7249] <... futex resumed>) = 1 [pid 7247] <... futex resumed>) = 0 [pid 7259] <... set_robust_list resumed>) = 0 [pid 7259] rt_sigprocmask(SIG_SETMASK, [] [pid 7251] <... openat resumed>) = 3 [pid 7249] sendfile(4, 5, NULL, 553647746 [pid 7247] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... rmdir resumed>) = 0 [pid 7247] <... futex resumed>) = 0 [pid 7259] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] umount2("./63/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7247] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7259] memfd_create("syzkaller", 0) = 3 [pid 7259] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7251] chdir("./file1" [pid 7259] <... mmap resumed>) = 0x7fef8c868000 [pid 7251] <... chdir resumed>) = 0 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7251] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5610] newfstatat(AT_FDCWD, "./63/binderfs" [pid 7251] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5610] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7251] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7250] <... futex resumed>) = 0 [pid 5610] unlink("./63/binderfs" [pid 7251] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7250] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... unlink resumed>) = 0 [pid 7256] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7250] <... futex resumed>) = 0 [pid 7250] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] getdents64(3 [pid 7251] <... openat resumed>) = 4 [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5610] close(3) = 0 [pid 5610] rmdir("./63" [pid 7251] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7250] <... futex resumed>) = 0 [pid 7250] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7251] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7259] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7251] <... openat resumed>) = 5 [pid 7250] <... futex resumed>) = 0 [pid 7251] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7250] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 7251] <... futex resumed>) = 0 [pid 7250] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7251] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7250] <... futex resumed>) = 0 [pid 7250] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... rmdir resumed>) = 0 [pid 7256] <... write resumed>) = 524288 [pid 7251] <... openat resumed>) = 6 [pid 7247] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7259] <... write resumed>) = 524288 [pid 7247] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7251] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7259] munmap(0x7fef8c868000, 138412032 [pid 7247] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5610] mkdir("./64", 0777 [pid 7256] munmap(0x7fef8c868000, 138412032 [pid 7251] <... futex resumed>) = 1 [pid 7250] <... futex resumed>) = 0 [pid 7247] <... mmap resumed>) = 0x7fef94c47000 [pid 5610] <... mkdir resumed>) = 0 [pid 7259] <... munmap resumed>) = 0 [pid 7256] <... munmap resumed>) = 0 [pid 7251] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7250] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7247] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 7250] <... futex resumed>) = 0 [pid 7256] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7250] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7247] <... mprotect resumed>) = 0 [pid 7251] <... mmap resumed>) = 0x200000000000 [pid 7247] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5610] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7259] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7256] <... openat resumed>) = 4 [pid 7251] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7247] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5610] <... openat resumed>) = 3 [pid 7259] <... openat resumed>) = 4 [pid 7247] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 7260 attached [pid 7259] ioctl(4, LOOP_SET_FD, 3 [pid 7256] ioctl(4, LOOP_SET_FD, 3 [pid 7251] <... futex resumed>) = 1 [pid 7250] <... futex resumed>) = 0 [pid 5610] ioctl(3, LOOP_CLR_FD [pid 7260] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7259] <... ioctl resumed>) = 0 [pid 7256] <... ioctl resumed>) = 0 [pid 7251] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7250] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7247] <... clone3 resumed> => {parent_tid=[7260]}, 88) = 7260 [pid 7260] <... rseq resumed>) = 0 [pid 7256] close(3 [pid 7250] <... futex resumed>) = 0 [pid 7247] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] <... ioctl resumed>) = 0 [pid 7256] <... close resumed>) = 0 [pid 7251] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7250] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7247] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7260] set_robust_list(0x7fef94c679a0, 24 [pid 7259] close(3 [pid 5610] close(3 [pid 7260] <... set_robust_list resumed>) = 0 [pid 7256] close(4 [pid 7251] sendfile(4, 5, NULL, 553647746 [pid 7247] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7260] rt_sigprocmask(SIG_SETMASK, [] [pid 7259] <... close resumed>) = 0 [pid 7256] <... close resumed>) = 0 [pid 7247] <... futex resumed>) = 0 [pid 7260] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7256] mkdir("./file1", 0777 [pid 7247] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7256] <... mkdir resumed>) = 0 [pid 7256] mount("/dev/loop2", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7259] close(4) = 0 [ 159.829565][ T7260] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 159.838623][ T7260] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 224 with error 28 [ 159.838652][ T7260] EXT4-fs (loop3): This should not happen!! Data will be lost [ 159.838652][ T7260] [ 159.838665][ T7260] EXT4-fs (loop3): Total free blocks count 0 [pid 7259] mkdir("./file1", 0777) = 0 [pid 7256] <... mount resumed>) = 0 [pid 7250] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7247] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7256] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7250] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7259] mount("/dev/loop0", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7256] <... openat resumed>) = 3 [pid 7256] chdir("./file1") = 0 [pid 7250] <... futex resumed>) = 0 [pid 7256] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7250] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5610] <... close resumed>) = 0 [pid 7256] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7250] <... mmap resumed>) = 0x7fef94c47000 [pid 7260] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7256] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7250] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 5610] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7256] <... futex resumed>) = 1 [pid 7252] <... futex resumed>) = 0 [pid 7250] <... mprotect resumed>) = 0 [pid 7249] <... sendfile resumed>) = ? [pid 5610] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7260] +++ killed by SIGBUS +++ [pid 7256] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7252] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7250] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7249] +++ killed by SIGBUS +++ [ 159.838677][ T7260] EXT4-fs (loop3): Free/Dirty block details [ 159.838690][ T7260] EXT4-fs (loop3): free_blocks=20480 [ 159.838702][ T7260] EXT4-fs (loop3): dirty_blocks=224 [ 159.838713][ T7260] EXT4-fs (loop3): Block reservation details [ 159.838723][ T7260] EXT4-fs (loop3): i_reserved_data_blocks=14 [pid 5610] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7256] <... openat resumed>) = 4 [pid 7247] +++ killed by SIGBUS +++ [pid 7252] <... futex resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 7265 attached [pid 7250] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7250] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 7265] set_robust_list(0x5555748a66e0, 24 [pid 7256] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7252] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-upstream-fs/strace-static-x86_64: Process 7266 attached [pid 7265] <... set_robust_list resumed>) = 0 [pid 7259] <... mount resumed>) = 0 [pid 7256] <... futex resumed>) = 0 [pid 7252] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5612] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7247, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5610] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7265 [pid 7266] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7265] rt_sigprocmask(SIG_SETMASK, [] [pid 7259] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7256] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7252] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7250] <... clone3 resumed> => {parent_tid=[7266]}, 88) = 7266 [pid 5610] rt_sigprocmask(SIG_SETMASK, [] [pid 7266] <... rseq resumed>) = 0 [pid 7265] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7259] <... openat resumed>) = 3 [pid 7256] <... openat resumed>) = 5 [pid 7252] <... futex resumed>) = 0 [pid 7250] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 5610] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7266] set_robust_list(0x7fef94c679a0, 24 [pid 7265] chdir("./64" [pid 7259] chdir("./file1" [pid 7256] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7252] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7250] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7266] <... set_robust_list resumed>) = 0 [pid 7265] <... chdir resumed>) = 0 [pid 7259] <... chdir resumed>) = 0 [pid 7256] <... futex resumed>) = 0 [pid 7252] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7250] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... restart_syscall resumed>) = 0 [pid 7266] rt_sigprocmask(SIG_SETMASK, [] [pid 7259] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7256] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7252] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7250] <... futex resumed>) = 0 [pid 7266] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7265] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7259] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7256] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7252] <... futex resumed>) = 0 [pid 7250] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7265] <... prctl resumed>) = 0 [pid 7259] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7265] setpgid(0, 0 [pid 7259] <... futex resumed>) = 1 [pid 7256] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7255] <... futex resumed>) = 0 [pid 7252] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] umount2("./65", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7265] <... setpgid resumed>) = 0 [pid 7259] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7256] <... openat resumed>) = 6 [pid 7255] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7265] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7255] <... futex resumed>) = 0 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7265] <... openat resumed>) = 3 [pid 7259] <... openat resumed>) = 4 [pid 7256] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7255] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7265] write(3, "1000", 4 [pid 5612] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7265] <... write resumed>) = 4 [pid 7256] <... futex resumed>) = 1 [pid 7252] <... futex resumed>) = 0 [pid 7265] close(3 [pid 7259] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7256] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7252] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... openat resumed>) = 3 [pid 7265] <... close resumed>) = 0 [pid 7259] <... futex resumed>) = 1 [pid 7255] <... futex resumed>) = 0 [pid 7252] <... futex resumed>) = 0 [pid 7265] symlink("/dev/binderfs", "./binderfs" [pid 7259] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7256] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7255] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7252] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] fstat(3 [pid 7265] <... symlink resumed>) = 0 [pid 7259] <... openat resumed>) = 5 [pid 7256] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7265] write(1, "executing program\n", 18 [pid 7259] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7256] <... mmap resumed>) = 0x200000000000 [pid 7255] <... futex resumed>) = 0 executing program [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7265] <... write resumed>) = 18 [pid 7259] <... futex resumed>) = 0 [pid 7255] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7265] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7259] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7256] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7255] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5612] getdents64(3 [pid 7265] <... futex resumed>) = 0 [pid 7256] <... futex resumed>) = 1 [pid 7255] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7252] <... futex resumed>) = 0 [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 7265] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 7259] <... futex resumed>) = 0 [pid 7255] <... futex resumed>) = 1 [pid 7265] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 7256] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7252] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] umount2("./65/file1", MNT_FORCE|UMOUNT_NOFOLLOW [ 160.010929][ T7251] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 160.027669][ T7266] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1096 with error 28 [ 160.027700][ T7266] EXT4-fs (loop4): This should not happen!! Data will be lost [ 160.027700][ T7266] [ 160.027714][ T7266] EXT4-fs (loop4): Total free blocks count 0 [pid 7265] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 7259] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7256] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7255] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7252] <... futex resumed>) = 0 [pid 7265] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7259] <... openat resumed>) = 6 [pid 7256] sendfile(4, 5, NULL, 553647746 [pid 7252] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7265] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7259] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7265] <... mmap resumed>) = 0x7fef94c68000 [pid 7259] <... futex resumed>) = 1 [pid 7255] <... futex resumed>) = 0 [pid 7265] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 7259] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7255] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7265] <... mprotect resumed>) = 0 [pid 7265] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7259] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7255] <... futex resumed>) = 0 [pid 7265] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7265] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 7259] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7255] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7259] <... mmap resumed>) = 0x200000000000 [pid 7250] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ci2-upstream-fs/strace-static-x86_64: Process 7267 attached [pid 7265] <... clone3 resumed> => {parent_tid=[7267]}, 88) = 7267 [pid 7267] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7259] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7267] <... rseq resumed>) = 0 [pid 7265] rt_sigprocmask(SIG_SETMASK, [] [pid 7259] <... futex resumed>) = 1 [pid 7255] <... futex resumed>) = 0 [pid 7267] set_robust_list(0x7fef94c889a0, 24 [pid 7265] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7259] sendfile(4, 5, NULL, 553647746 [pid 7255] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7267] <... set_robust_list resumed>) = 0 [pid 7265] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7267] rt_sigprocmask(SIG_SETMASK, [] [pid 7265] <... futex resumed>) = 0 [pid 7255] <... futex resumed>) = 0 [pid 7267] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7265] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7255] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7267] memfd_create("syzkaller", 0) = 3 [pid 7267] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fef8c868000 [ 160.027726][ T7266] EXT4-fs (loop4): Free/Dirty block details [ 160.027739][ T7266] EXT4-fs (loop4): free_blocks=20480 [ 160.027752][ T7266] EXT4-fs (loop4): dirty_blocks=1104 [ 160.027763][ T7266] EXT4-fs (loop4): Block reservation details [ 160.027774][ T7266] EXT4-fs (loop4): i_reserved_data_blocks=69 [pid 7267] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7252] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7252] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7252] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c47000 [pid 7252] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7252] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7252] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 7268 attached [pid 7267] <... write resumed>) = 524288 [pid 7268] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7252] <... clone3 resumed> => {parent_tid=[7268]}, 88) = 7268 [pid 7268] <... rseq resumed>) = 0 [pid 7268] set_robust_list(0x7fef94c679a0, 24 [pid 7252] rt_sigprocmask(SIG_SETMASK, [] [pid 7268] <... set_robust_list resumed>) = 0 [pid 7255] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7252] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7268] rt_sigprocmask(SIG_SETMASK, [] [pid 7267] munmap(0x7fef8c868000, 138412032 [pid 7266] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7255] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7252] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7268] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7251] <... sendfile resumed>) = 1122304 [pid 7267] <... munmap resumed>) = 0 [pid 7255] <... futex resumed>) = 0 [pid 7267] openat(AT_FDCWD, "/dev/loop1", O_RDWR [ 160.092412][ T55] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 224 with max blocks 4 with error 28 [ 160.092442][ T55] EXT4-fs (loop3): This should not happen!! Data will be lost [ 160.092442][ T55] [ 160.097143][ T5612] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 7255] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7267] <... openat resumed>) = 4 [pid 7255] <... mmap resumed>) = 0x7fef94c47000 [pid 7255] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 7267] ioctl(4, LOOP_SET_FD, 3 [pid 7255] <... mprotect resumed>) = 0 [pid 7252] <... futex resumed>) = 0 [pid 7252] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7267] <... ioctl resumed>) = 0 [pid 7267] close(3 [pid 7255] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7267] <... close resumed>) = 0 [pid 7255] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7251] +++ killed by SIGBUS +++ [pid 7267] close(4) = 0 [pid 7267] mkdir("./file1", 0777) = 0 [pid 7255] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 7269 attached [pid 7267] mount("/dev/loop1", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7266] +++ killed by SIGBUS +++ [pid 7250] +++ killed by SIGBUS +++ [pid 7255] <... clone3 resumed> => {parent_tid=[7269]}, 88) = 7269 [pid 7255] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7250, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 7269] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [ 160.170806][ T7268] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 160.171004][ T7268] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 464 with error 28 [ 160.171041][ T7268] EXT4-fs (loop2): This should not happen!! Data will be lost [ 160.171041][ T7268] [ 160.171053][ T7268] EXT4-fs (loop2): Total free blocks count 0 [ 160.171065][ T7268] EXT4-fs (loop2): Free/Dirty block details [pid 7255] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7269] set_robust_list(0x7fef94c679a0, 24 [pid 7255] <... futex resumed>) = 0 [pid 7269] <... set_robust_list resumed>) = 0 [pid 7255] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] umount2("./64", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7269] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7269] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7252] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5614] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5612] <... umount2 resumed>) = 0 [pid 5614] <... openat resumed>) = 3 [pid 7268] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 5614] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5614] getdents64(3, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5614] umount2("./64/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7269] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7259] <... sendfile resumed>) = ? [pid 7255] <... futex resumed>) = ? [pid 7259] +++ killed by SIGBUS +++ [ 160.171075][ T7268] EXT4-fs (loop2): free_blocks=20480 [ 160.171086][ T7268] EXT4-fs (loop2): dirty_blocks=464 [ 160.171097][ T7268] EXT4-fs (loop2): Block reservation details [ 160.171106][ T7268] EXT4-fs (loop2): i_reserved_data_blocks=29 [ 160.233959][ T7269] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 160.234173][ T7269] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 264 with error 28 [pid 5612] umount2("./65/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7268] +++ killed by SIGBUS +++ [pid 7256] <... sendfile resumed>) = ? [pid 7267] <... mount resumed>) = 0 [pid 7267] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7267] <... openat resumed>) = 3 [pid 7269] +++ killed by SIGBUS +++ [pid 7267] chdir("./file1" [pid 7255] +++ killed by SIGBUS +++ [pid 5612] newfstatat(AT_FDCWD, "./65/file1" [pid 7267] <... chdir resumed>) = 0 [pid 7256] +++ killed by SIGBUS +++ [pid 7252] +++ killed by SIGBUS +++ [pid 7267] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7255, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7267] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5611] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7252, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5611] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 7267] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7267] <... futex resumed>) = 1 [pid 7265] <... futex resumed>) = 0 [pid 5611] <... restart_syscall resumed>) = 0 [pid 5609] umount2("./65", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7265] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7267] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7265] <... futex resumed>) = 0 [pid 5609] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7265] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] umount2("./65/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... openat resumed>) = 3 [pid 7267] <... openat resumed>) = 4 [pid 5611] umount2("./65", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] fstat(3 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 160.234196][ T7269] EXT4-fs (loop0): This should not happen!! Data will be lost [ 160.234196][ T7269] [ 160.234209][ T7269] EXT4-fs (loop0): Total free blocks count 0 [ 160.234221][ T7269] EXT4-fs (loop0): Free/Dirty block details [ 160.234234][ T7269] EXT4-fs (loop0): free_blocks=20480 [ 160.234246][ T7269] EXT4-fs (loop0): dirty_blocks=272 [ 160.234258][ T7269] EXT4-fs (loop0): Block reservation details [ 160.234268][ T7269] EXT4-fs (loop0): i_reserved_data_blocks=17 [pid 7267] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5609] getdents64(3 [pid 7267] <... futex resumed>) = 1 [pid 7265] <... futex resumed>) = 0 [pid 5611] <... openat resumed>) = 3 [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 7267] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7265] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] fstat(3 [pid 5609] umount2("./65/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7267] <... openat resumed>) = 5 [pid 7265] <... futex resumed>) = 0 [pid 7267] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] openat(AT_FDCWD, "./65/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7267] <... futex resumed>) = 0 [pid 7265] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] getdents64(3 [pid 7267] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7265] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5612] <... openat resumed>) = 4 [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 7265] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] fstat(4 [pid 7265] <... futex resumed>) = 1 [pid 5611] umount2("./65/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7267] <... futex resumed>) = 0 [pid 7265] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7267] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7267] <... openat resumed>) = 6 [pid 5612] getdents64(4, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5612] getdents64(4, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5612] close(4 [pid 7267] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... close resumed>) = 0 [pid 5612] rmdir("./65/file1" [pid 5609] <... umount2 resumed>) = 0 [pid 5609] umount2("./65/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./65/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./65/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./65/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] getdents64(4, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [ 160.295315][ T5614] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 160.345867][ T5609] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 5609] getdents64(4, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 7267] <... futex resumed>) = 1 [pid 7265] <... futex resumed>) = 0 [pid 5612] <... rmdir resumed>) = 0 [pid 5609] close(4 [pid 7265] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... close resumed>) = 0 [pid 7265] <... futex resumed>) = 0 [pid 5609] rmdir("./65/file1" [pid 7265] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] <... rmdir resumed>) = 0 [pid 5609] umount2("./65/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7267] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 5611] <... umount2 resumed>) = 0 [pid 5609] newfstatat(AT_FDCWD, "./65/binderfs" [pid 7267] <... mmap resumed>) = 0x200000000000 [pid 5611] umount2("./65/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] newfstatat(AT_FDCWD, "./65/file1" [pid 5609] unlink("./65/binderfs" [pid 5611] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] <... unlink resumed>) = 0 [pid 5611] umount2("./65/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] getdents64(3 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] openat(AT_FDCWD, "./65/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5612] umount2("./65/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5614] <... umount2 resumed>) = 0 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] <... openat resumed>) = 4 [pid 5609] close(3 [pid 5611] fstat(4 [pid 5609] <... close resumed>) = 0 [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] rmdir("./65" [pid 5611] getdents64(4 [pid 5609] <... rmdir resumed>) = 0 [pid 5614] umount2("./64/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 7267] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5612] newfstatat(AT_FDCWD, "./65/binderfs" [pid 5611] getdents64(4 [pid 5609] mkdir("./66", 0777 [pid 7267] <... futex resumed>) = 1 [pid 7265] <... futex resumed>) = 0 [pid 5612] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7267] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7265] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] newfstatat(AT_FDCWD, "./64/file1" [pid 5612] unlink("./65/binderfs" [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 7265] <... futex resumed>) = 0 [pid 7265] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] <... mkdir resumed>) = 0 [pid 7267] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5614] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] close(4 [pid 5612] <... unlink resumed>) = 0 [pid 7267] sendfile(4, 5, NULL, 553647746 [pid 5614] umount2("./64/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5612] getdents64(3 [pid 5611] <... close resumed>) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5611] rmdir("./65/file1" [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5612] close(3 [pid 5611] <... rmdir resumed>) = 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] <... openat resumed>) = 3 [pid 5612] <... close resumed>) = 0 [pid 5614] openat(AT_FDCWD, "./64/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5612] rmdir("./65" [pid 5611] umount2("./65/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] ioctl(3, LOOP_CLR_FD [pid 5612] <... rmdir resumed>) = 0 [pid 5609] <... ioctl resumed>) = 0 [pid 5614] <... openat resumed>) = 4 [pid 5609] close(3 [pid 5614] fstat(4 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] newfstatat(AT_FDCWD, "./65/binderfs" [pid 5612] mkdir("./66", 0777 [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5612] <... mkdir resumed>) = 0 [pid 5611] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] getdents64(4 [pid 5611] unlink("./65/binderfs") = 0 [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5614] getdents64(4, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5611] getdents64(3, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5614] close(4) = 0 [pid 5614] rmdir("./64/file1" [pid 5611] close(3 [pid 5614] <... rmdir resumed>) = 0 [pid 5611] <... close resumed>) = 0 [ 160.370896][ T3414] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 464 with max blocks 4 with error 28 [ 160.370928][ T3414] EXT4-fs (loop2): This should not happen!! Data will be lost [ 160.370928][ T3414] [ 160.375820][ T5611] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 5611] rmdir("./65") = 0 [pid 5612] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5614] umount2("./64/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5612] <... openat resumed>) = 3 [pid 5614] newfstatat(AT_FDCWD, "./64/binderfs" [pid 5612] ioctl(3, LOOP_CLR_FD [pid 5611] mkdir("./66", 0777 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5612] <... ioctl resumed>) = 0 [pid 5611] <... mkdir resumed>) = 0 [pid 5614] unlink("./64/binderfs" [pid 5612] close(3 [pid 7265] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5611] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5609] <... close resumed>) = 0 [pid 5612] <... close resumed>) = 0 [pid 7265] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7265] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c47000 [pid 7265] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7265] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5612] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7265] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7265] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5612] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7265] <... clone3 resumed> => {parent_tid=[7272]}, 88) = 7272 [pid 7265] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-upstream-fs/strace-static-x86_64: Process 7272 attached [pid 7265] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7265] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5611] <... openat resumed>) = 3 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7272] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5614] <... unlink resumed>) = 0 [pid 5611] ioctl(3, LOOP_CLR_FD [pid 5609] <... rt_sigprocmask resumed>, [], 8) = 0 ci2-upstream-fs/strace-static-x86_64: Process 7273 attached [pid 7272] <... rseq resumed>) = 0 [pid 5614] getdents64(3 [pid 5611] <... ioctl resumed>) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 7274 attached [pid 7273] set_robust_list(0x5555748a66e0, 24 [pid 7272] set_robust_list(0x7fef94c679a0, 24 [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5612] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7273 [pid 5611] close(3 [pid 7274] set_robust_list(0x5555748a66e0, 24 [pid 7273] <... set_robust_list resumed>) = 0 [pid 7272] <... set_robust_list resumed>) = 0 [pid 5614] close(3 [pid 5612] rt_sigprocmask(SIG_SETMASK, [] [pid 7274] <... set_robust_list resumed>) = 0 [pid 7273] rt_sigprocmask(SIG_SETMASK, [] [pid 7272] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] <... close resumed>) = 0 [pid 5612] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7274 [pid 7274] rt_sigprocmask(SIG_SETMASK, [] [pid 7273] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7272] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 7274] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7273] chdir("./66" [pid 5614] rmdir("./64" [pid 5611] <... close resumed>) = 0 [pid 7274] chdir("./66" [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7273] <... chdir resumed>) = 0 [pid 7274] <... chdir resumed>) = 0 [pid 7273] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5614] <... rmdir resumed>) = 0 [pid 7274] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7273] <... prctl resumed>) = 0 [pid 5611] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7274] <... prctl resumed>) = 0 [pid 7273] setpgid(0, 0 [pid 7274] setpgid(0, 0 [pid 7273] <... setpgid resumed>) = 0 [pid 5611] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7274] <... setpgid resumed>) = 0 [pid 7265] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7274] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7273] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5611] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7273] <... openat resumed>) = 3 [pid 7274] <... openat resumed>) = 3 [pid 7274] write(3, "1000", 4 [pid 7273] write(3, "1000", 4 [pid 7274] <... write resumed>) = 4 [pid 7274] close(3 [pid 7273] <... write resumed>) = 4 [pid 7274] <... close resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 7275 attached [pid 7274] symlink("/dev/binderfs", "./binderfs" [pid 7273] close(3 [pid 5611] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7275 [pid 7275] set_robust_list(0x5555748a66e0, 24 [pid 7274] <... symlink resumed>) = 0 [pid 7273] <... close resumed>) = 0 [pid 5611] rt_sigprocmask(SIG_SETMASK, [] [pid 7273] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7275] <... set_robust_list resumed>) = 0 [pid 7274] write(1, "executing program\n", 18 [pid 7275] rt_sigprocmask(SIG_SETMASK, [] [pid 7274] <... write resumed>) = 18 executing program [pid 7273] write(1, "executing program\n", 18 [pid 7275] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7274] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7275] chdir("./66" [pid 7274] <... futex resumed>) = 0 executing program [pid 7273] <... write resumed>) = 18 [pid 7275] <... chdir resumed>) = 0 [pid 7274] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 7273] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7274] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 7275] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7274] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 7273] <... futex resumed>) = 0 [pid 7275] <... prctl resumed>) = 0 [pid 7275] setpgid(0, 0 [pid 7274] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7273] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 7275] <... setpgid resumed>) = 0 [pid 7274] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7273] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 7272] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7267] <... sendfile resumed>) = 544768 [pid 7275] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7274] <... mmap resumed>) = 0x7fef94c68000 [ 160.524951][ T7272] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 160.527342][ T7272] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 528 with error 28 [ 160.527373][ T7272] EXT4-fs (loop1): This should not happen!! Data will be lost [ 160.527373][ T7272] [ 160.527387][ T7272] EXT4-fs (loop1): Total free blocks count 0 [ 160.527399][ T7272] EXT4-fs (loop1): Free/Dirty block details [pid 7273] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 7275] <... openat resumed>) = 3 [pid 7274] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 7273] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] mkdir("./65", 0777 [pid 7275] write(3, "1000", 4 [pid 7274] <... mprotect resumed>) = 0 [pid 7273] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7267] +++ killed by SIGBUS +++ [pid 5614] <... mkdir resumed>) = 0 [pid 7275] <... write resumed>) = 4 [pid 7274] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5614] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7275] close(3 [pid 7274] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7273] <... mmap resumed>) = 0x7fef94c68000 [pid 5614] <... openat resumed>) = 3 [pid 7275] <... close resumed>) = 0 [pid 7274] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 7273] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 7272] +++ killed by SIGBUS +++ [pid 7265] +++ killed by SIGBUS +++ [pid 5614] ioctl(3, LOOP_CLR_FDci2-upstream-fs/strace-static-x86_64: Process 7276 attached [pid 7275] symlink("/dev/binderfs", "./binderfs" [pid 7273] <... mprotect resumed>) = 0 [pid 5614] <... ioctl resumed>) = 0 [pid 5610] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7265, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 7276] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7275] <... symlink resumed>) = 0 [pid 7274] <... clone3 resumed> => {parent_tid=[7276]}, 88) = 7276 [pid 7273] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5614] close(3 [pid 5610] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 7276] <... rseq resumed>) = 0 [pid 7274] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] <... restart_syscall resumed>) = 0 [pid 7276] set_robust_list(0x7fef94c889a0, 24 [pid 7275] write(1, "executing program\n", 18 [pid 7274] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7273] <... rt_sigprocmask resumed>, [], 8) = 0 executing program [pid 7276] <... set_robust_list resumed>) = 0 [pid 7275] <... write resumed>) = 18 [pid 7274] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7273] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0}ci2-upstream-fs/strace-static-x86_64: Process 7277 attached [pid 7276] rt_sigprocmask(SIG_SETMASK, [] [pid 7274] <... futex resumed>) = 0 [pid 5610] umount2("./64", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7277] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7276] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7275] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7274] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7273] <... clone3 resumed> => {parent_tid=[7277]}, 88) = 7277 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7277] <... rseq resumed>) = 0 [pid 7276] memfd_create("syzkaller", 0 [pid 7275] <... futex resumed>) = 0 [pid 7273] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] <... close resumed>) = 0 [pid 5610] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7277] set_robust_list(0x7fef94c889a0, 24 [pid 7276] <... memfd_create resumed>) = 3 [pid 7275] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 7273] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5610] <... openat resumed>) = 3 [pid 7277] <... set_robust_list resumed>) = 0 [pid 7276] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7275] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 7273] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5610] fstat(3 [pid 7277] rt_sigprocmask(SIG_SETMASK, [] [pid 7276] <... mmap resumed>) = 0x7fef8c868000 [pid 7275] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 7273] <... futex resumed>) = 0 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7277] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7275] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] getdents64(3 [pid 7277] memfd_create("syzkaller", 0 [pid 7275] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [ 160.527411][ T7272] EXT4-fs (loop1): free_blocks=20480 [ 160.527424][ T7272] EXT4-fs (loop1): dirty_blocks=544 [ 160.527435][ T7272] EXT4-fs (loop1): Block reservation details [ 160.527446][ T7272] EXT4-fs (loop1): i_reserved_data_blocks=34 [pid 7273] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 ci2-upstream-fs/strace-static-x86_64: Process 7278 attached [pid 7277] <... memfd_create resumed>) = 3 [pid 7275] <... mmap resumed>) = 0x7fef94c68000 [pid 7277] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7276] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7275] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 5614] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7278 [pid 5610] umount2("./64/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7278] set_robust_list(0x5555748a66e0, 24 [pid 7277] <... mmap resumed>) = 0x7fef8c868000 [pid 7275] <... mprotect resumed>) = 0 [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 7278] <... set_robust_list resumed>) = 0 [pid 7275] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7278] rt_sigprocmask(SIG_SETMASK, [] [pid 7275] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7275] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 7278] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7278] chdir("./65" [pid 7277] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288ci2-upstream-fs/strace-static-x86_64: Process 7279 attached [pid 7275] <... clone3 resumed> => {parent_tid=[7279]}, 88) = 7279 [pid 7275] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7279] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7278] <... chdir resumed>) = 0 [pid 7279] <... rseq resumed>) = 0 [pid 7278] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7277] <... write resumed>) = 524288 [pid 7275] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7279] set_robust_list(0x7fef94c889a0, 24 [pid 7278] <... prctl resumed>) = 0 [pid 7277] munmap(0x7fef8c868000, 138412032 [pid 7275] <... futex resumed>) = 0 [pid 7279] <... set_robust_list resumed>) = 0 [pid 7278] setpgid(0, 0 [pid 7276] <... write resumed>) = 524288 [pid 7279] rt_sigprocmask(SIG_SETMASK, [] [pid 7278] <... setpgid resumed>) = 0 [pid 7279] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7279] memfd_create("syzkaller", 0 [pid 7278] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7276] munmap(0x7fef8c868000, 138412032 [pid 7279] <... memfd_create resumed>) = 3 [pid 7278] <... openat resumed>) = 3 [pid 7276] <... munmap resumed>) = 0 [pid 7279] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fef8c868000 [pid 7278] write(3, "1000", 4 [pid 7276] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7277] <... munmap resumed>) = 0 [pid 7276] <... openat resumed>) = 4 [pid 7275] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7278] <... write resumed>) = 4 [pid 7277] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7276] ioctl(4, LOOP_SET_FD, 3 [pid 7278] close(3 [pid 7277] <... openat resumed>) = 4 [pid 7278] <... close resumed>) = 0 [pid 7278] symlink("/dev/binderfs", "./binderfs" [pid 7277] ioctl(4, LOOP_SET_FD, 3 [pid 7279] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7278] <... symlink resumed>) = 0 executing program [pid 7278] write(1, "executing program\n", 18 [pid 7279] <... write resumed>) = 524288 [pid 7278] <... write resumed>) = 18 [pid 7277] <... ioctl resumed>) = 0 [pid 7276] <... ioctl resumed>) = 0 [pid 7279] munmap(0x7fef8c868000, 138412032) = 0 [pid 7278] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7277] close(3 [pid 7276] close(3 [pid 7279] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7278] <... futex resumed>) = 0 [pid 7277] <... close resumed>) = 0 [pid 7276] <... close resumed>) = 0 [pid 7279] <... openat resumed>) = 4 [pid 7278] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 7277] close(4 [pid 7276] close(4 [pid 7279] ioctl(4, LOOP_SET_FD, 3 [pid 7278] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 7277] <... close resumed>) = 0 [pid 7276] <... close resumed>) = 0 [pid 7279] <... ioctl resumed>) = 0 [pid 7278] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 7277] mkdir("./file1", 0777 [pid 7276] mkdir("./file1", 0777 [pid 7279] close(3 [pid 7278] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7279] <... close resumed>) = 0 [pid 7279] close(4) = 0 [pid 7279] mkdir("./file1", 0777) = 0 [pid 7279] mount("/dev/loop2", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7278] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7277] <... mkdir resumed>) = 0 [pid 7276] <... mkdir resumed>) = 0 [pid 7278] <... mmap resumed>) = 0x7fef94c68000 [pid 7277] mount("/dev/loop3", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7276] mount("/dev/loop0", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7278] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 [ 160.676162][ T55] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 528 with max blocks 4 with error 28 [ 160.676196][ T55] EXT4-fs (loop1): This should not happen!! Data will be lost [ 160.676196][ T55] [ 160.682224][ T5610] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 7278] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5610] <... umount2 resumed>) = 0 [pid 7278] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7278] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 5610] umount2("./64/file1", MNT_FORCE|UMOUNT_NOFOLLOWci2-upstream-fs/strace-static-x86_64: Process 7280 attached [pid 7278] <... clone3 resumed> => {parent_tid=[7280]}, 88) = 7280 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7278] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] newfstatat(AT_FDCWD, "./64/file1" [pid 7278] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7280] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7278] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] umount2("./64/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7280] <... rseq resumed>) = 0 [pid 7278] <... futex resumed>) = 0 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7280] set_robust_list(0x7fef94c889a0, 24 [pid 7278] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7280] <... set_robust_list resumed>) = 0 [pid 7280] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] openat(AT_FDCWD, "./64/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7280] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] <... openat resumed>) = 4 [pid 7280] memfd_create("syzkaller", 0 [pid 5610] fstat(4 [pid 7280] <... memfd_create resumed>) = 3 [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5610] getdents64(4, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5610] getdents64(4 [pid 7280] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 7280] <... mmap resumed>) = 0x7fef8c868000 [pid 5610] close(4) = 0 [pid 5610] rmdir("./64/file1") = 0 [pid 5610] umount2("./64/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5610] newfstatat(AT_FDCWD, "./64/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5610] unlink("./64/binderfs") = 0 [pid 5610] getdents64(3 [pid 7280] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5610] close(3) = 0 [pid 5610] rmdir("./64") = 0 [pid 5610] mkdir("./65", 0777) = 0 [pid 5610] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5610] ioctl(3, LOOP_CLR_FD) = 0 [pid 5610] close(3 [pid 7280] <... write resumed>) = 524288 [pid 7280] munmap(0x7fef8c868000, 138412032) = 0 [pid 5610] <... close resumed>) = 0 [pid 7280] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5610] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7280] <... openat resumed>) = 4 [pid 5610] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7280] ioctl(4, LOOP_SET_FD, 3 [pid 5610] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 7287 attached , child_tidptr=0x5555748a66d0) = 7287 [pid 7287] set_robust_list(0x5555748a66e0, 24 [pid 5610] rt_sigprocmask(SIG_SETMASK, [] [pid 7287] <... set_robust_list resumed>) = 0 [pid 5610] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7287] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7287] chdir("./65" [pid 7280] <... ioctl resumed>) = 0 [pid 7287] <... chdir resumed>) = 0 [pid 7280] close(3 [pid 7287] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7280] <... close resumed>) = 0 [pid 7287] <... prctl resumed>) = 0 [pid 7280] close(4 [pid 7287] setpgid(0, 0 [pid 7280] <... close resumed>) = 0 [pid 7280] mkdir("./file1", 0777 [pid 7287] <... setpgid resumed>) = 0 [pid 7287] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7279] <... mount resumed>) = 0 [pid 7280] <... mkdir resumed>) = 0 [pid 7287] <... openat resumed>) = 3 [pid 7279] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7287] write(3, "1000", 4 [pid 7280] mount("/dev/loop4", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7279] <... openat resumed>) = 3 [pid 7287] <... write resumed>) = 4 [pid 7277] <... mount resumed>) = 0 [pid 7287] close(3 [pid 7279] chdir("./file1" [pid 7277] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7276] <... mount resumed>) = 0 [pid 7287] <... close resumed>) = 0 [pid 7279] <... chdir resumed>) = 0 [pid 7277] <... openat resumed>) = 3 [pid 7287] symlink("/dev/binderfs", "./binderfs" [pid 7279] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7277] chdir("./file1" [pid 7276] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7287] <... symlink resumed>) = 0 [pid 7279] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7277] <... chdir resumed>) = 0 [pid 7287] write(1, "executing program\n", 18 [pid 7279] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7277] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7279] <... futex resumed>) = 1 [pid 7275] <... futex resumed>) = 0 [pid 7279] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7277] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7276] <... openat resumed>) = 3 executing program [pid 7275] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7287] <... write resumed>) = 18 [pid 7280] <... mount resumed>) = 0 [pid 7277] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7276] chdir("./file1" [pid 7287] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7277] <... futex resumed>) = 1 [pid 7275] <... futex resumed>) = 0 [pid 7287] <... futex resumed>) = 0 [pid 7280] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7277] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7276] <... chdir resumed>) = 0 [pid 7273] <... futex resumed>) = 0 [pid 7287] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 7275] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7273] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7277] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7287] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 7280] <... openat resumed>) = 3 [pid 7279] <... openat resumed>) = 4 [pid 7277] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7276] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7273] <... futex resumed>) = 0 [pid 7287] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 7280] chdir("./file1" [pid 7279] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7287] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7287] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7280] <... chdir resumed>) = 0 [pid 7276] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7279] <... futex resumed>) = 1 [pid 7273] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7287] <... mmap resumed>) = 0x7fef94c68000 [pid 7280] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7279] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7277] <... openat resumed>) = 4 [pid 7276] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7275] <... futex resumed>) = 0 [pid 7287] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 7280] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7276] <... futex resumed>) = 1 [pid 7277] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7275] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7274] <... futex resumed>) = 0 [pid 7287] <... mprotect resumed>) = 0 [pid 7274] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7287] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7280] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7279] <... futex resumed>) = 0 [pid 7277] <... futex resumed>) = 1 [pid 7276] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7275] <... futex resumed>) = 1 [pid 7274] <... futex resumed>) = 0 [pid 7273] <... futex resumed>) = 0 [pid 7287] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7280] <... futex resumed>) = 1 [pid 7279] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7278] <... futex resumed>) = 0 [pid 7277] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7276] <... openat resumed>) = 4 [pid 7275] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7274] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7273] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7287] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 7280] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7279] <... openat resumed>) = 5 [pid 7277] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7273] <... futex resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 7290 attached [pid 7280] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7279] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7278] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7277] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7273] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7276] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7287] <... clone3 resumed> => {parent_tid=[7290]}, 88) = 7290 [pid 7279] <... futex resumed>) = 1 [pid 7275] <... futex resumed>) = 0 [pid 7290] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7287] rt_sigprocmask(SIG_SETMASK, [] [pid 7280] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7279] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7278] <... futex resumed>) = 0 [pid 7277] <... openat resumed>) = 5 [pid 7276] <... futex resumed>) = 1 [pid 7275] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7274] <... futex resumed>) = 0 [pid 7290] <... rseq resumed>) = 0 [pid 7287] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7280] <... openat resumed>) = 4 [pid 7279] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7278] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7277] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7276] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7275] <... futex resumed>) = 0 [pid 7274] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7290] set_robust_list(0x7fef94c889a0, 24 [pid 7287] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7279] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7277] <... futex resumed>) = 1 [pid 7275] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7274] <... futex resumed>) = 0 [pid 7273] <... futex resumed>) = 0 [pid 7290] <... set_robust_list resumed>) = 0 [pid 7287] <... futex resumed>) = 0 [pid 7280] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7279] <... openat resumed>) = 6 [pid 7276] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7273] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7274] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7290] rt_sigprocmask(SIG_SETMASK, [] [pid 7287] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7280] <... futex resumed>) = 1 [pid 7279] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7278] <... futex resumed>) = 0 [pid 7277] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7273] <... futex resumed>) = 0 [pid 7279] <... futex resumed>) = 1 [pid 7273] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7279] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7275] <... futex resumed>) = 0 [pid 7290] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7280] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7278] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7277] <... openat resumed>) = 6 [pid 7276] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7290] memfd_create("syzkaller", 0 [pid 7280] <... openat resumed>) = 5 [pid 7279] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7278] <... futex resumed>) = 0 [pid 7276] <... openat resumed>) = 5 [pid 7275] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7290] <... memfd_create resumed>) = 3 [pid 7280] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7279] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7278] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7277] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7276] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7275] <... futex resumed>) = 0 [pid 7290] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7280] <... futex resumed>) = 0 [pid 7278] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7277] <... futex resumed>) = 1 [pid 7276] <... futex resumed>) = 1 [pid 7290] <... mmap resumed>) = 0x7fef8c868000 [pid 7280] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7278] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7276] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7275] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7279] <... mmap resumed>) = 0x200000000000 [pid 7277] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7274] <... futex resumed>) = 0 [pid 7273] <... futex resumed>) = 0 [pid 7280] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7278] <... futex resumed>) = 0 [pid 7274] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7273] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7280] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7277] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7273] <... futex resumed>) = 0 [pid 7279] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7280] <... openat resumed>) = 6 [pid 7279] <... futex resumed>) = 1 [pid 7278] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7277] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7276] <... futex resumed>) = 0 [pid 7275] <... futex resumed>) = 0 [pid 7274] <... futex resumed>) = 1 [pid 7273] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7290] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7280] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7279] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7276] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7275] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7274] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7280] <... futex resumed>) = 1 [pid 7279] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7278] <... futex resumed>) = 0 [pid 7277] <... mmap resumed>) = 0x200000000000 [pid 7276] <... openat resumed>) = 6 [pid 7275] <... futex resumed>) = 0 [pid 7280] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7279] sendfile(4, 5, NULL, 553647746 [pid 7275] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7278] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7276] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7280] <... futex resumed>) = 0 [pid 7278] <... futex resumed>) = 1 [pid 7276] <... futex resumed>) = 1 [pid 7277] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7274] <... futex resumed>) = 0 [pid 7280] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7278] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7277] <... futex resumed>) = 1 [pid 7276] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7273] <... futex resumed>) = 0 [pid 7277] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7280] <... mmap resumed>) = 0x200000000000 [pid 7274] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7273] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7274] <... futex resumed>) = 1 [pid 7273] <... futex resumed>) = 1 [pid 7290] <... write resumed>) = 524288 [pid 7280] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7277] <... futex resumed>) = 0 [pid 7276] <... futex resumed>) = 0 [pid 7274] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7273] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7276] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7280] <... futex resumed>) = 1 [pid 7278] <... futex resumed>) = 0 [pid 7277] sendfile(4, 5, NULL, 553647746 [pid 7276] <... mmap resumed>) = 0x200000000000 [pid 7290] munmap(0x7fef8c868000, 138412032 [pid 7280] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7290] <... munmap resumed>) = 0 [pid 7290] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7280] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7278] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7276] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7290] <... openat resumed>) = 4 [pid 7280] sendfile(4, 5, NULL, 553647746 [pid 7278] <... futex resumed>) = 0 [pid 7276] <... futex resumed>) = 1 [pid 7274] <... futex resumed>) = 0 [pid 7274] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7290] ioctl(4, LOOP_SET_FD, 3 [pid 7278] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7276] sendfile(4, 5, NULL, 553647746 [pid 7290] <... ioctl resumed>) = 0 [pid 7290] close(3 [pid 7275] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7274] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7290] <... close resumed>) = 0 [pid 7275] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7273] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7275] <... futex resumed>) = 0 [pid 7273] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7290] close(4 [pid 7275] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7273] <... futex resumed>) = 0 [pid 7290] <... close resumed>) = 0 [pid 7275] <... mmap resumed>) = 0x7fef94c47000 [pid 7273] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7275] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 7273] <... mmap resumed>) = 0x7fef94c47000 [pid 7290] mkdir("./file1", 0777 [pid 7275] <... mprotect resumed>) = 0 [pid 7273] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 7290] <... mkdir resumed>) = 0 [pid 7275] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7273] <... mprotect resumed>) = 0 [pid 7275] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7290] mount("/dev/loop1", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7278] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7275] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 7278] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7273] rt_sigprocmask(SIG_BLOCK, ~[]ci2-upstream-fs/strace-static-x86_64: Process 7291 attached [pid 7278] <... futex resumed>) = 0 [pid 7273] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7278] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7274] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7273] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 7274] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000ci2-upstream-fs/strace-static-x86_64: Process 7292 attached [pid 7291] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7278] <... mmap resumed>) = 0x7fef94c47000 [pid 7274] <... futex resumed>) = 0 [pid 7292] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7291] <... rseq resumed>) = 0 [pid 7275] <... clone3 resumed> => {parent_tid=[7291]}, 88) = 7291 [pid 7274] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7292] <... rseq resumed>) = 0 [pid 7291] set_robust_list(0x7fef94c679a0, 24 [pid 7278] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 7275] rt_sigprocmask(SIG_SETMASK, [] [pid 7274] <... mmap resumed>) = 0x7fef94c47000 [pid 7273] <... clone3 resumed> => {parent_tid=[7292]}, 88) = 7292 [pid 7292] set_robust_list(0x7fef94c679a0, 24 [pid 7291] <... set_robust_list resumed>) = 0 [pid 7278] <... mprotect resumed>) = 0 [pid 7275] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7274] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 7273] rt_sigprocmask(SIG_SETMASK, [] [pid 7292] <... set_robust_list resumed>) = 0 [pid 7291] rt_sigprocmask(SIG_SETMASK, [] [pid 7278] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7275] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7274] <... mprotect resumed>) = 0 [pid 7273] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7273] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7292] rt_sigprocmask(SIG_SETMASK, [] [pid 7291] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7278] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7275] <... futex resumed>) = 0 [pid 7274] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7273] <... futex resumed>) = 0 [pid 7292] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7290] <... mount resumed>) = 0 [pid 7278] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 7295 attached [pid 7290] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7275] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7274] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7273] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 161.203651][ T7292] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 161.204235][ T7292] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 260 with error 28 [ 161.204260][ T7292] EXT4-fs (loop3): This should not happen!! Data will be lost [ 161.204260][ T7292] [ 161.204273][ T7292] EXT4-fs (loop3): Total free blocks count 0 [ 161.204284][ T7292] EXT4-fs (loop3): Free/Dirty block details [pid 7295] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7290] <... openat resumed>) = 3 [pid 7278] <... clone3 resumed> => {parent_tid=[7295]}, 88) = 7295 [pid 7292] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [ 161.204296][ T7292] EXT4-fs (loop3): free_blocks=20480 [ 161.204308][ T7292] EXT4-fs (loop3): dirty_blocks=272 [ 161.204328][ T7292] EXT4-fs (loop3): Block reservation details [ 161.204338][ T7292] EXT4-fs (loop3): i_reserved_data_blocks=17 [ 161.207685][ T7291] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 161.210017][ T7291] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1020 with error 28 [pid 7291] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7290] chdir("./file1" [pid 7279] <... sendfile resumed>) = 1048576 [pid 7277] <... sendfile resumed>) = 270336 [pid 7275] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7274] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 7273] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7295] <... rseq resumed>) = 0 [pid 7278] rt_sigprocmask(SIG_SETMASK, []ci2-upstream-fs/strace-static-x86_64: Process 7296 attached [pid 7295] set_robust_list(0x7fef94c679a0, 24 [pid 7277] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7278] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7295] <... set_robust_list resumed>) = 0 [pid 7278] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7295] rt_sigprocmask(SIG_SETMASK, [] [pid 7278] <... futex resumed>) = 0 [pid 7277] <... futex resumed>) = 0 [pid 7290] <... chdir resumed>) = 0 [pid 7274] <... clone3 resumed> => {parent_tid=[7296]}, 88) = 7296 [pid 7295] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7278] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7277] +++ killed by SIGBUS +++ [pid 7274] rt_sigprocmask(SIG_SETMASK, [] [ 161.210049][ T7291] EXT4-fs (loop2): This should not happen!! Data will be lost [ 161.210049][ T7291] [ 161.210063][ T7291] EXT4-fs (loop2): Total free blocks count 0 [ 161.210076][ T7291] EXT4-fs (loop2): Free/Dirty block details [ 161.210088][ T7291] EXT4-fs (loop2): free_blocks=20480 [ 161.210103][ T7291] EXT4-fs (loop2): dirty_blocks=1024 [ 161.210115][ T7291] EXT4-fs (loop2): Block reservation details [ 161.210126][ T7291] EXT4-fs (loop2): i_reserved_data_blocks=64 [pid 7296] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7291] +++ killed by SIGBUS +++ [pid 7290] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7274] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7296] <... rseq resumed>) = 0 [pid 7290] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7274] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7296] set_robust_list(0x7fef94c679a0, 24 [pid 7290] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7296] <... set_robust_list resumed>) = 0 [pid 7274] <... futex resumed>) = 0 [pid 7296] rt_sigprocmask(SIG_SETMASK, [] [pid 7290] <... futex resumed>) = 1 [pid 7274] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7296] <... rt_sigprocmask resumed>, NULL, 8) = 0 [ 161.366348][ T7295] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 161.367967][ T7295] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1492 with error 28 [ 161.367999][ T7295] EXT4-fs (loop4): This should not happen!! Data will be lost [ 161.367999][ T7295] [ 161.368013][ T7295] EXT4-fs (loop4): Total free blocks count 0 [ 161.368034][ T7295] EXT4-fs (loop4): Free/Dirty block details [pid 7292] +++ killed by SIGBUS +++ [pid 7290] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7287] <... futex resumed>) = 0 [pid 7279] +++ killed by SIGBUS +++ [pid 7275] +++ killed by SIGBUS +++ [pid 7280] <... sendfile resumed>) = 1531904 [pid 7296] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7295] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7278] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7276] <... sendfile resumed>) = ? [pid 7274] <... futex resumed>) = ? [pid 7273] +++ killed by SIGBUS +++ [pid 7290] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7287] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7275, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=13 /* 0.13 s */} --- [ 161.368049][ T7295] EXT4-fs (loop4): free_blocks=20480 [ 161.368072][ T7295] EXT4-fs (loop4): dirty_blocks=1504 [ 161.368084][ T7295] EXT4-fs (loop4): Block reservation details [ 161.368095][ T7295] EXT4-fs (loop4): i_reserved_data_blocks=94 [ 161.398314][ T7296] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 161.399249][ T7296] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 308 with error 28 [pid 7296] +++ killed by SIGBUS +++ [pid 7290] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7287] <... futex resumed>) = 0 [pid 7276] +++ killed by SIGBUS +++ [pid 7274] +++ killed by SIGBUS +++ [pid 5612] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7273, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7295] +++ killed by SIGBUS +++ [pid 7287] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7280] +++ killed by SIGBUS +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7274, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7290] <... openat resumed>) = 4 [pid 7278] +++ killed by SIGBUS +++ [pid 7290] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7287] <... futex resumed>) = 0 [pid 5612] umount2("./66", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7290] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7287] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7278, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 7290] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7287] <... futex resumed>) = 0 [pid 5614] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] umount2("./66", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7290] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7287] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7290] <... openat resumed>) = 5 [pid 7290] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... openat resumed>) = 3 [pid 5611] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7290] <... futex resumed>) = 1 [pid 7287] <... futex resumed>) = 0 [pid 7290] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7287] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] fstat(3 [pid 5611] <... openat resumed>) = 3 [pid 7290] <... openat resumed>) = 6 [pid 7287] <... futex resumed>) = 0 [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5611] fstat(3 [pid 7287] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7290] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] getdents64(3 [pid 5611] getdents64(3 [pid 7290] <... futex resumed>) = 1 [pid 7287] <... futex resumed>) = 0 [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 7290] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7287] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 7287] <... futex resumed>) = 0 [pid 7290] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7287] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] umount2("./66/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] umount2("./66/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7290] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 5614] <... restart_syscall resumed>) = 0 [pid 7290] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7287] <... futex resumed>) = 0 [pid 5609] umount2("./66", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7290] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7287] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] umount2("./65", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7290] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7287] <... futex resumed>) = 0 [pid 7290] sendfile(4, 5, NULL, 553647746 [pid 5609] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7287] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] <... openat resumed>) = 3 [pid 5614] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5609] fstat(3 [pid 5614] <... openat resumed>) = 3 [ 161.399276][ T7296] EXT4-fs (loop0): This should not happen!! Data will be lost [ 161.399276][ T7296] [ 161.399289][ T7296] EXT4-fs (loop0): Total free blocks count 0 [ 161.399301][ T7296] EXT4-fs (loop0): Free/Dirty block details [ 161.399313][ T7296] EXT4-fs (loop0): free_blocks=20480 [ 161.399327][ T7296] EXT4-fs (loop0): dirty_blocks=320 [ 161.399338][ T7296] EXT4-fs (loop0): Block reservation details [ 161.399349][ T7296] EXT4-fs (loop0): i_reserved_data_blocks=20 [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5614] fstat(3 [pid 5609] getdents64(3 [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5614] getdents64(3 [pid 5609] umount2("./66/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5614] umount2("./65/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7287] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7287] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7287] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c47000 [pid 7287] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7287] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7287] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5612] <... umount2 resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 7297 attached [pid 5612] umount2("./66/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7287] <... clone3 resumed> => {parent_tid=[7297]}, 88) = 7297 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7287] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] newfstatat(AT_FDCWD, "./66/file1" [pid 7297] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7287] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5612] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7287] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5612] umount2("./66/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7287] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5612] openat(AT_FDCWD, "./66/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5612] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7297] <... rseq resumed>) = 0 [pid 5612] getdents64(4 [pid 5611] <... umount2 resumed>) = 0 [pid 7297] set_robust_list(0x7fef94c679a0, 24 [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5611] umount2("./66/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7297] <... set_robust_list resumed>) = 0 [pid 5612] getdents64(4 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7297] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5611] newfstatat(AT_FDCWD, "./66/file1" [pid 7297] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5612] close(4 [pid 5611] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5612] <... close resumed>) = 0 [ 161.572324][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 260 with max blocks 4 with error 28 [ 161.572358][ T12] EXT4-fs (loop3): This should not happen!! Data will be lost [ 161.572358][ T12] [ 161.573842][ T55] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1020 with max blocks 4 with error 28 [ 161.573872][ T55] EXT4-fs (loop2): This should not happen!! Data will be lost [ 161.573872][ T55] [pid 5611] umount2("./66/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5612] rmdir("./66/file1") = 0 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] openat(AT_FDCWD, "./66/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5612] umount2("./66/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] <... openat resumed>) = 4 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] fstat(4 [pid 5612] newfstatat(AT_FDCWD, "./66/binderfs" [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5612] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] getdents64(4 [pid 5612] unlink("./66/binderfs" [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5612] <... unlink resumed>) = 0 [pid 5611] getdents64(4, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5611] close(4) = 0 [pid 5611] rmdir("./66/file1" [pid 5612] getdents64(3 [pid 5611] <... rmdir resumed>) = 0 [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5611] umount2("./66/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5612] close(3 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5612] <... close resumed>) = 0 [pid 5612] rmdir("./66") = 0 [pid 5611] newfstatat(AT_FDCWD, "./66/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5612] mkdir("./67", 0777 [pid 5611] unlink("./66/binderfs") = 0 [pid 5611] getdents64(3, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5611] close(3) = 0 [pid 5611] rmdir("./66" [pid 7287] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7287] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 5611] <... rmdir resumed>) = 0 [pid 7287] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5611] mkdir("./67", 0777 [pid 7297] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 5612] <... mkdir resumed>) = 0 [pid 5611] <... mkdir resumed>) = 0 [ 161.575874][ T5611] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 161.577484][ T5612] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 161.628765][ T7297] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 161.628967][ T7297] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 520 with error 28 [pid 5612] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5611] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5612] <... openat resumed>) = 3 [pid 5611] <... openat resumed>) = 3 [pid 5612] ioctl(3, LOOP_CLR_FD) = 0 [pid 5611] ioctl(3, LOOP_CLR_FD [pid 5612] close(3 [pid 5611] <... ioctl resumed>) = 0 [pid 5611] close(3 [pid 5612] <... close resumed>) = 0 [ 161.628991][ T7297] EXT4-fs (loop1): This should not happen!! Data will be lost [ 161.628991][ T7297] [ 161.629004][ T7297] EXT4-fs (loop1): Total free blocks count 0 [ 161.629016][ T7297] EXT4-fs (loop1): Free/Dirty block details [ 161.629028][ T7297] EXT4-fs (loop1): free_blocks=20480 [ 161.629040][ T7297] EXT4-fs (loop1): dirty_blocks=528 [ 161.629051][ T7297] EXT4-fs (loop1): Block reservation details [ 161.629062][ T7297] EXT4-fs (loop1): i_reserved_data_blocks=33 [pid 7297] +++ killed by SIGBUS +++ [pid 5612] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5612] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7290] <... sendfile resumed>) = ? [pid 5611] <... close resumed>) = 0 [pid 5611] rt_sigprocmask(SIG_BLOCK, ~[]ci2-upstream-fs/strace-static-x86_64: Process 7298 attached [pid 5612] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7298 [pid 5611] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7290] +++ killed by SIGBUS +++ [pid 7287] +++ killed by SIGBUS +++ [pid 5612] rt_sigprocmask(SIG_SETMASK, [] [pid 5611] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 7299 attached [pid 5612] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7287, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5610] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 7298] set_robust_list(0x5555748a66e0, 24 [pid 5609] <... umount2 resumed>) = 0 [pid 7299] set_robust_list(0x5555748a66e0, 24 [pid 5611] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7299 [pid 5610] umount2("./65", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7299] <... set_robust_list resumed>) = 0 [pid 5611] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] umount2("./66/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7299] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] <... openat resumed>) = 3 [pid 7299] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] newfstatat(AT_FDCWD, "./66/file1" [pid 7299] chdir("./67" [pid 5610] fstat(3 [pid 7299] <... chdir resumed>) = 0 [pid 7298] <... set_robust_list resumed>) = 0 [pid 5609] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7299] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 161.677920][ T55] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1492 with max blocks 4 with error 28 [ 161.677957][ T55] EXT4-fs (loop4): This should not happen!! Data will be lost [ 161.677957][ T55] [ 161.679658][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 308 with max blocks 4 with error 28 [ 161.679686][ T12] EXT4-fs (loop0): This should not happen!! Data will be lost [ 161.679686][ T12] [ 161.683627][ T5614] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 7299] <... prctl resumed>) = 0 [pid 5610] getdents64(3 [pid 5609] umount2("./66/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7298] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 7299] setpgid(0, 0 [pid 5610] umount2("./65/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7299] <... setpgid resumed>) = 0 [pid 7298] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] <... umount2 resumed>) = 0 [pid 5609] openat(AT_FDCWD, "./66/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7299] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7298] chdir("./67" [pid 5609] <... openat resumed>) = 4 [pid 7298] <... chdir resumed>) = 0 [pid 7299] <... openat resumed>) = 3 [pid 5614] umount2("./65/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./65/file1" [pid 5609] getdents64(4 [pid 7299] write(3, "1000", 4 [pid 7298] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7298] setpgid(0, 0) = 0 [pid 7298] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7298] write(3, "1000", 4) = 4 [pid 7298] close(3) = 0 [pid 7298] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 7298] write(1, "executing program\n", 18) = 18 [pid 7298] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7298] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60}, NULL, 8) = 0 [pid 7298] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7298] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c68000 [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 7299] <... write resumed>) = 4 [pid 7299] close(3 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] getdents64(4 [pid 7298] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7298] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7298] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 7299] <... close resumed>) = 0 [pid 7298] <... clone3 resumed> => {parent_tid=[7300]}, 88) = 7300 [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 ci2-upstream-fs/strace-static-x86_64: Process 7300 attached [pid 5614] umount2("./65/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] close(4 [pid 7299] symlink("/dev/binderfs", "./binderfs" [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7299] <... symlink resumed>) = 0 [pid 7298] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] openat(AT_FDCWD, "./65/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5609] <... close resumed>) = 0 [pid 7298] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] <... openat resumed>) = 4 [pid 5609] rmdir("./66/file1" [pid 7299] write(1, "executing program\n", 18 [pid 5614] fstat(4 [pid 7298] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... rmdir resumed>) = 0 executing program [pid 7299] <... write resumed>) = 18 [pid 7298] <... futex resumed>) = 0 [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] umount2("./66/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7299] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 161.685482][ T5609] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 7298] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5614] getdents64(4 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7300] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5609] newfstatat(AT_FDCWD, "./66/binderfs" [pid 7300] <... rseq resumed>) = 0 [pid 7300] set_robust_list(0x7fef94c889a0, 24 [pid 7299] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5609] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7300] <... set_robust_list resumed>) = 0 [pid 7299] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 5614] getdents64(4 [pid 7300] rt_sigprocmask(SIG_SETMASK, [] [pid 7299] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5609] unlink("./66/binderfs" [pid 7300] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7299] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] close(4 [pid 7300] memfd_create("syzkaller", 0 [pid 7299] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5614] <... close resumed>) = 0 [pid 5609] <... unlink resumed>) = 0 [pid 7299] <... mmap resumed>) = 0x7fef94c68000 [pid 5614] rmdir("./65/file1" [pid 7299] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 7300] <... memfd_create resumed>) = 3 [pid 7299] <... mprotect resumed>) = 0 [pid 5610] <... umount2 resumed>) = 0 [pid 5609] getdents64(3 [pid 7300] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7299] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5614] <... rmdir resumed>) = 0 [pid 5610] umount2("./65/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 7300] <... mmap resumed>) = 0x7fef8c868000 [pid 7299] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5614] umount2("./65/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] close(3 [pid 7299] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 5610] newfstatat(AT_FDCWD, "./65/file1" [pid 5609] <... close resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 7301 attached [pid 5609] rmdir("./66" [pid 7299] <... clone3 resumed> => {parent_tid=[7301]}, 88) = 7301 [pid 5610] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 161.841082][ T5610] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 5614] newfstatat(AT_FDCWD, "./65/binderfs" [pid 7301] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7300] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7299] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] umount2("./65/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... rmdir resumed>) = 0 [pid 7301] <... rseq resumed>) = 0 [pid 7299] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7301] set_robust_list(0x7fef94c889a0, 24 [pid 5610] openat(AT_FDCWD, "./65/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7301] <... set_robust_list resumed>) = 0 [pid 7299] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] unlink("./65/binderfs" [pid 5610] <... openat resumed>) = 4 [pid 5609] mkdir("./67", 0777 [pid 7301] rt_sigprocmask(SIG_SETMASK, [] [pid 7299] <... futex resumed>) = 0 [pid 5614] <... unlink resumed>) = 0 [pid 5610] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] <... mkdir resumed>) = 0 [pid 7301] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7299] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5610] getdents64(4 [pid 7301] memfd_create("syzkaller", 0 [pid 5614] getdents64(3 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7301] <... memfd_create resumed>) = 3 [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5614] close(3 [pid 5609] <... openat resumed>) = 3 [pid 7301] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5614] <... close resumed>) = 0 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5614] rmdir("./65" [pid 7301] <... mmap resumed>) = 0x7fef8c868000 [pid 5614] <... rmdir resumed>) = 0 [pid 5610] getdents64(4 [pid 5609] ioctl(3, LOOP_CLR_FD [pid 7300] <... write resumed>) = 524288 [pid 5614] mkdir("./66", 0777 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5609] <... ioctl resumed>) = 0 [pid 5609] close(3 [pid 5610] close(4) = 0 [pid 5610] rmdir("./65/file1" [pid 7300] munmap(0x7fef8c868000, 138412032 [pid 5614] <... mkdir resumed>) = 0 [pid 7300] <... munmap resumed>) = 0 [pid 5614] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7301] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7300] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5610] <... rmdir resumed>) = 0 [pid 5609] <... close resumed>) = 0 [pid 7300] <... openat resumed>) = 4 [pid 5614] <... openat resumed>) = 3 [pid 7301] <... write resumed>) = 524288 [pid 7300] ioctl(4, LOOP_SET_FD, 3 [pid 5614] ioctl(3, LOOP_CLR_FD) = 0 [pid 7301] munmap(0x7fef8c868000, 138412032 [pid 5614] close(3 [pid 7301] <... munmap resumed>) = 0 [pid 7300] <... ioctl resumed>) = 0 [pid 5610] umount2("./65/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7301] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7300] close(3 [pid 5609] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7300] <... close resumed>) = 0 [pid 7301] <... openat resumed>) = 4 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7301] ioctl(4, LOOP_SET_FD, 3 [pid 7300] close(4 [pid 5610] newfstatat(AT_FDCWD, "./65/binderfs" [pid 7300] <... close resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 7302 attached [pid 7301] <... ioctl resumed>) = 0 [pid 7300] mkdir("./file1", 0777 [pid 5610] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7302 [pid 7300] <... mkdir resumed>) = 0 [pid 5614] <... close resumed>) = 0 [pid 5610] unlink("./65/binderfs" [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 7300] mount("/dev/loop3", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5610] <... unlink resumed>) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] getdents64(3, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 7302] set_robust_list(0x5555748a66e0, 24 [pid 7301] close(3 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5610] close(3 [pid 7302] <... set_robust_list resumed>) = 0 [pid 7301] <... close resumed>) = 0 [pid 5614] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5610] <... close resumed>) = 0 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7302] rt_sigprocmask(SIG_SETMASK, [] [pid 7301] close(4 [pid 5610] rmdir("./65"ci2-upstream-fs/strace-static-x86_64: Process 7303 attached [pid 7302] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7301] <... close resumed>) = 0 [pid 5610] <... rmdir resumed>) = 0 [pid 5614] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7303 [pid 7302] chdir("./67" [pid 7301] mkdir("./file1", 0777 [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] mkdir("./66", 0777 [pid 7303] set_robust_list(0x5555748a66e0, 24 [pid 7302] <... chdir resumed>) = 0 [pid 7301] <... mkdir resumed>) = 0 [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7303] <... set_robust_list resumed>) = 0 [pid 7302] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5610] <... mkdir resumed>) = 0 [pid 7302] <... prctl resumed>) = 0 [pid 7301] mount("/dev/loop2", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7303] rt_sigprocmask(SIG_SETMASK, [] [pid 7302] setpgid(0, 0 [pid 5610] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7303] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7302] <... setpgid resumed>) = 0 [pid 5610] <... openat resumed>) = 3 [pid 7303] chdir("./66" [pid 7302] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5610] ioctl(3, LOOP_CLR_FD [pid 7302] <... openat resumed>) = 3 [pid 7303] <... chdir resumed>) = 0 [pid 7302] write(3, "1000", 4 [pid 5610] <... ioctl resumed>) = 0 [pid 7302] <... write resumed>) = 4 [pid 5610] close(3 [pid 7303] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7302] close(3 [pid 7303] <... prctl resumed>) = 0 [pid 7302] <... close resumed>) = 0 [pid 7303] setpgid(0, 0 [pid 7302] symlink("/dev/binderfs", "./binderfs" [pid 7300] <... mount resumed>) = 0 [pid 7303] <... setpgid resumed>) = 0 [pid 7303] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7302] <... symlink resumed>) = 0 [pid 7303] <... openat resumed>) = 3 [pid 7302] write(1, "executing program\n", 18 executing program [pid 7300] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7303] write(3, "1000", 4 [pid 7302] <... write resumed>) = 18 [pid 5610] <... close resumed>) = 0 [pid 7300] <... openat resumed>) = 3 [pid 7303] <... write resumed>) = 4 [pid 7302] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7300] chdir("./file1" [pid 7303] close(3 [pid 7302] <... futex resumed>) = 0 [pid 7300] <... chdir resumed>) = 0 [pid 7302] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60}, NULL, 8) = 0 [pid 5610] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7303] <... close resumed>) = 0 [pid 7302] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 7300] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5610] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7302] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7303] symlink("/dev/binderfs", "./binderfs" [pid 7302] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7300] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5610] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7303] <... symlink resumed>) = 0 [pid 7300] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7303] write(1, "executing program\n", 18 [pid 7302] <... mmap resumed>) = 0x7fef94c68000 [pid 7300] <... futex resumed>) = 1 [pid 7298] <... futex resumed>) = 0 [pid 7300] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7298] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7302] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 ci2-upstream-fs/strace-static-x86_64: Process 7308 attached [pid 7303] <... write resumed>) = 18 [pid 7302] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7298] <... futex resumed>) = 0 [pid 5610] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7308 [pid 7302] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7298] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7303] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 executing program [pid 7302] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 5610] rt_sigprocmask(SIG_SETMASK, []ci2-upstream-fs/strace-static-x86_64: Process 7309 attached , NULL, 8) = 0 [pid 7309] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 7302] <... clone3 resumed> => {parent_tid=[7309]}, 88) = 7309 [pid 7309] set_robust_list(0x7fef94c889a0, 24 [pid 7303] <... futex resumed>) = 0 [pid 7302] rt_sigprocmask(SIG_SETMASK, [] [pid 7309] <... set_robust_list resumed>) = 0 [pid 7303] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 7302] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7309] rt_sigprocmask(SIG_SETMASK, [] [pid 7308] set_robust_list(0x5555748a66e0, 24 [pid 7302] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7309] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7309] memfd_create("syzkaller", 0 [pid 7302] <... futex resumed>) = 0 [pid 7302] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7309] <... memfd_create resumed>) = 3 [pid 7308] <... set_robust_list resumed>) = 0 [pid 7303] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 7300] <... openat resumed>) = 4 [pid 7303] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 7309] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7308] rt_sigprocmask(SIG_SETMASK, [] [pid 7303] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7309] <... mmap resumed>) = 0x7fef8c868000 [pid 7308] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7303] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7300] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7308] chdir("./66" [pid 7303] <... mmap resumed>) = 0x7fef94c68000 [pid 7300] <... futex resumed>) = 1 [pid 7298] <... futex resumed>) = 0 [pid 7308] <... chdir resumed>) = 0 [pid 7303] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 7300] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7298] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7298] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7300] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7303] <... mprotect resumed>) = 0 [pid 7300] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7309] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7308] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7300] <... openat resumed>) = 5 [pid 7301] <... mount resumed>) = 0 [pid 7308] <... prctl resumed>) = 0 [pid 7300] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7308] setpgid(0, 0 [pid 7300] <... futex resumed>) = 1 [pid 7298] <... futex resumed>) = 0 [pid 7308] <... setpgid resumed>) = 0 [pid 7300] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7298] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7308] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7298] <... futex resumed>) = 0 [pid 7300] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7298] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7300] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000) = 6 [pid 7308] <... openat resumed>) = 3 [pid 7309] <... write resumed>) = 524288 [pid 7301] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7309] munmap(0x7fef8c868000, 138412032 [pid 7301] <... openat resumed>) = 3 [pid 7300] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7308] write(3, "1000", 4 [pid 7309] <... munmap resumed>) = 0 [pid 7308] <... write resumed>) = 4 [pid 7303] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7301] chdir("./file1" [pid 7300] <... futex resumed>) = 1 [pid 7298] <... futex resumed>) = 0 [pid 7308] close(3 [pid 7303] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7298] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7308] <... close resumed>) = 0 [pid 7301] <... chdir resumed>) = 0 [pid 7309] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7308] symlink("/dev/binderfs", "./binderfs" [pid 7303] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 7300] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7298] <... futex resumed>) = 0 [pid 7309] <... openat resumed>) = 4 [pid 7309] ioctl(4, LOOP_SET_FD, 3 [pid 7298] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-upstream-fs/strace-static-x86_64: Process 7310 attached [pid 7308] <... symlink resumed>) = 0 [pid 7301] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7300] <... mmap resumed>) = 0x200000000000 [pid 7310] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7308] write(1, "executing program\n", 18 [pid 7303] <... clone3 resumed> => {parent_tid=[7310]}, 88) = 7310 executing program [pid 7301] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7300] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7310] <... rseq resumed>) = 0 [pid 7309] <... ioctl resumed>) = 0 [pid 7308] <... write resumed>) = 18 [pid 7303] rt_sigprocmask(SIG_SETMASK, [] [pid 7301] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7300] <... futex resumed>) = 1 [pid 7298] <... futex resumed>) = 0 [pid 7310] set_robust_list(0x7fef94c889a0, 24 [pid 7309] close(3 [pid 7301] <... futex resumed>) = 1 [pid 7299] <... futex resumed>) = 0 [pid 7310] <... set_robust_list resumed>) = 0 [pid 7309] <... close resumed>) = 0 [pid 7303] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7299] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7301] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7309] close(4 [pid 7299] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7298] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7310] rt_sigprocmask(SIG_SETMASK, [] [pid 7309] <... close resumed>) = 0 [pid 7298] <... futex resumed>) = 0 [pid 7310] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7309] mkdir("./file1", 0777 [pid 7303] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7310] memfd_create("syzkaller", 0 [pid 7309] <... mkdir resumed>) = 0 [pid 7310] <... memfd_create resumed>) = 3 [pid 7310] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7309] mount("/dev/loop0", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7300] sendfile(4, 5, NULL, 553647746 [pid 7310] <... mmap resumed>) = 0x7fef8c868000 [pid 7303] <... futex resumed>) = 0 [pid 7298] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7308] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7303] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7301] <... openat resumed>) = 4 [pid 7308] <... futex resumed>) = 0 [pid 7308] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 7301] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7310] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7308] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 7301] <... futex resumed>) = 1 [pid 7299] <... futex resumed>) = 0 [pid 7308] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 7301] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7308] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7308] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7299] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7308] <... mmap resumed>) = 0x7fef94c68000 [pid 7301] <... futex resumed>) = 0 [pid 7299] <... futex resumed>) = 1 [pid 7308] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 7301] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7299] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7308] <... mprotect resumed>) = 0 [pid 7308] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7301] <... openat resumed>) = 5 [pid 7308] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0}ci2-upstream-fs/strace-static-x86_64: Process 7313 attached [pid 7301] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7308] <... clone3 resumed> => {parent_tid=[7313]}, 88) = 7313 [pid 7308] rt_sigprocmask(SIG_SETMASK, [] [pid 7301] <... futex resumed>) = 1 [pid 7299] <... futex resumed>) = 0 [pid 7313] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7308] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7301] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7299] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7308] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7313] <... rseq resumed>) = 0 [pid 7308] <... futex resumed>) = 0 [pid 7301] <... openat resumed>) = 6 [pid 7299] <... futex resumed>) = 0 [pid 7313] set_robust_list(0x7fef94c889a0, 24 [pid 7308] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [ 162.068670][ T7309] set_capacity_and_notify: 12 callbacks suppressed [ 162.068688][ T7309] loop0: detected capacity change from 0 to 1024 [pid 7301] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7299] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7313] <... set_robust_list resumed>) = 0 [pid 7310] <... write resumed>) = 524288 [pid 7301] <... futex resumed>) = 0 [pid 7299] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7313] rt_sigprocmask(SIG_SETMASK, [] [pid 7299] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7309] <... mount resumed>) = 0 [pid 7298] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7313] memfd_create("syzkaller", 0 [pid 7301] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7299] <... futex resumed>) = 0 [pid 7298] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7313] <... memfd_create resumed>) = 3 [pid 7310] munmap(0x7fef8c868000, 138412032 [pid 7309] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7299] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7298] <... futex resumed>) = 0 [pid 7313] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7310] <... munmap resumed>) = 0 [pid 7298] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7313] <... mmap resumed>) = 0x7fef8c868000 [pid 7298] <... mmap resumed>) = 0x7fef94c47000 [pid 7298] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 7310] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7309] <... openat resumed>) = 3 [pid 7298] <... mprotect resumed>) = 0 [pid 7310] <... openat resumed>) = 4 [pid 7309] chdir("./file1" [pid 7310] ioctl(4, LOOP_SET_FD, 3 [pid 7309] <... chdir resumed>) = 0 [pid 7301] <... mmap resumed>) = 0x200000000000 [pid 7298] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7313] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7310] <... ioctl resumed>) = 0 [pid 7309] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7301] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7299] <... futex resumed>) = 0 [pid 7299] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7310] close(3 [pid 7309] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7301] sendfile(4, 5, NULL, 553647746 [pid 7298] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7310] <... close resumed>) = 0 [pid 7299] <... futex resumed>) = 0 [pid 7310] close(4 [pid 7299] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7309] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7310] <... close resumed>) = 0 [pid 7310] mkdir("./file1", 0777 [pid 7309] <... futex resumed>) = 1 [pid 7302] <... futex resumed>) = 0 [pid 7298] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 7314 attached [pid 7310] <... mkdir resumed>) = 0 [pid 7309] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7302] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7309] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7314] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7313] <... write resumed>) = 524288 [pid 7310] mount("/dev/loop4", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7309] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7302] <... futex resumed>) = 0 [pid 7298] <... clone3 resumed> => {parent_tid=[7314]}, 88) = 7314 [ 162.160129][ T7310] loop4: detected capacity change from 0 to 1024 [ 162.198383][ T37] kauditd_printk_skb: 12 callbacks suppressed [pid 7314] <... rseq resumed>) = 0 [pid 7313] munmap(0x7fef8c868000, 138412032 [pid 7309] <... openat resumed>) = 4 [pid 7302] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7298] rt_sigprocmask(SIG_SETMASK, [] [pid 7299] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7314] set_robust_list(0x7fef94c679a0, 24 [pid 7299] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7298] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7309] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7313] <... munmap resumed>) = 0 [pid 7309] <... futex resumed>) = 1 [pid 7302] <... futex resumed>) = 0 [pid 7299] <... futex resumed>) = 0 [pid 7298] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7314] <... set_robust_list resumed>) = 0 [pid 7314] rt_sigprocmask(SIG_SETMASK, [] [pid 7313] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7309] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7302] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7299] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7298] <... futex resumed>) = 0 [pid 7314] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7313] <... openat resumed>) = 4 [pid 7309] <... openat resumed>) = 5 [pid 7302] <... futex resumed>) = 0 [pid 7299] <... mmap resumed>) = 0x7fef94c47000 [pid 7298] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7302] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7299] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 7313] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7309] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7299] <... mprotect resumed>) = 0 [pid 7302] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7302] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7302] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7309] <... futex resumed>) = 0 [ 162.198400][ T37] audit: type=1800 audit(1785844692.594:337): pid=7309 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop0" ino=15 res=0 errno=0 [pid 7309] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7313] close(3 [pid 7309] <... openat resumed>) = 6 [pid 7299] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7313] <... close resumed>) = 0 [pid 7309] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7302] <... futex resumed>) = 0 [pid 7309] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7302] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7298] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 162.253909][ T7313] loop1: detected capacity change from 0 to 1024 [ 162.254227][ T7314] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 162.254412][ T7314] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 780 with error 28 [ 162.254437][ T7314] EXT4-fs (loop3): This should not happen!! Data will be lost [ 162.254437][ T7314] [ 162.254451][ T7314] EXT4-fs (loop3): Total free blocks count 0 [pid 7313] close(4 [pid 7309] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7302] <... futex resumed>) = 0 [pid 7299] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7313] <... close resumed>) = 0 [pid 7309] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7302] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7299] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 7315 attached [pid 7313] mkdir("./file1", 0777 [pid 7309] <... mmap resumed>) = 0x200000000000 [pid 7313] <... mkdir resumed>) = 0 [pid 7309] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7299] <... clone3 resumed> => {parent_tid=[7315]}, 88) = 7315 [pid 7315] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7299] rt_sigprocmask(SIG_SETMASK, [] [pid 7315] <... rseq resumed>) = 0 [pid 7313] mount("/dev/loop1", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7309] <... futex resumed>) = 1 [pid 7302] <... futex resumed>) = 0 [pid 7299] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7315] set_robust_list(0x7fef94c679a0, 24 [pid 7309] sendfile(4, 5, NULL, 553647746 [pid 7302] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7299] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7315] <... set_robust_list resumed>) = 0 [pid 7302] <... futex resumed>) = 0 [pid 7299] <... futex resumed>) = 0 [pid 7315] rt_sigprocmask(SIG_SETMASK, [] [pid 7302] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7299] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7315] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7310] <... mount resumed>) = 0 [ 162.254463][ T7314] EXT4-fs (loop3): Free/Dirty block details [ 162.254476][ T7314] EXT4-fs (loop3): free_blocks=20480 [ 162.254489][ T7314] EXT4-fs (loop3): dirty_blocks=784 [ 162.254500][ T7314] EXT4-fs (loop3): Block reservation details [ 162.254512][ T7314] EXT4-fs (loop3): i_reserved_data_blocks=49 [pid 7310] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7299] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7302] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7302] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 162.369434][ T7315] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 162.373335][ T7315] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1072 with error 28 [ 162.373366][ T7315] EXT4-fs (loop2): This should not happen!! Data will be lost [ 162.373366][ T7315] [ 162.373933][ T7315] EXT4-fs (loop2): Total free blocks count 0 [pid 7310] chdir("./file1" [pid 7302] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7310] <... chdir resumed>) = 0 [pid 7302] <... mmap resumed>) = 0x7fef94c47000 [pid 7310] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7302] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 7310] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7302] <... mprotect resumed>) = 0 [pid 7315] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7310] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7302] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7313] <... mount resumed>) = 0 [pid 7310] <... futex resumed>) = 1 [pid 7303] <... futex resumed>) = 0 [pid 7302] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 7301] <... sendfile resumed>) = ? [pid 7313] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7310] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7303] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000ci2-upstream-fs/strace-static-x86_64: Process 7320 attached [pid 7313] <... openat resumed>) = 3 [pid 7320] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7313] chdir("./file1" [pid 7310] <... openat resumed>) = 4 [pid 7303] <... futex resumed>) = 0 [pid 7302] <... clone3 resumed> => {parent_tid=[7320]}, 88) = 7320 [pid 7320] <... rseq resumed>) = 0 [pid 7315] +++ killed by SIGBUS +++ [pid 7303] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7313] <... chdir resumed>) = 0 [pid 7302] rt_sigprocmask(SIG_SETMASK, [] [pid 7320] set_robust_list(0x7fef94c679a0, 24 [pid 7313] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7310] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7302] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7320] <... set_robust_list resumed>) = 0 [pid 7313] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7310] <... futex resumed>) = 1 [pid 7303] <... futex resumed>) = 0 [pid 7302] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7301] +++ killed by SIGBUS +++ [pid 7299] +++ killed by SIGBUS +++ [pid 7320] rt_sigprocmask(SIG_SETMASK, [] [pid 7313] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7310] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7303] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7302] <... futex resumed>) = 0 [pid 7320] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7313] <... futex resumed>) = 1 [pid 7310] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7308] <... futex resumed>) = 0 [ 162.373948][ T7315] EXT4-fs (loop2): Free/Dirty block details [ 162.373961][ T7315] EXT4-fs (loop2): free_blocks=20480 [ 162.373974][ T7315] EXT4-fs (loop2): dirty_blocks=1072 [ 162.373985][ T7315] EXT4-fs (loop2): Block reservation details [ 162.373996][ T7315] EXT4-fs (loop2): i_reserved_data_blocks=67 [ 162.449420][ T37] audit: type=1800 audit(1785844692.844:338): pid=7310 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop4" ino=15 res=0 errno=0 [pid 7303] <... futex resumed>) = 0 [pid 7302] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7299, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 7314] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7310] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7300] <... sendfile resumed>) = 798720 [pid 7313] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7310] <... openat resumed>) = 5 [pid 7308] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7303] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7310] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7308] <... futex resumed>) = 0 [pid 7303] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7313] <... openat resumed>) = 4 [pid 7310] <... futex resumed>) = 0 [pid 7308] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7303] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 7310] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7313] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7303] <... futex resumed>) = 0 [pid 5611] <... restart_syscall resumed>) = 0 [pid 7313] <... futex resumed>) = 1 [pid 7310] <... openat resumed>) = 6 [pid 7308] <... futex resumed>) = 0 [pid 7303] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7313] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7310] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7308] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7313] <... openat resumed>) = 5 [pid 7308] <... futex resumed>) = 0 [pid 7314] +++ killed by SIGBUS +++ [pid 7313] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7310] <... futex resumed>) = 1 [pid 7308] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7303] <... futex resumed>) = 0 [pid 5611] umount2("./67", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7310] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7313] <... futex resumed>) = 0 [ 162.488456][ T7320] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 162.489677][ T7320] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 372 with error 28 [ 162.489705][ T7320] EXT4-fs (loop0): This should not happen!! Data will be lost [ 162.489705][ T7320] [ 162.489720][ T7320] EXT4-fs (loop0): Total free blocks count 0 [ 162.489732][ T7320] EXT4-fs (loop0): Free/Dirty block details [pid 7310] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7303] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7313] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7308] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7302] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7310] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7303] <... futex resumed>) = 0 [pid 7300] +++ killed by SIGBUS +++ [pid 7298] +++ killed by SIGBUS +++ [pid 5611] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7320] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7313] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7310] <... mmap resumed>) = 0x200000000000 [pid 7308] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7303] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7313] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7310] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7309] <... sendfile resumed>) = ? [pid 7308] <... futex resumed>) = 0 [pid 7303] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5612] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7298, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5611] <... openat resumed>) = 3 [pid 7320] +++ killed by SIGBUS +++ [pid 7313] <... openat resumed>) = 6 [pid 7310] <... futex resumed>) = 0 [pid 7308] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7303] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 7313] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7310] sendfile(4, 5, NULL, 553647746 [pid 7303] <... futex resumed>) = 0 [pid 7313] <... futex resumed>) = 1 [pid 7308] <... futex resumed>) = 0 [pid 7303] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7309] +++ killed by SIGBUS +++ [pid 7302] +++ killed by SIGBUS +++ [pid 5612] <... restart_syscall resumed>) = 0 [pid 5611] fstat(3 [pid 7308] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7308] <... futex resumed>) = 0 [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7302, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7313] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7308] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] getdents64(3 [pid 7313] <... mmap resumed>) = 0x200000000000 [pid 5612] umount2("./67", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7313] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5611] umount2("./67/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7313] <... futex resumed>) = 1 [pid 7308] <... futex resumed>) = 0 [pid 5612] <... openat resumed>) = 3 [pid 7313] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7308] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] fstat(3 [pid 7313] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7308] <... futex resumed>) = 0 [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 162.489744][ T7320] EXT4-fs (loop0): free_blocks=20480 [ 162.489758][ T7320] EXT4-fs (loop0): dirty_blocks=384 [ 162.489770][ T7320] EXT4-fs (loop0): Block reservation details [ 162.489780][ T7320] EXT4-fs (loop0): i_reserved_data_blocks=24 [ 162.504766][ T37] audit: type=1800 audit(1785844692.904:339): pid=7313 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop1" ino=15 res=0 errno=0 [pid 7308] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] getdents64(3 [pid 7313] sendfile(4, 5, NULL, 553647746 [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5612] umount2("./67/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] umount2("./67", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3 [pid 7303] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7303] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] getdents64(3 [pid 7303] <... futex resumed>) = 0 [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 7303] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c47000 [pid 5609] umount2("./67/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7303] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7303] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7303] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 7308] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7308] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7308] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c47000 [pid 7308] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITEci2-upstream-fs/strace-static-x86_64: Process 7321 attached ) = 0 [pid 7303] <... clone3 resumed> => {parent_tid=[7321]}, 88) = 7321 [pid 7308] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7303] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7303] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7321] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7308] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7303] <... futex resumed>) = 0 [ 162.658674][ T5611] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 162.681619][ T55] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 372 with max blocks 4 with error 28 [ 162.681648][ T55] EXT4-fs (loop0): This should not happen!! Data will be lost [pid 7321] <... rseq resumed>) = 0 [pid 7308] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 7303] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-upstream-fs/strace-static-x86_64: Process 7322 attached [pid 7321] set_robust_list(0x7fef94c679a0, 24) = 0 [pid 7308] <... clone3 resumed> => {parent_tid=[7322]}, 88) = 7322 [pid 7321] rt_sigprocmask(SIG_SETMASK, [] [pid 7308] rt_sigprocmask(SIG_SETMASK, [] [pid 7322] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7321] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7308] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7322] <... rseq resumed>) = 0 [pid 7308] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7322] set_robust_list(0x7fef94c679a0, 24 [pid 7308] <... futex resumed>) = 0 [pid 7322] <... set_robust_list resumed>) = 0 [pid 7308] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 162.681648][ T55] [ 162.692211][ T5609] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 162.708932][ T7321] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 162.711754][ T7321] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 616 with error 28 [ 162.711783][ T7321] EXT4-fs (loop4): This should not happen!! Data will be lost [ 162.711783][ T7321] [pid 7322] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7303] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7322] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7313] <... sendfile resumed>) = 155648 [ 162.711796][ T7321] EXT4-fs (loop4): Total free blocks count 0 [ 162.711809][ T7321] EXT4-fs (loop4): Free/Dirty block details [ 162.711821][ T7321] EXT4-fs (loop4): free_blocks=20480 [ 162.711833][ T7321] EXT4-fs (loop4): dirty_blocks=624 [ 162.711844][ T7321] EXT4-fs (loop4): Block reservation details [ 162.711855][ T7321] EXT4-fs (loop4): i_reserved_data_blocks=39 [ 162.717220][ T5612] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 7313] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7313] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL) = ? [pid 7308] <... futex resumed>) = ? [pid 7313] +++ killed by SIGBUS +++ [pid 7322] +++ killed by SIGBUS +++ [pid 7308] +++ killed by SIGBUS +++ [pid 7321] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [ 162.738596][ T7322] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 162.738804][ T7322] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 152 with error 28 [ 162.738826][ T7322] EXT4-fs (loop1): This should not happen!! Data will be lost [ 162.738826][ T7322] [ 162.738839][ T7322] EXT4-fs (loop1): Total free blocks count 0 [ 162.738851][ T7322] EXT4-fs (loop1): Free/Dirty block details [ 162.738864][ T7322] EXT4-fs (loop1): free_blocks=20480 [pid 5611] <... umount2 resumed>) = 0 [pid 5610] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7308, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5610] umount2("./66", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5610] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5611] umount2("./67/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5611] newfstatat(AT_FDCWD, "./67/file1" [pid 5610] fstat(3 [pid 5611] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5611] umount2("./67/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] getdents64(3 [pid 7321] +++ killed by SIGBUS +++ [pid 7310] <... sendfile resumed>) = ? [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5610] umount2("./66/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] openat(AT_FDCWD, "./67/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5611] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5611] getdents64(4, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 7310] +++ killed by SIGBUS +++ [pid 7303] +++ killed by SIGBUS +++ [pid 5611] getdents64(4, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7303, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5611] close(4 [pid 5614] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 5611] <... close resumed>) = 0 [pid 5609] <... umount2 resumed>) = 0 [pid 5611] rmdir("./67/file1" [pid 5609] umount2("./67/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] <... rmdir resumed>) = 0 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5614] <... restart_syscall resumed>) = 0 [pid 5609] newfstatat(AT_FDCWD, "./67/file1" [pid 5611] umount2("./67/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5611] newfstatat(AT_FDCWD, "./67/binderfs" [pid 5614] umount2("./66", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] unlink("./67/binderfs" [pid 5609] umount2("./67/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5614] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5612] <... umount2 resumed>) = 0 [pid 5611] <... unlink resumed>) = 0 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5614] <... openat resumed>) = 3 [pid 5612] umount2("./67/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] getdents64(3 [pid 5609] openat(AT_FDCWD, "./67/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5614] fstat(3 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5612] newfstatat(AT_FDCWD, "./67/file1" [pid 5609] <... openat resumed>) = 4 [pid 5614] getdents64(3 [pid 5612] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] close(3 [pid 5609] fstat(4 [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5612] umount2("./67/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] <... close resumed>) = 0 [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5614] umount2("./66/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] rmdir("./67" [pid 5609] getdents64(4 [pid 5612] openat(AT_FDCWD, "./67/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5611] <... rmdir resumed>) = 0 [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5612] <... openat resumed>) = 4 [pid 5609] getdents64(4 [pid 5611] mkdir("./68", 0777 [pid 5612] fstat(4 [pid 5611] <... mkdir resumed>) = 0 [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] close(4 [pid 5612] getdents64(4 [pid 5609] <... close resumed>) = 0 [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5609] rmdir("./67/file1" [pid 5612] getdents64(4 [pid 5609] <... rmdir resumed>) = 0 [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5611] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5612] close(4 [pid 5611] <... openat resumed>) = 3 [pid 5612] <... close resumed>) = 0 [pid 5611] ioctl(3, LOOP_CLR_FD [pid 5612] rmdir("./67/file1" [pid 5611] <... ioctl resumed>) = 0 [pid 5611] close(3 [pid 5609] umount2("./67/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] <... close resumed>) = 0 [pid 5611] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5609] newfstatat(AT_FDCWD, "./67/binderfs" [pid 5611] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5609] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5612] <... rmdir resumed>) = 0 [pid 5609] unlink("./67/binderfs" [ 162.738877][ T7322] EXT4-fs (loop1): dirty_blocks=160 [ 162.738888][ T7322] EXT4-fs (loop1): Block reservation details [ 162.738899][ T7322] EXT4-fs (loop1): i_reserved_data_blocks=10 [ 162.870500][ T5610] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 5612] umount2("./67/binderfs", MNT_FORCE|UMOUNT_NOFOLLOWci2-upstream-fs/strace-static-x86_64: Process 7323 attached ) = -1 EINVAL (Invalid argument) [pid 5609] <... unlink resumed>) = 0 [pid 7323] set_robust_list(0x5555748a66e0, 24 [pid 5612] newfstatat(AT_FDCWD, "./67/binderfs" [pid 7323] <... set_robust_list resumed>) = 0 [pid 5612] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7323] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] unlink("./67/binderfs" [pid 7323] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5612] <... unlink resumed>) = 0 [pid 7323] chdir("./68" [pid 5612] getdents64(3 [pid 7323] <... chdir resumed>) = 0 [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 7323] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5612] close(3 [pid 7323] <... prctl resumed>) = 0 [pid 5612] <... close resumed>) = 0 [pid 7323] setpgid(0, 0 [pid 5612] rmdir("./67" [pid 7323] <... setpgid resumed>) = 0 [pid 5612] <... rmdir resumed>) = 0 [pid 5610] <... umount2 resumed>) = 0 [pid 7323] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5610] umount2("./66/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5610] newfstatat(AT_FDCWD, "./66/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7323] <... openat resumed>) = 3 [pid 5610] umount2("./66/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7323] write(3, "1000", 4 [pid 5612] mkdir("./68", 0777 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7323] <... write resumed>) = 4 [pid 5612] <... mkdir resumed>) = 0 [pid 5611] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7323 [pid 5610] openat(AT_FDCWD, "./66/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5609] getdents64(3 [pid 7323] close(3 [pid 5610] <... openat resumed>) = 4 [pid 7323] <... close resumed>) = 0 [pid 5612] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5611] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] fstat(4 [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 7323] symlink("/dev/binderfs", "./binderfs" [pid 5612] <... openat resumed>) = 3 [pid 5611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] close(3 [pid 5610] getdents64(4 [pid 5609] <... close resumed>) = 0 [pid 5612] ioctl(3, LOOP_CLR_FD [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5609] rmdir("./67" [pid 7323] <... symlink resumed>) = 0 [pid 5612] <... ioctl resumed>) = 0 [pid 5610] getdents64(4 [pid 5609] <... rmdir resumed>) = 0 [pid 5612] close(3 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 7323] write(1, "executing program\n", 18 [pid 5610] close(4 [pid 5609] mkdir("./68", 0777) = 0 executing program [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 7323] <... write resumed>) = 18 [pid 5614] <... umount2 resumed>) = 0 [pid 5612] <... close resumed>) = 0 [pid 5610] <... close resumed>) = 0 [pid 7323] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [ 162.914830][ T3414] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 616 with max blocks 4 with error 28 [ 162.914874][ T3414] EXT4-fs (loop4): This should not happen!! Data will be lost [ 162.914874][ T3414] [ 162.921531][ T5614] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 5614] umount2("./66/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] ioctl(3, LOOP_CLR_FD [pid 7323] <... futex resumed>) = 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5612] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7323] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 5614] newfstatat(AT_FDCWD, "./66/file1" [pid 5612] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5610] rmdir("./66/file1" [pid 5609] <... ioctl resumed>) = 0 [pid 7323] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5612] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7323] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 5610] <... rmdir resumed>) = 0 [pid 5609] close(3 [pid 7323] <... rt_sigprocmask resumed>, NULL, 8) = 0 ci2-upstream-fs/strace-static-x86_64: Process 7324 attached [pid 7323] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5614] umount2("./66/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7323] <... mmap resumed>) = 0x7fef94c68000 [pid 7323] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] umount2("./66/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7324] set_robust_list(0x5555748a66e0, 24 [pid 7323] <... mprotect resumed>) = 0 [pid 5614] openat(AT_FDCWD, "./66/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7324] <... set_robust_list resumed>) = 0 [pid 5614] <... openat resumed>) = 4 [pid 5612] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7324 [pid 5614] fstat(4 [pid 5612] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7324] rt_sigprocmask(SIG_SETMASK, [] [pid 7323] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5612] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] newfstatat(AT_FDCWD, "./66/binderfs" [pid 7323] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5610] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7323] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 5610] unlink("./66/binderfs" [pid 7323] <... clone3 resumed> => {parent_tid=[7325]}, 88) = 7325 [pid 5610] <... unlink resumed>) = 0 [pid 7323] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] <... close resumed>) = 0 [pid 7323] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7323] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] getdents64(3 [pid 7323] <... futex resumed>) = 0 [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 7323] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5610] close(3) = 0 [pid 5610] rmdir("./66" [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5610] <... rmdir resumed>) = 0 [pid 5609] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5614] getdents64(4 [pid 7324] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 7325 attached [pid 7324] chdir("./68" [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5610] mkdir("./67", 0777ci2-upstream-fs/strace-static-x86_64: Process 7326 attached [pid 7325] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7324] <... chdir resumed>) = 0 [pid 5614] getdents64(4 [pid 5610] <... mkdir resumed>) = 0 [pid 7325] <... rseq resumed>) = 0 [pid 7324] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5609] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7326 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7324] <... prctl resumed>) = 0 [pid 5614] close(4 [pid 5610] <... openat resumed>) = 3 [pid 7324] setpgid(0, 0 [pid 5614] <... close resumed>) = 0 [pid 5610] ioctl(3, LOOP_CLR_FD [pid 5614] rmdir("./66/file1" [pid 7324] <... setpgid resumed>) = 0 [pid 5610] <... ioctl resumed>) = 0 [pid 5610] close(3) = 0 [pid 7324] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5610] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5614] <... rmdir resumed>) = 0 [pid 7324] <... openat resumed>) = 3 [pid 5610] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7326] set_robust_list(0x5555748a66e0, 24 [pid 7325] set_robust_list(0x7fef94c889a0, 24 [pid 7324] write(3, "1000", 4 [pid 5614] umount2("./66/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7324] <... write resumed>) = 4 [pid 5610] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7326] <... set_robust_list resumed>) = 0 [pid 7325] <... set_robust_list resumed>) = 0 [pid 7324] close(3 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7326] rt_sigprocmask(SIG_SETMASK, [] [pid 7325] rt_sigprocmask(SIG_SETMASK, [] [pid 7324] <... close resumed>) = 0 [pid 5614] newfstatat(AT_FDCWD, "./66/binderfs" [pid 7326] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7325] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7324] symlink("/dev/binderfs", "./binderfs" [pid 5614] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7324] <... symlink resumed>) = 0 [pid 5614] unlink("./66/binderfs" [pid 5610] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7327 [pid 7325] memfd_create("syzkaller", 0 [pid 7324] write(1, "executing program\n", 18 [pid 5614] <... unlink resumed>) = 0 [pid 5610] rt_sigprocmask(SIG_SETMASK, [] [pid 7326] chdir("./68" [pid 7324] <... write resumed>) = 18 [pid 5614] getdents64(3 [pid 5610] <... rt_sigprocmask resumed>, NULL, 8) = 0 executing program [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 7324] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000ci2-upstream-fs/strace-static-x86_64: Process 7327 attached ) = 0 [pid 5614] close(3 [pid 7327] set_robust_list(0x5555748a66e0, 24 [pid 7326] <... chdir resumed>) = 0 [pid 7325] <... memfd_create resumed>) = 3 [pid 7324] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 5614] <... close resumed>) = 0 [pid 7327] <... set_robust_list resumed>) = 0 [pid 7325] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7324] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 5614] rmdir("./66") = 0 [pid 7324] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 7325] <... mmap resumed>) = 0x7fef8c868000 [pid 7324] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7327] rt_sigprocmask(SIG_SETMASK, [] [pid 7324] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7326] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7324] <... mmap resumed>) = 0x7fef94c68000 [pid 5614] mkdir("./67", 0777 [pid 7324] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5614] <... mkdir resumed>) = 0 [pid 7327] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7326] <... prctl resumed>) = 0 [pid 7324] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7326] setpgid(0, 0 [pid 7327] chdir("./67" [pid 7326] <... setpgid resumed>) = 0 [pid 7325] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7324] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5614] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 7324] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 7326] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5614] ioctl(3, LOOP_CLR_FDci2-upstream-fs/strace-static-x86_64: Process 7328 attached [pid 7327] <... chdir resumed>) = 0 [pid 7326] <... openat resumed>) = 3 [pid 7324] <... clone3 resumed> => {parent_tid=[7328]}, 88) = 7328 [pid 5614] <... ioctl resumed>) = 0 [pid 7324] rt_sigprocmask(SIG_SETMASK, [] [pid 7327] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5614] close(3 [pid 7326] write(3, "1000", 4 [pid 7324] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7327] <... prctl resumed>) = 0 [pid 7326] <... write resumed>) = 4 [pid 7324] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7326] close(3 [pid 7324] <... futex resumed>) = 0 [pid 7327] setpgid(0, 0 [pid 7324] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7328] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7327] <... setpgid resumed>) = 0 [pid 7326] <... close resumed>) = 0 [pid 7328] <... rseq resumed>) = 0 [pid 7327] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7328] set_robust_list(0x7fef94c889a0, 24 [pid 7327] <... openat resumed>) = 3 [pid 7326] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7328] <... set_robust_list resumed>) = 0 [pid 7327] write(3, "1000", 4) = 4 [pid 7328] rt_sigprocmask(SIG_SETMASK, [] [pid 7327] close(3 [pid 7328] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7327] <... close resumed>) = 0 [pid 7328] memfd_create("syzkaller", 0 [pid 7327] symlink("/dev/binderfs", "./binderfs" [pid 7326] write(1, "executing program\n", 18 [pid 5614] <... close resumed>) = 0 executing program [pid 7328] <... memfd_create resumed>) = 3 [pid 7327] <... symlink resumed>) = 0 [pid 7326] <... write resumed>) = 18 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7328] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7327] write(1, "executing program\n", 18 [pid 7326] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... rt_sigprocmask resumed>, [], 8) = 0 executing program [pid 7328] <... mmap resumed>) = 0x7fef8c868000 [pid 7327] <... write resumed>) = 18 [pid 7326] <... futex resumed>) = 0 [pid 7325] <... write resumed>) = 524288 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 7329 attached [pid 7326] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 7327] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7326] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 7325] munmap(0x7fef8c868000, 138412032 [pid 7329] set_robust_list(0x5555748a66e0, 24 [pid 7327] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 7326] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 5614] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7329 [pid 7325] <... munmap resumed>) = 0 [pid 7329] <... set_robust_list resumed>) = 0 [pid 7328] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7327] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 7326] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7325] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 7329] rt_sigprocmask(SIG_SETMASK, [] [pid 7327] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 7326] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7329] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7327] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7326] <... mmap resumed>) = 0x7fef94c68000 [pid 7329] chdir("./67" [pid 7326] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 7327] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7326] <... mprotect resumed>) = 0 [pid 7329] <... chdir resumed>) = 0 [pid 7329] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7327] <... mmap resumed>) = 0x7fef94c68000 [pid 7326] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7329] <... prctl resumed>) = 0 [pid 7327] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 7329] setpgid(0, 0 [pid 7325] <... openat resumed>) = 4 [pid 7329] <... setpgid resumed>) = 0 [pid 7327] <... mprotect resumed>) = 0 [pid 7326] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7329] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7327] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7326] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 7325] ioctl(4, LOOP_SET_FD, 3ci2-upstream-fs/strace-static-x86_64: Process 7330 attached [pid 7327] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7329] <... openat resumed>) = 3 [pid 7325] <... ioctl resumed>) = 0 [pid 7330] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7329] write(3, "1000", 4 [pid 7328] <... write resumed>) = 524288 [pid 7327] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 7326] <... clone3 resumed> => {parent_tid=[7330]}, 88) = 7330 [pid 7325] close(3ci2-upstream-fs/strace-static-x86_64: Process 7331 attached [pid 7330] <... rseq resumed>) = 0 [pid 7329] <... write resumed>) = 4 [pid 7328] munmap(0x7fef8c868000, 138412032 [pid 7326] rt_sigprocmask(SIG_SETMASK, [] [pid 7325] <... close resumed>) = 0 [pid 7331] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7330] set_robust_list(0x7fef94c889a0, 24 [pid 7329] close(3 [pid 7328] <... munmap resumed>) = 0 [pid 7327] <... clone3 resumed> => {parent_tid=[7331]}, 88) = 7331 [pid 7326] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7325] close(4 [pid 7331] <... rseq resumed>) = 0 [pid 7330] <... set_robust_list resumed>) = 0 [pid 7329] <... close resumed>) = 0 [pid 7328] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7327] rt_sigprocmask(SIG_SETMASK, [] [pid 7326] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7325] <... close resumed>) = 0 [ 163.145214][ T7325] loop2: detected capacity change from 0 to 1024 [pid 7331] set_robust_list(0x7fef94c889a0, 24 [pid 7330] rt_sigprocmask(SIG_SETMASK, [] [pid 7329] symlink("/dev/binderfs", "./binderfs" [pid 7328] <... openat resumed>) = 4 [pid 7327] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7326] <... futex resumed>) = 0 [pid 7325] mkdir("./file1", 0777 [pid 7331] <... set_robust_list resumed>) = 0 [pid 7330] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7329] <... symlink resumed>) = 0 [pid 7328] ioctl(4, LOOP_SET_FD, 3 [pid 7327] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7326] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7325] <... mkdir resumed>) = 0 [pid 7331] rt_sigprocmask(SIG_SETMASK, [] [pid 7330] memfd_create("syzkaller", 0 [pid 7329] write(1, "executing program\n", 18 [pid 7327] <... futex resumed>) = 0 executing program [pid 7325] mount("/dev/loop2", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7331] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7330] <... memfd_create resumed>) = 3 [pid 7329] <... write resumed>) = 18 [pid 7328] <... ioctl resumed>) = 0 [pid 7327] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7331] memfd_create("syzkaller", 0 [pid 7330] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7328] close(3 [pid 7331] <... memfd_create resumed>) = 3 [pid 7330] <... mmap resumed>) = 0x7fef8c868000 [pid 7328] <... close resumed>) = 0 [pid 7329] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7331] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7329] <... futex resumed>) = 0 [pid 7329] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 7331] <... mmap resumed>) = 0x7fef8c868000 [pid 7329] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 7328] close(4 [pid 7330] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7329] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7328] <... close resumed>) = 0 [pid 7329] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c68000 [pid 7328] mkdir("./file1", 0777 [pid 7329] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7329] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7329] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0}ci2-upstream-fs/strace-static-x86_64: Process 7334 attached => {parent_tid=[7334]}, 88) = 7334 [pid 7329] rt_sigprocmask(SIG_SETMASK, [] [pid 7328] <... mkdir resumed>) = 0 [pid 7329] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7329] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7329] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7334] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7328] mount("/dev/loop3", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7334] <... rseq resumed>) = 0 [pid 7331] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7325] <... mount resumed>) = 0 [pid 7334] set_robust_list(0x7fef94c889a0, 24 [pid 7330] <... write resumed>) = 524288 [pid 7334] <... set_robust_list resumed>) = 0 [pid 7325] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7334] rt_sigprocmask(SIG_SETMASK, [] [pid 7330] munmap(0x7fef8c868000, 138412032 [pid 7325] chdir("./file1" [pid 7334] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7325] <... chdir resumed>) = 0 [pid 7334] memfd_create("syzkaller", 0 [pid 7325] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7330] <... munmap resumed>) = 0 [pid 7325] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 163.239116][ T7328] loop3: detected capacity change from 0 to 1024 [pid 7331] <... write resumed>) = 524288 [pid 7334] <... memfd_create resumed>) = 3 [pid 7330] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7325] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7334] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7331] munmap(0x7fef8c868000, 138412032 [pid 7330] <... openat resumed>) = 4 [pid 7325] <... futex resumed>) = 1 [pid 7323] <... futex resumed>) = 0 [pid 7334] <... mmap resumed>) = 0x7fef8c868000 [pid 7331] <... munmap resumed>) = 0 [pid 7330] ioctl(4, LOOP_SET_FD, 3 [pid 7325] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7323] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7325] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7323] <... futex resumed>) = 0 [pid 7331] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7331] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7330] <... ioctl resumed>) = 0 [pid 7325] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7323] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7334] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7330] close(3 [pid 7331] close(3) = 0 [pid 7330] <... close resumed>) = 0 [pid 7328] <... mount resumed>) = 0 [pid 7330] close(4 [pid 7325] <... openat resumed>) = 4 [ 163.316409][ T7330] loop0: detected capacity change from 0 to 1024 [ 163.316879][ T7331] loop1: detected capacity change from 0 to 1024 [pid 7328] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7331] close(4 [pid 7330] <... close resumed>) = 0 [pid 7328] <... openat resumed>) = 3 [pid 7325] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7334] <... write resumed>) = 524288 [pid 7331] <... close resumed>) = 0 [pid 7328] chdir("./file1" [pid 7325] <... futex resumed>) = 0 [pid 7323] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7334] munmap(0x7fef8c868000, 138412032 [pid 7331] mkdir("./file1", 0777 [pid 7330] mkdir("./file1", 0777 [pid 7328] <... chdir resumed>) = 0 [pid 7325] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7323] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7334] <... munmap resumed>) = 0 [pid 7331] <... mkdir resumed>) = 0 [pid 7330] <... mkdir resumed>) = 0 [pid 7328] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7325] <... openat resumed>) = 5 [pid 7323] <... futex resumed>) = 0 [pid 7328] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7325] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7323] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7325] <... futex resumed>) = 0 [pid 7334] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7325] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7323] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7328] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7324] <... futex resumed>) = 0 [pid 7323] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7324] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7334] <... openat resumed>) = 4 [pid 7325] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7324] <... futex resumed>) = 0 [pid 7323] <... futex resumed>) = 0 [pid 7328] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7334] ioctl(4, LOOP_SET_FD, 3 [pid 7325] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7324] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7323] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7334] <... ioctl resumed>) = 0 [pid 7331] mount("/dev/loop1", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7325] <... openat resumed>) = 6 [ 163.348949][ T37] audit: type=1800 audit(1785844693.744:340): pid=7325 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop2" ino=15 res=0 errno=0 [pid 7330] mount("/dev/loop0", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7334] close(3 [pid 7328] <... openat resumed>) = 4 [pid 7325] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7334] <... close resumed>) = 0 [pid 7325] <... futex resumed>) = 1 [pid 7323] <... futex resumed>) = 0 [pid 7334] close(4 [pid 7325] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7323] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7334] <... close resumed>) = 0 [pid 7334] mkdir("./file1", 0777 [pid 7328] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7325] <... mmap resumed>) = 0x200000000000 [pid 7323] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7334] <... mkdir resumed>) = 0 [pid 7328] <... futex resumed>) = 1 [pid 7324] <... futex resumed>) = 0 [pid 7324] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7324] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7325] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7334] mount("/dev/loop4", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7328] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7323] <... futex resumed>) = 0 [pid 7328] <... openat resumed>) = 5 [pid 7325] sendfile(4, 5, NULL, 553647746 [pid 7323] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7328] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7324] <... futex resumed>) = 0 [pid 7323] <... futex resumed>) = 0 [pid 7331] <... mount resumed>) = 0 [pid 7330] <... mount resumed>) = 0 [pid 7328] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7324] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7323] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7324] <... futex resumed>) = 0 [pid 7324] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7331] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7330] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7328] <... openat resumed>) = 6 [pid 7330] <... openat resumed>) = 3 [pid 7331] <... openat resumed>) = 3 [pid 7330] chdir("./file1" [pid 7328] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7324] <... futex resumed>) = 0 [pid 7331] chdir("./file1" [pid 7328] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7324] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7331] <... chdir resumed>) = 0 [pid 7330] <... chdir resumed>) = 0 [pid 7328] <... mmap resumed>) = 0x200000000000 [pid 7324] <... futex resumed>) = 0 [pid 7331] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7330] openat(AT_FDCWD, "/dev/loop0", O_RDWR [ 163.393519][ T7334] loop4: detected capacity change from 0 to 1024 [ 163.407888][ T37] audit: type=1800 audit(1785844693.804:341): pid=7328 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop3" ino=15 res=0 errno=0 [pid 7324] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7331] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7330] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7331] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7328] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7331] <... futex resumed>) = 1 [pid 7328] <... futex resumed>) = 1 [pid 7324] <... futex resumed>) = 0 [pid 7328] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7327] <... futex resumed>) = 0 [pid 7324] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7328] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7327] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7324] <... futex resumed>) = 0 [pid 7331] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7330] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7328] sendfile(4, 5, NULL, 553647746 [pid 7330] <... futex resumed>) = 1 [pid 7327] <... futex resumed>) = 0 [pid 7326] <... futex resumed>) = 0 [pid 7324] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7327] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7326] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7330] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7326] <... futex resumed>) = 0 [pid 7334] <... mount resumed>) = 0 [pid 7326] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7330] <... openat resumed>) = 4 [pid 7334] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7334] chdir("./file1" [pid 7331] <... openat resumed>) = 4 [pid 7330] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7323] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7334] <... chdir resumed>) = 0 [pid 7331] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7330] <... futex resumed>) = 1 [pid 7326] <... futex resumed>) = 0 [pid 7323] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7334] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7331] <... futex resumed>) = 1 [pid 7330] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7327] <... futex resumed>) = 0 [pid 7326] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7324] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7323] <... futex resumed>) = 0 [pid 7334] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7331] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7330] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7327] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7326] <... futex resumed>) = 0 [pid 7324] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7323] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7334] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7331] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7330] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7327] <... futex resumed>) = 0 [pid 7326] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7324] <... futex resumed>) = 0 [pid 7323] <... mmap resumed>) = 0x7fef94c47000 [pid 7334] <... futex resumed>) = 1 [pid 7331] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7330] <... openat resumed>) = 5 [pid 7329] <... futex resumed>) = 0 [pid 7327] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7324] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7323] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 7331] <... openat resumed>) = 5 [pid 7334] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7329] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7324] <... mmap resumed>) = 0x7fef94c47000 [pid 7334] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7331] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7330] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7329] <... futex resumed>) = 0 [pid 7324] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 7323] <... mprotect resumed>) = 0 [pid 7329] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7323] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7334] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7323] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7324] <... mprotect resumed>) = 0 [pid 7323] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 7330] <... futex resumed>) = 1 [pid 7326] <... futex resumed>) = 0 [pid 7324] rt_sigprocmask(SIG_BLOCK, ~[]ci2-upstream-fs/strace-static-x86_64: Process 7343 attached [pid 7331] <... futex resumed>) = 1 [pid 7330] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7327] <... futex resumed>) = 0 [pid 7326] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7324] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7330] <... openat resumed>) = 6 [pid 7327] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7326] <... futex resumed>) = 0 [pid 7324] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 7343] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7331] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7327] <... futex resumed>) = 0 [pid 7326] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7323] <... clone3 resumed> => {parent_tid=[7343]}, 88) = 7343 ci2-upstream-fs/strace-static-x86_64: Process 7344 attached [pid 7343] <... rseq resumed>) = 0 [pid 7334] <... openat resumed>) = 4 [pid 7331] <... openat resumed>) = 6 [pid 7330] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7327] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7323] rt_sigprocmask(SIG_SETMASK, [] [pid 7344] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7334] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7330] <... futex resumed>) = 1 [pid 7326] <... futex resumed>) = 0 [ 163.500862][ T37] audit: type=1800 audit(1785844693.894:342): pid=7330 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 163.510529][ T37] audit: type=1800 audit(1785844693.904:343): pid=7331 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop1" ino=15 res=0 errno=0 [pid 7324] <... clone3 resumed> => {parent_tid=[7344]}, 88) = 7344 [pid 7323] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7344] <... rseq resumed>) = 0 [pid 7343] set_robust_list(0x7fef94c679a0, 24 [pid 7334] <... futex resumed>) = 1 [pid 7331] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7330] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7329] <... futex resumed>) = 0 [pid 7326] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7324] rt_sigprocmask(SIG_SETMASK, [] [pid 7323] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7344] set_robust_list(0x7fef94c679a0, 24 [pid 7343] <... set_robust_list resumed>) = 0 [pid 7334] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7331] <... futex resumed>) = 1 [pid 7330] <... mmap resumed>) = 0x200000000000 [pid 7329] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7327] <... futex resumed>) = 0 [pid 7326] <... futex resumed>) = 0 [pid 7324] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7323] <... futex resumed>) = 0 [pid 7344] <... set_robust_list resumed>) = 0 [pid 7343] rt_sigprocmask(SIG_SETMASK, [] [pid 7334] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7331] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7330] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7329] <... futex resumed>) = 0 [pid 7327] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7326] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7324] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7344] rt_sigprocmask(SIG_SETMASK, [] [pid 7343] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7334] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7331] <... mmap resumed>) = 0x200000000000 [pid 7330] <... futex resumed>) = 0 [pid 7329] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7327] <... futex resumed>) = 0 [pid 7326] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7324] <... futex resumed>) = 0 [pid 7323] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7344] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7330] sendfile(4, 5, NULL, 553647746 [pid 7327] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7326] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7324] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7334] <... openat resumed>) = 5 [pid 7331] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7327] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7326] <... futex resumed>) = 0 [pid 7331] <... futex resumed>) = 0 [pid 7327] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7326] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7331] sendfile(4, 5, NULL, 553647746 [pid 7327] <... futex resumed>) = 0 [ 163.563483][ T37] audit: type=1800 audit(1785844693.964:344): pid=7334 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 163.591250][ T7343] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 163.592943][ T7343] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 344 with error 28 [pid 7327] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7343] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7329] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7329] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7324] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7334] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7329] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7334] <... futex resumed>) = 0 [pid 7329] <... mmap resumed>) = 0x7fef94c47000 [pid 7334] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7329] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7329] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7326] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7326] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7326] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7329] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 7326] <... mmap resumed>) = 0x7fef94c47000 ci2-upstream-fs/strace-static-x86_64: Process 7345 attached [pid 7327] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7327] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7326] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 7327] <... futex resumed>) = 0 [pid 7326] <... mprotect resumed>) = 0 [pid 7329] <... clone3 resumed> => {parent_tid=[7345]}, 88) = 7345 [pid 7327] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [ 163.592974][ T7343] EXT4-fs (loop2): This should not happen!! Data will be lost [ 163.592974][ T7343] [ 163.592987][ T7343] EXT4-fs (loop2): Total free blocks count 0 [ 163.593000][ T7343] EXT4-fs (loop2): Free/Dirty block details [ 163.593012][ T7343] EXT4-fs (loop2): free_blocks=20480 [ 163.593024][ T7343] EXT4-fs (loop2): dirty_blocks=352 [ 163.593035][ T7343] EXT4-fs (loop2): Block reservation details [ 163.593046][ T7343] EXT4-fs (loop2): i_reserved_data_blocks=22 [pid 7326] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7345] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7329] rt_sigprocmask(SIG_SETMASK, [] [pid 7327] <... mmap resumed>) = 0x7fef94c47000 [pid 7326] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7345] <... rseq resumed>) = 0 [pid 7329] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7327] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 7326] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 7345] set_robust_list(0x7fef94c679a0, 24 [pid 7329] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7327] <... mprotect resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 7346 attached [pid 7345] <... set_robust_list resumed>) = 0 [pid 7329] <... futex resumed>) = 0 [pid 7345] rt_sigprocmask(SIG_SETMASK, [] [pid 7329] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7345] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7327] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7346] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7345] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7326] <... clone3 resumed> => {parent_tid=[7346]}, 88) = 7346 [pid 7327] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7346] <... rseq resumed>) = 0 [pid 7345] <... openat resumed>) = 6 [pid 7327] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 7326] rt_sigprocmask(SIG_SETMASK, []ci2-upstream-fs/strace-static-x86_64: Process 7347 attached [pid 7346] set_robust_list(0x7fef94c679a0, 24 [pid 7345] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7326] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7346] <... set_robust_list resumed>) = 0 [pid 7326] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7346] rt_sigprocmask(SIG_SETMASK, [] [pid 7345] <... futex resumed>) = 1 [pid 7329] <... futex resumed>) = 0 [pid 7347] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7346] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7345] futex(0x7fef94d63e58, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7329] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7327] <... clone3 resumed> => {parent_tid=[7347]}, 88) = 7347 [pid 7326] <... futex resumed>) = 0 [pid 7347] <... rseq resumed>) = 0 [pid 7334] <... futex resumed>) = 0 [pid 7329] <... futex resumed>) = 1 [pid 7327] rt_sigprocmask(SIG_SETMASK, [] [pid 7326] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7347] set_robust_list(0x7fef94c679a0, 24 [pid 7334] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7329] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7327] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7347] <... set_robust_list resumed>) = 0 [pid 7334] <... mmap resumed>) = 0x200000000000 [pid 7327] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7347] rt_sigprocmask(SIG_SETMASK, [] [pid 7334] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7327] <... futex resumed>) = 0 [pid 7347] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7334] <... futex resumed>) = 1 [ 163.594699][ T7344] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 163.665377][ T7344] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 484 with error 28 [ 163.665411][ T7344] EXT4-fs (loop3): This should not happen!! Data will be lost [ 163.665411][ T7344] [ 163.665425][ T7344] EXT4-fs (loop3): Total free blocks count 0 [ 163.665438][ T7344] EXT4-fs (loop3): Free/Dirty block details [ 163.665451][ T7344] EXT4-fs (loop3): free_blocks=20480 [pid 7329] <... futex resumed>) = 0 [pid 7327] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7334] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7329] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7334] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7329] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7334] sendfile(4, 5, NULL, 553647746 [pid 7346] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7330] <... sendfile resumed>) = 352256 [pid 7326] <... futex resumed>) = ? [pid 7330] +++ killed by SIGBUS +++ [pid 7347] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [ 163.665464][ T7344] EXT4-fs (loop3): dirty_blocks=496 [ 163.665476][ T7344] EXT4-fs (loop3): Block reservation details [ 163.665487][ T7344] EXT4-fs (loop3): i_reserved_data_blocks=31 [ 163.713151][ T7346] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 163.715152][ T7346] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 340 with error 28 [ 163.715182][ T7346] EXT4-fs (loop0): This should not happen!! Data will be lost [ 163.715182][ T7346] [pid 7331] <... sendfile resumed>) = ? [pid 7346] +++ killed by SIGBUS +++ [pid 7326] +++ killed by SIGBUS +++ [pid 7323] <... futex resumed>) = ? [pid 7343] +++ killed by SIGBUS +++ [pid 7327] <... futex resumed>) = ? [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7326, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7331] +++ killed by SIGBUS +++ [pid 7325] <... sendfile resumed>) = ? [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 7329] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7329] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... restart_syscall resumed>) = 0 [pid 7329] <... futex resumed>) = 1 [pid 7345] <... futex resumed>) = 0 [pid 7347] +++ killed by SIGBUS +++ [pid 7344] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7329] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7327] +++ killed by SIGBUS +++ [pid 7328] <... sendfile resumed>) = 495616 [pid 7325] +++ killed by SIGBUS +++ [pid 7323] +++ killed by SIGBUS +++ [pid 7334] <... sendfile resumed>) = 114688 [pid 7344] +++ killed by SIGBUS +++ [pid 7328] +++ killed by SIGBUS +++ [pid 5610] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7327, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5609] umount2("./68", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7334] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7323, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5610] umount2("./67", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7345] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7334] <... futex resumed>) = 0 [pid 5611] umount2("./68", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7329] <... futex resumed>) = ? [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7334] +++ killed by SIGBUS +++ [pid 5611] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5609] <... openat resumed>) = 3 [pid 5611] <... openat resumed>) = 3 [pid 5610] <... openat resumed>) = 3 [pid 5609] fstat(3 [ 163.715196][ T7346] EXT4-fs (loop0): Total free blocks count 0 [ 163.715208][ T7346] EXT4-fs (loop0): Free/Dirty block details [ 163.715220][ T7346] EXT4-fs (loop0): free_blocks=20480 [ 163.715232][ T7346] EXT4-fs (loop0): dirty_blocks=352 [ 163.715244][ T7346] EXT4-fs (loop0): Block reservation details [ 163.715255][ T7346] EXT4-fs (loop0): i_reserved_data_blocks=22 [ 163.719973][ T7347] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [pid 5611] fstat(3 [pid 5610] fstat(3 [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] getdents64(3 [pid 7345] +++ killed by SIGBUS +++ [pid 7329] +++ killed by SIGBUS +++ [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5610] getdents64(3 [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 7324] +++ killed by SIGBUS +++ [pid 5611] getdents64(3 [pid 5609] umount2("./68/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5612] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7324, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7329, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5612] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 5614] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5612] <... restart_syscall resumed>) = 0 [pid 5614] umount2("./67", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5612] umount2("./68", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5614] <... openat resumed>) = 3 [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] umount2("./68/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] umount2("./67/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5614] fstat(3 [pid 5612] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5612] <... openat resumed>) = 3 [pid 5614] getdents64(3, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5612] fstat(3 [pid 5614] umount2("./67/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5612] getdents64(3, 0x5555748a7790 /* 4 entries */, 32768) = 112 [ 163.720693][ T7347] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 364 with error 28 [ 163.720718][ T7347] EXT4-fs (loop1): This should not happen!! Data will be lost [ 163.720718][ T7347] [ 163.720731][ T7347] EXT4-fs (loop1): Total free blocks count 0 [ 163.720743][ T7347] EXT4-fs (loop1): Free/Dirty block details [ 163.720755][ T7347] EXT4-fs (loop1): free_blocks=20480 [ 163.720768][ T7347] EXT4-fs (loop1): dirty_blocks=368 [ 163.720779][ T7347] EXT4-fs (loop1): Block reservation details [pid 5612] umount2("./68/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... umount2 resumed>) = 0 [pid 5609] umount2("./68/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./68/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./68/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./68/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] getdents64(4, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./68/file1") = 0 [pid 5609] umount2("./68/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./68/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./68/binderfs") = 0 [pid 5609] getdents64(3, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./68") = 0 [pid 5609] mkdir("./69", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 163.720790][ T7347] EXT4-fs (loop1): i_reserved_data_blocks=23 [ 163.789400][ T7345] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 163.791509][ T7345] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 112 with error 28 [ 163.791540][ T7345] EXT4-fs (loop4): This should not happen!! Data will be lost [ 163.791540][ T7345] [ 163.791554][ T7345] EXT4-fs (loop4): Total free blocks count 0 [pid 5609] ioctl(3, LOOP_CLR_FD) = 0 [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 7348 attached , child_tidptr=0x5555748a66d0) = 7348 [pid 5609] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 163.791566][ T7345] EXT4-fs (loop4): Free/Dirty block details [ 163.791578][ T7345] EXT4-fs (loop4): free_blocks=20480 [ 163.791591][ T7345] EXT4-fs (loop4): dirty_blocks=112 [ 163.791602][ T7345] EXT4-fs (loop4): Block reservation details [ 163.791613][ T7345] EXT4-fs (loop4): i_reserved_data_blocks=7 [ 163.862130][ T3414] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 340 with max blocks 4 with error 28 [ 163.862160][ T3414] EXT4-fs (loop0): This should not happen!! Data will be lost [ 163.862160][ T3414] [pid 7348] set_robust_list(0x5555748a66e0, 24) = 0 [pid 7348] rt_sigprocmask(SIG_SETMASK, [] [pid 5611] <... umount2 resumed>) = 0 [pid 5611] umount2("./68/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5610] <... umount2 resumed>) = 0 [pid 7348] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] <... umount2 resumed>) = 0 [pid 5612] <... umount2 resumed>) = 0 [pid 5610] umount2("./67/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5612] umount2("./68/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5614] umount2("./67/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] newfstatat(AT_FDCWD, "./68/file1" [pid 5610] newfstatat(AT_FDCWD, "./67/file1" [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5612] newfstatat(AT_FDCWD, "./68/file1" [pid 5611] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5610] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 163.863932][ T5609] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 163.894419][ T3414] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 344 with max blocks 4 with error 28 [ 163.894450][ T3414] EXT4-fs (loop2): This should not happen!! Data will be lost [ 163.894450][ T3414] [ 163.904648][ T5612] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 5614] newfstatat(AT_FDCWD, "./67/file1" [pid 5612] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] umount2("./68/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] umount2("./67/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5614] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5612] umount2("./68/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5614] umount2("./67/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] openat(AT_FDCWD, "./68/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5610] openat(AT_FDCWD, "./67/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5612] openat(AT_FDCWD, "./68/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5611] <... openat resumed>) = 4 [pid 5610] <... openat resumed>) = 4 [pid 5612] <... openat resumed>) = 4 [pid 5611] fstat(4 [pid 7348] chdir("./69" [pid 5612] fstat(4 [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] fstat(4 [pid 7348] <... chdir resumed>) = 0 [pid 5612] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5611] getdents64(4 [pid 7348] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5612] getdents64(4 [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7348] <... prctl resumed>) = 0 [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 7348] setpgid(0, 0 [pid 5612] getdents64(4 [pid 5611] getdents64(4 [pid 5610] getdents64(4 [pid 7348] <... setpgid resumed>) = 0 [pid 5614] openat(AT_FDCWD, "./67/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 7348] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5614] <... openat resumed>) = 4 [pid 5612] close(4 [pid 5611] close(4 [pid 5610] getdents64(4 [pid 7348] <... openat resumed>) = 3 [pid 5614] fstat(4 [pid 5612] <... close resumed>) = 0 [pid 5611] <... close resumed>) = 0 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 7348] write(3, "1000", 4 [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5612] rmdir("./68/file1" [pid 5611] rmdir("./68/file1" [pid 5610] close(4 [pid 7348] <... write resumed>) = 4 [pid 5614] getdents64(4 [pid 5612] <... rmdir resumed>) = 0 [pid 5611] <... rmdir resumed>) = 0 [pid 5610] <... close resumed>) = 0 [pid 7348] close(3 [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5611] umount2("./68/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] rmdir("./67/file1" [pid 7348] <... close resumed>) = 0 [pid 5614] getdents64(4 [pid 5612] umount2("./68/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7348] symlink("/dev/binderfs", "./binderfs" [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] newfstatat(AT_FDCWD, "./68/binderfs" [pid 5610] <... rmdir resumed>) = 0 [pid 7348] <... symlink resumed>) = 0 [pid 5614] close(4 [pid 5612] newfstatat(AT_FDCWD, "./68/binderfs" [pid 5611] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7348] write(1, "executing program\n", 18 [pid 5614] <... close resumed>) = 0 [pid 5612] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] unlink("./68/binderfs" [pid 7348] <... write resumed>) = 18 [pid 5614] rmdir("./67/file1" [pid 5612] unlink("./68/binderfs" [pid 5610] umount2("./67/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7348] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... rmdir resumed>) = 0 [pid 5612] <... unlink resumed>) = 0 executing program [pid 5611] <... unlink resumed>) = 0 [pid 7348] <... futex resumed>) = 0 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7348] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 5611] getdents64(3 [pid 5610] newfstatat(AT_FDCWD, "./67/binderfs" [pid 7348] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 5612] getdents64(3 [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 7348] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 5614] umount2("./67/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5610] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] close(3 [pid 7348] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5612] close(3 [pid 7348] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5614] newfstatat(AT_FDCWD, "./67/binderfs" [pid 5612] <... close resumed>) = 0 [pid 5611] <... close resumed>) = 0 [pid 5610] unlink("./67/binderfs" [pid 5614] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5612] rmdir("./68" [pid 5611] rmdir("./68" [pid 7348] <... mmap resumed>) = 0x7fef94c68000 [pid 5610] <... unlink resumed>) = 0 [pid 5614] unlink("./67/binderfs" [pid 5611] <... rmdir resumed>) = 0 [pid 5612] <... rmdir resumed>) = 0 [pid 7348] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 5610] getdents64(3 [pid 7348] <... mprotect resumed>) = 0 [pid 5614] <... unlink resumed>) = 0 [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 7348] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5614] getdents64(3 [pid 5612] mkdir("./69", 0777 [pid 5611] mkdir("./69", 0777 [pid 5610] close(3 [pid 7348] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 ci2-upstream-fs/strace-static-x86_64: Process 7349 attached [pid 5612] <... mkdir resumed>) = 0 [pid 5611] <... mkdir resumed>) = 0 [pid 5610] <... close resumed>) = 0 [pid 5614] close(3) = 0 [pid 5610] rmdir("./67" [pid 7349] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7348] <... clone3 resumed> => {parent_tid=[7349]}, 88) = 7349 [pid 5614] rmdir("./67" [pid 5612] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5610] <... rmdir resumed>) = 0 [pid 7349] <... rseq resumed>) = 0 [pid 7348] rt_sigprocmask(SIG_SETMASK, [] [pid 7349] set_robust_list(0x7fef94c889a0, 24 [pid 7348] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7349] <... set_robust_list resumed>) = 0 [pid 7348] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7349] rt_sigprocmask(SIG_SETMASK, [] [pid 7348] <... futex resumed>) = 0 [pid 7349] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] <... rmdir resumed>) = 0 [pid 5612] <... openat resumed>) = 3 [pid 5611] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7348] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [ 163.908044][ T5610] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 163.909562][ T5614] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 163.914106][ T5611] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 5610] mkdir("./68", 0777 [pid 7349] memfd_create("syzkaller", 0 [pid 5614] mkdir("./68", 0777 [pid 5612] ioctl(3, LOOP_CLR_FD [pid 5611] <... openat resumed>) = 3 [pid 5610] <... mkdir resumed>) = 0 [pid 5614] <... mkdir resumed>) = 0 [pid 5612] <... ioctl resumed>) = 0 [pid 5611] ioctl(3, LOOP_CLR_FD [pid 5612] close(3 [pid 5611] <... ioctl resumed>) = 0 [pid 5614] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5611] close(3 [pid 5614] <... openat resumed>) = 3 [pid 5614] ioctl(3, LOOP_CLR_FD [pid 5610] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5614] <... ioctl resumed>) = 0 [pid 5614] close(3 [pid 5610] ioctl(3, LOOP_CLR_FD) = 0 [pid 5610] close(3 [pid 5612] <... close resumed>) = 0 [pid 5612] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5612] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555748a66d0) = 7350 [pid 5614] <... close resumed>) = 0 [pid 5612] rt_sigprocmask(SIG_SETMASK, [] [pid 5611] <... close resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 7350 attached [pid 5612] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7350] set_robust_list(0x5555748a66e0, 24 [pid 7349] <... memfd_create resumed>) = 3 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5611] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5610] <... close resumed>) = 0 [pid 5614] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7349] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5611] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5610] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7350] <... set_robust_list resumed>) = 0 [pid 7350] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7350] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7350] chdir("./69"ci2-upstream-fs/strace-static-x86_64: Process 7351 attached ) = 0 [pid 5611] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 7352 attached [pid 7351] set_robust_list(0x5555748a66e0, 24 [pid 7350] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7349] <... mmap resumed>) = 0x7fef8c868000 [pid 5610] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7351 [pid 7352] set_robust_list(0x5555748a66e0, 24 [pid 7351] <... set_robust_list resumed>) = 0 [pid 7352] <... set_robust_list resumed>) = 0 [pid 7351] rt_sigprocmask(SIG_SETMASK, [] [pid 7352] rt_sigprocmask(SIG_SETMASK, [] [pid 7351] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7352] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7351] chdir("./68" [pid 7352] chdir("./68" [pid 7351] <... chdir resumed>) = 0 [pid 7351] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7352] <... chdir resumed>) = 0 [pid 7351] <... prctl resumed>) = 0 [pid 7351] setpgid(0, 0) = 0 [pid 7352] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7351] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7352] <... prctl resumed>) = 0 [pid 7351] <... openat resumed>) = 3 [pid 7352] setpgid(0, 0 [pid 7351] write(3, "1000", 4 [pid 7352] <... setpgid resumed>) = 0 [pid 7351] <... write resumed>) = 4 [pid 7351] close(3 [pid 7352] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7351] <... close resumed>) = 0 [pid 7351] symlink("/dev/binderfs", "./binderfs" [pid 7352] <... openat resumed>) = 3 [pid 7351] <... symlink resumed>) = 0 [pid 5610] rt_sigprocmask(SIG_SETMASK, [] [pid 7351] write(1, "executing program\n", 18) = 18 [pid 7351] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 executing program [pid 7351] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60}, NULL, 8) = 0 [pid 7352] write(3, "1000", 4 [pid 7351] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 7350] <... prctl resumed>) = 0 [pid 5614] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7352 [pid 5610] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7352] <... write resumed>) = 4 [pid 7351] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7352] close(3 [pid 7351] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7350] setpgid(0, 0 [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 7352] <... close resumed>) = 0 [pid 7351] <... mmap resumed>) = 0x7fef94c68000 [pid 5611] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7353 [pid 7352] symlink("/dev/binderfs", "./binderfs" [pid 7351] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITEci2-upstream-fs/strace-static-x86_64: Process 7353 attached [pid 7352] <... symlink resumed>) = 0 [pid 7351] <... mprotect resumed>) = 0 [pid 7350] <... setpgid resumed>) = 0 [pid 7349] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5611] rt_sigprocmask(SIG_SETMASK, [] [pid 7351] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7352] write(1, "executing program\n", 18 [pid 7351] <... rt_sigprocmask resumed>, [], 8) = 0 executing program [pid 7352] <... write resumed>) = 18 [pid 7351] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0}ci2-upstream-fs/strace-static-x86_64: Process 7354 attached [pid 7353] set_robust_list(0x5555748a66e0, 24 [pid 7352] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7350] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7354] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7353] <... set_robust_list resumed>) = 0 [pid 7352] <... futex resumed>) = 0 [pid 7351] <... clone3 resumed> => {parent_tid=[7354]}, 88) = 7354 [pid 7354] <... rseq resumed>) = 0 [pid 7353] rt_sigprocmask(SIG_SETMASK, [] [pid 7352] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 7351] rt_sigprocmask(SIG_SETMASK, [] [pid 7350] <... openat resumed>) = 3 [pid 7354] set_robust_list(0x7fef94c889a0, 24 [pid 7353] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7352] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 7351] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7354] <... set_robust_list resumed>) = 0 [pid 7353] chdir("./69" [pid 7352] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 7351] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7354] rt_sigprocmask(SIG_SETMASK, [] [pid 7353] <... chdir resumed>) = 0 [pid 7352] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7350] write(3, "1000", 4 [pid 7354] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7351] <... futex resumed>) = 0 [pid 7350] <... write resumed>) = 4 [pid 7354] memfd_create("syzkaller", 0 [pid 7353] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7352] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7351] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7354] <... memfd_create resumed>) = 3 [pid 7353] <... prctl resumed>) = 0 [pid 7352] <... mmap resumed>) = 0x7fef94c68000 [pid 7350] close(3 [pid 7354] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7353] setpgid(0, 0 [pid 7352] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 7350] <... close resumed>) = 0 [pid 7354] <... mmap resumed>) = 0x7fef8c868000 [pid 7353] <... setpgid resumed>) = 0 [pid 7352] <... mprotect resumed>) = 0 [pid 7350] symlink("/dev/binderfs", "./binderfs" [pid 7353] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7350] <... symlink resumed>) = 0 [pid 7349] <... write resumed>) = 524288 [pid 7353] <... openat resumed>) = 3 [pid 7352] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7350] write(1, "executing program\n", 18 [pid 7349] munmap(0x7fef8c868000, 138412032 [pid 7352] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7352] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0}ci2-upstream-fs/strace-static-x86_64: Process 7355 attached executing program [pid 7355] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7352] <... clone3 resumed> => {parent_tid=[7355]}, 88) = 7355 [pid 7350] <... write resumed>) = 18 [pid 7349] <... munmap resumed>) = 0 [pid 7353] write(3, "1000", 4 [pid 7350] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7349] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7355] <... rseq resumed>) = 0 [pid 7353] <... write resumed>) = 4 [pid 7352] rt_sigprocmask(SIG_SETMASK, [] [pid 7350] <... futex resumed>) = 0 [pid 7355] set_robust_list(0x7fef94c889a0, 24 [pid 7353] close(3 [pid 7352] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7349] <... openat resumed>) = 4 [pid 7350] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 7355] <... set_robust_list resumed>) = 0 [pid 7354] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7353] <... close resumed>) = 0 [pid 7352] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7349] ioctl(4, LOOP_SET_FD, 3 [pid 7355] rt_sigprocmask(SIG_SETMASK, [] [pid 7353] symlink("/dev/binderfs", "./binderfs" [pid 7350] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 7350] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 7355] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7352] <... futex resumed>) = 0 [pid 7349] <... ioctl resumed>) = 0 [pid 7355] memfd_create("syzkaller", 0 [pid 7353] <... symlink resumed>) = 0 [pid 7350] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7350] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7355] <... memfd_create resumed>) = 3 [pid 7352] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7349] close(3 [pid 7353] write(1, "executing program\n", 18 [pid 7350] <... mmap resumed>) = 0x7fef94c68000 [pid 7353] <... write resumed>) = 18 [pid 7350] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 7349] <... close resumed>) = 0 executing program [pid 7353] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7355] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7353] <... futex resumed>) = 0 [pid 7350] <... mprotect resumed>) = 0 [pid 7349] close(4 [pid 7355] <... mmap resumed>) = 0x7fef8c868000 [pid 7353] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 7349] <... close resumed>) = 0 [pid 7353] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 7350] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7349] mkdir("./file1", 0777 [pid 7350] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7354] <... write resumed>) = 524288 [pid 7353] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 7350] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 7349] <... mkdir resumed>) = 0 [pid 7353] <... rt_sigprocmask resumed>, NULL, 8) = 0 ci2-upstream-fs/strace-static-x86_64: Process 7356 attached [pid 7355] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7354] munmap(0x7fef8c868000, 138412032 [pid 7353] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7349] mount("/dev/loop0", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7353] <... mmap resumed>) = 0x7fef94c68000 [pid 7354] <... munmap resumed>) = 0 [pid 7354] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7356] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7353] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 7350] <... clone3 resumed> => {parent_tid=[7356]}, 88) = 7356 [pid 7356] <... rseq resumed>) = 0 [pid 7356] set_robust_list(0x7fef94c889a0, 24 [pid 7354] <... openat resumed>) = 4 [pid 7353] <... mprotect resumed>) = 0 [pid 7350] rt_sigprocmask(SIG_SETMASK, [] [pid 7354] ioctl(4, LOOP_SET_FD, 3) = 0 [ 164.228710][ T7349] loop0: detected capacity change from 0 to 1024 [pid 7354] close(3 [pid 7356] <... set_robust_list resumed>) = 0 [pid 7355] <... write resumed>) = 524288 [pid 7353] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7350] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7354] <... close resumed>) = 0 [pid 7353] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7354] close(4) = 0 [pid 7354] mkdir("./file1", 0777 [pid 7356] rt_sigprocmask(SIG_SETMASK, [] [pid 7355] munmap(0x7fef8c868000, 138412032 [pid 7354] <... mkdir resumed>) = 0 [pid 7353] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 7350] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7356] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7355] <... munmap resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 7359 attached [pid 7354] mount("/dev/loop1", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7350] <... futex resumed>) = 0 [pid 7359] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7356] memfd_create("syzkaller", 0 [pid 7355] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7353] <... clone3 resumed> => {parent_tid=[7359]}, 88) = 7359 [pid 7350] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7355] <... openat resumed>) = 4 [pid 7355] ioctl(4, LOOP_SET_FD, 3 [pid 7353] rt_sigprocmask(SIG_SETMASK, [] [pid 7359] <... rseq resumed>) = 0 [pid 7356] <... memfd_create resumed>) = 3 [pid 7353] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7359] set_robust_list(0x7fef94c889a0, 24 [pid 7356] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7353] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7359] <... set_robust_list resumed>) = 0 [pid 7356] <... mmap resumed>) = 0x7fef8c868000 [pid 7353] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7359] rt_sigprocmask(SIG_SETMASK, [] [pid 7355] <... ioctl resumed>) = 0 [pid 7355] close(3) = 0 [pid 7359] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7355] close(4 [pid 7359] memfd_create("syzkaller", 0 [pid 7355] <... close resumed>) = 0 [pid 7355] mkdir("./file1", 0777 [pid 7359] <... memfd_create resumed>) = 3 [pid 7355] <... mkdir resumed>) = 0 [pid 7349] <... mount resumed>) = 0 [pid 7349] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7355] mount("/dev/loop4", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7359] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7356] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7349] <... openat resumed>) = 3 [pid 7359] <... mmap resumed>) = 0x7fef8c868000 [ 164.263287][ T7354] loop1: detected capacity change from 0 to 1024 [pid 7349] chdir("./file1") = 0 [pid 7349] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7354] <... mount resumed>) = 0 [pid 7349] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7349] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7349] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7354] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7348] <... futex resumed>) = 0 [pid 7354] <... openat resumed>) = 3 [pid 7348] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7349] <... futex resumed>) = 0 [pid 7348] <... futex resumed>) = 1 [pid 7349] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7348] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7354] chdir("./file1" [pid 7349] <... openat resumed>) = 4 [pid 7356] <... write resumed>) = 524288 [pid 7359] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7356] munmap(0x7fef8c868000, 138412032) = 0 [pid 7356] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7356] ioctl(4, LOOP_SET_FD, 3 [pid 7354] <... chdir resumed>) = 0 [pid 7349] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7354] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7349] <... futex resumed>) = 1 [pid 7348] <... futex resumed>) = 0 [pid 7354] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7349] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7348] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7349] <... openat resumed>) = 5 [pid 7348] <... futex resumed>) = 0 [pid 7354] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7348] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7354] <... futex resumed>) = 1 [pid 7351] <... futex resumed>) = 0 [pid 7349] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7348] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7351] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7349] <... futex resumed>) = 0 [pid 7348] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7359] <... write resumed>) = 524288 [pid 7356] <... ioctl resumed>) = 0 [pid 7354] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7351] <... futex resumed>) = 0 [pid 7349] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7348] <... futex resumed>) = 0 [pid 7359] munmap(0x7fef8c868000, 138412032) = 0 [pid 7351] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7348] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7354] <... openat resumed>) = 4 [ 164.345978][ T37] audit: type=1800 audit(1785844694.744:345): pid=7349 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop0" ino=15 res=0 errno=0 [pid 7359] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7356] close(3 [pid 7349] <... openat resumed>) = 6 [pid 7356] <... close resumed>) = 0 [pid 7355] <... mount resumed>) = 0 [pid 7354] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7356] close(4 [pid 7354] <... futex resumed>) = 1 [pid 7351] <... futex resumed>) = 0 [pid 7359] <... openat resumed>) = 4 [pid 7356] <... close resumed>) = 0 [pid 7355] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7354] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7351] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7349] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7354] <... openat resumed>) = 5 [pid 7351] <... futex resumed>) = 0 [pid 7359] ioctl(4, LOOP_SET_FD, 3 [pid 7355] <... openat resumed>) = 3 [pid 7351] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7349] <... futex resumed>) = 1 [pid 7348] <... futex resumed>) = 0 [pid 7359] <... ioctl resumed>) = 0 [pid 7356] mkdir("./file1", 0777 [pid 7355] chdir("./file1" [pid 7349] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7348] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7359] close(3 [pid 7356] <... mkdir resumed>) = 0 [pid 7355] <... chdir resumed>) = 0 [pid 7354] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7349] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7348] <... futex resumed>) = 0 [pid 7359] <... close resumed>) = 0 [pid 7356] mount("/dev/loop3", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7355] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7354] <... futex resumed>) = 1 [pid 7351] <... futex resumed>) = 0 [pid 7349] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7348] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7359] close(4 [pid 7355] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7354] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7351] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7349] <... mmap resumed>) = 0x200000000000 [pid 7359] <... close resumed>) = 0 [pid 7355] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7354] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7351] <... futex resumed>) = 0 [pid 7349] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [ 164.392611][ T37] audit: type=1800 audit(1785844694.784:346): pid=7354 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor767" name="file1" dev="loop1" ino=15 res=0 errno=0 [pid 7359] mkdir("./file1", 0777 [pid 7355] <... futex resumed>) = 1 [pid 7354] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7352] <... futex resumed>) = 0 [pid 7351] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7349] <... futex resumed>) = 1 [pid 7348] <... futex resumed>) = 0 [pid 7359] <... mkdir resumed>) = 0 [pid 7355] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7354] <... openat resumed>) = 6 [pid 7352] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7349] sendfile(4, 5, NULL, 553647746 [pid 7348] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7359] mount("/dev/loop2", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7356] <... mount resumed>) = 0 [pid 7355] <... openat resumed>) = 4 [pid 7354] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7352] <... futex resumed>) = 0 [pid 7348] <... futex resumed>) = 0 [pid 7354] <... futex resumed>) = 1 [pid 7351] <... futex resumed>) = 0 [pid 7356] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7355] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7354] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7352] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7351] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7348] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7356] <... openat resumed>) = 3 [pid 7355] <... futex resumed>) = 0 [pid 7354] <... mmap resumed>) = 0x200000000000 [pid 7352] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7356] chdir("./file1" [pid 7355] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7354] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7352] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7351] <... futex resumed>) = 0 [pid 7356] <... chdir resumed>) = 0 [pid 7355] <... openat resumed>) = 5 [pid 7354] <... futex resumed>) = 0 [pid 7356] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7355] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7354] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7351] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7356] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7355] <... futex resumed>) = 0 [pid 7352] <... futex resumed>) = 0 [pid 7351] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7355] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7352] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7351] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7356] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7354] <... futex resumed>) = 0 [pid 7352] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7351] <... futex resumed>) = 1 [pid 7356] <... futex resumed>) = 1 [pid 7354] sendfile(4, 5, NULL, 553647746 [pid 7352] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7351] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7350] <... futex resumed>) = 0 [pid 7356] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7355] <... futex resumed>) = 0 [pid 7352] <... futex resumed>) = 1 [pid 7355] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7352] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7350] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7356] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7355] <... openat resumed>) = 6 [pid 7350] <... futex resumed>) = 0 [pid 7356] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7355] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7350] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7355] <... futex resumed>) = 1 [pid 7352] <... futex resumed>) = 0 [pid 7355] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7352] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7355] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7352] <... futex resumed>) = 0 [pid 7355] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7352] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7355] <... mmap resumed>) = 0x200000000000 [pid 7356] <... openat resumed>) = 4 [pid 7355] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7356] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7355] <... futex resumed>) = 1 [pid 7352] <... futex resumed>) = 0 [pid 7355] sendfile(4, 5, NULL, 553647746 [pid 7352] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7356] <... futex resumed>) = 1 [pid 7352] <... futex resumed>) = 0 [pid 7350] <... futex resumed>) = 0 [pid 7356] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7352] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7350] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7356] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7350] <... futex resumed>) = 0 [pid 7356] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7350] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7348] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7356] <... openat resumed>) = 5 [pid 7348] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7356] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7350] <... futex resumed>) = 0 [pid 7348] <... futex resumed>) = 0 [pid 7356] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7350] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7348] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7350] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7348] <... mmap resumed>) = 0x7fef94c47000 [pid 7356] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7348] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 7356] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7348] <... mprotect resumed>) = 0 [pid 7356] <... openat resumed>) = 6 [pid 7348] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7356] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7348] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7351] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7348] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 7369 attached [pid 7359] <... mount resumed>) = 0 [pid 7356] <... futex resumed>) = 1 [pid 7351] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7350] <... futex resumed>) = 0 [pid 7351] <... futex resumed>) = 0 [pid 7369] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7356] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7351] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7350] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7348] <... clone3 resumed> => {parent_tid=[7369]}, 88) = 7369 [pid 7359] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7369] <... rseq resumed>) = 0 [pid 7356] <... mmap resumed>) = 0x200000000000 [pid 7351] <... mmap resumed>) = 0x7fef94c47000 [pid 7350] <... futex resumed>) = 0 [pid 7348] rt_sigprocmask(SIG_SETMASK, [] [pid 7369] set_robust_list(0x7fef94c679a0, 24 [pid 7359] <... openat resumed>) = 3 [pid 7351] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 7350] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7359] chdir("./file1" [pid 7369] <... set_robust_list resumed>) = 0 [pid 7348] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7369] rt_sigprocmask(SIG_SETMASK, [] [pid 7359] <... chdir resumed>) = 0 [pid 7356] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7352] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7348] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7369] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7359] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7356] <... futex resumed>) = 1 [pid 7352] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7350] <... futex resumed>) = 0 [pid 7348] <... futex resumed>) = 0 [pid 7359] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7356] sendfile(4, 5, NULL, 553647746 [pid 7352] <... futex resumed>) = 0 [pid 7350] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7359] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7352] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7350] <... futex resumed>) = 0 [pid 7348] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7359] <... futex resumed>) = 1 [pid 7353] <... futex resumed>) = 0 [pid 7352] <... mmap resumed>) = 0x7fef94c47000 [pid 7351] <... mprotect resumed>) = 0 [pid 7350] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7353] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7352] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 7359] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7353] <... futex resumed>) = 0 [pid 7352] <... mprotect resumed>) = 0 [pid 7351] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7359] <... openat resumed>) = 4 [pid 7353] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7352] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7351] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7359] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7352] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7351] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0}ci2-upstream-fs/strace-static-x86_64: Process 7370 attached [pid 7359] <... futex resumed>) = 1 [pid 7353] <... futex resumed>) = 0 [pid 7352] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 7370] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [ 164.603275][ T7369] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 164.603898][ T7369] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 284 with error 28 [ 164.603923][ T7369] EXT4-fs (loop0): This should not happen!! Data will be lost [ 164.603923][ T7369] [ 164.603936][ T7369] EXT4-fs (loop0): Total free blocks count 0 [ 164.603949][ T7369] EXT4-fs (loop0): Free/Dirty block details [pid 7359] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7353] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000ci2-upstream-fs/strace-static-x86_64: Process 7371 attached [pid 7370] <... rseq resumed>) = 0 [pid 7369] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7359] <... openat resumed>) = 5 [pid 7353] <... futex resumed>) = 0 [pid 7351] <... clone3 resumed> => {parent_tid=[7370]}, 88) = 7370 [pid 7348] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7371] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7370] set_robust_list(0x7fef94c679a0, 24 [pid 7359] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7353] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7352] <... clone3 resumed> => {parent_tid=[7371]}, 88) = 7371 [pid 7351] rt_sigprocmask(SIG_SETMASK, [] [pid 7350] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7349] <... sendfile resumed>) = ? [pid 7371] <... rseq resumed>) = 0 [pid 7370] <... set_robust_list resumed>) = 0 [pid 7369] +++ killed by SIGBUS +++ [pid 7359] <... futex resumed>) = 0 [pid 7350] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7371] set_robust_list(0x7fef94c679a0, 24 [pid 7370] rt_sigprocmask(SIG_SETMASK, [] [pid 7359] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7353] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7352] rt_sigprocmask(SIG_SETMASK, [] [pid 7351] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7350] <... futex resumed>) = 0 [pid 7370] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7359] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7353] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7352] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7351] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7371] <... set_robust_list resumed>) = 0 [pid 7359] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7353] <... futex resumed>) = 0 [pid 7352] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7351] <... futex resumed>) = 0 [pid 7350] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7349] +++ killed by SIGBUS +++ [pid 7348] +++ killed by SIGBUS +++ [ 164.603961][ T7369] EXT4-fs (loop0): free_blocks=20480 [ 164.603973][ T7369] EXT4-fs (loop0): dirty_blocks=288 [ 164.603984][ T7369] EXT4-fs (loop0): Block reservation details [ 164.604007][ T7369] EXT4-fs (loop0): i_reserved_data_blocks=18 [pid 7371] rt_sigprocmask(SIG_SETMASK, [] [pid 7359] <... openat resumed>) = 6 [pid 7353] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7352] <... futex resumed>) = 0 [pid 7351] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7350] <... mmap resumed>) = 0x7fef94c47000 [pid 7371] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7352] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7350] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 7359] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7350] <... mprotect resumed>) = 0 [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7348, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7359] <... futex resumed>) = 1 [pid 7353] <... futex resumed>) = 0 [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 7359] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7353] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7359] <... mmap resumed>) = 0x200000000000 [pid 7353] <... futex resumed>) = 0 [pid 5609] <... restart_syscall resumed>) = 0 [ 164.718048][ T7370] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 164.718265][ T7370] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 272 with error 28 [ 164.718289][ T7370] EXT4-fs (loop1): This should not happen!! Data will be lost [ 164.718289][ T7370] [ 164.718304][ T7370] EXT4-fs (loop1): Total free blocks count 0 [ 164.718316][ T7370] EXT4-fs (loop1): Free/Dirty block details [pid 7353] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7359] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7353] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7350] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5609] umount2("./69", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7370] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7359] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7354] <... sendfile resumed>) = 282624 [pid 7353] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7350] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7359] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7354] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7353] <... futex resumed>) = 0 [pid 7351] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7350] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 7359] sendfile(4, 5, NULL, 553647746 [pid 7354] <... futex resumed>) = ? [pid 7353] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7352] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5609] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORYci2-upstream-fs/strace-static-x86_64: Process 7372 attached [pid 7371] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7354] +++ killed by SIGBUS +++ [ 164.718330][ T7370] EXT4-fs (loop1): free_blocks=20480 [ 164.718343][ T7370] EXT4-fs (loop1): dirty_blocks=288 [ 164.718355][ T7370] EXT4-fs (loop1): Block reservation details [ 164.718367][ T7370] EXT4-fs (loop1): i_reserved_data_blocks=18 [ 164.742053][ T7371] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 164.746368][ T7371] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 292 with error 28 [pid 7350] <... clone3 resumed> => {parent_tid=[7372]}, 88) = 7372 [pid 5609] <... openat resumed>) = 3 [pid 7372] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7355] <... sendfile resumed>) = ? [pid 7372] <... rseq resumed>) = 0 [pid 7371] +++ killed by SIGBUS +++ [pid 7355] +++ killed by SIGBUS +++ [pid 7350] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] fstat(3 [pid 7372] set_robust_list(0x7fef94c679a0, 24 [pid 7370] +++ killed by SIGBUS +++ [pid 7351] +++ killed by SIGBUS +++ [pid 7350] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7372] <... set_robust_list resumed>) = 0 [pid 7352] +++ killed by SIGBUS +++ [pid 7350] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7372] rt_sigprocmask(SIG_SETMASK, [] [pid 7350] <... futex resumed>) = 0 [pid 5610] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7351, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 7372] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7353] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7350] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7352, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5609] getdents64(3 [pid 7353] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 7353] <... futex resumed>) = 0 [pid 5614] <... restart_syscall resumed>) = 0 [pid 5609] umount2("./69/file1", MNT_FORCE|UMOUNT_NOFOLLOW [ 164.746400][ T7371] EXT4-fs (loop4): This should not happen!! Data will be lost [ 164.746400][ T7371] [ 164.746414][ T7371] EXT4-fs (loop4): Total free blocks count 0 [ 164.746426][ T7371] EXT4-fs (loop4): Free/Dirty block details [ 164.746438][ T7371] EXT4-fs (loop4): free_blocks=20480 [ 164.746451][ T7371] EXT4-fs (loop4): dirty_blocks=304 [ 164.746462][ T7371] EXT4-fs (loop4): Block reservation details [ 164.746472][ T7371] EXT4-fs (loop4): i_reserved_data_blocks=19 [pid 7353] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c47000 [pid 7353] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 5614] umount2("./68", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7353] <... mprotect resumed>) = 0 [pid 7353] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] umount2("./68", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7353] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5614] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7353] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 5614] <... openat resumed>) = 3 [pid 5610] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORYci2-upstream-fs/strace-static-x86_64: Process 7373 attached ) = 3 [pid 7353] <... clone3 resumed> => {parent_tid=[7373]}, 88) = 7373 [pid 5614] fstat(3 [pid 7373] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5610] fstat(3 [pid 7373] <... rseq resumed>) = 0 [pid 7353] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7373] set_robust_list(0x7fef94c679a0, 24 [pid 7372] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7353] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7350] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5614] getdents64(3 [pid 7356] <... sendfile resumed>) = 331776 [pid 5610] getdents64(3 [pid 7373] <... set_robust_list resumed>) = 0 [ 164.854389][ T7372] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 164.854591][ T7372] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 324 with error 28 [ 164.854614][ T7372] EXT4-fs (loop3): This should not happen!! Data will be lost [ 164.854614][ T7372] [ 164.854628][ T7372] EXT4-fs (loop3): Total free blocks count 0 [ 164.854639][ T7372] EXT4-fs (loop3): Free/Dirty block details [ 164.854660][ T7372] EXT4-fs (loop3): free_blocks=20480 [pid 7353] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 7373] rt_sigprocmask(SIG_SETMASK, [] [pid 7353] <... futex resumed>) = 0 [pid 5610] umount2("./68/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7356] +++ killed by SIGBUS +++ [pid 7353] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7373] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 7372] +++ killed by SIGBUS +++ [pid 7350] +++ killed by SIGBUS +++ [pid 5614] umount2("./68/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5612] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7350, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5612] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5612] umount2("./69", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5612] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5612] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5612] getdents64(3, 0x5555748a7790 /* 4 entries */, 32768) = 112 [ 164.854673][ T7372] EXT4-fs (loop3): dirty_blocks=336 [ 164.854685][ T7372] EXT4-fs (loop3): Block reservation details [ 164.854696][ T7372] EXT4-fs (loop3): i_reserved_data_blocks=21 [pid 5612] umount2("./69/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7353] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7373] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7359] <... sendfile resumed>) = ? [pid 7359] +++ killed by SIGBUS +++ [pid 7373] +++ killed by SIGBUS +++ [pid 7353] +++ killed by SIGBUS +++ [pid 5611] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7353, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=5 /* 0.05 s */} --- [ 164.953150][ T7373] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 164.955579][ T13] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 284 with max blocks 4 with error 28 [ 164.955608][ T13] EXT4-fs (loop0): This should not happen!! Data will be lost [ 164.955608][ T13] [ 164.956265][ T13] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 272 with max blocks 4 with error 28 [ 164.956290][ T13] EXT4-fs (loop1): This should not happen!! Data will be lost [ 164.956290][ T13] [pid 5611] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5611] umount2("./69", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5611] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5611] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5611] getdents64(3, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5611] umount2("./69/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5614] <... umount2 resumed>) = 0 [pid 5609] <... umount2 resumed>) = 0 [pid 5614] umount2("./68/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] umount2("./69/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./69/file1" [pid 5614] newfstatat(AT_FDCWD, "./68/file1" [pid 5609] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./69/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5614] umount2("./68/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./69/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5614] openat(AT_FDCWD, "./68/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5609] <... openat resumed>) = 4 [pid 5614] <... openat resumed>) = 4 [pid 5609] fstat(4 [pid 5614] fstat(4 [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] getdents64(4 [pid 5614] getdents64(4 [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4 [pid 5614] getdents64(4 [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4 [pid 5614] close(4 [pid 5609] <... close resumed>) = 0 [pid 5614] <... close resumed>) = 0 [pid 5609] rmdir("./69/file1" [pid 5614] rmdir("./68/file1") = 0 [pid 5609] <... rmdir resumed>) = 0 [pid 5614] umount2("./68/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5610] <... umount2 resumed>) = 0 [pid 5609] umount2("./69/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] umount2("./68/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5614] newfstatat(AT_FDCWD, "./68/binderfs" [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5614] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5610] newfstatat(AT_FDCWD, "./68/file1" [pid 5614] unlink("./68/binderfs" [pid 5610] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] newfstatat(AT_FDCWD, "./69/binderfs" [pid 5614] <... unlink resumed>) = 0 [pid 5610] umount2("./68/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] getdents64(3 [pid 5610] openat(AT_FDCWD, "./68/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5609] unlink("./69/binderfs" [pid 5614] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5610] <... openat resumed>) = 4 [ 164.966049][ T5610] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 164.968503][ T5609] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 164.970359][ T7373] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 172 with error 28 [ 164.970387][ T7373] EXT4-fs (loop2): This should not happen!! Data will be lost [ 164.970387][ T7373] [ 164.970400][ T7373] EXT4-fs (loop2): Total free blocks count 0 [pid 5614] close(3 [pid 5610] fstat(4 [pid 5609] <... unlink resumed>) = 0 [pid 5610] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5614] <... close resumed>) = 0 [pid 5614] rmdir("./68" [pid 5610] getdents64(4 [pid 5614] <... rmdir resumed>) = 0 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(3 [pid 5610] getdents64(4 [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(3 [pid 5614] mkdir("./69", 0777 [pid 5610] close(4 [pid 5609] <... close resumed>) = 0 [pid 5614] <... mkdir resumed>) = 0 [pid 5610] <... close resumed>) = 0 [pid 5609] rmdir("./69" [pid 5610] rmdir("./68/file1" [pid 5609] <... rmdir resumed>) = 0 [pid 5610] <... rmdir resumed>) = 0 [pid 5614] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5609] mkdir("./70", 0777 [pid 5610] umount2("./68/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5614] ioctl(3, LOOP_CLR_FD [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] <... mkdir resumed>) = 0 [pid 5614] <... ioctl resumed>) = 0 [pid 5610] newfstatat(AT_FDCWD, "./68/binderfs" [pid 5614] close(3 [pid 5610] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] <... close resumed>) = 0 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5610] unlink("./68/binderfs" [pid 5614] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5610] <... unlink resumed>) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5610] getdents64(3 [pid 5609] <... openat resumed>) = 3 [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5609] ioctl(3, LOOP_CLR_FD [pid 5610] close(3 [pid 5609] <... ioctl resumed>) = 0 [pid 5610] <... close resumed>) = 0 [pid 5609] close(3 [pid 5610] rmdir("./68"ci2-upstream-fs/strace-static-x86_64: Process 7374 attached ) = 0 [pid 5614] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7374 [pid 5614] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7374] set_robust_list(0x5555748a66e0, 24 [pid 5610] mkdir("./69", 0777 [pid 7374] <... set_robust_list resumed>) = 0 [pid 5610] <... mkdir resumed>) = 0 [pid 7374] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 164.970412][ T7373] EXT4-fs (loop2): Free/Dirty block details [ 164.970425][ T7373] EXT4-fs (loop2): free_blocks=20480 [ 164.970437][ T7373] EXT4-fs (loop2): dirty_blocks=176 [ 164.970448][ T7373] EXT4-fs (loop2): Block reservation details [ 164.970459][ T7373] EXT4-fs (loop2): i_reserved_data_blocks=11 [ 164.995177][ T5614] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 7374] chdir("./69" [pid 5610] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5609] <... close resumed>) = 0 [pid 5610] <... openat resumed>) = 3 [pid 5610] ioctl(3, LOOP_CLR_FD [pid 7374] <... chdir resumed>) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7374] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5609] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7374] <... prctl resumed>) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7374] setpgid(0, 0) = 0 [pid 7374] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECci2-upstream-fs/strace-static-x86_64: Process 7375 attached ) = 3 [pid 7374] write(3, "1000", 4 [pid 5610] <... ioctl resumed>) = 0 [pid 5609] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7375 [pid 7374] <... write resumed>) = 4 [pid 5610] close(3 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 7375] set_robust_list(0x5555748a66e0, 24 [pid 7374] close(3 [pid 7375] <... set_robust_list resumed>) = 0 [pid 7374] <... close resumed>) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7375] rt_sigprocmask(SIG_SETMASK, [] [pid 7374] symlink("/dev/binderfs", "./binderfs" [pid 7375] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7374] <... symlink resumed>) = 0 [pid 7375] chdir("./70" [pid 5612] <... umount2 resumed>) = 0 [pid 7374] write(1, "executing program\n", 18 [ 165.117005][ T5612] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 165.135131][ T177] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 172 with max blocks 4 with error 28 [ 165.135159][ T177] EXT4-fs (loop2): This should not happen!! Data will be lost [ 165.135159][ T177] [pid 5612] umount2("./69/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7374] <... write resumed>) = 18 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 7375] <... chdir resumed>) = 0 [pid 7374] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] newfstatat(AT_FDCWD, "./69/file1" [pid 7375] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7374] <... futex resumed>) = 0 [pid 5612] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7375] <... prctl resumed>) = 0 [pid 7374] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 5612] umount2("./69/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7375] setpgid(0, 0 [pid 7374] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] <... close resumed>) = 0 [pid 7375] <... setpgid resumed>) = 0 [pid 7374] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5612] openat(AT_FDCWD, "./69/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7375] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5610] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7374] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5612] <... openat resumed>) = 4 [pid 5610] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5610] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7375] <... openat resumed>) = 3 [pid 7374] <... mmap resumed>) = 0x7fef94c68000 [pid 5612] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ci2-upstream-fs/strace-static-x86_64: Process 7376 attached [pid 7375] write(3, "1000", 4 [pid 7374] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 5612] getdents64(4 [pid 7375] <... write resumed>) = 4 [pid 7375] close(3 [pid 7374] <... mprotect resumed>) = 0 [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5610] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7376 [pid 5612] getdents64(4 [pid 7376] set_robust_list(0x5555748a66e0, 24 [pid 7375] <... close resumed>) = 0 [pid 7374] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5612] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5611] <... umount2 resumed>) = 0 [pid 5610] rt_sigprocmask(SIG_SETMASK, [] [pid 7376] <... set_robust_list resumed>) = 0 [pid 7375] symlink("/dev/binderfs", "./binderfs" [pid 7374] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5612] close(4 [pid 5611] umount2("./69/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7375] <... symlink resumed>) = 0 [pid 5612] <... close resumed>) = 0 [pid 7376] rt_sigprocmask(SIG_SETMASK, [] [pid 7374] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5612] rmdir("./69/file1" [pid 7375] write(1, "executing program\n", 18) = 18 executing program [pid 7375] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] newfstatat(AT_FDCWD, "./69/file1"ci2-upstream-fs/strace-static-x86_64: Process 7377 attached [pid 7377] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7376] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7375] <... futex resumed>) = 0 [pid 7374] <... clone3 resumed> => {parent_tid=[7377]}, 88) = 7377 [pid 5611] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7375] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60}, NULL, 8) = 0 [pid 7374] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] <... rmdir resumed>) = 0 [pid 7377] <... rseq resumed>) = 0 [pid 7376] chdir("./69" [pid 7375] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 7374] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5612] umount2("./69/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] umount2("./69/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7377] set_robust_list(0x7fef94c889a0, 24 [pid 7375] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7376] <... chdir resumed>) = 0 [pid 7374] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] openat(AT_FDCWD, "./69/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7377] <... set_robust_list resumed>) = 0 [pid 7374] <... futex resumed>) = 0 [pid 5612] newfstatat(AT_FDCWD, "./69/binderfs" [pid 5611] <... openat resumed>) = 4 [pid 7377] rt_sigprocmask(SIG_SETMASK, [] [pid 7375] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7374] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5612] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7377] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7376] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7375] <... mmap resumed>) = 0x7fef94c68000 [pid 5612] unlink("./69/binderfs" [pid 5611] fstat(4 [pid 7376] <... prctl resumed>) = 0 [pid 7375] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7375] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 165.154274][ T5611] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [pid 7375] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 7377] memfd_create("syzkaller", 0 [pid 7376] setpgid(0, 0 [pid 5612] <... unlink resumed>) = 0 [pid 5611] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ci2-upstream-fs/strace-static-x86_64: Process 7378 attached [pid 7376] <... setpgid resumed>) = 0 [pid 5612] getdents64(3 [pid 5611] getdents64(4 [pid 7377] <... memfd_create resumed>) = 3 [pid 7375] <... clone3 resumed> => {parent_tid=[7378]}, 88) = 7378 [pid 5612] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 7375] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] close(3 [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 7376] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5612] <... close resumed>) = 0 [pid 7378] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5611] getdents64(4 [pid 7377] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7375] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7378] <... rseq resumed>) = 0 [pid 7376] <... openat resumed>) = 3 [pid 5612] rmdir("./69" [pid 5611] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 7376] write(3, "1000", 4 [pid 5612] <... rmdir resumed>) = 0 [pid 5611] close(4 [pid 7377] <... mmap resumed>) = 0x7fef8c868000 [pid 7375] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7378] set_robust_list(0x7fef94c889a0, 24 [pid 5611] <... close resumed>) = 0 [pid 7378] <... set_robust_list resumed>) = 0 [pid 7375] <... futex resumed>) = 0 [pid 7378] rt_sigprocmask(SIG_SETMASK, [] [pid 7376] <... write resumed>) = 4 [pid 7375] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7376] close(3) = 0 [pid 7378] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7376] symlink("/dev/binderfs", "./binderfs" [pid 5611] rmdir("./69/file1" [pid 7376] <... symlink resumed>) = 0 executing program [pid 7376] write(1, "executing program\n", 18 [pid 7378] memfd_create("syzkaller", 0 [pid 7376] <... write resumed>) = 18 [pid 5612] mkdir("./70", 0777 [pid 7376] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7376] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60}, NULL, 8) = 0 [pid 7376] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7376] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c68000 [pid 7376] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7376] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7376] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} => {parent_tid=[7379]}, 88) = 7379 [pid 7376] rt_sigprocmask(SIG_SETMASK, [] [pid 7377] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7376] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7376] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5612] <... mkdir resumed>) = 0 [pid 7378] <... memfd_create resumed>) = 3 [pid 7376] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-upstream-fs/strace-static-x86_64: Process 7379 attached [pid 7378] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5612] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5611] <... rmdir resumed>) = 0 [pid 7378] <... mmap resumed>) = 0x7fef8c868000 [pid 5611] umount2("./69/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7379] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5611] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] newfstatat(AT_FDCWD, "./69/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7379] <... rseq resumed>) = 0 [pid 7379] set_robust_list(0x7fef94c889a0, 24 [pid 5612] <... openat resumed>) = 3 [pid 7379] <... set_robust_list resumed>) = 0 [pid 7379] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] ioctl(3, LOOP_CLR_FD [pid 5611] unlink("./69/binderfs" [pid 7379] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5612] <... ioctl resumed>) = 0 [pid 5611] <... unlink resumed>) = 0 [pid 5612] close(3 [pid 7379] memfd_create("syzkaller", 0) = 3 [pid 7379] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fef8c868000 [pid 7378] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5611] getdents64(3 [pid 7379] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7377] <... write resumed>) = 524288 [pid 5612] <... close resumed>) = 0 [pid 7377] munmap(0x7fef8c868000, 138412032 [pid 5612] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5612] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5611] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5611] close(3) = 0 [pid 5611] rmdir("./69" [pid 5612] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7380 [pid 5611] <... rmdir resumed>) = 0 [pid 5611] mkdir("./70", 0777 [pid 7377] <... munmap resumed>) = 0 [pid 5612] rt_sigprocmask(SIG_SETMASK, [] [pid 5611] <... mkdir resumed>) = 0 [pid 7377] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5612] <... rt_sigprocmask resumed>, NULL, 8) = 0 ci2-upstream-fs/strace-static-x86_64: Process 7380 attached [pid 7377] <... openat resumed>) = 4 [pid 5611] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 7380] set_robust_list(0x5555748a66e0, 24 [pid 7377] ioctl(4, LOOP_SET_FD, 3 [pid 7380] <... set_robust_list resumed>) = 0 [pid 7380] rt_sigprocmask(SIG_SETMASK, [] [pid 5611] ioctl(3, LOOP_CLR_FD [pid 7380] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7379] <... write resumed>) = 524288 [pid 7380] chdir("./70" [pid 7378] <... write resumed>) = 524288 [pid 7377] <... ioctl resumed>) = 0 [pid 5611] <... ioctl resumed>) = 0 [pid 7380] <... chdir resumed>) = 0 [pid 7379] munmap(0x7fef8c868000, 138412032 [pid 7378] munmap(0x7fef8c868000, 138412032 [pid 7377] close(3 [pid 5611] close(3 [pid 7377] <... close resumed>) = 0 [pid 7379] <... munmap resumed>) = 0 [pid 7378] <... munmap resumed>) = 0 [pid 7377] close(4 [pid 7380] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7379] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7378] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7377] <... close resumed>) = 0 [pid 7380] <... prctl resumed>) = 0 [pid 7380] setpgid(0, 0) = 0 [pid 7379] <... openat resumed>) = 4 [pid 7378] <... openat resumed>) = 4 [pid 7377] mkdir("./file1", 0777 [pid 7380] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7379] ioctl(4, LOOP_SET_FD, 3 [pid 7377] <... mkdir resumed>) = 0 [pid 7378] ioctl(4, LOOP_SET_FD, 3 [pid 7380] <... openat resumed>) = 3 [pid 7377] mount("/dev/loop4", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7380] write(3, "1000", 4) = 4 [pid 7380] close(3) = 0 [pid 5611] <... close resumed>) = 0 [pid 7380] symlink("/dev/binderfs", "./binderfs" [pid 7379] <... ioctl resumed>) = 0 [pid 7380] <... symlink resumed>) = 0 [pid 7379] close(3 [pid 7378] <... ioctl resumed>) = 0 [pid 7380] write(1, "executing program\n", 18 [pid 5611] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7379] <... close resumed>) = 0 [pid 7378] close(3 [pid 7380] <... write resumed>) = 18 [pid 7379] close(4 [pid 7378] <... close resumed>) = 0 [pid 5611] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7378] close(4 [pid 5611] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7378] <... close resumed>) = 0 executing program [pid 7379] <... close resumed>) = 0 [pid 7380] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7379] mkdir("./file1", 0777 [pid 7378] mkdir("./file1", 0777 [pid 7380] <... futex resumed>) = 0 [pid 7379] <... mkdir resumed>) = 0 [pid 7380] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60} [pid 7378] <... mkdir resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 7381 attached [pid 7380] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 7378] mount("/dev/loop0", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7380] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 7379] mount("/dev/loop1", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 5611] <... clone resumed>, child_tidptr=0x5555748a66d0) = 7381 [pid 7381] set_robust_list(0x5555748a66e0, 24 [pid 7380] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5611] rt_sigprocmask(SIG_SETMASK, [] [pid 7381] <... set_robust_list resumed>) = 0 [pid 7380] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7381] rt_sigprocmask(SIG_SETMASK, [] [pid 7380] <... mmap resumed>) = 0x7fef94c68000 [pid 7380] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 7381] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7380] <... mprotect resumed>) = 0 [pid 7381] chdir("./70" [pid 7380] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7381] <... chdir resumed>) = 0 [pid 7380] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7381] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7380] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 7381] <... prctl resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 7386 attached [pid 7381] setpgid(0, 0) = 0 [pid 7380] <... clone3 resumed> => {parent_tid=[7386]}, 88) = 7386 [pid 7386] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7381] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7380] rt_sigprocmask(SIG_SETMASK, [] [pid 7386] <... rseq resumed>) = 0 [pid 7381] <... openat resumed>) = 3 [pid 7380] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7386] set_robust_list(0x7fef94c889a0, 24) = 0 [pid 7381] write(3, "1000", 4 [pid 7380] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7386] rt_sigprocmask(SIG_SETMASK, [] [pid 7381] <... write resumed>) = 4 [pid 7380] <... futex resumed>) = 0 [pid 7386] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7378] <... mount resumed>) = 0 [pid 7381] close(3 [pid 7386] memfd_create("syzkaller", 0 [pid 7380] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7386] <... memfd_create resumed>) = 3 [pid 7381] <... close resumed>) = 0 [pid 7378] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7377] <... mount resumed>) = 0 [pid 7386] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7381] symlink("/dev/binderfs", "./binderfs" [pid 7386] <... mmap resumed>) = 0x7fef8c868000 [pid 7381] <... symlink resumed>) = 0 [pid 7378] <... openat resumed>) = 3 [pid 7381] write(1, "executing program\n", 18 executing program [pid 7378] chdir("./file1" [pid 7381] <... write resumed>) = 18 [pid 7379] <... mount resumed>) = 0 [pid 7377] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7381] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7378] <... chdir resumed>) = 0 [pid 7379] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7381] <... futex resumed>) = 0 [pid 7381] rt_sigaction(SIGRT_1, {sa_handler=0x7fef94ccef90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fef94cc0f60}, NULL, 8) = 0 [pid 7379] <... openat resumed>) = 3 [pid 7378] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7377] <... openat resumed>) = 3 [pid 7386] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7381] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 7379] chdir("./file1" [pid 7381] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7379] <... chdir resumed>) = 0 [pid 7378] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7377] chdir("./file1" [pid 7381] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7379] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7377] <... chdir resumed>) = 0 [pid 7381] <... mmap resumed>) = 0x7fef94c68000 [pid 7378] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7381] mprotect(0x7fef94c69000, 131072, PROT_READ|PROT_WRITE [pid 7379] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7378] <... futex resumed>) = 1 [pid 7377] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7375] <... futex resumed>) = 0 [pid 7381] <... mprotect resumed>) = 0 [pid 7379] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7378] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7377] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7375] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7381] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7379] <... futex resumed>) = 1 [pid 7378] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7377] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7376] <... futex resumed>) = 0 [pid 7381] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7379] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7378] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7377] <... futex resumed>) = 1 [pid 7376] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7375] <... futex resumed>) = 0 [pid 7374] <... futex resumed>) = 0 [pid 7386] <... write resumed>) = 524288 [pid 7381] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c88990, parent_tid=0x7fef94c88990, exit_signal=0, stack=0x7fef94c68000, stack_size=0x202c0, tls=0x7fef94c886c0} [pid 7379] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7376] <... futex resumed>) = 0 [pid 7375] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-upstream-fs/strace-static-x86_64: Process 7390 attached [pid 7386] munmap(0x7fef8c868000, 138412032 [pid 7379] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7377] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7376] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7374] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7390] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7386] <... munmap resumed>) = 0 [pid 7381] <... clone3 resumed> => {parent_tid=[7390]}, 88) = 7390 [pid 7379] <... openat resumed>) = 4 [pid 7378] <... openat resumed>) = 4 [pid 7374] <... futex resumed>) = 0 [pid 7390] <... rseq resumed>) = 0 [pid 7386] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7381] rt_sigprocmask(SIG_SETMASK, [] [pid 7379] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7378] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7390] set_robust_list(0x7fef94c889a0, 24 [pid 7386] <... openat resumed>) = 4 [pid 7381] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7379] <... futex resumed>) = 1 [pid 7378] <... futex resumed>) = 1 [pid 7377] <... openat resumed>) = 4 [pid 7376] <... futex resumed>) = 0 [pid 7375] <... futex resumed>) = 0 [pid 7374] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7390] <... set_robust_list resumed>) = 0 [pid 7386] ioctl(4, LOOP_SET_FD, 3 [pid 7381] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7379] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7378] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7377] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7376] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7375] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7390] rt_sigprocmask(SIG_SETMASK, [] [pid 7381] <... futex resumed>) = 0 [pid 7379] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7378] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7377] <... futex resumed>) = 1 [pid 7376] <... futex resumed>) = 0 [pid 7375] <... futex resumed>) = 0 [pid 7374] <... futex resumed>) = 0 [pid 7390] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7386] <... ioctl resumed>) = 0 [pid 7381] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7379] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7377] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7376] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7374] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7379] <... openat resumed>) = 5 [pid 7390] memfd_create("syzkaller", 0 [pid 7386] close(3 [pid 7379] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7378] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7377] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7376] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7375] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7374] <... futex resumed>) = 0 [pid 7386] <... close resumed>) = 0 [pid 7379] <... futex resumed>) = 0 [pid 7378] <... openat resumed>) = 5 [pid 7376] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7390] <... memfd_create resumed>) = 3 [pid 7386] close(4 [pid 7379] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7378] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7377] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7376] <... futex resumed>) = 0 [pid 7374] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7390] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7386] <... close resumed>) = 0 [pid 7379] <... openat resumed>) = 6 [pid 7378] <... futex resumed>) = 1 [pid 7377] <... openat resumed>) = 5 [pid 7376] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7375] <... futex resumed>) = 0 [pid 7390] <... mmap resumed>) = 0x7fef8c868000 [pid 7386] mkdir("./file1", 0777 [pid 7379] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7378] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7376] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7375] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7386] <... mkdir resumed>) = 0 [pid 7379] <... futex resumed>) = 0 [pid 7378] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7377] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7376] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7375] <... futex resumed>) = 0 [pid 7379] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7378] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7377] <... futex resumed>) = 1 [pid 7374] <... futex resumed>) = 0 [pid 7386] mount("/dev/loop3", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7378] <... openat resumed>) = 6 [pid 7376] <... futex resumed>) = 0 [pid 7375] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7379] <... mmap resumed>) = 0x200000000000 [pid 7378] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7377] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7376] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7374] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7390] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7379] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7378] <... futex resumed>) = 1 [pid 7377] <... openat resumed>) = 6 [pid 7375] <... futex resumed>) = 0 [pid 7374] <... futex resumed>) = 0 [pid 7375] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7374] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7379] <... futex resumed>) = 1 [pid 7378] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7376] <... futex resumed>) = 0 [pid 7375] <... futex resumed>) = 0 [pid 7379] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7377] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7376] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7375] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7379] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7377] <... futex resumed>) = 1 [pid 7376] <... futex resumed>) = 0 [pid 7374] <... futex resumed>) = 0 [pid 7379] sendfile(4, 5, NULL, 553647746 [pid 7378] <... mmap resumed>) = 0x200000000000 [pid 7376] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7374] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7378] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7377] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7374] <... futex resumed>) = 0 [pid 7378] <... futex resumed>) = 1 [pid 7375] <... futex resumed>) = 0 [pid 7378] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7377] <... mmap resumed>) = 0x200000000000 [pid 7375] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7374] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7378] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7375] <... futex resumed>) = 0 [pid 7378] sendfile(4, 5, NULL, 553647746 [pid 7390] <... write resumed>) = 524288 [pid 7377] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7375] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7377] <... futex resumed>) = 1 [pid 7374] <... futex resumed>) = 0 [pid 7377] sendfile(4, 5, NULL, 553647746 [pid 7374] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7386] <... mount resumed>) = 0 [pid 7374] <... futex resumed>) = 0 [pid 7386] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7374] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7386] <... openat resumed>) = 3 [pid 7390] munmap(0x7fef8c868000, 138412032) = 0 [pid 7386] chdir("./file1" [pid 7390] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7386] <... chdir resumed>) = 0 [pid 7390] <... openat resumed>) = 4 [pid 7386] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7390] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7386] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7390] close(3 [pid 7386] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7380] <... futex resumed>) = 0 [pid 7386] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7380] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7386] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7380] <... futex resumed>) = 0 [pid 7386] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7380] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7390] <... close resumed>) = 0 [pid 7390] close(4) = 0 [pid 7376] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7376] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7390] mkdir("./file1", 0777 [pid 7376] <... futex resumed>) = 0 [pid 7376] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c47000 [pid 7390] <... mkdir resumed>) = 0 [pid 7376] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 7386] <... openat resumed>) = 4 [pid 7376] <... mprotect resumed>) = 0 [pid 7390] mount("/dev/loop2", "./file1", "ext4", MS_POSIXACL|MS_RELATIME, "user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x00"... [pid 7376] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7386] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7376] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7386] <... futex resumed>) = 1 [pid 7380] <... futex resumed>) = 0 [pid 7376] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 7386] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7380] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000ci2-upstream-fs/strace-static-x86_64: Process 7393 attached [pid 7386] <... openat resumed>) = 5 [pid 7380] <... futex resumed>) = 0 [pid 7380] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7375] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7386] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7375] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7393] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7386] <... futex resumed>) = 1 [pid 7380] <... futex resumed>) = 0 [pid 7376] <... clone3 resumed> => {parent_tid=[7393]}, 88) = 7393 [pid 7375] <... futex resumed>) = 0 [pid 7393] <... rseq resumed>) = 0 [pid 7386] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 7380] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7376] rt_sigprocmask(SIG_SETMASK, [] [pid 7374] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7393] set_robust_list(0x7fef94c679a0, 24 [pid 7376] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7374] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 7380] <... futex resumed>) = 0 [pid 7393] <... set_robust_list resumed>) = 0 [pid 7386] <... openat resumed>) = 6 [pid 7380] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7376] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7375] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7374] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7393] rt_sigprocmask(SIG_SETMASK, [] [pid 7376] <... futex resumed>) = 0 [pid 7375] <... mmap resumed>) = 0x7fef94c47000 [pid 7374] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7393] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7376] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7375] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 7374] <... futex resumed>) = 0 [pid 7386] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7374] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7386] <... futex resumed>) = 1 [pid 7380] <... futex resumed>) = 0 [pid 7374] <... mmap resumed>) = 0x7fef94c47000 [pid 7380] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7386] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7375] <... mprotect resumed>) = 0 [pid 7375] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7375] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} => {parent_tid=[7394]}, 88) = 7394 [pid 7375] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7375] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7375] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-upstream-fs/strace-static-x86_64: Process 7394 attached [pid 7380] <... futex resumed>) = 0 [pid 7380] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7386] <... mmap resumed>) = 0x200000000000 [ 165.667811][ T7393] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 165.687907][ T7393] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 232 with error 28 [ 165.687942][ T7393] EXT4-fs (loop1): This should not happen!! Data will be lost [ 165.687942][ T7393] [pid 7394] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 7374] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 7394] set_robust_list(0x7fef94c679a0, 24 [pid 7386] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7374] <... mprotect resumed>) = 0 [pid 7394] <... set_robust_list resumed>) = 0 [pid 7386] <... futex resumed>) = 1 [pid 7380] <... futex resumed>) = 0 [pid 7394] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7386] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7380] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7374] rt_sigprocmask(SIG_BLOCK, ~[] [pid 7386] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7380] <... futex resumed>) = 0 [pid 7380] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7374] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7386] sendfile(4, 5, NULL, 553647746 [pid 7376] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7390] <... mount resumed>) = 0 [pid 7374] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 7390] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7390] chdir("./file1" [pid 7375] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7390] <... chdir resumed>) = 0 [pid 7390] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7390] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7381] <... futex resumed>) = 0 [pid 7390] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOATIME|O_CLOEXEC, 0777 [pid 7381] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7381] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-upstream-fs/strace-static-x86_64: Process 7397 attached [pid 7397] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 7397] set_robust_list(0x7fef94c679a0, 24) = 0 [pid 7397] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7397] futex(0x7fef94d63e58, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7374] <... clone3 resumed> => {parent_tid=[7397]}, 88) = 7397 [pid 7374] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7374] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7397] <... futex resumed>) = 0 [pid 7374] <... futex resumed>) = 1 [pid 7374] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7380] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 165.687956][ T7393] EXT4-fs (loop1): Total free blocks count 0 [ 165.687969][ T7393] EXT4-fs (loop1): Free/Dirty block details [ 165.687982][ T7393] EXT4-fs (loop1): free_blocks=20480 [ 165.687995][ T7393] EXT4-fs (loop1): dirty_blocks=240 [ 165.688007][ T7393] EXT4-fs (loop1): Block reservation details [ 165.688018][ T7393] EXT4-fs (loop1): i_reserved_data_blocks=15 [pid 7380] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7394] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7393] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7390] <... openat resumed>) = 4 [pid 7380] <... futex resumed>) = 0 [pid 7379] <... sendfile resumed>) = 241664 [pid 7378] <... sendfile resumed>) = 188416 [pid 7380] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c47000 [pid 7394] +++ killed by SIGBUS +++ [pid 7393] +++ killed by SIGBUS +++ [pid 7380] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE [pid 7379] +++ killed by SIGBUS +++ [pid 7390] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7381] <... futex resumed>) = 0 [pid 7376] +++ killed by SIGBUS +++ [pid 7390] openat(AT_FDCWD, "/dev/nullb0", O_RDONLY|O_TRUNC|O_DIRECT|FASYNC [pid 7381] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7380] <... mprotect resumed>) = 0 [pid 7390] <... openat resumed>) = 5 [pid 7378] +++ killed by SIGBUS +++ [pid 7375] +++ killed by SIGBUS +++ [pid 5610] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7376, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 7381] <... futex resumed>) = 0 [pid 5610] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7375, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7390] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7381] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7380] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 7381] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7380] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 7390] <... futex resumed>) = 0 [pid 7381] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7380] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} [pid 7390] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 000 [pid 5609] <... restart_syscall resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 7398 attached [pid 7381] <... futex resumed>) = 0 [pid 5610] <... restart_syscall resumed>) = 0 [pid 7390] <... openat resumed>) = 6 [pid 7390] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [ 165.762112][ T7394] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 165.762284][ T7394] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 180 with error 28 [ 165.762303][ T7394] EXT4-fs (loop0): This should not happen!! Data will be lost [ 165.762303][ T7394] [ 165.762315][ T7394] EXT4-fs (loop0): Total free blocks count 0 [ 165.762325][ T7394] EXT4-fs (loop0): Free/Dirty block details [ 165.762337][ T7394] EXT4-fs (loop0): free_blocks=20480 [pid 7381] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7398] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7390] <... futex resumed>) = 0 [pid 7380] <... clone3 resumed> => {parent_tid=[7398]}, 88) = 7398 [pid 7381] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7374] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7398] <... rseq resumed>) = 0 [pid 7390] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7381] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7380] rt_sigprocmask(SIG_SETMASK, [] [pid 7398] set_robust_list(0x7fef94c679a0, 24 [pid 7397] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7390] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7381] <... futex resumed>) = 0 [pid 7380] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7377] <... sendfile resumed>) = 974848 [pid 5609] umount2("./70", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7398] <... set_robust_list resumed>) = 0 [pid 7390] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 7381] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7380] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7377] +++ killed by SIGBUS +++ [pid 5610] umount2("./69", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7398] rt_sigprocmask(SIG_SETMASK, [] [pid 7397] +++ killed by SIGBUS +++ [pid 7390] <... mmap resumed>) = 0x200000000000 [pid 7380] <... futex resumed>) = 0 [pid 7398] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 7380] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7390] futex(0x7fef94d63e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 7374] +++ killed by SIGBUS +++ [pid 7390] <... futex resumed>) = 1 [pid 7381] <... futex resumed>) = 0 [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7374, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5610] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5609] <... openat resumed>) = 3 [pid 7390] futex(0x7fef94d63e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7381] futex(0x7fef94d63e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 7390] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7381] <... futex resumed>) = 0 [pid 5610] <... openat resumed>) = 3 [pid 5609] fstat(3 [pid 7390] sendfile(4, 5, NULL, 553647746 [pid 7381] futex(0x7fef94d63e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5610] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5609] getdents64(3 [pid 5610] getdents64(3 [pid 5609] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./70/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] umount2("./69/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5614] umount2("./69", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5614] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 165.762349][ T7394] EXT4-fs (loop0): dirty_blocks=192 [ 165.762360][ T7394] EXT4-fs (loop0): Block reservation details [ 165.762370][ T7394] EXT4-fs (loop0): i_reserved_data_blocks=12 [ 165.770410][ T7397] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 165.770601][ T7397] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 948 with error 28 [pid 5614] getdents64(3, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5614] umount2("./69/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7380] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7381] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7381] futex(0x7fef94d63e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7381] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fef94c47000 [pid 7381] mprotect(0x7fef94c48000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7381] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7381] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fef94c67990, parent_tid=0x7fef94c67990, exit_signal=0, stack=0x7fef94c47000, stack_size=0x202c0, tls=0x7fef94c676c0} => {parent_tid=[7399]}, 88) = 7399 [pid 7381] rt_sigprocmask(SIG_SETMASK, []ci2-upstream-fs/strace-static-x86_64: Process 7399 attached , NULL, 8) = 0 [pid 7399] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 7381] futex(0x7fef94d63e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 7399] <... rseq resumed>) = 0 [pid 7381] <... futex resumed>) = 0 [ 165.770624][ T7397] EXT4-fs (loop4): This should not happen!! Data will be lost [ 165.770624][ T7397] [ 165.770636][ T7397] EXT4-fs (loop4): Total free blocks count 0 [ 165.770647][ T7397] EXT4-fs (loop4): Free/Dirty block details [ 165.770659][ T7397] EXT4-fs (loop4): free_blocks=20480 [ 165.770672][ T7397] EXT4-fs (loop4): dirty_blocks=960 [ 165.770683][ T7397] EXT4-fs (loop4): Block reservation details [ 165.770694][ T7397] EXT4-fs (loop4): i_reserved_data_blocks=60 [pid 7381] futex(0x7fef94d63e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7399] set_robust_list(0x7fef94c679a0, 24 [pid 7398] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000000c4} --- [pid 7386] <... sendfile resumed>) = 8192 [pid 7399] <... set_robust_list resumed>) = 0 [pid 7399] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7398] +++ killed by SIGBUS +++ [pid 7386] +++ killed by SIGBUS +++ [pid 7380] +++ killed by SIGBUS +++ [pid 5612] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7380, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5612] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 7381] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 165.916936][ T7398] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 165.936434][ T13] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 232 with max blocks 4 with error 28 [ 165.936460][ T13] EXT4-fs (loop1): This should not happen!! Data will be lost [ 165.936460][ T13] [ 165.937230][ T13] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 948 with max blocks 4 with error 28 [pid 5612] umount2("./70", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5612] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5612] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5612] getdents64(3, 0x5555748a7790 /* 4 entries */, 32768) = 112 [pid 5612] umount2("./70/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5614] <... umount2 resumed>) = 0 [pid 5610] <... umount2 resumed>) = 0 [pid 5610] umount2("./69/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5610] newfstatat(AT_FDCWD, "./69/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5610] umount2("./69/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5610] openat(AT_FDCWD, "./69/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5614] umount2("./69/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] <... openat resumed>) = 4 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5614] newfstatat(AT_FDCWD, "./69/file1" [pid 5610] getdents64(4 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] umount2("./69/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5609] <... umount2 resumed>) = 0 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./69/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5610] getdents64(4 [pid 5609] umount2("./70/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5614] <... openat resumed>) = 4 [pid 5610] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5614] fstat(4 [pid 5610] close(4 [pid 5609] newfstatat(AT_FDCWD, "./70/file1" [pid 5614] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5610] <... close resumed>) = 0 [pid 5609] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 165.937252][ T13] EXT4-fs (loop4): This should not happen!! Data will be lost [ 165.937252][ T13] [ 165.940516][ T5614] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 165.941494][ T5610] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 165.948988][ T13] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 180 with max blocks 4 with error 28 [pid 5614] getdents64(4 [pid 5610] rmdir("./69/file1" [pid 5609] umount2("./70/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5610] <... rmdir resumed>) = 0 [pid 5609] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5614] getdents64(4 [pid 5610] umount2("./69/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] openat(AT_FDCWD, "./70/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5614] <... getdents64 resumed>, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5610] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] <... openat resumed>) = 4 [pid 5614] close(4 [pid 5609] fstat(4 [pid 5614] <... close resumed>) = 0 [pid 5610] newfstatat(AT_FDCWD, "./69/binderfs" [pid 5609] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5614] rmdir("./69/file1" [pid 5610] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] getdents64(4 [pid 5614] <... rmdir resumed>) = 0 [pid 5610] unlink("./69/binderfs" [pid 5609] <... getdents64 resumed>, 0x5555748af7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x5555748af7d0 /* 0 entries */, 32768) = 0 [pid 5610] <... unlink resumed>) = 0 [pid 5614] umount2("./69/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5610] getdents64(3 [pid 5609] close(4 [pid 5614] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] <... getdents64 resumed>, 0x5555748a7790 /* 0 entries */, 32768) = 0 [pid 5614] newfstatat(AT_FDCWD, "./69/binderfs" [pid 5609] <... close resumed>) = 0 [pid 5614] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5610] close(3 [pid 5609] rmdir("./70/file1" [pid 5614] unlink("./69/binderfs" [pid 5610] <... close resumed>) = 0 [pid 5609] <... rmdir resumed>) = 0 [pid 5614] <... unlink resumed>) = 0 [ 165.949019][ T13] EXT4-fs (loop0): This should not happen!! Data will be lost [ 165.949019][ T13] [ 165.949606][ T7399] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 165.949801][ T7399] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 496 with error 28 [ 165.949823][ [ 165.949823][ T7399] EXT4-fs (loop2): This should not happen!! Data will be lost [ 165.949823][ T7399] [ 165.949837][ T7399] EXT4-fs (loop2): Total free blocks count 0 [ 165.949849][ T7399] EXT4-fs (loop2): Free/Dirty block details [ 165.949862][ T7399] EXT4-fs (loop2): free_blocks=20480 [ 165.949874][ T7399] EXT4-fs (loop2): dirty_blocks=496 [ 165.949884][ T7399] EXT4-fs (loop2): Block reservation details [ 165.949895][ T7399] EXT4-fs (loop2): i_reserved_data_blocks=31 [ 165.959374][ T5609] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor767: data will be lost [ 166.047936][ T12] ------------[ cut here ]------------ [ 166.047949][ T12] kernel BUG at fs/ext4/inode.c:2827! [ 166.047999][ T12] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 166.048030][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 166.048051][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 166.048062][ T12] Workqueue: writeback wb_workfn (flush-7:3) [ 166.048116][ T12] RIP: 0010:ext4_do_writepages+0x479e/0x47a0 [ 166.048143][ T12] Code: c6 a0 26 84 8b e8 72 29 a6 fe 90 0f 0b e8 aa 3d 44 ff 4c 89 f7 48 c7 c6 80 2b 84 8b e8 5b 29 a6 fe 90 0f 0b e8 93 3d 44 ff 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 [ 166.048158][ T12] RSP: 0018:ffffc90000116d00 EFLAGS: 00010293 [ 166.048172][ T12] RAX: ffffffff82819bad RBX: 0000004210000000 RCX: ffff88801c6f8000 [ 166.048186][ T12] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 166.048197][ T12] RBP: ffffc90000117110 R08: 0000000000000000 R09: 0000000000000000 [ 166.048208][ T12] R10: dffffc0000000000 R11: ffffed10066b55f7 R12: ffffc900001174c0 [ 166.048220][ T12] R13: 1ffff92000022e98 R14: 0000004000000000 R15: 0000000000000001 [ 166.048232][ T12] FS: 0000000000000000(0000) GS:ffff888125c3e000(0000) knlGS:0000000000000000 [ 166.048247][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 166.048260][ T12] CR2: 00005555748b77d8 CR3: 0000000047330000 CR4: 00000000003526f0 [ 166.048275][ T12] Call Trace: [ 166.048281][ T12] [ 166.048302][ T12] ? hrtimer_start_range_ns_common+0x841/0xb90 [ 166.048329][ T12] ? __pfx_ext4_do_writepages+0x10/0x10 [ 166.048354][ T12] ? __lock_acquire+0x683/0x2ce0 [ 166.048376][ T12] ? try_to_take_rt_mutex+0x842/0xb00 [ 166.048405][ T12] ? ext4_writepages+0x205/0x3b0 [ 166.048422][ T12] ? ext4_writepages+0x205/0x3b0 [ 166.048445][ T12] ext4_writepages+0x241/0x3b0 [ 166.048463][ T12] ? __pfx_ext4_writepages+0x10/0x10 [ 166.048484][ T12] ? lockdep_hardirqs_on+0x7a/0x110 [ 166.048507][ T12] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 166.048524][ T12] ? lockdep_hardirqs_on+0x7a/0x110 [ 166.048544][ T12] ? __pfx_ext4_writepages+0x10/0x10 [ 166.048568][ T12] do_writepages+0x338/0x560 [ 166.048589][ T12] ? rt_spin_unlock+0x157/0x200 [ 166.048609][ T12] __writeback_single_inode+0x12e/0xf90 [ 166.048630][ T12] writeback_sb_inodes+0x9db/0x1ab0 [ 166.048651][ T12] ? lockdep_hardirqs_on+0x7a/0x110 [ 166.048675][ T12] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 166.048707][ T12] ? rcu_is_watching+0x15/0xb0 [ 166.048729][ T12] ? queue_io+0x2c2/0x450 [ 166.048745][ T12] wb_writeback+0x41c/0xad0 [ 166.048763][ T12] ? queue_io+0x2c1/0x450 [ 166.048781][ T12] ? __pfx_wb_writeback+0x10/0x10 [ 166.048803][ T12] wb_workfn+0x437/0x10f0 [ 166.048831][ T12] ? __pfx_wb_workfn+0x10/0x10 [ 166.048852][ T12] ? rcu_is_watching+0x15/0xb0 [ 166.048871][ T12] ? trace_hrtimer_start+0x82/0x200 [ 166.048898][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 166.048921][ T12] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 166.048945][ T12] ? process_scheduled_works+0xa20/0x14e0 [ 166.048965][ T12] ? process_scheduled_works+0xa20/0x14e0 [ 166.048986][ T12] ? rcu_is_watching+0x15/0xb0 [ 166.049007][ T12] ? process_scheduled_works+0xa20/0x14e0 [ 166.049026][ T12] process_scheduled_works+0xa8e/0x14e0 [ 166.049054][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 166.049077][ T12] ? assign_work+0x3cf/0x5d0 [ 166.049097][ T12] worker_thread+0xa47/0xfb0 [ 166.049127][ T12] kthread+0x388/0x470 [ 166.049149][ T12] ? __pfx_worker_thread+0x10/0x10 [ 166.049168][ T12] ? __pfx_kthread+0x10/0x10 [ 166.049190][ T12] ret_from_fork+0x514/0xb70 [ 166.049216][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 166.049240][ T12] ? __switch_to+0xc89/0x1420 [ 166.049263][ T12] ? __pfx_kthread+0x10/0x10 [ 166.049286][ T12] ret_from_fork_asm+0x1a/0x30 [ 166.049309][ T12] [ 166.049316][ T12] Modules linked in: [ 166.049345][ T12] ---[ end trace 0000000000000000 ]--- [ 166.061668][ T12] RIP: 0010:ext4_do_writepages+0x479e/0x47a0 [ 166.061705][ T12] Code: c6 a0 26 84 8b e8 72 29 a6 fe 90 0f 0b e8 aa 3d 44 ff 4c 89 f7 48 c7 c6 80 2b 84 8b e8 5b 29 a6 fe 90 0f 0b e8 93 3d 44 ff 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 [ 166.061720][ T12] RSP: 0018:ffffc90000116d00 EFLAGS: 00010293 [ 166.061737][ T12] RAX: ffffffff82819bad RBX: 0000004210000000 RCX: ffff88801c6f8000 [ 166.061751][ T12] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 166.061762][ T12] RBP: ffffc90000117110 R08: 0000000000000000 R09: 0000000000000000 [ 166.061774][ T12] R10: dffffc0000000000 R11: ffffed10066b55f7 R12: ffffc900001174c0 [ 166.061786][ T12] R13: 1ffff92000022e98 R14: 0000004000000000 R15: 0000000000000001 [ 166.061798][ T12] FS: 0000000000000000(0000) GS:ffff888125c3e000(0000) knlGS:0000000000000000 [ 166.061813][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 166.061826][ T12] CR2: 00005555748b77d8 CR3: 0000000047be4000 CR4: 00000000003526f0 [ 166.061844][ T12] Kernel panic - not syncing: Fatal exception [ 166.062128][ T12] Kernel Offset: disabled