./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2432656227 <...> Warning: Permanently added '10.128.0.82' (ED25519) to the list of known hosts. execve("./syz-executor2432656227", ["./syz-executor2432656227"], 0x7ffd5e9147a0 /* 10 vars */) = 0 brk(NULL) = 0x55556f72b000 brk(0x55556f72bd00) = 0x55556f72bd00 arch_prctl(ARCH_SET_FS, 0x55556f72b380) = 0 set_tid_address(0x55556f72b650) = 341 set_robust_list(0x55556f72b660, 24) = 0 rseq(0x55556f72bca0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2432656227", 4096) = 28 getrandom("\x6f\xe6\x0a\xd7\xff\x62\xa1\x41", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55556f72bd00 brk(0x55556f74cd00) = 0x55556f74cd00 brk(0x55556f74d000) = 0x55556f74d000 mprotect(0x7fca96db7000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 mkdir("/syzcgroup", 0777) = 0 mkdir("/syzcgroup/unified", 0777) = 0 mount("none", "/syzcgroup/unified", "cgroup2", 0, NULL) = 0 [ 28.347516][ T23] audit: type=1400 audit(1746895987.390:81): avc: denied { execmem } for pid=341 comm="syz-executor243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 chmod("/syzcgroup/unified", 0777) = 0 openat(AT_FDCWD, "/syzcgroup/unified/cgroup.subtree_control", O_WRONLY) = 3 write(3, "+cpu", 4) = 4 write(3, "+io", 3) = 3 write(3, "+pids", 5) = 5 close(3) = 0 mkdir("/syzcgroup/net", 0777) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "net") = -1 EINVAL (Invalid argument) [ 28.393525][ T23] audit: type=1400 audit(1746895987.430:82): avc: denied { mounton } for pid=341 comm="syz-executor243" path="/syzcgroup/unified" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.399991][ T341] cgroup1: Unknown subsys name 'net' mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/net", "cgroup", 0, "devices") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/net", "cgroup", 0, "blkio") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "freezer") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "blkio,freezer") = ? ERESTARTNOINTR (To be restarted) [ 28.416678][ T23] audit: type=1400 audit(1746895987.430:83): avc: denied { mount } for pid=341 comm="syz-executor243" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.423050][ T341] cgroup1: Unknown subsys name 'net_prio' [ 28.450978][ T341] cgroup1: Unknown subsys name 'devices' [ 28.458610][ T23] audit: type=1400 audit(1746895987.500:84): avc: denied { unmount } for pid=341 comm="syz-executor243" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 mount("none", "/syzcgroup/net", "cgroup", 0, "blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "blkio,freezer") = 0 chmod("/syzcgroup/net", 0777) = 0 mkdir("/syzcgroup/cpu", 0777) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "hugetlb") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/cpu", "cgroup", 0, "rlimit") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/cpu", "cgroup", 0, "memory") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,memory") = ? ERESTARTNOINTR (To be restarted) [ 28.602938][ T341] cgroup1: Unknown subsys name 'hugetlb' [ 28.609855][ T341] cgroup1: Unknown subsys name 'rlimit' mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,memory") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,memory") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,memory") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,memory") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,memory") = 0 chmod("/syzcgroup/cpu", 0777) = 0 openat(AT_FDCWD, "/syzcgroup/cpu/cgroup.clone_children", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/syzcgroup/cpu/cpuset.memory_pressure_enabled", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 mount(NULL, "/proc/sys/fs/binfmt_misc", "binfmt_misc", 0, NULL) = -1 EBUSY (Device or resource busy) openat(AT_FDCWD, "/proc/sys/fs/binfmt_misc/register", O_WRONLY|O_CLOEXEC) = 3 write(3, "\x3a\x73\x79\x7a\x30\x3a\x4d\x3a\x30\x3a\x01\x3a\x3a\x2e\x2f\x66\x69\x6c\x65\x30\x3a", 21) = 21 close(3) = 0 openat(AT_FDCWD, "/proc/sys/fs/binfmt_misc/register", O_WRONLY|O_CLOEXEC) = 3 write(3, "\x3a\x73\x79\x7a\x31\x3a\x4d\x3a\x31\x3a\x02\x3a\x3a\x2e\x2f\x66\x69\x6c\x65\x30\x3a\x50\x4f\x43", 24) = 24 close(3) = 0 mkdir("./syzkaller.82647x", 0700) = 0 chmod("./syzkaller.82647x", 0777) = 0 chdir("./syzkaller.82647x") = 0 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556f72b650) = 343 ./strace-static-x86_64: Process 343 attached [pid 343] set_robust_list(0x55556f72b660, 24) = 0 [pid 343] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 343] getppid() = 0 [pid 343] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 343] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 343] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 343] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 343] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 343] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 343] unshare(CLONE_NEWNS) = 0 [pid 343] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 343] unshare(CLONE_NEWIPC) = -1 EINVAL (Invalid argument) [pid 343] unshare(CLONE_NEWCGROUP) = 0 [pid 343] unshare(CLONE_NEWUTS) = 0 [pid 343] unshare(CLONE_SYSVSEM) = 0 [pid 343] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 343] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 343] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 343] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 343] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 343] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 343] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 343] getpid() = 1 [pid 343] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 344] set_robust_list(0x55556f72b660, 24) = 0 [pid 344] chdir("./0" [pid 343] <... clone resumed>, child_tidptr=0x55556f72b650) = 2 [pid 344] <... chdir resumed>) = 0 [pid 344] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 344] setpgid(0, 0) = 0 [pid 344] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 344] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 344] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 344] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 344] write(3, "1000", 4) = 4 [pid 344] close(3) = 0 [pid 344] read(200, "\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 344] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 344] symlink("/dev/binderfs", "./binderfs") = 0 [pid 344] write(1, "executing program\n", 18executing program ) = 18 [pid 344] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 344] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 344] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 344] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 344] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 344] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 344] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 344] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 344] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 344] memfd_create("syzkaller", 0) = 5 [pid 344] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [ 28.866370][ T23] audit: type=1400 audit(1746895987.880:89): avc: denied { write } for pid=338 comm="strace-static-x" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 28.887166][ T23] audit: type=1400 audit(1746895987.880:90): avc: denied { nlmsg_read } for pid=338 comm="strace-static-x" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 28.889428][ T343] request_module fs-gadgetfs succeeded, but still no fs? [pid 344] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 344] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 344] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 344] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 344] close(5) = 0 [pid 344] close(6) = 0 [pid 344] mkdir("./file0", 0777) = 0 [pid 344] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 344] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 344] chdir("./file0") = 0 [pid 344] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 344] ioctl(6, LOOP_CLR_FD) = 0 [pid 344] close(6) = 0 [pid 344] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 344] write(6, "#! ./file1\n", 11) = 11 [pid 344] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 344] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 344] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=2, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [ 28.970117][ T344] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 28.991103][ T345] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-344: bg 0: block 234: padding at end of block bitmap is not set [ 29.008282][ T345] vhost-344 (345) used greatest stack depth: 23568 bytes left [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 29.016543][ T344] syz-executor243 (344) used greatest stack depth: 21824 bytes left [pid 343] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./0/file0") = 0 [pid 343] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./0/binderfs") = 0 [pid 343] umount2("./0/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./0/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./0/cgroup.net") = 0 [pid 343] umount2("./0/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./0/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./0/cgroup.cpu") = 0 [pid 343] umount2("./0/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./0/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./0/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./0") = 0 [pid 343] mkdir("./1", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 349 attached [pid 349] set_robust_list(0x55556f72b660, 24) = 0 [pid 349] chdir("./1" [pid 343] <... clone resumed>, child_tidptr=0x55556f72b650) = 3 [pid 349] <... chdir resumed>) = 0 [pid 349] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 349] setpgid(0, 0) = 0 [pid 349] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 349] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 349] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 349] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 349] write(3, "1000", 4) = 4 [pid 349] close(3) = 0 [pid 349] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 349] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 349] write(1, "executing program\n", 18) = 18 [pid 349] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 349] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 349] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 349] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 349] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 349] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 349] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 349] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 349] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 349] memfd_create("syzkaller", 0) = 5 [pid 349] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 349] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 349] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 349] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 349] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 349] close(5) = 0 [pid 349] close(6) = 0 [pid 349] mkdir("./file0", 0777) = 0 [pid 349] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 349] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 349] chdir("./file0") = 0 [pid 349] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 349] ioctl(6, LOOP_CLR_FD) = 0 [pid 349] close(6) = 0 [pid 349] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 349] write(6, "#! ./file1\n", 11) = 11 [pid 349] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 349] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 349] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=3, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 29.139399][ T349] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 29.160817][ T350] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-349: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./1/file0") = 0 [pid 343] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./1/binderfs") = 0 [pid 343] umount2("./1/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./1/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./1/cgroup.net") = 0 [pid 343] umount2("./1/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./1/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./1/cgroup.cpu") = 0 [pid 343] umount2("./1/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./1/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./1/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./1") = 0 [pid 343] mkdir("./2", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 354 attached [pid 354] set_robust_list(0x55556f72b660, 24) = 0 [pid 354] chdir("./2" [pid 343] <... clone resumed>, child_tidptr=0x55556f72b650) = 4 [pid 354] <... chdir resumed>) = 0 [pid 354] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 354] setpgid(0, 0) = 0 [pid 354] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 354] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 354] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 354] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 354] write(3, "1000", 4) = 4 [pid 354] close(3) = 0 [pid 354] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 354] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 354] write(1, "executing program\n", 18) = 18 [pid 354] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 354] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 354] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 354] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 354] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 354] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 354] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 354] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 354] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 354] memfd_create("syzkaller", 0) = 5 [pid 354] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 354] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 354] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 354] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 354] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 354] close(5) = 0 [pid 354] close(6) = 0 [pid 354] mkdir("./file0", 0777) = 0 [pid 354] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 354] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 354] chdir("./file0") = 0 [pid 354] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 354] ioctl(6, LOOP_CLR_FD) = 0 [pid 354] close(6) = 0 [pid 354] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 354] write(6, "#! ./file1\n", 11) = 11 [pid 354] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 354] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 354] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=4, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 29.292281][ T354] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 29.312749][ T355] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-354: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./2/file0") = 0 [pid 343] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./2/binderfs") = 0 [pid 343] umount2("./2/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./2/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./2/cgroup.net") = 0 [pid 343] umount2("./2/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./2/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./2/cgroup.cpu") = 0 [pid 343] umount2("./2/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./2/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./2/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./2") = 0 [pid 343] mkdir("./3", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556f72b650) = 5 ./strace-static-x86_64: Process 359 attached [pid 359] set_robust_list(0x55556f72b660, 24) = 0 [pid 359] chdir("./3") = 0 [pid 359] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 359] setpgid(0, 0) = 0 [pid 359] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 359] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 359] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 359] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 359] write(3, "1000", 4) = 4 [pid 359] close(3) = 0 [pid 359] read(200, "\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 359] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 359] symlink("/dev/binderfs", "./binderfs") = 0 [pid 359] write(1, "executing program\n", 18executing program ) = 18 [pid 359] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 359] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 359] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 359] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 359] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 359] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 359] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 359] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 359] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 359] memfd_create("syzkaller", 0) = 5 [pid 359] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 359] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 359] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 359] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 359] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 359] close(5) = 0 [pid 359] close(6) = 0 [pid 359] mkdir("./file0", 0777) = 0 [pid 359] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 359] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 359] chdir("./file0") = 0 [pid 359] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 359] ioctl(6, LOOP_CLR_FD) = 0 [pid 359] close(6) = 0 [pid 359] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 359] write(6, "#! ./file1\n", 11) = 11 [pid 359] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 359] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 359] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=5, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 29.445756][ T359] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 29.466629][ T360] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-359: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./3/file0") = 0 [pid 343] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./3/binderfs") = 0 [pid 343] umount2("./3/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./3/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./3/cgroup.net") = 0 [pid 343] umount2("./3/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./3/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./3/cgroup.cpu") = 0 [pid 343] umount2("./3/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./3/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./3/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./3") = 0 [pid 343] mkdir("./4", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program , child_tidptr=0x55556f72b650) = 6 ./strace-static-x86_64: Process 364 attached [pid 364] set_robust_list(0x55556f72b660, 24) = 0 [pid 364] chdir("./4") = 0 [pid 364] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 364] setpgid(0, 0) = 0 [pid 364] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 364] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 364] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 364] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 364] write(3, "1000", 4) = 4 [pid 364] close(3) = 0 [pid 364] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 364] symlink("/dev/binderfs", "./binderfs") = 0 [pid 364] write(1, "executing program\n", 18) = 18 [pid 364] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 364] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 364] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 364] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 364] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 364] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 364] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 364] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 364] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 364] memfd_create("syzkaller", 0) = 5 [pid 364] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 364] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 364] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 364] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 364] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 364] close(5) = 0 [pid 364] close(6) = 0 [pid 364] mkdir("./file0", 0777) = 0 [pid 364] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 364] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 364] chdir("./file0") = 0 [pid 364] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 364] ioctl(6, LOOP_CLR_FD) = 0 [pid 364] close(6) = 0 [pid 364] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 364] write(6, "#! ./file1\n", 11) = 11 [pid 364] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 364] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 364] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=6, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 29.627646][ T364] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 29.659611][ T365] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-364: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./4/file0") = 0 [pid 343] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./4/binderfs") = 0 [pid 343] umount2("./4/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./4/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./4/cgroup.net") = 0 [pid 343] umount2("./4/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./4/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./4/cgroup.cpu") = 0 [pid 343] umount2("./4/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./4/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./4/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./4") = 0 [pid 343] mkdir("./5", 0777) = 0 executing program [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556f72b650) = 7 ./strace-static-x86_64: Process 369 attached [pid 369] set_robust_list(0x55556f72b660, 24) = 0 [pid 369] chdir("./5") = 0 [pid 369] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 369] setpgid(0, 0) = 0 [pid 369] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 369] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 369] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 369] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 369] write(3, "1000", 4) = 4 [pid 369] close(3) = 0 [pid 369] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 369] symlink("/dev/binderfs", "./binderfs") = 0 [pid 369] write(1, "executing program\n", 18) = 18 [pid 369] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 369] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 369] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 369] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 369] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 369] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 369] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 369] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 369] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 369] memfd_create("syzkaller", 0) = 5 [pid 369] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 369] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 369] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 369] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 369] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 369] close(5) = 0 [pid 369] close(6) = 0 [pid 369] mkdir("./file0", 0777) = 0 [pid 369] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 369] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 369] chdir("./file0") = 0 [pid 369] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 369] ioctl(6, LOOP_CLR_FD) = 0 [pid 369] close(6) = 0 [pid 369] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 369] write(6, "#! ./file1\n", 11) = 11 [pid 369] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 369] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 369] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=7, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 29.777728][ T369] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 29.794756][ T369] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz-executor243: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./5/file0") = 0 [pid 343] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./5/binderfs") = 0 [pid 343] umount2("./5/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./5/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./5/cgroup.net") = 0 [pid 343] umount2("./5/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./5/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./5/cgroup.cpu") = 0 [pid 343] umount2("./5/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./5/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./5/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./5") = 0 [pid 343] mkdir("./6", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 374 attached [pid 374] set_robust_list(0x55556f72b660, 24) = 0 [pid 374] chdir("./6" [pid 343] <... clone resumed>, child_tidptr=0x55556f72b650) = 8 [pid 374] <... chdir resumed>) = 0 [pid 374] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 374] setpgid(0, 0) = 0 [pid 374] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 374] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 374] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 374] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 374] write(3, "1000", 4) = 4 [pid 374] close(3) = 0 [pid 374] read(200, "\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 374] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) executing program [pid 374] symlink("/dev/binderfs", "./binderfs") = 0 [pid 374] write(1, "executing program\n", 18) = 18 [pid 374] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 374] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 374] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 374] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 374] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 374] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 374] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 374] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 374] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 374] memfd_create("syzkaller", 0) = 5 [pid 374] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 374] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 374] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 374] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 374] close(5) = 0 [pid 374] close(6) = 0 [pid 374] mkdir("./file0", 0777) = 0 [pid 374] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 374] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 374] chdir("./file0") = 0 [pid 374] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 374] ioctl(6, LOOP_CLR_FD) = 0 [pid 374] close(6) = 0 [pid 374] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 374] write(6, "#! ./file1\n", 11) = 11 [pid 374] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 374] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 374] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=8, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 29.957802][ T374] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 29.978959][ T375] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-374: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./6/file0") = 0 [pid 343] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./6/binderfs") = 0 [pid 343] umount2("./6/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./6/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./6/cgroup.net") = 0 [pid 343] umount2("./6/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./6/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./6/cgroup.cpu") = 0 [pid 343] umount2("./6/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./6/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./6/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./6") = 0 [pid 343] mkdir("./7", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 379 attached [pid 379] set_robust_list(0x55556f72b660, 24) = 0 [pid 379] chdir("./7" [pid 343] <... clone resumed>, child_tidptr=0x55556f72b650) = 9 [pid 379] <... chdir resumed>) = 0 [pid 379] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 379] setpgid(0, 0) = 0 [pid 379] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 379] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 379] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 379] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 379] write(3, "1000", 4) = 4 [pid 379] close(3) = 0 [pid 379] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 379] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 379] write(1, "executing program\n", 18) = 18 [pid 379] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 379] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 379] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 379] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 379] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 379] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 379] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 379] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 379] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 379] memfd_create("syzkaller", 0) = 5 [pid 379] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 379] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 379] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 379] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 379] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 379] close(5) = 0 [pid 379] close(6) = 0 [pid 379] mkdir("./file0", 0777) = 0 [pid 379] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 379] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 379] chdir("./file0") = 0 [pid 379] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 379] ioctl(6, LOOP_CLR_FD) = 0 [pid 379] close(6) = 0 [pid 379] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 379] write(6, "#! ./file1\n", 11) = 11 [pid 379] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 379] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 379] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=9, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 30.161458][ T379] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 30.182010][ T380] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-379: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./7/file0") = 0 [pid 343] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./7/binderfs") = 0 [pid 343] umount2("./7/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./7/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./7/cgroup.net") = 0 [pid 343] umount2("./7/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./7/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./7/cgroup.cpu") = 0 [pid 343] umount2("./7/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./7/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./7/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./7") = 0 [pid 343] mkdir("./8", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 384 attached [pid 384] set_robust_list(0x55556f72b660, 24 [pid 343] <... clone resumed>, child_tidptr=0x55556f72b650) = 10 [pid 384] <... set_robust_list resumed>) = 0 [pid 384] chdir("./8") = 0 [pid 384] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 384] setpgid(0, 0) = 0 [pid 384] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 384] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 384] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 384] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 384] write(3, "1000", 4) = 4 [pid 384] close(3) = 0 [pid 384] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 384] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 384] write(1, "executing program\n", 18) = 18 [pid 384] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 384] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 384] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 384] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 384] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 384] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 384] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 384] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 384] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 384] memfd_create("syzkaller", 0) = 5 [pid 384] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 384] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 384] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 384] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 384] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 384] close(5) = 0 [pid 384] close(6) = 0 [pid 384] mkdir("./file0", 0777) = 0 [pid 384] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 384] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 384] chdir("./file0") = 0 [pid 384] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 384] ioctl(6, LOOP_CLR_FD) = 0 [pid 384] close(6) = 0 [pid 384] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 384] write(6, "#! ./file1\n", 11) = 11 [pid 384] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 384] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 384] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=10, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 30.367729][ T384] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 30.386475][ T385] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-384: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./8/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./8/file0") = 0 [pid 343] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./8/binderfs") = 0 [pid 343] umount2("./8/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./8/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./8/cgroup.net") = 0 [pid 343] umount2("./8/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./8/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./8/cgroup.cpu") = 0 [pid 343] umount2("./8/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./8/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./8/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./8") = 0 [pid 343] mkdir("./9", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 389 attached [pid 389] set_robust_list(0x55556f72b660, 24) = 0 [pid 389] chdir("./9" [pid 343] <... clone resumed>, child_tidptr=0x55556f72b650) = 11 [pid 389] <... chdir resumed>) = 0 [pid 389] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 389] setpgid(0, 0) = 0 [pid 389] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 389] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 389] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 389] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 389] write(3, "1000", 4) = 4 [pid 389] close(3) = 0 [pid 389] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 389] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 389] write(1, "executing program\n", 18) = 18 [pid 389] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 389] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 389] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 389] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 389] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 389] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 389] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 389] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 389] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 389] memfd_create("syzkaller", 0) = 5 [pid 389] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 389] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 389] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 389] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 389] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 389] close(5) = 0 [pid 389] close(6) = 0 [pid 389] mkdir("./file0", 0777) = 0 [pid 389] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 389] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 389] chdir("./file0") = 0 [pid 389] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 389] ioctl(6, LOOP_CLR_FD) = 0 [pid 389] close(6) = 0 [pid 389] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 389] write(6, "#! ./file1\n", 11) = 11 [pid 389] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 389] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 389] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=11, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 30.557742][ T389] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 30.577591][ T390] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-389: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./9/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./9/file0") = 0 [pid 343] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./9/binderfs") = 0 [pid 343] umount2("./9/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./9/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./9/cgroup.net") = 0 [pid 343] umount2("./9/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./9/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./9/cgroup.cpu") = 0 [pid 343] umount2("./9/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./9/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./9/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./9") = 0 [pid 343] mkdir("./10", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556f72b650) = 12 ./strace-static-x86_64: Process 394 attached [pid 394] set_robust_list(0x55556f72b660, 24) = 0 [pid 394] chdir("./10") = 0 [pid 394] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 394] setpgid(0, 0) = 0 [pid 394] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 394] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 394] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 394] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 394] write(3, "1000", 4) = 4 [pid 394] close(3) = 0 [pid 394] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 394] symlink("/dev/binderfs", "./binderfs") = 0 [pid 394] write(1, "executing program\n", 18executing program ) = 18 [pid 394] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 394] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 394] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 394] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 394] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 394] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 394] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 394] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 394] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 394] memfd_create("syzkaller", 0) = 5 [pid 394] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 394] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 394] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 394] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 394] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 394] close(5) = 0 [pid 394] close(6) = 0 [pid 394] mkdir("./file0", 0777) = 0 [pid 394] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 394] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 394] chdir("./file0") = 0 [pid 394] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 394] ioctl(6, LOOP_CLR_FD) = 0 [pid 394] close(6) = 0 [pid 394] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 394] write(6, "#! ./file1\n", 11) = 11 [pid 394] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 394] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 394] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=12, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 30.797743][ T394] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 30.818570][ T395] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-394: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./10/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./10/file0") = 0 [pid 343] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./10/binderfs") = 0 [pid 343] umount2("./10/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./10/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./10/cgroup.net") = 0 [pid 343] umount2("./10/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./10/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./10/cgroup.cpu") = 0 [pid 343] umount2("./10/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./10/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./10/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./10") = 0 [pid 343] mkdir("./11", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 399 attached , child_tidptr=0x55556f72b650) = 13 [pid 399] set_robust_list(0x55556f72b660, 24) = 0 [pid 399] chdir("./11") = 0 [pid 399] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 399] setpgid(0, 0) = 0 [pid 399] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 399] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 399] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 399] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 399] write(3, "1000", 4) = 4 [pid 399] close(3) = 0 [pid 399] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 399] symlink("/dev/binderfs", "./binderfs") = 0 [pid 399] write(1, "executing program\n", 18executing program ) = 18 [pid 399] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 399] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 399] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 399] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 399] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 399] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 399] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 399] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 399] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 399] memfd_create("syzkaller", 0) = 5 [pid 399] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 399] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 399] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 399] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 399] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 399] close(5) = 0 [pid 399] close(6) = 0 [pid 399] mkdir("./file0", 0777) = 0 [pid 399] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 399] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 399] chdir("./file0") = 0 [pid 399] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 399] ioctl(6, LOOP_CLR_FD) = 0 [pid 399] close(6) = 0 [pid 399] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 399] write(6, "#! ./file1\n", 11) = 11 [pid 399] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 399] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 399] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=13, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 31.000270][ T399] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 31.019758][ T400] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-399: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./11/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./11/file0") = 0 [pid 343] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./11/binderfs") = 0 [pid 343] umount2("./11/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./11/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./11/cgroup.net") = 0 [pid 343] umount2("./11/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./11/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./11/cgroup.cpu") = 0 [pid 343] umount2("./11/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./11/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./11/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./11") = 0 [pid 343] mkdir("./12", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 404 attached , child_tidptr=0x55556f72b650) = 14 [pid 404] set_robust_list(0x55556f72b660, 24) = 0 [pid 404] chdir("./12") = 0 [pid 404] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 404] setpgid(0, 0) = 0 [pid 404] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 404] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 404] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 404] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 404] write(3, "1000", 4) = 4 [pid 404] close(3) = 0 [pid 404] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 404] symlink("/dev/binderfs", "./binderfs") = 0 [pid 404] write(1, "executing program\n", 18executing program ) = 18 [pid 404] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 404] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 404] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 404] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 404] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 404] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 404] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 404] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 404] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 404] memfd_create("syzkaller", 0) = 5 [pid 404] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 404] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 404] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 404] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 404] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 404] close(5) = 0 [pid 404] close(6) = 0 [pid 404] mkdir("./file0", 0777) = 0 [pid 404] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 404] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 404] chdir("./file0") = 0 [pid 404] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 404] ioctl(6, LOOP_CLR_FD) = 0 [pid 404] close(6) = 0 [pid 404] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 404] write(6, "#! ./file1\n", 11) = 11 [pid 404] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 404] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 404] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=14, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 31.157886][ T404] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 31.174534][ T404] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz-executor243: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./12/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./12/file0") = 0 [pid 343] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./12/binderfs") = 0 [pid 343] umount2("./12/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./12/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./12/cgroup.net") = 0 [pid 343] umount2("./12/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./12/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./12/cgroup.cpu") = 0 [pid 343] umount2("./12/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./12/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./12/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./12") = 0 [pid 343] mkdir("./13", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 409 attached [pid 409] set_robust_list(0x55556f72b660, 24) = 0 [pid 409] chdir("./13" [pid 343] <... clone resumed>, child_tidptr=0x55556f72b650) = 15 [pid 409] <... chdir resumed>) = 0 [pid 409] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 409] setpgid(0, 0) = 0 [pid 409] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 409] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 409] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 409] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 409] write(3, "1000", 4) = 4 [pid 409] close(3) = 0 [pid 409] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 409] symlink("/dev/binderfs", "./binderfs") = 0 [pid 409] write(1, "executing program\n", 18executing program ) = 18 [pid 409] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 409] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 409] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 409] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 409] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 409] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 409] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 409] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 409] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 409] memfd_create("syzkaller", 0) = 5 [pid 409] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 409] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 409] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 409] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 409] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 409] close(5) = 0 [pid 409] close(6) = 0 [pid 409] mkdir("./file0", 0777) = 0 [pid 409] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 409] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 409] chdir("./file0") = 0 [pid 409] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 409] ioctl(6, LOOP_CLR_FD) = 0 [pid 409] close(6) = 0 [pid 409] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 409] write(6, "#! ./file1\n", 11) = 11 [pid 409] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 409] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 409] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=15, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 31.357781][ T409] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 31.377974][ T410] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-409: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./13/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./13/file0") = 0 [pid 343] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./13/binderfs") = 0 [pid 343] umount2("./13/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./13/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./13/cgroup.net") = 0 [pid 343] umount2("./13/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./13/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./13/cgroup.cpu") = 0 [pid 343] umount2("./13/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./13/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./13/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./13") = 0 [pid 343] mkdir("./14", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 414 attached [pid 414] set_robust_list(0x55556f72b660, 24) = 0 [pid 414] chdir("./14") = 0 [pid 414] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 414] setpgid(0, 0) = 0 [pid 414] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 414] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 414] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 414] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 414] write(3, "1000", 4) = 4 [pid 414] close(3) = 0 [pid 414] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 414] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 414] write(1, "executing program\n", 18) = 18 [pid 414] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 414] ioctl(3, VHOST_SET_OWNER [pid 343] <... clone resumed>, child_tidptr=0x55556f72b650) = 16 [pid 414] <... ioctl resumed>, 0) = 0 [pid 414] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 414] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 414] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 414] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 414] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 414] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 414] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 414] memfd_create("syzkaller", 0) = 5 [pid 414] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 414] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 414] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 414] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 414] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 414] close(5) = 0 [pid 414] close(6) = 0 [pid 414] mkdir("./file0", 0777) = 0 [pid 414] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 414] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 414] chdir("./file0") = 0 [pid 414] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 414] ioctl(6, LOOP_CLR_FD) = 0 [pid 414] close(6) = 0 [pid 414] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 414] write(6, "#! ./file1\n", 11) = 11 [pid 414] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 414] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 414] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=16, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 31.517764][ T414] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 31.532670][ T415] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-414: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./14/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./14/file0") = 0 [pid 343] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./14/binderfs") = 0 [pid 343] umount2("./14/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./14/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./14/cgroup.net") = 0 [pid 343] umount2("./14/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./14/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./14/cgroup.cpu") = 0 [pid 343] umount2("./14/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./14/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./14/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./14") = 0 [pid 343] mkdir("./15", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 419 attached , child_tidptr=0x55556f72b650) = 17 [pid 419] set_robust_list(0x55556f72b660, 24) = 0 [pid 419] chdir("./15") = 0 [pid 419] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 419] setpgid(0, 0) = 0 [pid 419] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 419] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 419] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 419] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 419] write(3, "1000", 4) = 4 [pid 419] close(3) = 0 [pid 419] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 419] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 419] write(1, "executing program\n", 18) = 18 [pid 419] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 419] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 419] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 419] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 419] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 419] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 419] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 419] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 419] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 419] memfd_create("syzkaller", 0) = 5 [pid 419] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 419] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 419] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 419] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 419] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 419] close(5) = 0 [pid 419] close(6) = 0 [pid 419] mkdir("./file0", 0777) = 0 [pid 419] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 419] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 419] chdir("./file0") = 0 [pid 419] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 419] ioctl(6, LOOP_CLR_FD) = 0 [pid 419] close(6) = 0 [pid 419] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 419] write(6, "#! ./file1\n", 11) = 11 [pid 419] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 419] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 419] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=17, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 31.720638][ T419] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 31.741131][ T420] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-419: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./15/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./15/file0") = 0 [pid 343] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./15/binderfs") = 0 [pid 343] umount2("./15/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./15/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./15/cgroup.net") = 0 [pid 343] umount2("./15/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./15/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./15/cgroup.cpu") = 0 [pid 343] umount2("./15/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./15/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./15/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./15") = 0 [pid 343] mkdir("./16", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 424 attached , child_tidptr=0x55556f72b650) = 18 [pid 424] set_robust_list(0x55556f72b660, 24) = 0 [pid 424] chdir("./16") = 0 [pid 424] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 424] setpgid(0, 0) = 0 [pid 424] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 424] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 424] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 424] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 424] write(3, "1000", 4) = 4 [pid 424] close(3) = 0 [pid 424] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 424] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 424] write(1, "executing program\n", 18) = 18 [pid 424] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 424] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 424] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 424] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 424] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 424] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 424] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 424] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 424] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 424] memfd_create("syzkaller", 0) = 5 [pid 424] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 424] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 424] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 424] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 424] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 424] close(5) = 0 [pid 424] close(6) = 0 [pid 424] mkdir("./file0", 0777) = 0 [pid 424] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 424] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 424] chdir("./file0") = 0 [pid 424] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 424] ioctl(6, LOOP_CLR_FD) = 0 [pid 424] close(6) = 0 [pid 424] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 424] write(6, "#! ./file1\n", 11) = 11 [pid 424] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 424] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 424] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=18, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 31.919102][ T424] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 31.939658][ T425] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-424: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./16/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./16/file0") = 0 [pid 343] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./16/binderfs") = 0 [pid 343] umount2("./16/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./16/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./16/cgroup.net") = 0 [pid 343] umount2("./16/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./16/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./16/cgroup.cpu") = 0 [pid 343] umount2("./16/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./16/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./16/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./16") = 0 [pid 343] mkdir("./17", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556f72b650) = 19 ./strace-static-x86_64: Process 429 attached [pid 429] set_robust_list(0x55556f72b660, 24) = 0 [pid 429] chdir("./17") = 0 [pid 429] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 429] setpgid(0, 0) = 0 [pid 429] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 429] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 429] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 429] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 429] write(3, "1000", 4) = 4 [pid 429] close(3) = 0 [pid 429] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 429] symlink("/dev/binderfs", "./binderfs") = 0 [pid 429] write(1, "executing program\n", 18) = 18 [pid 429] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 429] ioctl(3, VHOST_SET_OWNERexecuting program , 0) = 0 [pid 429] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 429] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 429] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 429] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 429] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 429] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 429] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 429] memfd_create("syzkaller", 0) = 5 [pid 429] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 429] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 429] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 429] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 429] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 429] close(5) = 0 [pid 429] close(6) = 0 [pid 429] mkdir("./file0", 0777) = 0 [pid 429] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 429] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 429] chdir("./file0") = 0 [pid 429] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 429] ioctl(6, LOOP_CLR_FD) = 0 [pid 429] close(6) = 0 [pid 429] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 429] write(6, "#! ./file1\n", 11) = 11 [pid 429] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 429] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 429] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=19, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=0} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 32.048592][ T429] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 32.067250][ T430] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-429: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./17/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./17/file0") = 0 [pid 343] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./17/binderfs") = 0 [pid 343] umount2("./17/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./17/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./17/cgroup.net") = 0 [pid 343] umount2("./17/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./17/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./17/cgroup.cpu") = 0 [pid 343] umount2("./17/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./17/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./17/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./17") = 0 [pid 343] mkdir("./18", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 434 attached [pid 434] set_robust_list(0x55556f72b660, 24) = 0 [pid 434] chdir("./18") = 0 [pid 343] <... clone resumed>, child_tidptr=0x55556f72b650) = 20 [pid 434] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 434] setpgid(0, 0) = 0 [pid 434] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 434] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 434] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 434] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 434] write(3, "1000", 4) = 4 [pid 434] close(3) = 0 [pid 434] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 434] symlink("/dev/binderfs", "./binderfs") = 0 [pid 434] write(1, "executing program\n", 18executing program ) = 18 [pid 434] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 434] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 434] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 434] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 434] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 434] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 434] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 434] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 434] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 434] memfd_create("syzkaller", 0) = 5 [pid 434] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 434] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 434] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 434] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 434] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 434] close(5) = 0 [pid 434] close(6) = 0 [pid 434] mkdir("./file0", 0777) = 0 [pid 434] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 434] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 434] chdir("./file0") = 0 [pid 434] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 434] ioctl(6, LOOP_CLR_FD) = 0 [pid 434] close(6) = 0 [pid 434] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 434] write(6, "#! ./file1\n", 11) = 11 [pid 434] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 434] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 434] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=20, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 32.217488][ T434] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 32.231967][ T434] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz-executor243: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./18/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./18/file0") = 0 [pid 343] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./18/binderfs") = 0 [pid 343] umount2("./18/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./18/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./18/cgroup.net") = 0 [pid 343] umount2("./18/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./18/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./18/cgroup.cpu") = 0 [pid 343] umount2("./18/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./18/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./18/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./18") = 0 [pid 343] mkdir("./19", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 439 attached [pid 439] set_robust_list(0x55556f72b660, 24 [pid 343] <... clone resumed>, child_tidptr=0x55556f72b650) = 21 [pid 439] <... set_robust_list resumed>) = 0 [pid 439] chdir("./19") = 0 [pid 439] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 439] setpgid(0, 0) = 0 [pid 439] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 439] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 439] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 439] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 439] write(3, "1000", 4) = 4 [pid 439] close(3) = 0 [pid 439] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 439] symlink("/dev/binderfs", "./binderfs") = 0 [pid 439] write(1, "executing program\n", 18executing program ) = 18 [pid 439] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 439] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 439] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 439] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 439] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 439] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 439] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 439] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 439] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 439] memfd_create("syzkaller", 0) = 5 [pid 439] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 439] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 439] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 439] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 439] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 439] close(5) = 0 [pid 439] close(6) = 0 [pid 439] mkdir("./file0", 0777) = 0 [pid 439] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 439] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 439] chdir("./file0") = 0 [pid 439] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 439] ioctl(6, LOOP_CLR_FD) = 0 [pid 439] close(6) = 0 [pid 439] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 439] write(6, "#! ./file1\n", 11) = 11 [pid 439] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 439] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 439] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=21, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 32.457729][ T439] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 32.468966][ T439] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz-executor243: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./19/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./19/file0") = 0 [pid 343] umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./19/binderfs") = 0 [pid 343] umount2("./19/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./19/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./19/cgroup.net") = 0 [pid 343] umount2("./19/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./19/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./19/cgroup.cpu") = 0 [pid 343] umount2("./19/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./19/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./19/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./19") = 0 [pid 343] mkdir("./20", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 444 attached [pid 444] set_robust_list(0x55556f72b660, 24 [pid 343] <... clone resumed>, child_tidptr=0x55556f72b650) = 22 [pid 444] <... set_robust_list resumed>) = 0 [pid 444] chdir("./20") = 0 [pid 444] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 444] setpgid(0, 0) = 0 [pid 444] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 444] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 444] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 444] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 444] write(3, "1000", 4) = 4 [pid 444] close(3) = 0 [pid 444] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 444] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 444] write(1, "executing program\n", 18) = 18 [pid 444] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 444] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 444] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 444] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 444] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 444] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 444] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 444] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 444] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 444] memfd_create("syzkaller", 0) = 5 [pid 444] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 444] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 444] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 444] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 444] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 444] close(5) = 0 [pid 444] close(6) = 0 [pid 444] mkdir("./file0", 0777) = 0 [pid 444] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 444] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 444] chdir("./file0") = 0 [pid 444] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 444] ioctl(6, LOOP_CLR_FD) = 0 [pid 444] close(6) = 0 [pid 444] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 444] write(6, "#! ./file1\n", 11) = 11 [pid 444] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 444] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 444] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=22, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 32.641926][ T444] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 32.662239][ T445] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-444: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./20/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./20/file0") = 0 [pid 343] umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./20/binderfs") = 0 [pid 343] umount2("./20/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./20/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./20/cgroup.net") = 0 [pid 343] umount2("./20/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./20/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./20/cgroup.cpu") = 0 [pid 343] umount2("./20/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./20/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./20/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./20") = 0 [pid 343] mkdir("./21", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 449 attached [pid 449] set_robust_list(0x55556f72b660, 24) = 0 [pid 449] chdir("./21") = 0 [pid 449] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 449] setpgid(0, 0) = 0 [pid 449] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 449] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 449] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 449] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 449] write(3, "1000", 4) = 4 [pid 449] close(3) = 0 [pid 449] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 449] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 449] write(1, "executing program\n", 18) = 18 [pid 449] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 449] ioctl(3, VHOST_SET_OWNER [pid 343] <... clone resumed>, child_tidptr=0x55556f72b650) = 23 [pid 449] <... ioctl resumed>, 0) = 0 [pid 449] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 449] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 449] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 449] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 449] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 449] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 449] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 449] memfd_create("syzkaller", 0) = 5 [pid 449] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 449] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 449] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 449] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 449] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 449] close(5) = 0 [pid 449] close(6) = 0 [pid 449] mkdir("./file0", 0777) = 0 [pid 449] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 449] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 449] chdir("./file0") = 0 [pid 449] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 449] ioctl(6, LOOP_CLR_FD) = 0 [pid 449] close(6) = 0 [pid 449] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 449] write(6, "#! ./file1\n", 11) = 11 [pid 449] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 449] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 449] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=23, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 32.847716][ T449] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 32.864259][ T449] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz-executor243: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./21/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./21/file0") = 0 [pid 343] umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./21/binderfs") = 0 [pid 343] umount2("./21/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./21/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./21/cgroup.net") = 0 [pid 343] umount2("./21/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./21/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./21/cgroup.cpu") = 0 [pid 343] umount2("./21/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./21/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./21/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./21") = 0 [pid 343] mkdir("./22", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 454 attached [pid 454] set_robust_list(0x55556f72b660, 24 [pid 343] <... clone resumed>, child_tidptr=0x55556f72b650) = 24 [pid 454] <... set_robust_list resumed>) = 0 [pid 454] chdir("./22") = 0 [pid 454] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 454] setpgid(0, 0) = 0 [pid 454] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 454] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 454] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 454] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 454] write(3, "1000", 4) = 4 [pid 454] close(3) = 0 [pid 454] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 454] symlink("/dev/binderfs", "./binderfs") = 0 [pid 454] write(1, "executing program\n", 18executing program ) = 18 [pid 454] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 454] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 454] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 454] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 454] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 454] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 454] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 454] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 454] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 454] memfd_create("syzkaller", 0) = 5 [pid 454] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 454] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 454] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 454] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 454] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 454] close(5) = 0 [pid 454] close(6) = 0 [pid 454] mkdir("./file0", 0777) = 0 [pid 454] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 454] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 454] chdir("./file0") = 0 [pid 454] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 454] ioctl(6, LOOP_CLR_FD) = 0 [pid 454] close(6) = 0 [pid 454] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 454] write(6, "#! ./file1\n", 11) = 11 [pid 454] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 454] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 454] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=24, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 33.000720][ T454] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 33.020541][ T455] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-454: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./22/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./22/file0") = 0 [pid 343] umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./22/binderfs") = 0 [pid 343] umount2("./22/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./22/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./22/cgroup.net") = 0 [pid 343] umount2("./22/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./22/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./22/cgroup.cpu") = 0 [pid 343] umount2("./22/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./22/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./22/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./22") = 0 [pid 343] mkdir("./23", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 459 attached , child_tidptr=0x55556f72b650) = 25 [pid 459] set_robust_list(0x55556f72b660, 24) = 0 [pid 459] chdir("./23") = 0 [pid 459] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 459] setpgid(0, 0) = 0 [pid 459] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 459] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 459] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 459] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 459] write(3, "1000", 4) = 4 [pid 459] close(3) = 0 [pid 459] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 459] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 459] write(1, "executing program\n", 18) = 18 [pid 459] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 459] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 459] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 459] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 459] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 459] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 459] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 459] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 459] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 459] memfd_create("syzkaller", 0) = 5 [pid 459] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 459] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 459] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 459] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 459] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 459] close(5) = 0 [pid 459] close(6) = 0 [pid 459] mkdir("./file0", 0777) = 0 [pid 459] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 459] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 459] chdir("./file0") = 0 [pid 459] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 459] ioctl(6, LOOP_CLR_FD) = 0 [pid 459] close(6) = 0 [pid 459] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 459] write(6, "#! ./file1\n", 11) = 11 [pid 459] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 459] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 459] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=25, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./23", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 33.209137][ T459] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 33.229589][ T460] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-459: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./23/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./23/file0") = 0 [pid 343] umount2("./23/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./23/binderfs") = 0 [pid 343] umount2("./23/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./23/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./23/cgroup.net") = 0 [pid 343] umount2("./23/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./23/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./23/cgroup.cpu") = 0 [pid 343] umount2("./23/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./23/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./23/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./23") = 0 [pid 343] mkdir("./24", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 464 attached [pid 464] set_robust_list(0x55556f72b660, 24) = 0 [pid 464] chdir("./24" [pid 343] <... clone resumed>, child_tidptr=0x55556f72b650) = 26 [pid 464] <... chdir resumed>) = 0 [pid 464] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 464] setpgid(0, 0) = 0 [pid 464] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 464] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 464] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 464] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 464] write(3, "1000", 4) = 4 [pid 464] close(3) = 0 [pid 464] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 464] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 464] write(1, "executing program\n", 18) = 18 [pid 464] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 464] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 464] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 464] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 464] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 464] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 464] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 464] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 464] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 464] memfd_create("syzkaller", 0) = 5 [pid 464] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 464] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 464] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 464] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 464] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 464] close(5) = 0 [pid 464] close(6) = 0 [pid 464] mkdir("./file0", 0777) = 0 [pid 464] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 464] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 464] chdir("./file0") = 0 [pid 464] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 464] ioctl(6, LOOP_CLR_FD) = 0 [pid 464] close(6) = 0 [pid 464] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 464] write(6, "#! ./file1\n", 11) = 11 [pid 464] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 464] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 464] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=26, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./24", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 33.401332][ T464] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 33.420972][ T465] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-464: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./24/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./24/file0") = 0 [pid 343] umount2("./24/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./24/binderfs") = 0 [pid 343] umount2("./24/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./24/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./24/cgroup.net") = 0 [pid 343] umount2("./24/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./24/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./24/cgroup.cpu") = 0 [pid 343] umount2("./24/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./24/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./24/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./24") = 0 [pid 343] mkdir("./25", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 469 attached , child_tidptr=0x55556f72b650) = 27 [pid 469] set_robust_list(0x55556f72b660, 24) = 0 [pid 469] chdir("./25") = 0 [pid 469] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 469] setpgid(0, 0) = 0 [pid 469] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 469] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 469] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 469] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 469] write(3, "1000", 4) = 4 [pid 469] close(3) = 0 [pid 469] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 469] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 469] write(1, "executing program\n", 18) = 18 [pid 469] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 469] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 469] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 469] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 469] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 469] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 469] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 469] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 469] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 469] memfd_create("syzkaller", 0) = 5 [pid 469] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 469] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 469] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 469] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 469] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 469] close(5) = 0 [pid 469] close(6) = 0 [pid 469] mkdir("./file0", 0777) = 0 [pid 469] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 469] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 469] chdir("./file0") = 0 [pid 469] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 469] ioctl(6, LOOP_CLR_FD) = 0 [pid 469] close(6) = 0 [pid 469] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 469] write(6, "#! ./file1\n", 11) = 11 [pid 469] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 469] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 469] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=27, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./25", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 33.601294][ T469] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 33.617990][ T469] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz-executor243: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./25/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./25/file0") = 0 [pid 343] umount2("./25/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./25/binderfs") = 0 [pid 343] umount2("./25/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./25/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./25/cgroup.net") = 0 [pid 343] umount2("./25/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./25/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./25/cgroup.cpu") = 0 [pid 343] umount2("./25/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./25/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./25/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./25") = 0 [pid 343] mkdir("./26", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 474 attached [pid 474] set_robust_list(0x55556f72b660, 24) = 0 [pid 474] chdir("./26") = 0 [pid 343] <... clone resumed>, child_tidptr=0x55556f72b650) = 28 [pid 474] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 474] setpgid(0, 0) = 0 [pid 474] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 474] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 474] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 474] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 474] write(3, "1000", 4) = 4 [pid 474] close(3) = 0 [pid 474] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 474] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 474] write(1, "executing program\n", 18) = 18 [pid 474] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 474] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 474] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 474] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 474] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 474] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 474] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 474] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 474] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 474] memfd_create("syzkaller", 0) = 5 [pid 474] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 474] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 474] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 474] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 474] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 474] close(5) = 0 [pid 474] close(6) = 0 [pid 474] mkdir("./file0", 0777) = 0 [pid 474] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 474] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 474] chdir("./file0") = 0 [pid 474] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 474] ioctl(6, LOOP_CLR_FD) = 0 [pid 474] close(6) = 0 [pid 474] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 474] write(6, "#! ./file1\n", 11) = 11 [pid 474] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 474] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 474] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=28, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./26", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 33.807782][ T474] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 33.828345][ T475] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-474: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./26/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./26/file0") = 0 [pid 343] umount2("./26/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./26/binderfs") = 0 [pid 343] umount2("./26/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./26/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./26/cgroup.net") = 0 [pid 343] umount2("./26/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./26/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./26/cgroup.cpu") = 0 [pid 343] umount2("./26/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./26/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./26/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./26") = 0 [pid 343] mkdir("./27", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 479 attached , child_tidptr=0x55556f72b650) = 29 [pid 479] set_robust_list(0x55556f72b660, 24) = 0 [pid 479] chdir("./27") = 0 [pid 479] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 479] setpgid(0, 0) = 0 [pid 479] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 479] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 479] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 479] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 479] write(3, "1000", 4) = 4 [pid 479] close(3) = 0 [pid 479] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 479] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 479] write(1, "executing program\n", 18) = 18 [pid 479] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 479] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 479] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 479] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 479] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 479] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 479] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 479] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 479] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 479] memfd_create("syzkaller", 0) = 5 [pid 479] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 479] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 479] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 479] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 479] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 479] close(5) = 0 [pid 479] close(6) = 0 [pid 479] mkdir("./file0", 0777) = 0 [pid 479] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 479] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 479] chdir("./file0") = 0 [pid 479] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 479] ioctl(6, LOOP_CLR_FD) = 0 [pid 479] close(6) = 0 [pid 479] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 479] write(6, "#! ./file1\n", 11) = 11 [pid 479] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 479] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 479] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=29, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./27", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 33.999650][ T479] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 34.019584][ T480] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-479: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./27/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./27/file0") = 0 [pid 343] umount2("./27/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./27/binderfs") = 0 [pid 343] umount2("./27/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./27/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./27/cgroup.net") = 0 [pid 343] umount2("./27/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./27/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./27/cgroup.cpu") = 0 [pid 343] umount2("./27/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./27/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./27/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./27") = 0 [pid 343] mkdir("./28", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 484 attached , child_tidptr=0x55556f72b650) = 30 [pid 484] set_robust_list(0x55556f72b660, 24) = 0 [pid 484] chdir("./28") = 0 [pid 484] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 484] setpgid(0, 0) = 0 [pid 484] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 484] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 484] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 484] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 484] write(3, "1000", 4) = 4 [pid 484] close(3) = 0 [pid 484] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 484] symlink("/dev/binderfs", "./binderfs") = 0 [pid 484] write(1, "executing program\n", 18executing program ) = 18 [pid 484] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 484] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 484] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 484] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 484] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 484] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 484] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 484] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 484] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 484] memfd_create("syzkaller", 0) = 5 [pid 484] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 484] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 484] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 484] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 484] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 484] close(5) = 0 [pid 484] close(6) = 0 [pid 484] mkdir("./file0", 0777) = 0 [pid 484] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 484] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 484] chdir("./file0") = 0 [pid 484] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 484] ioctl(6, LOOP_CLR_FD) = 0 [pid 484] close(6) = 0 [pid 484] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 484] write(6, "#! ./file1\n", 11) = 11 [pid 484] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 484] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 484] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=30, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./28", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [pid 343] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./28/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 34.161815][ T484] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 34.179674][ T484] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz-executor243: bg 0: block 234: padding at end of block bitmap is not set [pid 343] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./28/file0") = 0 [pid 343] umount2("./28/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./28/binderfs") = 0 [pid 343] umount2("./28/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./28/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./28/cgroup.net") = 0 [pid 343] umount2("./28/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./28/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./28/cgroup.cpu") = 0 [pid 343] umount2("./28/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./28/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./28/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./28") = 0 [pid 343] mkdir("./29", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 489 attached , child_tidptr=0x55556f72b650) = 31 [pid 489] set_robust_list(0x55556f72b660, 24) = 0 [pid 489] chdir("./29") = 0 [pid 489] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 489] setpgid(0, 0) = 0 [pid 489] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 489] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 489] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 489] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 489] write(3, "1000", 4) = 4 [pid 489] close(3) = 0 [pid 489] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 489] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 489] write(1, "executing program\n", 18) = 18 [pid 489] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 489] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 489] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 489] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 489] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 489] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 489] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 489] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 489] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 489] memfd_create("syzkaller", 0) = 5 [pid 489] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 489] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 489] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 489] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 489] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 489] close(5) = 0 [pid 489] close(6) = 0 [pid 489] mkdir("./file0", 0777) = 0 [pid 489] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 489] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 489] chdir("./file0") = 0 [pid 489] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 489] ioctl(6, LOOP_CLR_FD) = 0 [pid 489] close(6) = 0 [pid 489] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 489] write(6, "#! ./file1\n", 11) = 11 [pid 489] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 489] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 489] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=31, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./29", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 34.297918][ T489] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 34.314648][ T489] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz-executor243: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./29/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./29/file0") = 0 [pid 343] umount2("./29/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./29/binderfs") = 0 [pid 343] umount2("./29/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./29/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./29/cgroup.net") = 0 [pid 343] umount2("./29/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./29/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./29/cgroup.cpu") = 0 [pid 343] umount2("./29/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./29/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./29/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./29") = 0 [pid 343] mkdir("./30", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 494 attached [pid 494] set_robust_list(0x55556f72b660, 24) = 0 [pid 494] chdir("./30") = 0 [pid 343] <... clone resumed>, child_tidptr=0x55556f72b650) = 32 [pid 494] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 494] setpgid(0, 0) = 0 [pid 494] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 494] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 494] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 494] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 494] write(3, "1000", 4) = 4 [pid 494] close(3) = 0 [pid 494] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 494] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 494] write(1, "executing program\n", 18) = 18 [pid 494] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 494] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 494] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 494] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 494] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 494] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 494] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 494] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 494] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 494] memfd_create("syzkaller", 0) = 5 [pid 494] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 494] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 494] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 494] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 494] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 494] close(5) = 0 [pid 494] close(6) = 0 [pid 494] mkdir("./file0", 0777) = 0 [pid 494] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 494] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 494] chdir("./file0") = 0 [pid 494] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 494] ioctl(6, LOOP_CLR_FD) = 0 [pid 494] close(6) = 0 [pid 494] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 494] write(6, "#! ./file1\n", 11) = 11 [pid 494] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 494] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 494] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=32, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./30", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 34.477823][ T494] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 34.498761][ T495] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-494: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./30/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./30/file0") = 0 [pid 343] umount2("./30/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./30/binderfs") = 0 [pid 343] umount2("./30/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./30/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./30/cgroup.net") = 0 [pid 343] umount2("./30/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./30/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./30/cgroup.cpu") = 0 [pid 343] umount2("./30/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./30/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./30/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./30") = 0 [pid 343] mkdir("./31", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 499 attached , child_tidptr=0x55556f72b650) = 33 [pid 499] set_robust_list(0x55556f72b660, 24) = 0 [pid 499] chdir("./31") = 0 [pid 499] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 499] setpgid(0, 0) = 0 [pid 499] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 499] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 499] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 499] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 499] write(3, "1000", 4) = 4 [pid 499] close(3) = 0 [pid 499] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 499] symlink("/dev/binderfs", "./binderfs") = 0 [pid 499] write(1, "executing program\n", 18executing program ) = 18 [pid 499] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 499] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 499] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 499] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 499] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 499] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 499] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 499] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 499] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 499] memfd_create("syzkaller", 0) = 5 [pid 499] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 499] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 499] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 499] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 499] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 499] close(5) = 0 [pid 499] close(6) = 0 [pid 499] mkdir("./file0", 0777) = 0 [pid 499] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 499] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 499] chdir("./file0") = 0 [pid 499] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 499] ioctl(6, LOOP_CLR_FD) = 0 [pid 499] close(6) = 0 [pid 499] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 499] write(6, "#! ./file1\n", 11) = 11 [pid 499] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 499] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 499] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=33, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./31", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 34.697750][ T499] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 34.729179][ T500] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-499: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./31/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./31/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./31/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./31/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./31/file0") = 0 [pid 343] umount2("./31/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./31/binderfs") = 0 [pid 343] umount2("./31/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./31/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./31/cgroup.net") = 0 [pid 343] umount2("./31/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./31/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./31/cgroup.cpu") = 0 [pid 343] umount2("./31/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./31/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./31/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./31") = 0 [pid 343] mkdir("./32", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 504 attached , child_tidptr=0x55556f72b650) = 34 [pid 504] set_robust_list(0x55556f72b660, 24) = 0 [pid 504] chdir("./32") = 0 [pid 504] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 504] setpgid(0, 0) = 0 [pid 504] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 504] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 504] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 504] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 504] write(3, "1000", 4) = 4 [pid 504] close(3) = 0 [pid 504] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 504] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 504] write(1, "executing program\n", 18) = 18 [pid 504] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 504] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 504] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 504] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 504] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 504] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 504] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 504] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 504] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 504] memfd_create("syzkaller", 0) = 5 [pid 504] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 504] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 504] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 504] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 504] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 504] close(5) = 0 [pid 504] close(6) = 0 [pid 504] mkdir("./file0", 0777) = 0 [pid 504] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 504] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 504] chdir("./file0") = 0 [pid 504] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 504] ioctl(6, LOOP_CLR_FD) = 0 [pid 504] close(6) = 0 [pid 504] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 504] write(6, "#! ./file1\n", 11) = 11 [pid 504] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 504] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 504] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=34, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./32", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 34.887833][ T504] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 34.907735][ T505] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-504: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./32/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./32/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./32/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./32/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./32/file0") = 0 [pid 343] umount2("./32/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./32/binderfs") = 0 [pid 343] umount2("./32/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./32/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./32/cgroup.net") = 0 [pid 343] umount2("./32/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./32/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./32/cgroup.cpu") = 0 [pid 343] umount2("./32/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./32/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./32/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./32") = 0 [pid 343] mkdir("./33", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 509 attached [pid 509] set_robust_list(0x55556f72b660, 24) = 0 [pid 509] chdir("./33") = 0 [pid 509] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 509] setpgid(0, 0) = 0 [pid 509] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 343] <... clone resumed>, child_tidptr=0x55556f72b650) = 35 [pid 509] <... symlink resumed>) = 0 [pid 509] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 509] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 509] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 509] write(3, "1000", 4) = 4 [pid 509] close(3) = 0 [pid 509] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 509] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 509] write(1, "executing program\n", 18) = 18 [pid 509] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 509] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 509] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 509] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 509] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 509] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 509] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 509] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 509] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 509] memfd_create("syzkaller", 0) = 5 [pid 509] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 509] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 509] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 509] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 509] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 509] close(5) = 0 [pid 509] close(6) = 0 [pid 509] mkdir("./file0", 0777) = 0 [pid 509] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 509] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 509] chdir("./file0") = 0 [pid 509] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 509] ioctl(6, LOOP_CLR_FD) = 0 [pid 509] close(6) = 0 [pid 509] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 509] write(6, "#! ./file1\n", 11) = 11 [pid 509] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 509] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 509] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=35, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./33", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 35.047689][ T509] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 35.064280][ T509] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz-executor243: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./33/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./33/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./33/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./33/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./33/file0") = 0 [pid 343] umount2("./33/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./33/binderfs") = 0 [pid 343] umount2("./33/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./33/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./33/cgroup.net") = 0 [pid 343] umount2("./33/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./33/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./33/cgroup.cpu") = 0 [pid 343] umount2("./33/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./33/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./33/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./33") = 0 [pid 343] mkdir("./34", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 514 attached [pid 514] set_robust_list(0x55556f72b660, 24) = 0 [pid 514] chdir("./34") = 0 [pid 343] <... clone resumed>, child_tidptr=0x55556f72b650) = 36 [pid 514] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 514] setpgid(0, 0) = 0 [pid 514] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 514] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 514] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 514] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 514] write(3, "1000", 4) = 4 [pid 514] close(3) = 0 [pid 514] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 514] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 514] write(1, "executing program\n", 18) = 18 [pid 514] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 514] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 514] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 514] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 514] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 514] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 514] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 514] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 514] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 514] memfd_create("syzkaller", 0) = 5 [pid 514] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 514] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 514] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 514] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 514] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 514] close(5) = 0 [pid 514] close(6) = 0 [pid 514] mkdir("./file0", 0777) = 0 [pid 514] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 514] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 514] chdir("./file0") = 0 [pid 514] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 514] ioctl(6, LOOP_CLR_FD) = 0 [pid 514] close(6) = 0 [pid 514] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 514] write(6, "#! ./file1\n", 11) = 11 [pid 514] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 514] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 514] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=36, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./34", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 35.257181][ T514] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 35.278442][ T515] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-514: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./34/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./34/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./34/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./34/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./34/file0") = 0 [pid 343] umount2("./34/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./34/binderfs") = 0 [pid 343] umount2("./34/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./34/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./34/cgroup.net") = 0 [pid 343] umount2("./34/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./34/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./34/cgroup.cpu") = 0 [pid 343] umount2("./34/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./34/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./34/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./34") = 0 [pid 343] mkdir("./35", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 519 attached [pid 519] set_robust_list(0x55556f72b660, 24 [pid 343] <... clone resumed>, child_tidptr=0x55556f72b650) = 37 [pid 519] <... set_robust_list resumed>) = 0 [pid 519] chdir("./35") = 0 [pid 519] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 519] setpgid(0, 0) = 0 [pid 519] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 519] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 519] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 519] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 519] write(3, "1000", 4) = 4 [pid 519] close(3) = 0 [pid 519] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 519] symlink("/dev/binderfs", "./binderfs") = 0 [pid 519] write(1, "executing program\n", 18executing program ) = 18 [pid 519] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 519] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 519] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 519] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 519] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 519] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 519] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 519] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 519] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 519] memfd_create("syzkaller", 0) = 5 [pid 519] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 519] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 519] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 519] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 519] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 519] close(5) = 0 [pid 519] close(6) = 0 [pid 519] mkdir("./file0", 0777) = 0 [pid 519] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 519] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 519] chdir("./file0") = 0 [pid 519] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 519] ioctl(6, LOOP_CLR_FD) = 0 [pid 519] close(6) = 0 [pid 519] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 519] write(6, "#! ./file1\n", 11) = 11 [pid 519] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 519] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 519] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=37, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 343] umount2("./35", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 35.487773][ T519] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 35.501384][ T519] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz-executor243: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./35/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./35/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./35/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./35/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./35/file0") = 0 [pid 343] umount2("./35/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./35/binderfs") = 0 [pid 343] umount2("./35/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./35/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./35/cgroup.net") = 0 [pid 343] umount2("./35/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./35/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./35/cgroup.cpu") = 0 [pid 343] umount2("./35/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./35/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./35/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./35") = 0 [pid 343] mkdir("./36", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 524 attached [pid 524] set_robust_list(0x55556f72b660, 24) = 0 [pid 524] chdir("./36" [pid 343] <... clone resumed>, child_tidptr=0x55556f72b650) = 38 [pid 524] <... chdir resumed>) = 0 [pid 524] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 524] setpgid(0, 0) = 0 [pid 524] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 524] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 524] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 524] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 524] write(3, "1000", 4) = 4 [pid 524] close(3) = 0 [pid 524] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 524] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 524] write(1, "executing program\n", 18) = 18 [pid 524] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 524] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 524] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 524] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 524] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 524] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 524] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 524] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 524] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 524] memfd_create("syzkaller", 0) = 5 [pid 524] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 524] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 524] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 524] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 524] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 524] close(5) = 0 [pid 524] close(6) = 0 [pid 524] mkdir("./file0", 0777) = 0 [pid 524] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 524] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 524] chdir("./file0") = 0 [pid 524] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 524] ioctl(6, LOOP_CLR_FD) = 0 [pid 524] close(6) = 0 [pid 524] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 524] write(6, "#! ./file1\n", 11) = 11 [pid 524] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 524] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 524] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=38, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./36", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 35.637724][ T524] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 35.657951][ T525] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-524: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./36/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./36/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./36/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./36/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./36/file0") = 0 [pid 343] umount2("./36/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./36/binderfs") = 0 [pid 343] umount2("./36/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./36/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./36/cgroup.net") = 0 [pid 343] umount2("./36/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./36/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./36/cgroup.cpu") = 0 [pid 343] umount2("./36/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./36/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./36/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./36") = 0 [pid 343] mkdir("./37", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 529 attached , child_tidptr=0x55556f72b650) = 39 [pid 529] set_robust_list(0x55556f72b660, 24) = 0 [pid 529] chdir("./37") = 0 [pid 529] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 529] setpgid(0, 0) = 0 [pid 529] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 529] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 529] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 529] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 529] write(3, "1000", 4) = 4 [pid 529] close(3) = 0 [pid 529] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 529] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 529] write(1, "executing program\n", 18) = 18 [pid 529] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 529] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 529] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 529] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 529] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 529] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 529] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 529] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 529] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 529] memfd_create("syzkaller", 0) = 5 [pid 529] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 529] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 529] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 529] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 529] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 529] close(5) = 0 [pid 529] close(6) = 0 [pid 529] mkdir("./file0", 0777) = 0 [pid 529] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 529] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 529] chdir("./file0") = 0 [pid 529] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 529] ioctl(6, LOOP_CLR_FD) = 0 [pid 529] close(6) = 0 [pid 529] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 529] write(6, "#! ./file1\n", 11) = 11 [pid 529] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 529] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 529] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=39, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./37", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 35.917940][ T529] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 35.933667][ T530] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-529: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./37/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./37/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./37/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./37/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./37/file0") = 0 [pid 343] umount2("./37/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./37/binderfs") = 0 [pid 343] umount2("./37/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./37/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./37/cgroup.net") = 0 [pid 343] umount2("./37/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./37/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./37/cgroup.cpu") = 0 [pid 343] umount2("./37/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./37/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./37/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./37") = 0 [pid 343] mkdir("./38", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 534 attached , child_tidptr=0x55556f72b650) = 40 [pid 534] set_robust_list(0x55556f72b660, 24) = 0 [pid 534] chdir("./38") = 0 [pid 534] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 534] setpgid(0, 0) = 0 [pid 534] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 534] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 534] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 534] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 534] write(3, "1000", 4) = 4 [pid 534] close(3) = 0 [pid 534] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 534] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 534] write(1, "executing program\n", 18) = 18 [pid 534] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 534] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 534] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 534] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 534] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 534] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 534] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 534] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 534] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 534] memfd_create("syzkaller", 0) = 5 [pid 534] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 534] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 534] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 534] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 534] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 534] close(5) = 0 [pid 534] close(6) = 0 [pid 534] mkdir("./file0", 0777) = 0 [pid 534] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 534] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 534] chdir("./file0") = 0 [pid 534] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 534] ioctl(6, LOOP_CLR_FD) = 0 [pid 534] close(6) = 0 [pid 534] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 534] write(6, "#! ./file1\n", 11) = 11 [pid 534] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 534] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 534] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=40, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 36.069423][ T534] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 36.089099][ T535] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-534: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./38/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./38/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./38/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./38/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./38/file0") = 0 [pid 343] umount2("./38/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./38/binderfs") = 0 [pid 343] umount2("./38/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./38/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./38/cgroup.net") = 0 [pid 343] umount2("./38/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./38/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./38/cgroup.cpu") = 0 [pid 343] umount2("./38/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./38/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./38/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./38") = 0 [pid 343] mkdir("./39", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 539 attached , child_tidptr=0x55556f72b650) = 41 [pid 539] set_robust_list(0x55556f72b660, 24) = 0 [pid 539] chdir("./39") = 0 [pid 539] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 539] setpgid(0, 0) = 0 [pid 539] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 539] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 539] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 539] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 539] write(3, "1000", 4) = 4 [pid 539] close(3) = 0 [pid 539] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 539] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 539] write(1, "executing program\n", 18) = 18 [pid 539] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 539] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 539] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 539] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 539] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 539] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 539] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 539] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 539] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 539] memfd_create("syzkaller", 0) = 5 [pid 539] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 539] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 539] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 539] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 539] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 539] close(5) = 0 [pid 539] close(6) = 0 [pid 539] mkdir("./file0", 0777) = 0 [pid 539] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 539] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 539] chdir("./file0") = 0 [pid 539] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 539] ioctl(6, LOOP_CLR_FD) = 0 [pid 539] close(6) = 0 [pid 539] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 539] write(6, "#! ./file1\n", 11) = 11 [pid 539] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 539] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 539] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=41, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./39", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 36.227804][ T539] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 36.248372][ T540] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-539: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./39/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./39/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./39/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./39/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./39/file0") = 0 [pid 343] umount2("./39/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./39/binderfs") = 0 [pid 343] umount2("./39/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./39/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./39/cgroup.net") = 0 [pid 343] umount2("./39/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./39/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./39/cgroup.cpu") = 0 [pid 343] umount2("./39/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./39/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./39/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./39") = 0 [pid 343] mkdir("./40", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556f72b650) = 42 ./strace-static-x86_64: Process 544 attached [pid 544] set_robust_list(0x55556f72b660, 24) = 0 [pid 544] chdir("./40") = 0 [pid 544] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 544] setpgid(0, 0) = 0 [pid 544] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 544] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 544] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 544] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 544] write(3, "1000", 4) = 4 [pid 544] close(3) = 0 [pid 544] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 544] symlink("/dev/binderfs", "./binderfs") = 0 [pid 544] write(1, "executing program\n", 18executing program ) = 18 [pid 544] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 544] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 544] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 544] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 544] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 544] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 544] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 544] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 544] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 544] memfd_create("syzkaller", 0) = 5 [pid 544] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 544] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 544] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 544] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 544] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 544] close(5) = 0 [pid 544] close(6) = 0 [pid 544] mkdir("./file0", 0777) = 0 [pid 544] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 544] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 544] chdir("./file0") = 0 [pid 544] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 544] ioctl(6, LOOP_CLR_FD) = 0 [pid 544] close(6) = 0 [pid 544] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 544] write(6, "#! ./file1\n", 11) = 11 [pid 544] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 544] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 544] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=42, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./40", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 36.517697][ T544] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 36.549017][ T545] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-544: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./40/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./40/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./40/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./40/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./40/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./40/file0") = 0 [pid 343] umount2("./40/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./40/binderfs") = 0 [pid 343] umount2("./40/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./40/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./40/cgroup.net") = 0 [pid 343] umount2("./40/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./40/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./40/cgroup.cpu") = 0 [pid 343] umount2("./40/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./40/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./40/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./40") = 0 [pid 343] mkdir("./41", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FDexecuting program ) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556f72b650) = 43 ./strace-static-x86_64: Process 549 attached [pid 549] set_robust_list(0x55556f72b660, 24) = 0 [pid 549] chdir("./41") = 0 [pid 549] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 549] setpgid(0, 0) = 0 [pid 549] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 549] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 549] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 549] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 549] write(3, "1000", 4) = 4 [pid 549] close(3) = 0 [pid 549] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 549] symlink("/dev/binderfs", "./binderfs") = 0 [pid 549] write(1, "executing program\n", 18) = 18 [pid 549] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 549] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 549] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 549] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 549] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 549] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 549] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 549] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 549] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 549] memfd_create("syzkaller", 0) = 5 [pid 549] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 549] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 549] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 549] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 549] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 549] close(5) = 0 [pid 549] close(6) = 0 [pid 549] mkdir("./file0", 0777) = 0 [pid 549] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 549] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 549] chdir("./file0") = 0 [pid 549] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 549] ioctl(6, LOOP_CLR_FD) = 0 [pid 549] close(6) = 0 [pid 549] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 549] write(6, "#! ./file1\n", 11) = 11 [pid 549] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 549] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 549] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=43, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./41", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 36.697748][ T549] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 36.714494][ T549] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz-executor243: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./41/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./41/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./41/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./41/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./41/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./41/file0") = 0 [pid 343] umount2("./41/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./41/binderfs") = 0 [pid 343] umount2("./41/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./41/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./41/cgroup.net") = 0 [pid 343] umount2("./41/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./41/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./41/cgroup.cpu") = 0 [pid 343] umount2("./41/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./41/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./41/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./41") = 0 [pid 343] mkdir("./42", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 554 attached [pid 554] set_robust_list(0x55556f72b660, 24 [pid 343] <... clone resumed>, child_tidptr=0x55556f72b650) = 44 [pid 554] <... set_robust_list resumed>) = 0 [pid 554] chdir("./42") = 0 [pid 554] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 554] setpgid(0, 0) = 0 [pid 554] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 554] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 554] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 554] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 554] write(3, "1000", 4) = 4 [pid 554] close(3) = 0 [pid 554] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 554] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 554] write(1, "executing program\n", 18) = 18 [pid 554] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 554] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 554] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 554] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 554] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 554] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 554] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 554] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 554] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 554] memfd_create("syzkaller", 0) = 5 [pid 554] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 554] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 554] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 554] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 554] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 554] close(5) = 0 [pid 554] close(6) = 0 [pid 554] mkdir("./file0", 0777) = 0 [pid 554] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 554] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 554] chdir("./file0") = 0 [pid 554] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 554] ioctl(6, LOOP_CLR_FD) = 0 [pid 554] close(6) = 0 [pid 554] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 554] write(6, "#! ./file1\n", 11) = 11 [pid 554] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 554] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 554] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=44, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./42", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [pid 343] umount2("./42/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./42/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./42/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./42/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./42/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./42/file0") = 0 [pid 343] umount2("./42/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./42/binderfs") = 0 [pid 343] umount2("./42/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./42/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./42/cgroup.net") = 0 [pid 343] umount2("./42/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./42/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./42/cgroup.cpu") = 0 [pid 343] umount2("./42/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./42/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./42/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./42") = 0 [pid 343] mkdir("./43", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 559 attached [pid 559] set_robust_list(0x55556f72b660, 24) = 0 [pid 559] chdir("./43") = 0 [pid 559] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 559] setpgid(0, 0) = 0 [ 36.877779][ T554] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 36.894526][ T554] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz-executor243: bg 0: block 234: padding at end of block bitmap is not set [pid 559] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 343] <... clone resumed>, child_tidptr=0x55556f72b650) = 45 [pid 559] <... symlink resumed>) = 0 [pid 559] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 559] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 559] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 559] write(3, "1000", 4) = 4 [pid 559] close(3) = 0 [pid 559] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 559] symlink("/dev/binderfs", "./binderfs") = 0 [pid 559] write(1, "executing program\n", 18executing program ) = 18 [pid 559] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 559] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 559] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 559] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 559] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 559] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 559] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 559] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 559] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 559] memfd_create("syzkaller", 0) = 5 [pid 559] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 559] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 559] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 559] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 559] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 559] close(5) = 0 [pid 559] close(6) = 0 [pid 559] mkdir("./file0", 0777) = 0 [pid 559] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 559] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 559] chdir("./file0") = 0 [pid 559] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 559] ioctl(6, LOOP_CLR_FD) = 0 [pid 559] close(6) = 0 [pid 559] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 559] write(6, "#! ./file1\n", 11) = 11 [pid 559] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 559] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 559] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=45, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./43", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 36.993982][ T559] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 37.014205][ T560] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-559: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./43/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./43/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./43/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./43/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./43/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./43/file0") = 0 [pid 343] umount2("./43/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./43/binderfs") = 0 [pid 343] umount2("./43/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./43/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./43/cgroup.net") = 0 [pid 343] umount2("./43/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./43/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./43/cgroup.cpu") = 0 [pid 343] umount2("./43/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./43/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./43/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./43") = 0 [pid 343] mkdir("./44", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 564 attached [pid 564] set_robust_list(0x55556f72b660, 24 [pid 343] <... clone resumed>, child_tidptr=0x55556f72b650) = 46 [pid 564] <... set_robust_list resumed>) = 0 [pid 564] chdir("./44") = 0 [pid 564] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 564] setpgid(0, 0) = 0 [pid 564] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 564] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 564] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 564] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 564] write(3, "1000", 4) = 4 [pid 564] close(3) = 0 [pid 564] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 564] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 564] write(1, "executing program\n", 18) = 18 [pid 564] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 564] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 564] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 564] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 564] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 564] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 564] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 564] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 564] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 564] memfd_create("syzkaller", 0) = 5 [pid 564] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 564] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 564] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 564] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 564] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 564] close(5) = 0 [pid 564] close(6) = 0 [pid 564] mkdir("./file0", 0777) = 0 [pid 564] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 564] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 564] chdir("./file0") = 0 [pid 564] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 564] ioctl(6, LOOP_CLR_FD) = 0 [pid 564] close(6) = 0 [pid 564] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 564] write(6, "#! ./file1\n", 11) = 11 [pid 564] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 564] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 564] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=46, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./44", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 37.162496][ T564] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 37.179218][ T564] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz-executor243: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./44/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./44/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./44/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./44/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./44/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./44/file0") = 0 [pid 343] umount2("./44/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./44/binderfs") = 0 [pid 343] umount2("./44/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./44/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./44/cgroup.net") = 0 [pid 343] umount2("./44/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./44/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./44/cgroup.cpu") = 0 [pid 343] umount2("./44/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./44/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./44/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./44") = 0 [pid 343] mkdir("./45", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 569 attached [pid 569] set_robust_list(0x55556f72b660, 24) = 0 [pid 569] chdir("./45") = 0 [pid 343] <... clone resumed>, child_tidptr=0x55556f72b650) = 47 [pid 569] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 569] setpgid(0, 0) = 0 [pid 569] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 569] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 569] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 569] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 569] write(3, "1000", 4) = 4 [pid 569] close(3) = 0 [pid 569] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 569] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 569] write(1, "executing program\n", 18) = 18 [pid 569] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 569] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 569] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 569] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 569] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 569] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 569] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 569] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 569] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 569] memfd_create("syzkaller", 0) = 5 [pid 569] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 569] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 569] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 569] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 569] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 569] close(5) = 0 [pid 569] close(6) = 0 [pid 569] mkdir("./file0", 0777) = 0 [pid 569] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 569] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 569] chdir("./file0") = 0 [pid 569] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 569] ioctl(6, LOOP_CLR_FD) = 0 [pid 569] close(6) = 0 [pid 569] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 569] write(6, "#! ./file1\n", 11) = 11 [pid 569] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 569] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 569] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=47, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./45", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 37.377940][ T569] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 37.397888][ T570] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-569: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./45/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./45/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./45/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./45/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./45/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./45/file0") = 0 [pid 343] umount2("./45/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./45/binderfs") = 0 [pid 343] umount2("./45/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./45/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./45/cgroup.net") = 0 [pid 343] umount2("./45/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./45/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./45/cgroup.cpu") = 0 [pid 343] umount2("./45/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./45/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./45/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./45") = 0 [pid 343] mkdir("./46", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 574 attached , child_tidptr=0x55556f72b650) = 48 [pid 574] set_robust_list(0x55556f72b660, 24) = 0 [pid 574] chdir("./46") = 0 [pid 574] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 574] setpgid(0, 0) = 0 [pid 574] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 574] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 574] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 574] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 574] write(3, "1000", 4) = 4 [pid 574] close(3) = 0 [pid 574] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 574] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 574] write(1, "executing program\n", 18) = 18 [pid 574] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 574] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 574] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 574] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 574] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 574] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 574] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 574] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 574] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 574] memfd_create("syzkaller", 0) = 5 [pid 574] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 574] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 574] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 574] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 574] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 574] close(5) = 0 [pid 574] close(6) = 0 [pid 574] mkdir("./file0", 0777) = 0 [pid 574] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 574] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 574] chdir("./file0") = 0 [pid 574] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 574] ioctl(6, LOOP_CLR_FD) = 0 [pid 574] close(6) = 0 [pid 574] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 574] write(6, "#! ./file1\n", 11) = 11 [pid 574] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 574] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 574] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=48, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./46", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 37.547914][ T574] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 37.566816][ T575] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-574: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./46/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./46/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./46/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./46/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./46/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./46/file0") = 0 [pid 343] umount2("./46/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./46/binderfs") = 0 [pid 343] umount2("./46/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./46/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./46/cgroup.net") = 0 [pid 343] umount2("./46/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./46/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./46/cgroup.cpu") = 0 [pid 343] umount2("./46/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./46/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./46/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./46") = 0 [pid 343] mkdir("./47", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 579 attached [pid 579] set_robust_list(0x55556f72b660, 24) = 0 [pid 579] chdir("./47") = 0 [pid 579] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 579] setpgid(0, 0) = 0 [pid 343] <... clone resumed>, child_tidptr=0x55556f72b650) = 49 [pid 579] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 579] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 579] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 579] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 579] write(3, "1000", 4) = 4 [pid 579] close(3) = 0 [pid 579] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 579] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 579] write(1, "executing program\n", 18) = 18 [pid 579] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 579] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 579] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 579] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 579] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 579] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 579] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 579] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 579] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 579] memfd_create("syzkaller", 0) = 5 [pid 579] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 579] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 579] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 579] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 579] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 579] close(5) = 0 [pid 579] close(6) = 0 [pid 579] mkdir("./file0", 0777) = 0 [pid 579] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 579] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 579] chdir("./file0") = 0 [pid 579] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 579] ioctl(6, LOOP_CLR_FD) = 0 [pid 579] close(6) = 0 [pid 579] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 579] write(6, "#! ./file1\n", 11) = 11 [pid 579] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 579] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 579] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=49, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./47", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 37.757768][ T579] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 37.778253][ T580] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-579: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./47/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./47/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./47/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./47/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./47/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./47/file0") = 0 [pid 343] umount2("./47/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./47/binderfs") = 0 [pid 343] umount2("./47/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./47/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./47/cgroup.net") = 0 [pid 343] umount2("./47/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./47/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./47/cgroup.cpu") = 0 [pid 343] umount2("./47/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./47/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./47/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./47") = 0 [pid 343] mkdir("./48", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 584 attached , child_tidptr=0x55556f72b650) = 50 [pid 584] set_robust_list(0x55556f72b660, 24) = 0 [pid 584] chdir("./48") = 0 [pid 584] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 584] setpgid(0, 0) = 0 [pid 584] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 584] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 584] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 584] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 584] write(3, "1000", 4) = 4 [pid 584] close(3) = 0 [pid 584] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 584] symlink("/dev/binderfs", "./binderfs") = 0 [pid 584] write(1, "executing program\n", 18executing program ) = 18 [pid 584] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 584] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 584] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 584] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 584] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 584] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 584] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 584] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 584] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 584] memfd_create("syzkaller", 0) = 5 [pid 584] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 584] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 584] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 584] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 584] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 584] close(5) = 0 [pid 584] close(6) = 0 [pid 584] mkdir("./file0", 0777) = 0 [pid 584] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 584] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 584] chdir("./file0") = 0 [pid 584] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 584] ioctl(6, LOOP_CLR_FD) = 0 [pid 584] close(6) = 0 [pid 584] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 584] write(6, "#! ./file1\n", 11) = 11 [pid 584] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 584] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 584] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=50, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./48", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 37.967333][ T584] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 37.988168][ T585] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-584: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./48/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./48/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./48/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./48/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./48/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./48/file0") = 0 [pid 343] umount2("./48/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./48/binderfs") = 0 [pid 343] umount2("./48/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./48/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./48/cgroup.net") = 0 [pid 343] umount2("./48/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./48/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./48/cgroup.cpu") = 0 [pid 343] umount2("./48/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./48/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./48/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./48") = 0 [pid 343] mkdir("./49", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 589 attached [pid 589] set_robust_list(0x55556f72b660, 24) = 0 [pid 589] chdir("./49" [pid 343] <... clone resumed>, child_tidptr=0x55556f72b650) = 51 [pid 589] <... chdir resumed>) = 0 [pid 589] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 589] setpgid(0, 0) = 0 [pid 589] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 589] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 589] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 589] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 589] write(3, "1000", 4) = 4 [pid 589] close(3) = 0 [pid 589] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 589] symlink("/dev/binderfs", "./binderfs") = 0 [pid 589] write(1, "executing program\n", 18executing program ) = 18 [pid 589] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 589] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 589] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 589] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 589] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 589] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 589] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 589] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 589] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 589] memfd_create("syzkaller", 0) = 5 [pid 589] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 589] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 589] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 589] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 589] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 589] close(5) = 0 [pid 589] close(6) = 0 [pid 589] mkdir("./file0", 0777) = 0 [pid 589] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 589] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 589] chdir("./file0") = 0 [pid 589] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 589] ioctl(6, LOOP_CLR_FD) = 0 [pid 589] close(6) = 0 [pid 589] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 589] write(6, "#! ./file1\n", 11) = 11 [pid 589] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 589] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 589] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=51, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./49", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 38.177786][ T589] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 38.198006][ T590] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-589: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./49/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./49/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./49/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./49/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./49/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./49/file0") = 0 [pid 343] umount2("./49/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./49/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./49/binderfs") = 0 [pid 343] umount2("./49/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./49/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./49/cgroup.net") = 0 [pid 343] umount2("./49/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./49/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./49/cgroup.cpu") = 0 [pid 343] umount2("./49/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./49/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./49/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./49") = 0 [pid 343] mkdir("./50", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556f72b650) = 52 ./strace-static-x86_64: Process 594 attached [pid 594] set_robust_list(0x55556f72b660, 24) = 0 [pid 594] chdir("./50") = 0 [pid 594] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 594] setpgid(0, 0) = 0 [pid 594] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 594] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 594] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 594] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 594] write(3, "1000", 4) = 4 [pid 594] close(3) = 0 [pid 594] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 594] symlink("/dev/binderfs", "./binderfs") = 0 [pid 594] write(1, "executing program\n", 18executing program ) = 18 [pid 594] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 594] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 594] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 594] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 594] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 594] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 594] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 594] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 594] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 594] memfd_create("syzkaller", 0) = 5 [pid 594] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 594] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 594] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 594] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 594] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 594] close(5) = 0 [pid 594] close(6) = 0 [pid 594] mkdir("./file0", 0777) = 0 [pid 594] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 594] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 594] chdir("./file0") = 0 [pid 594] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 594] ioctl(6, LOOP_CLR_FD) = 0 [pid 594] close(6) = 0 [pid 594] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 594] write(6, "#! ./file1\n", 11) = 11 [pid 594] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 594] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 594] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=52, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./50", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 38.297821][ T594] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 38.317527][ T595] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-594: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./50/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./50/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./50/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./50/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./50/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./50/file0") = 0 [pid 343] umount2("./50/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./50/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./50/binderfs") = 0 [pid 343] umount2("./50/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./50/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./50/cgroup.net") = 0 [pid 343] umount2("./50/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./50/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./50/cgroup.cpu") = 0 [pid 343] umount2("./50/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./50/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./50/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./50") = 0 [pid 343] mkdir("./51", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 599 attached [pid 599] set_robust_list(0x55556f72b660, 24) = 0 [pid 599] chdir("./51") = 0 [pid 343] <... clone resumed>, child_tidptr=0x55556f72b650) = 53 [pid 599] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 599] setpgid(0, 0) = 0 [pid 599] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 599] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 599] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 599] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 599] write(3, "1000", 4) = 4 [pid 599] close(3) = 0 [pid 599] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 599] symlink("/dev/binderfs", "./binderfs") = 0 [pid 599] write(1, "executing program\n", 18executing program ) = 18 [pid 599] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 599] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 599] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 599] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 599] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 599] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 599] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 599] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 599] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 599] memfd_create("syzkaller", 0) = 5 [pid 599] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 599] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 599] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 599] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 599] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 599] close(5) = 0 [pid 599] close(6) = 0 [pid 599] mkdir("./file0", 0777) = 0 [pid 599] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 599] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 599] chdir("./file0") = 0 [pid 599] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 599] ioctl(6, LOOP_CLR_FD) = 0 [pid 599] close(6) = 0 [pid 599] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 599] write(6, "#! ./file1\n", 11) = 11 [pid 599] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [ 38.512556][ T599] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [pid 599] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 599] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=53, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./51", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 38.552614][ T600] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-599: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./51/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./51/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./51/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./51/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./51/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./51/file0") = 0 [pid 343] umount2("./51/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./51/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./51/binderfs") = 0 [pid 343] umount2("./51/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./51/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./51/cgroup.net") = 0 [pid 343] umount2("./51/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./51/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./51/cgroup.cpu") = 0 [pid 343] umount2("./51/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./51/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./51/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./51") = 0 [pid 343] mkdir("./52", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 604 attached [pid 604] set_robust_list(0x55556f72b660, 24) = 0 [pid 604] chdir("./52" [pid 343] <... clone resumed>, child_tidptr=0x55556f72b650) = 54 [pid 604] <... chdir resumed>) = 0 [pid 604] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 604] setpgid(0, 0) = 0 [pid 604] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 604] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 604] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 604] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 604] write(3, "1000", 4) = 4 [pid 604] close(3) = 0 [pid 604] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 604] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 604] write(1, "executing program\n", 18) = 18 [pid 604] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 604] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 604] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 604] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 604] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 604] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 604] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 604] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 604] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 604] memfd_create("syzkaller", 0) = 5 [pid 604] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 604] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 604] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 604] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 604] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 604] close(5) = 0 [pid 604] close(6) = 0 [pid 604] mkdir("./file0", 0777) = 0 [pid 604] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 604] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 604] chdir("./file0") = 0 [pid 604] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 604] ioctl(6, LOOP_CLR_FD) = 0 [pid 604] close(6) = 0 [pid 604] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 604] write(6, "#! ./file1\n", 11) = 11 [pid 604] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 604] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 604] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=54, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./52", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 38.747786][ T604] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 38.766110][ T604] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz-executor243: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./52/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./52/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./52/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./52/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./52/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./52/file0") = 0 [pid 343] umount2("./52/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./52/binderfs") = 0 [pid 343] umount2("./52/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./52/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./52/cgroup.net") = 0 [pid 343] umount2("./52/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./52/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./52/cgroup.cpu") = 0 [pid 343] umount2("./52/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./52/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./52/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./52") = 0 [pid 343] mkdir("./53", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 609 attached [pid 609] set_robust_list(0x55556f72b660, 24) = 0 [pid 609] chdir("./53") = 0 [pid 343] <... clone resumed>, child_tidptr=0x55556f72b650) = 55 [pid 609] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 609] setpgid(0, 0) = 0 [pid 609] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 609] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 609] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 609] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 609] write(3, "1000", 4) = 4 [pid 609] close(3) = 0 [pid 609] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 609] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 609] write(1, "executing program\n", 18) = 18 [pid 609] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 609] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 609] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 609] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 609] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 609] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 609] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 609] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 609] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 609] memfd_create("syzkaller", 0) = 5 [pid 609] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 609] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 609] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 609] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 609] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 609] close(5) = 0 [pid 609] close(6) = 0 [pid 609] mkdir("./file0", 0777) = 0 [pid 609] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 609] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 609] chdir("./file0") = 0 [pid 609] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 609] ioctl(6, LOOP_CLR_FD) = 0 [pid 609] close(6) = 0 [pid 609] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 609] write(6, "#! ./file1\n", 11) = 11 [pid 609] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 609] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 609] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=55, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./53", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 39.047887][ T609] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 39.079022][ T610] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-609: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./53/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./53/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./53/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./53/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./53/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./53/file0") = 0 [pid 343] umount2("./53/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./53/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./53/binderfs") = 0 [pid 343] umount2("./53/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./53/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./53/cgroup.net") = 0 [pid 343] umount2("./53/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./53/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./53/cgroup.cpu") = 0 [pid 343] umount2("./53/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./53/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./53/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./53") = 0 [pid 343] mkdir("./54", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556f72b650) = 56 ./strace-static-x86_64: Process 614 attached [pid 614] set_robust_list(0x55556f72b660, 24) = 0 [pid 614] chdir("./54") = 0 [pid 614] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 614] setpgid(0, 0) = 0 [pid 614] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 614] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 614] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 614] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 614] write(3, "1000", 4) = 4 [pid 614] close(3) = 0 [pid 614] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 614] symlink("/dev/binderfs", "./binderfs") = 0 [pid 614] write(1, "executing program\n", 18executing program ) = 18 [pid 614] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 614] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 614] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 614] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 614] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 614] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 614] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 614] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 614] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 614] memfd_create("syzkaller", 0) = 5 [pid 614] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 614] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 614] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 614] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 614] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 614] close(5) = 0 [pid 614] close(6) = 0 [pid 614] mkdir("./file0", 0777) = 0 [pid 614] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 614] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 614] chdir("./file0") = 0 [pid 614] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 614] ioctl(6, LOOP_CLR_FD) = 0 [pid 614] close(6) = 0 [pid 614] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 614] write(6, "#! ./file1\n", 11) = 11 [pid 614] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 614] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 614] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=56, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./54", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 39.347695][ T614] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 39.379109][ T615] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-614: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./54/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./54/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./54/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./54/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./54/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./54/file0") = 0 [pid 343] umount2("./54/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./54/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./54/binderfs") = 0 [pid 343] umount2("./54/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./54/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./54/cgroup.net") = 0 [pid 343] umount2("./54/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./54/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./54/cgroup.cpu") = 0 [pid 343] umount2("./54/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./54/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./54/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./54") = 0 [pid 343] mkdir("./55", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 619 attached , child_tidptr=0x55556f72b650) = 57 [pid 619] set_robust_list(0x55556f72b660, 24) = 0 [pid 619] chdir("./55") = 0 [pid 619] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 619] setpgid(0, 0) = 0 [pid 619] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 619] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 619] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 619] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 619] write(3, "1000", 4) = 4 [pid 619] close(3) = 0 [pid 619] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 619] symlink("/dev/binderfs", "./binderfs") = 0 [pid 619] write(1, "executing program\n", 18executing program ) = 18 [pid 619] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 619] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 619] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 619] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 619] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 619] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 619] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 619] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 619] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 619] memfd_create("syzkaller", 0) = 5 [pid 619] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 619] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 619] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 619] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 619] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 619] close(5) = 0 [pid 619] close(6) = 0 [pid 619] mkdir("./file0", 0777) = 0 [pid 619] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 619] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 619] chdir("./file0") = 0 [pid 619] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 619] ioctl(6, LOOP_CLR_FD) = 0 [pid 619] close(6) = 0 [pid 619] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 619] write(6, "#! ./file1\n", 11) = 11 [pid 619] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 619] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 619] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=57, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./55", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 39.562080][ T619] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 39.581666][ T620] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-619: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./55/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./55/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./55/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./55/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./55/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./55/file0") = 0 [pid 343] umount2("./55/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./55/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./55/binderfs") = 0 [pid 343] umount2("./55/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./55/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./55/cgroup.net") = 0 [pid 343] umount2("./55/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./55/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./55/cgroup.cpu") = 0 [pid 343] umount2("./55/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./55/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./55/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./55") = 0 [pid 343] mkdir("./56", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 624 attached , child_tidptr=0x55556f72b650) = 58 [pid 624] set_robust_list(0x55556f72b660, 24) = 0 [pid 624] chdir("./56") = 0 [pid 624] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 624] setpgid(0, 0) = 0 [pid 624] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 624] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 624] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 624] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 624] write(3, "1000", 4) = 4 [pid 624] close(3) = 0 [pid 624] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 624] symlink("/dev/binderfs", "./binderfs") = 0 [pid 624] write(1, "executing program\n", 18executing program ) = 18 [pid 624] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 624] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 624] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 624] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 624] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 624] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 624] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 624] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 624] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 624] memfd_create("syzkaller", 0) = 5 [pid 624] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 624] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 624] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 624] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 624] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 624] close(5) = 0 [pid 624] close(6) = 0 [pid 624] mkdir("./file0", 0777) = 0 [pid 624] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 624] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 624] chdir("./file0") = 0 [pid 624] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 624] ioctl(6, LOOP_CLR_FD) = 0 [pid 624] close(6) = 0 [pid 624] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 624] write(6, "#! ./file1\n", 11) = 11 [pid 624] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 624] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 624] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=58, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=0} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./56", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 39.726026][ T624] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 39.746349][ T625] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-624: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./56/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./56/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./56/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./56/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./56/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./56/file0") = 0 [pid 343] umount2("./56/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./56/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./56/binderfs") = 0 [pid 343] umount2("./56/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./56/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./56/cgroup.net") = 0 [pid 343] umount2("./56/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./56/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./56/cgroup.cpu") = 0 [pid 343] umount2("./56/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./56/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./56/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./56") = 0 [pid 343] mkdir("./57", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 629 attached [pid 629] set_robust_list(0x55556f72b660, 24 [pid 343] <... clone resumed>, child_tidptr=0x55556f72b650) = 59 [pid 629] <... set_robust_list resumed>) = 0 [pid 629] chdir("./57") = 0 [pid 629] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 629] setpgid(0, 0) = 0 [pid 629] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 629] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 629] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 629] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 629] write(3, "1000", 4) = 4 [pid 629] close(3) = 0 [pid 629] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 629] symlink("/dev/binderfs", "./binderfs") = 0 [pid 629] write(1, "executing program\n", 18executing program ) = 18 [pid 629] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 629] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 629] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 629] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 629] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 629] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 629] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 629] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 629] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 629] memfd_create("syzkaller", 0) = 5 [pid 629] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 629] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 629] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 629] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 629] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 629] close(5) = 0 [pid 629] close(6) = 0 [pid 629] mkdir("./file0", 0777) = 0 [pid 629] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 629] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 629] chdir("./file0") = 0 [pid 629] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 629] ioctl(6, LOOP_CLR_FD) = 0 [pid 629] close(6) = 0 [pid 629] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 629] write(6, "#! ./file1\n", 11) = 11 [pid 629] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 629] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 629] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=59, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./57", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 39.880430][ T629] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 39.900350][ T630] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-629: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./57/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./57/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./57/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./57/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./57/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./57/file0") = 0 [pid 343] umount2("./57/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./57/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./57/binderfs") = 0 [pid 343] umount2("./57/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./57/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./57/cgroup.net") = 0 [pid 343] umount2("./57/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./57/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./57/cgroup.cpu") = 0 [pid 343] umount2("./57/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./57/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./57/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./57") = 0 [pid 343] mkdir("./58", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 634 attached , child_tidptr=0x55556f72b650) = 60 [pid 634] set_robust_list(0x55556f72b660, 24) = 0 [pid 634] chdir("./58") = 0 [pid 634] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 634] setpgid(0, 0) = 0 [pid 634] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 634] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 634] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 634] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 634] write(3, "1000", 4) = 4 [pid 634] close(3) = 0 [pid 634] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 634] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 634] write(1, "executing program\n", 18) = 18 [pid 634] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 634] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 634] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 634] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 634] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 634] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 634] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 634] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 634] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 634] memfd_create("syzkaller", 0) = 5 [pid 634] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 634] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 634] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 634] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 634] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 634] close(5) = 0 [pid 634] close(6) = 0 [pid 634] mkdir("./file0", 0777) = 0 [pid 634] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 634] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 634] chdir("./file0") = 0 [pid 634] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 634] ioctl(6, LOOP_CLR_FD) = 0 [pid 634] close(6) = 0 [pid 634] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 634] write(6, "#! ./file1\n", 11) = 11 [pid 634] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 634] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 634] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=60, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./58", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 40.037713][ T634] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 40.057409][ T635] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-634: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./58/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./58/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./58/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./58/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./58/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./58/file0") = 0 [pid 343] umount2("./58/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./58/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./58/binderfs") = 0 [pid 343] umount2("./58/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./58/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./58/cgroup.net") = 0 [pid 343] umount2("./58/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./58/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./58/cgroup.cpu") = 0 [pid 343] umount2("./58/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./58/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./58/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./58") = 0 [pid 343] mkdir("./59", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 639 attached [pid 639] set_robust_list(0x55556f72b660, 24 [pid 343] <... clone resumed>, child_tidptr=0x55556f72b650) = 61 [pid 639] <... set_robust_list resumed>) = 0 [pid 639] chdir("./59") = 0 [pid 639] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 639] setpgid(0, 0) = 0 [pid 639] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 639] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 639] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 639] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 639] write(3, "1000", 4) = 4 [pid 639] close(3) = 0 [pid 639] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 639] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 639] write(1, "executing program\n", 18) = 18 [pid 639] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 639] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 639] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 639] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 639] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 639] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 639] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 639] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 639] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 639] memfd_create("syzkaller", 0) = 5 [pid 639] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 639] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 639] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 639] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 639] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 639] close(5) = 0 [pid 639] close(6) = 0 [pid 639] mkdir("./file0", 0777) = 0 [pid 639] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 639] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 639] chdir("./file0") = 0 [pid 639] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 639] ioctl(6, LOOP_CLR_FD) = 0 [pid 639] close(6) = 0 [pid 639] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 639] write(6, "#! ./file1\n", 11) = 11 [pid 639] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 639] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 639] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=61, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./59", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 40.191103][ T639] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 40.208291][ T639] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz-executor243: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./59/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./59/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./59/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./59/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./59/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./59/file0") = 0 [pid 343] umount2("./59/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./59/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./59/binderfs") = 0 [pid 343] umount2("./59/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./59/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./59/cgroup.net") = 0 [pid 343] umount2("./59/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./59/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./59/cgroup.cpu") = 0 [pid 343] umount2("./59/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./59/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./59/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./59") = 0 [pid 343] mkdir("./60", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 644 attached , child_tidptr=0x55556f72b650) = 62 [pid 644] set_robust_list(0x55556f72b660, 24) = 0 [pid 644] chdir("./60") = 0 [pid 644] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 644] setpgid(0, 0) = 0 [pid 644] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 644] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 644] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 644] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 644] write(3, "1000", 4) = 4 [pid 644] close(3) = 0 [pid 644] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 644] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 644] write(1, "executing program\n", 18) = 18 [pid 644] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 644] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 644] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 644] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 644] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 644] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 644] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 644] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 644] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 644] memfd_create("syzkaller", 0) = 5 [pid 644] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 644] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 644] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 644] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 644] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 644] close(5) = 0 [pid 644] close(6) = 0 [pid 644] mkdir("./file0", 0777) = 0 [pid 644] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 644] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 644] chdir("./file0") = 0 [pid 644] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 644] ioctl(6, LOOP_CLR_FD) = 0 [pid 644] close(6) = 0 [pid 644] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 644] write(6, "#! ./file1\n", 11) = 11 [pid 644] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 644] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 644] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=62, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./60", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 40.407709][ T644] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 40.439348][ T645] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-644: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./60/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./60/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./60/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./60/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./60/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./60/file0") = 0 [pid 343] umount2("./60/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./60/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./60/binderfs") = 0 [pid 343] umount2("./60/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./60/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./60/cgroup.net") = 0 [pid 343] umount2("./60/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./60/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./60/cgroup.cpu") = 0 [pid 343] umount2("./60/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./60/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./60/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./60") = 0 [pid 343] mkdir("./61", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 649 attached [pid 649] set_robust_list(0x55556f72b660, 24) = 0 [pid 343] <... clone resumed>, child_tidptr=0x55556f72b650) = 63 [pid 649] chdir("./61") = 0 [pid 649] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 649] setpgid(0, 0) = 0 [pid 649] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 649] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 649] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 649] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 649] write(3, "1000", 4) = 4 [pid 649] close(3) = 0 [pid 649] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 649] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 649] write(1, "executing program\n", 18) = 18 [pid 649] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 649] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 649] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 649] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 649] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 649] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 649] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 649] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 649] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 649] memfd_create("syzkaller", 0) = 5 [pid 649] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 649] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 649] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 649] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 649] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 649] close(5) = 0 [pid 649] close(6) = 0 [pid 649] mkdir("./file0", 0777) = 0 [pid 649] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 649] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 649] chdir("./file0") = 0 [pid 649] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 649] ioctl(6, LOOP_CLR_FD) = 0 [pid 649] close(6) = 0 [pid 649] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 649] write(6, "#! ./file1\n", 11) = 11 [pid 649] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 649] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 649] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=63, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./61", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 40.657845][ T649] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 40.691665][ T650] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-649: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./61/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./61/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./61/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./61/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./61/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./61/file0") = 0 [pid 343] umount2("./61/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./61/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./61/binderfs") = 0 [pid 343] umount2("./61/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./61/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./61/cgroup.net") = 0 [pid 343] umount2("./61/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./61/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./61/cgroup.cpu") = 0 [pid 343] umount2("./61/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./61/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./61/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./61") = 0 [pid 343] mkdir("./62", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 654 attached , child_tidptr=0x55556f72b650) = 64 [pid 654] set_robust_list(0x55556f72b660, 24) = 0 [pid 654] chdir("./62") = 0 [pid 654] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 654] setpgid(0, 0) = 0 [pid 654] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 654] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 654] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 654] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 654] write(3, "1000", 4) = 4 [pid 654] close(3) = 0 [pid 654] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 654] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 654] write(1, "executing program\n", 18) = 18 [pid 654] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 654] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 654] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 654] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 654] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 654] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 654] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 654] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 654] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 654] memfd_create("syzkaller", 0) = 5 [pid 654] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 654] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 654] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 654] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 654] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 654] close(5) = 0 [pid 654] close(6) = 0 [pid 654] mkdir("./file0", 0777) = 0 [pid 654] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 654] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 654] chdir("./file0") = 0 [pid 654] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 654] ioctl(6, LOOP_CLR_FD) = 0 [pid 654] close(6) = 0 [pid 654] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 654] write(6, "#! ./file1\n", 11) = 11 [pid 654] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 654] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 654] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=64, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./62", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 40.907201][ T654] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 40.928020][ T655] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-654: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./62/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./62/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./62/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./62/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./62/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./62/file0") = 0 [pid 343] umount2("./62/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./62/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./62/binderfs") = 0 [pid 343] umount2("./62/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./62/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./62/cgroup.net") = 0 [pid 343] umount2("./62/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./62/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./62/cgroup.cpu") = 0 [pid 343] umount2("./62/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./62/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./62/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./62") = 0 [pid 343] mkdir("./63", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556f72b650) = 65 ./strace-static-x86_64: Process 659 attached [pid 659] set_robust_list(0x55556f72b660, 24) = 0 [pid 659] chdir("./63") = 0 [pid 659] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 659] setpgid(0, 0) = 0 [pid 659] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 659] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 659] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 659] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 659] write(3, "1000", 4) = 4 [pid 659] close(3) = 0 [pid 659] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 659] symlink("/dev/binderfs", "./binderfs") = 0 [pid 659] write(1, "executing program\n", 18executing program ) = 18 [pid 659] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 659] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 659] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 659] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 659] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 659] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 659] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 659] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 659] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 659] memfd_create("syzkaller", 0) = 5 [pid 659] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 659] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 659] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 659] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 659] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 659] close(5) = 0 [pid 659] close(6) = 0 [pid 659] mkdir("./file0", 0777) = 0 [pid 659] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 659] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 659] chdir("./file0") = 0 [pid 659] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 659] ioctl(6, LOOP_CLR_FD) = 0 [pid 659] close(6) = 0 [pid 659] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 659] write(6, "#! ./file1\n", 11) = 11 [pid 659] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 659] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 659] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=65, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./63", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 41.067799][ T659] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 41.088251][ T660] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-659: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./63/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./63/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./63/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./63/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./63/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./63/file0") = 0 [pid 343] umount2("./63/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./63/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./63/binderfs") = 0 [pid 343] umount2("./63/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./63/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./63/cgroup.net") = 0 [pid 343] umount2("./63/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./63/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./63/cgroup.cpu") = 0 [pid 343] umount2("./63/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./63/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./63/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./63") = 0 [pid 343] mkdir("./64", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 664 attached [pid 664] set_robust_list(0x55556f72b660, 24) = 0 [pid 343] <... clone resumed>, child_tidptr=0x55556f72b650) = 66 [pid 664] chdir("./64") = 0 [pid 664] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 664] setpgid(0, 0) = 0 [pid 664] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 664] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 664] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 664] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 664] write(3, "1000", 4) = 4 [pid 664] close(3) = 0 [pid 664] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 664] symlink("/dev/binderfs", "./binderfs") = 0 [pid 664] write(1, "executing program\n", 18executing program ) = 18 [pid 664] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 664] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 664] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 664] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 664] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 664] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 664] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 664] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 664] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 664] memfd_create("syzkaller", 0) = 5 [pid 664] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 664] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 664] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 664] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 664] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 664] close(5) = 0 [pid 664] close(6) = 0 [pid 664] mkdir("./file0", 0777) = 0 [pid 664] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 664] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 664] chdir("./file0") = 0 [pid 664] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 664] ioctl(6, LOOP_CLR_FD) = 0 [pid 664] close(6) = 0 [pid 664] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 664] write(6, "#! ./file1\n", 11) = 11 [pid 664] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 664] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 664] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=66, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./64", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 41.257680][ T664] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 41.289451][ T665] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-664: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./64/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./64/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./64/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./64/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./64/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./64/file0") = 0 [pid 343] umount2("./64/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./64/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./64/binderfs") = 0 [pid 343] umount2("./64/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./64/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./64/cgroup.net") = 0 [pid 343] umount2("./64/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./64/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./64/cgroup.cpu") = 0 [pid 343] umount2("./64/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./64/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./64/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./64") = 0 [pid 343] mkdir("./65", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 669 attached [pid 669] set_robust_list(0x55556f72b660, 24) = 0 [pid 343] <... clone resumed>, child_tidptr=0x55556f72b650) = 67 [pid 669] chdir("./65") = 0 [pid 669] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 669] setpgid(0, 0) = 0 [pid 669] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 669] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 669] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 669] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 669] write(3, "1000", 4) = 4 [pid 669] close(3) = 0 [pid 669] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 669] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 669] write(1, "executing program\n", 18) = 18 [pid 669] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 669] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 669] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 669] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 669] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 669] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 669] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 669] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 669] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 669] memfd_create("syzkaller", 0) = 5 [pid 669] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 669] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 669] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 669] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 669] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 669] close(5) = 0 [pid 669] close(6) = 0 [pid 669] mkdir("./file0", 0777) = 0 [pid 669] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 669] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 669] chdir("./file0") = 0 [pid 669] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 669] ioctl(6, LOOP_CLR_FD) = 0 [pid 669] close(6) = 0 [pid 669] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 669] write(6, "#! ./file1\n", 11) = 11 [pid 669] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 669] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 669] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=67, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./65", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 41.557727][ T669] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 41.589098][ T670] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-669: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./65/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./65/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./65/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./65/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./65/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./65/file0") = 0 [pid 343] umount2("./65/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./65/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./65/binderfs") = 0 [pid 343] umount2("./65/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./65/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./65/cgroup.net") = 0 [pid 343] umount2("./65/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./65/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./65/cgroup.cpu") = 0 [pid 343] umount2("./65/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./65/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./65/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./65") = 0 [pid 343] mkdir("./66", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556f72b650) = 68 ./strace-static-x86_64: Process 674 attached [pid 674] set_robust_list(0x55556f72b660, 24) = 0 [pid 674] chdir("./66") = 0 [pid 674] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 674] setpgid(0, 0) = 0 executing program [pid 674] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 674] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 674] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 674] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 674] write(3, "1000", 4) = 4 [pid 674] close(3) = 0 [pid 674] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 674] symlink("/dev/binderfs", "./binderfs") = 0 [pid 674] write(1, "executing program\n", 18) = 18 [pid 674] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 674] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 674] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 674] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 674] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 674] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 674] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 674] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 674] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 674] memfd_create("syzkaller", 0) = 5 [pid 674] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 674] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 674] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 674] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 674] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 674] close(5) = 0 [pid 674] close(6) = 0 [pid 674] mkdir("./file0", 0777) = 0 [pid 674] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 674] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 674] chdir("./file0") = 0 [pid 674] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 674] ioctl(6, LOOP_CLR_FD) = 0 [pid 674] close(6) = 0 [pid 674] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 674] write(6, "#! ./file1\n", 11) = 11 [pid 674] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 674] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 674] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=68, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./66", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 41.847722][ T674] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 41.862542][ T675] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-674: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./66/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./66/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./66/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./66/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./66/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./66/file0") = 0 [pid 343] umount2("./66/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./66/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./66/binderfs") = 0 [pid 343] umount2("./66/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./66/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./66/cgroup.net") = 0 [pid 343] umount2("./66/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./66/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./66/cgroup.cpu") = 0 [pid 343] umount2("./66/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./66/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./66/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./66") = 0 [pid 343] mkdir("./67", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 679 attached [pid 679] set_robust_list(0x55556f72b660, 24) = 0 [pid 679] chdir("./67" [pid 343] <... clone resumed>, child_tidptr=0x55556f72b650) = 69 [pid 679] <... chdir resumed>) = 0 [pid 679] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 679] setpgid(0, 0) = 0 [pid 679] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 679] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 679] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 679] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 679] write(3, "1000", 4) = 4 [pid 679] close(3) = 0 [pid 679] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 679] symlink("/dev/binderfs", "./binderfs") = 0 [pid 679] write(1, "executing program\n", 18executing program ) = 18 [pid 679] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 679] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 679] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 679] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 679] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 679] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 679] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 679] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 679] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 679] memfd_create("syzkaller", 0) = 5 [pid 679] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 679] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 679] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 679] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 679] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 679] close(5) = 0 [pid 679] close(6) = 0 [pid 679] mkdir("./file0", 0777) = 0 [pid 679] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 679] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 679] chdir("./file0") = 0 [pid 679] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 679] ioctl(6, LOOP_CLR_FD) = 0 [pid 679] close(6) = 0 [pid 679] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 679] write(6, "#! ./file1\n", 11) = 11 [pid 679] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 679] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 679] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=69, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./67", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 42.038585][ T679] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 42.060561][ T680] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-679: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./67/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./67/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./67/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./67/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./67/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./67/file0") = 0 [pid 343] umount2("./67/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./67/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./67/binderfs") = 0 [pid 343] umount2("./67/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./67/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./67/cgroup.net") = 0 [pid 343] umount2("./67/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./67/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./67/cgroup.cpu") = 0 [pid 343] umount2("./67/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./67/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./67/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./67") = 0 [pid 343] mkdir("./68", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556f72b650) = 70 ./strace-static-x86_64: Process 684 attached [pid 684] set_robust_list(0x55556f72b660, 24) = 0 [pid 684] chdir("./68") = 0 [pid 684] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 684] setpgid(0, 0) = 0 [pid 684] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 684] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 684] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 684] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 684] write(3, "1000", 4) = 4 [pid 684] close(3) = 0 [pid 684] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 684] symlink("/dev/binderfs", "./binderfs") = 0 [pid 684] write(1, "executing program\n", 18executing program ) = 18 [pid 684] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 684] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 684] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 684] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 684] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 684] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 684] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 684] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 684] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 684] memfd_create("syzkaller", 0) = 5 [pid 684] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 684] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 684] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 684] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 684] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 684] close(5) = 0 [pid 684] close(6) = 0 [pid 684] mkdir("./file0", 0777) = 0 [pid 684] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 684] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 684] chdir("./file0") = 0 [pid 684] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 684] ioctl(6, LOOP_CLR_FD) = 0 [pid 684] close(6) = 0 [pid 684] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 684] write(6, "#! ./file1\n", 11) = 11 [pid 684] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 684] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 684] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=70, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./68", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 42.200003][ T684] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 42.220688][ T685] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-684: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./68/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./68/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./68/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./68/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./68/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./68/file0") = 0 [pid 343] umount2("./68/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./68/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./68/binderfs") = 0 [pid 343] umount2("./68/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./68/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./68/cgroup.net") = 0 [pid 343] umount2("./68/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./68/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./68/cgroup.cpu") = 0 [pid 343] umount2("./68/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./68/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./68/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./68") = 0 [pid 343] mkdir("./69", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556f72b650) = 71 ./strace-static-x86_64: Process 689 attached [pid 689] set_robust_list(0x55556f72b660, 24) = 0 [pid 689] chdir("./69") = 0 [pid 689] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 689] setpgid(0, 0) = 0 [pid 689] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 689] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 689] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 689] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 689] write(3, "1000", 4) = 4 [pid 689] close(3) = 0 [pid 689] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 689] symlink("/dev/binderfs", "./binderfs") = 0 [pid 689] write(1, "executing program\n", 18executing program ) = 18 [pid 689] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 689] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 689] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 689] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 689] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 689] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 689] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 689] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 689] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 689] memfd_create("syzkaller", 0) = 5 [pid 689] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 689] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 689] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 689] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 689] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 689] close(5) = 0 [pid 689] close(6) = 0 [pid 689] mkdir("./file0", 0777) = 0 [pid 689] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 689] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 689] chdir("./file0") = 0 [pid 689] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 689] ioctl(6, LOOP_CLR_FD) = 0 [pid 689] close(6) = 0 [pid 689] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 689] write(6, "#! ./file1\n", 11) = 11 [pid 689] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 689] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 689] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=71, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./69", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 42.397772][ T689] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 42.417129][ T690] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-689: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./69/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./69/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./69/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./69/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./69/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./69/file0") = 0 [pid 343] umount2("./69/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./69/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./69/binderfs") = 0 [pid 343] umount2("./69/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./69/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./69/cgroup.net") = 0 [pid 343] umount2("./69/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./69/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./69/cgroup.cpu") = 0 [pid 343] umount2("./69/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./69/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./69/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./69") = 0 [pid 343] mkdir("./70", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 694 attached , child_tidptr=0x55556f72b650) = 72 [pid 694] set_robust_list(0x55556f72b660, 24) = 0 [pid 694] chdir("./70") = 0 [pid 694] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 694] setpgid(0, 0) = 0 [pid 694] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 694] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 694] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 694] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 694] write(3, "1000", 4) = 4 [pid 694] close(3) = 0 [pid 694] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 694] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 694] write(1, "executing program\n", 18) = 18 [pid 694] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 694] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 694] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 694] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 694] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 694] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 694] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 694] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 694] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 694] memfd_create("syzkaller", 0) = 5 [pid 694] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 694] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 694] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 694] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 694] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 694] close(5) = 0 [pid 694] close(6) = 0 [pid 694] mkdir("./file0", 0777) = 0 [pid 694] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 694] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 694] chdir("./file0") = 0 [pid 694] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 694] ioctl(6, LOOP_CLR_FD) = 0 [pid 694] close(6) = 0 [pid 694] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 694] write(6, "#! ./file1\n", 11) = 11 [pid 694] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 694] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 694] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=72, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./70", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 42.597771][ T694] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 42.617305][ T695] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-694: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./70/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./70/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./70/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./70/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./70/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./70/file0") = 0 [pid 343] umount2("./70/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./70/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./70/binderfs") = 0 [pid 343] umount2("./70/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./70/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./70/cgroup.net") = 0 [pid 343] umount2("./70/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./70/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./70/cgroup.cpu") = 0 [pid 343] umount2("./70/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./70/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./70/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./70") = 0 [pid 343] mkdir("./71", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 699 attached , child_tidptr=0x55556f72b650) = 73 [pid 699] set_robust_list(0x55556f72b660, 24) = 0 [pid 699] chdir("./71") = 0 [pid 699] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 699] setpgid(0, 0) = 0 [pid 699] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 699] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 699] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 699] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 699] write(3, "1000", 4) = 4 [pid 699] close(3) = 0 [pid 699] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 699] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 699] write(1, "executing program\n", 18) = 18 [pid 699] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 699] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 699] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 699] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 699] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 699] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 699] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 699] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 699] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 699] memfd_create("syzkaller", 0) = 5 [pid 699] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 699] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 699] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 699] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 699] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 699] close(5) = 0 [pid 699] close(6) = 0 [pid 699] mkdir("./file0", 0777) = 0 [pid 699] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 699] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 699] chdir("./file0") = 0 [pid 699] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 699] ioctl(6, LOOP_CLR_FD) = 0 [pid 699] close(6) = 0 [pid 699] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 699] write(6, "#! ./file1\n", 11) = 11 [pid 699] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 699] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 699] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=73, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./71", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [pid 343] umount2("./71/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./71/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./71/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./71/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./71/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./71/file0") = 0 [pid 343] umount2("./71/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./71/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./71/binderfs") = 0 [pid 343] umount2("./71/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./71/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./71/cgroup.net") = 0 [pid 343] umount2("./71/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./71/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./71/cgroup.cpu") = 0 [pid 343] umount2("./71/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./71/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./71/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./71") = 0 [ 42.761430][ T699] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 42.778046][ T699] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz-executor243: bg 0: block 234: padding at end of block bitmap is not set [pid 343] mkdir("./72", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 704 attached , child_tidptr=0x55556f72b650) = 74 [pid 704] set_robust_list(0x55556f72b660, 24) = 0 [pid 704] chdir("./72") = 0 [pid 704] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 704] setpgid(0, 0) = 0 [pid 704] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 704] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 704] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 704] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 704] write(3, "1000", 4) = 4 [pid 704] close(3) = 0 [pid 704] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 704] symlink("/dev/binderfs", "./binderfs") = 0 [pid 704] write(1, "executing program\n", 18executing program ) = 18 [pid 704] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 704] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 704] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 704] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 704] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 704] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 704] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 704] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 704] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 704] memfd_create("syzkaller", 0) = 5 [pid 704] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 704] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 704] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 704] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 704] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 704] close(5) = 0 [pid 704] close(6) = 0 [pid 704] mkdir("./file0", 0777) = 0 [pid 704] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 704] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 704] chdir("./file0") = 0 [pid 704] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 704] ioctl(6, LOOP_CLR_FD) = 0 [pid 704] close(6) = 0 [pid 704] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 704] write(6, "#! ./file1\n", 11) = 11 [pid 704] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 704] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 704] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=74, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./72", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 42.880977][ T704] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 42.901923][ T705] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-704: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./72/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./72/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./72/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./72/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./72/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./72/file0") = 0 [pid 343] umount2("./72/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./72/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./72/binderfs") = 0 [pid 343] umount2("./72/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./72/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./72/cgroup.net") = 0 [pid 343] umount2("./72/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./72/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./72/cgroup.cpu") = 0 [pid 343] umount2("./72/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./72/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./72/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./72") = 0 [pid 343] mkdir("./73", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556f72b650) = 75 ./strace-static-x86_64: Process 709 attached [pid 709] set_robust_list(0x55556f72b660, 24) = 0 [pid 709] chdir("./73") = 0 [pid 709] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 709] setpgid(0, 0) = 0 [pid 709] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 709] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 709] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 709] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 709] write(3, "1000", 4) = 4 [pid 709] close(3) = 0 [pid 709] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 709] symlink("/dev/binderfs", "./binderfs") = 0 [pid 709] write(1, "executing program\n", 18executing program ) = 18 [pid 709] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 709] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 709] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 709] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 709] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 709] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 709] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 709] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 709] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 709] memfd_create("syzkaller", 0) = 5 [pid 709] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 709] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 709] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 709] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 709] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 709] close(5) = 0 [pid 709] close(6) = 0 [pid 709] mkdir("./file0", 0777) = 0 [pid 709] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 709] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 709] chdir("./file0") = 0 [pid 709] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 709] ioctl(6, LOOP_CLR_FD) = 0 [pid 709] close(6) = 0 [pid 709] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 709] write(6, "#! ./file1\n", 11) = 11 [pid 709] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 709] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 709] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=75, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./73", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 43.080582][ T709] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 43.100089][ T710] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-709: bg 0: block 234: padding at end of block bitmap is not set [ 43.116973][ T709] syz-executor243 (709) used greatest stack depth: 21760 bytes left [pid 343] umount2("./73/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./73/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./73/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./73/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./73/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./73/file0") = 0 [pid 343] umount2("./73/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./73/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./73/binderfs") = 0 [pid 343] umount2("./73/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./73/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./73/cgroup.net") = 0 [pid 343] umount2("./73/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./73/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./73/cgroup.cpu") = 0 [pid 343] umount2("./73/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./73/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./73/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./73") = 0 [pid 343] mkdir("./74", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556f72b650) = 76 ./strace-static-x86_64: Process 714 attached [pid 714] set_robust_list(0x55556f72b660, 24) = 0 [pid 714] chdir("./74") = 0 [pid 714] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 714] setpgid(0, 0) = 0 [pid 714] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 714] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 714] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 714] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 714] write(3, "1000", 4) = 4 [pid 714] close(3) = 0 [pid 714] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 714] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 714] write(1, "executing program\n", 18) = 18 [pid 714] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 714] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 714] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 714] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 714] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 714] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 714] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 714] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 714] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 714] memfd_create("syzkaller", 0) = 5 [pid 714] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 714] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 714] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 714] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 714] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 714] close(5) = 0 [pid 714] close(6) = 0 [pid 714] mkdir("./file0", 0777) = 0 [pid 714] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 714] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 714] chdir("./file0") = 0 [pid 714] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 714] ioctl(6, LOOP_CLR_FD) = 0 [pid 714] close(6) = 0 [pid 714] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 714] write(6, "#! ./file1\n", 11) = 11 [pid 714] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 714] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 714] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=76, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./74", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 43.327716][ T714] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 43.359048][ T715] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-714: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./74/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./74/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./74/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./74/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./74/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./74/file0") = 0 [pid 343] umount2("./74/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./74/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./74/binderfs") = 0 [pid 343] umount2("./74/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./74/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./74/cgroup.net") = 0 [pid 343] umount2("./74/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./74/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./74/cgroup.cpu") = 0 [pid 343] umount2("./74/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./74/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./74/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./74") = 0 [pid 343] mkdir("./75", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556f72b650) = 77 ./strace-static-x86_64: Process 719 attached [pid 719] set_robust_list(0x55556f72b660, 24) = 0 [pid 719] chdir("./75") = 0 [pid 719] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 719] setpgid(0, 0) = 0 [pid 719] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 719] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 719] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 719] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 719] write(3, "1000", 4) = 4 [pid 719] close(3) = 0 [pid 719] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 719] symlink("/dev/binderfs", "./binderfs") = 0 [pid 719] write(1, "executing program\n", 18) = 18 [pid 719] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 719] ioctl(3, VHOST_SET_OWNERexecuting program , 0) = 0 [pid 719] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 719] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 719] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 719] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 719] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 719] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 719] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 719] memfd_create("syzkaller", 0) = 5 [pid 719] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 719] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 719] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 719] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 719] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 719] close(5) = 0 [pid 719] close(6) = 0 [pid 719] mkdir("./file0", 0777) = 0 [pid 719] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 719] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 719] chdir("./file0") = 0 [pid 719] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 719] ioctl(6, LOOP_CLR_FD) = 0 [pid 719] close(6) = 0 [pid 719] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 719] write(6, "#! ./file1\n", 11) = 11 [pid 719] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 719] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 719] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=77, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./75", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 43.478323][ T719] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 43.509673][ T720] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-719: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./75/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./75/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./75/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./75/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./75/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./75/file0") = 0 [pid 343] umount2("./75/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./75/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./75/binderfs") = 0 [pid 343] umount2("./75/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./75/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./75/cgroup.net") = 0 [pid 343] umount2("./75/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./75/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./75/cgroup.cpu") = 0 [pid 343] umount2("./75/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./75/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./75/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./75") = 0 [pid 343] mkdir("./76", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 724 attached [pid 724] set_robust_list(0x55556f72b660, 24) = 0 [pid 724] chdir("./76" [pid 343] <... clone resumed>, child_tidptr=0x55556f72b650) = 78 [pid 724] <... chdir resumed>) = 0 [pid 724] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 724] setpgid(0, 0) = 0 [pid 724] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 724] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 724] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 724] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 724] write(3, "1000", 4) = 4 [pid 724] close(3) = 0 [pid 724] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 724] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 724] write(1, "executing program\n", 18) = 18 [pid 724] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 724] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 724] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 724] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 724] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 724] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 724] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 724] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 724] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 724] memfd_create("syzkaller", 0) = 5 [pid 724] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 724] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 724] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 724] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 724] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 724] close(5) = 0 [pid 724] close(6) = 0 [pid 724] mkdir("./file0", 0777) = 0 [pid 724] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 724] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 724] chdir("./file0") = 0 [pid 724] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 724] ioctl(6, LOOP_CLR_FD) = 0 [pid 724] close(6) = 0 [pid 724] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 724] write(6, "#! ./file1\n", 11) = 11 [pid 724] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 724] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 724] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=78, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./76", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 43.697701][ T724] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 43.727943][ T724] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz-executor243: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./76/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./76/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./76/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./76/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./76/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./76/file0") = 0 [pid 343] umount2("./76/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./76/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./76/binderfs") = 0 [pid 343] umount2("./76/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./76/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./76/cgroup.net") = 0 [pid 343] umount2("./76/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./76/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./76/cgroup.cpu") = 0 [pid 343] umount2("./76/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./76/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./76/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./76") = 0 [pid 343] mkdir("./77", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 730 attached [pid 730] set_robust_list(0x55556f72b660, 24) = 0 [pid 730] chdir("./77") = 0 [pid 730] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 730] setpgid(0, 0) = 0 [pid 730] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 730] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 730] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 730] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 730] write(3, "1000", 4) = 4 [pid 730] close(3) = 0 [pid 730] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 730] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 730] write(1, "executing program\n", 18) = 18 [pid 730] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 730] ioctl(3, VHOST_SET_OWNER [pid 343] <... clone resumed>, child_tidptr=0x55556f72b650) = 79 [pid 730] <... ioctl resumed>, 0) = 0 [pid 730] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 730] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 730] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 730] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 730] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 730] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 730] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 730] memfd_create("syzkaller", 0) = 5 [pid 730] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 730] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 730] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 730] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 730] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 730] close(5) = 0 [pid 730] close(6) = 0 [pid 730] mkdir("./file0", 0777) = 0 [pid 730] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 730] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 730] chdir("./file0") = 0 [pid 730] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 730] ioctl(6, LOOP_CLR_FD) = 0 [pid 730] close(6) = 0 [pid 730] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 730] write(6, "#! ./file1\n", 11) = 11 [pid 730] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 730] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 730] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=79, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./77", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 43.917698][ T730] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 43.937065][ T731] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-730: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./77/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./77/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./77/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./77/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./77/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./77/file0") = 0 [pid 343] umount2("./77/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./77/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./77/binderfs") = 0 [pid 343] umount2("./77/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./77/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./77/cgroup.net") = 0 [pid 343] umount2("./77/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./77/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./77/cgroup.cpu") = 0 [pid 343] umount2("./77/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./77/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./77/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./77") = 0 [pid 343] mkdir("./78", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 735 attached , child_tidptr=0x55556f72b650) = 80 [pid 735] set_robust_list(0x55556f72b660, 24) = 0 [pid 735] chdir("./78") = 0 [pid 735] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 735] setpgid(0, 0) = 0 [pid 735] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 735] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 735] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 735] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 735] write(3, "1000", 4) = 4 [pid 735] close(3) = 0 [pid 735] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 735] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 735] write(1, "executing program\n", 18) = 18 [pid 735] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 735] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 735] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 735] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 735] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 735] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 735] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 735] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 735] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 735] memfd_create("syzkaller", 0) = 5 [pid 735] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 735] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 735] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 735] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 735] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 735] close(5) = 0 [pid 735] close(6) = 0 [pid 735] mkdir("./file0", 0777) = 0 [pid 735] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 735] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 735] chdir("./file0") = 0 [pid 735] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 735] ioctl(6, LOOP_CLR_FD) = 0 [pid 735] close(6) = 0 [pid 735] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 735] write(6, "#! ./file1\n", 11) = 11 [pid 735] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 735] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 735] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=80, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./78", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 44.121658][ T735] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 44.138438][ T735] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz-executor243: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./78/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./78/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./78/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./78/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./78/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./78/file0") = 0 [pid 343] umount2("./78/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./78/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./78/binderfs") = 0 [pid 343] umount2("./78/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./78/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./78/cgroup.net") = 0 [pid 343] umount2("./78/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./78/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./78/cgroup.cpu") = 0 [pid 343] umount2("./78/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./78/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./78/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./78") = 0 [pid 343] mkdir("./79", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 740 attached [pid 740] set_robust_list(0x55556f72b660, 24) = 0 [pid 740] chdir("./79" [pid 343] <... clone resumed>, child_tidptr=0x55556f72b650) = 81 [pid 740] <... chdir resumed>) = 0 [pid 740] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 740] setpgid(0, 0) = 0 [pid 740] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 740] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 740] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 740] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 740] write(3, "1000", 4) = 4 [pid 740] close(3) = 0 [pid 740] read(200, executing program 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 740] symlink("/dev/binderfs", "./binderfs") = 0 [pid 740] write(1, "executing program\n", 18) = 18 [pid 740] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 740] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 740] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 740] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 740] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 740] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 740] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 740] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 740] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 740] memfd_create("syzkaller", 0) = 5 [pid 740] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 740] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 740] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 740] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 740] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 740] close(5) = 0 [pid 740] close(6) = 0 [pid 740] mkdir("./file0", 0777) = 0 [pid 740] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 740] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 740] chdir("./file0") = 0 [pid 740] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 740] ioctl(6, LOOP_CLR_FD) = 0 [pid 740] close(6) = 0 [pid 740] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 740] write(6, "#! ./file1\n", 11) = 11 [pid 740] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 740] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 740] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=81, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=0} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./79", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 44.267735][ T740] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 44.287633][ T741] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-740: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./79/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./79/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./79/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./79/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./79/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./79/file0") = 0 [pid 343] umount2("./79/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./79/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./79/binderfs") = 0 [pid 343] umount2("./79/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./79/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./79/cgroup.net") = 0 [pid 343] umount2("./79/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./79/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./79/cgroup.cpu") = 0 [pid 343] umount2("./79/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./79/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./79/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./79") = 0 [pid 343] mkdir("./80", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556f72b650) = 82 ./strace-static-x86_64: Process 745 attached [pid 745] set_robust_list(0x55556f72b660, 24) = 0 [pid 745] chdir("./80") = 0 [pid 745] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 745] setpgid(0, 0) = 0 [pid 745] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 745] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 745] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 745] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 745] write(3, "1000", 4) = 4 [pid 745] close(3) = 0 [pid 745] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 745] symlink("/dev/binderfs", "./binderfs") = 0 [pid 745] write(1, "executing program\n", 18executing program ) = 18 [pid 745] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 745] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 745] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 745] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 745] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 745] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 745] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 745] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 745] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 745] memfd_create("syzkaller", 0) = 5 [pid 745] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 745] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 745] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 745] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 745] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 745] close(5) = 0 [pid 745] close(6) = 0 [pid 745] mkdir("./file0", 0777) = 0 [pid 745] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 745] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 745] chdir("./file0") = 0 [pid 745] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 745] ioctl(6, LOOP_CLR_FD) = 0 [pid 745] close(6) = 0 [pid 745] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 745] write(6, "#! ./file1\n", 11) = 11 [pid 745] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 745] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 745] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=82, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./80", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 44.429121][ T745] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 44.448416][ T746] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-745: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./80/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./80/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./80/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./80/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./80/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./80/file0") = 0 [pid 343] umount2("./80/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./80/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./80/binderfs") = 0 [pid 343] umount2("./80/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./80/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./80/cgroup.net") = 0 [pid 343] umount2("./80/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./80/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./80/cgroup.cpu") = 0 [pid 343] umount2("./80/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./80/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./80/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./80") = 0 [pid 343] mkdir("./81", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 750 attached , child_tidptr=0x55556f72b650) = 83 [pid 750] set_robust_list(0x55556f72b660, 24) = 0 [pid 750] chdir("./81") = 0 [pid 750] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 750] setpgid(0, 0) = 0 [pid 750] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 750] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 750] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 750] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 750] write(3, "1000", 4) = 4 [pid 750] close(3) = 0 [pid 750] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 750] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 750] write(1, "executing program\n", 18) = 18 [pid 750] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 750] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 750] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 750] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 750] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 750] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 750] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 750] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 750] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 750] memfd_create("syzkaller", 0) = 5 [pid 750] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 750] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 750] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 750] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 750] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 750] close(5) = 0 [pid 750] close(6) = 0 [pid 750] mkdir("./file0", 0777) = 0 [pid 750] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 750] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 750] chdir("./file0") = 0 [pid 750] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 750] ioctl(6, LOOP_CLR_FD) = 0 [pid 750] close(6) = 0 [pid 750] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 750] write(6, "#! ./file1\n", 11) = 11 [pid 750] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 750] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 750] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=83, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./81", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 44.591806][ T750] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 44.611416][ T751] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-750: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./81/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./81/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./81/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./81/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./81/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./81/file0") = 0 [pid 343] umount2("./81/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./81/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./81/binderfs") = 0 [pid 343] umount2("./81/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./81/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./81/cgroup.net") = 0 [pid 343] umount2("./81/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./81/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./81/cgroup.cpu") = 0 [pid 343] umount2("./81/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./81/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./81/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./81") = 0 [pid 343] mkdir("./82", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 755 attached , child_tidptr=0x55556f72b650) = 84 [pid 755] set_robust_list(0x55556f72b660, 24) = 0 [pid 755] chdir("./82") = 0 [pid 755] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 755] setpgid(0, 0) = 0 [pid 755] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 755] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 755] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 755] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 755] write(3, "1000", 4) = 4 [pid 755] close(3) = 0 [pid 755] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 755] symlink("/dev/binderfs", "./binderfs") = 0 [pid 755] write(1, "executing program\n", 18executing program ) = 18 [pid 755] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 755] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 755] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 755] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 755] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 755] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 755] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 755] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 755] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 755] memfd_create("syzkaller", 0) = 5 [pid 755] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 755] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 755] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 755] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 755] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 755] close(5) = 0 [pid 755] close(6) = 0 [pid 755] mkdir("./file0", 0777) = 0 [pid 755] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 755] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 755] chdir("./file0") = 0 [pid 755] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 755] ioctl(6, LOOP_CLR_FD) = 0 [pid 755] close(6) = 0 [pid 755] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 755] write(6, "#! ./file1\n", 11) = 11 [pid 755] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 755] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 755] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=84, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./82", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 44.747644][ T755] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 44.767759][ T756] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-755: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./82/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./82/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./82/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./82/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./82/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./82/file0") = 0 [pid 343] umount2("./82/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./82/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./82/binderfs") = 0 [pid 343] umount2("./82/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./82/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./82/cgroup.net") = 0 [pid 343] umount2("./82/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./82/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./82/cgroup.cpu") = 0 [pid 343] umount2("./82/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./82/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./82/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./82") = 0 [pid 343] mkdir("./83", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 760 attached , child_tidptr=0x55556f72b650) = 85 [pid 760] set_robust_list(0x55556f72b660, 24) = 0 [pid 760] chdir("./83") = 0 [pid 760] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 760] setpgid(0, 0) = 0 [pid 760] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 760] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 760] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 760] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 760] write(3, "1000", 4) = 4 [pid 760] close(3) = 0 [pid 760] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 760] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 760] write(1, "executing program\n", 18) = 18 [pid 760] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 760] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 760] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 760] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 760] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 760] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 760] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 760] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 760] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 760] memfd_create("syzkaller", 0) = 5 [pid 760] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 760] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 760] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 760] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 760] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 760] close(5) = 0 [pid 760] close(6) = 0 [pid 760] mkdir("./file0", 0777) = 0 [pid 760] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 760] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 760] chdir("./file0") = 0 [pid 760] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 760] ioctl(6, LOOP_CLR_FD) = 0 [pid 760] close(6) = 0 [pid 760] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 760] write(6, "#! ./file1\n", 11) = 11 [pid 760] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 760] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 760] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=85, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./83", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 44.992289][ T760] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 45.011864][ T761] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-760: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./83/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./83/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./83/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./83/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./83/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./83/file0") = 0 [pid 343] umount2("./83/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./83/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./83/binderfs") = 0 [pid 343] umount2("./83/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./83/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./83/cgroup.net") = 0 [pid 343] umount2("./83/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./83/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./83/cgroup.cpu") = 0 [pid 343] umount2("./83/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./83/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./83/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./83") = 0 [pid 343] mkdir("./84", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 765 attached [pid 765] set_robust_list(0x55556f72b660, 24) = 0 [pid 765] chdir("./84") = 0 [pid 343] <... clone resumed>, child_tidptr=0x55556f72b650) = 86 [pid 765] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 765] setpgid(0, 0) = 0 [pid 765] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 765] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 765] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 765] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 765] write(3, "1000", 4) = 4 [pid 765] close(3) = 0 [pid 765] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 765] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 765] write(1, "executing program\n", 18) = 18 [pid 765] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 765] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 765] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 765] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 765] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 765] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 765] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 765] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 765] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 765] memfd_create("syzkaller", 0) = 5 [pid 765] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 765] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 765] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 765] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 765] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 765] close(5) = 0 [pid 765] close(6) = 0 [pid 765] mkdir("./file0", 0777) = 0 [pid 765] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 765] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 765] chdir("./file0") = 0 [pid 765] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 765] ioctl(6, LOOP_CLR_FD) = 0 [pid 765] close(6) = 0 [pid 765] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 765] write(6, "#! ./file1\n", 11) = 11 [pid 765] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 765] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 765] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=86, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./84", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 45.197837][ T765] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 45.214422][ T765] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz-executor243: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./84/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./84/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./84/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./84/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./84/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./84/file0") = 0 [pid 343] umount2("./84/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./84/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./84/binderfs") = 0 [pid 343] umount2("./84/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./84/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./84/cgroup.net") = 0 [pid 343] umount2("./84/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./84/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./84/cgroup.cpu") = 0 [pid 343] umount2("./84/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./84/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./84/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./84") = 0 [pid 343] mkdir("./85", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) executing program [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556f72b650) = 87 ./strace-static-x86_64: Process 770 attached [pid 770] set_robust_list(0x55556f72b660, 24) = 0 [pid 770] chdir("./85") = 0 [pid 770] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 770] setpgid(0, 0) = 0 [pid 770] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 770] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 770] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 770] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 770] write(3, "1000", 4) = 4 [pid 770] close(3) = 0 [pid 770] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 770] symlink("/dev/binderfs", "./binderfs") = 0 [pid 770] write(1, "executing program\n", 18) = 18 [pid 770] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 770] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 770] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 770] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 770] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 770] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 770] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 770] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 770] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 770] memfd_create("syzkaller", 0) = 5 [pid 770] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 770] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 770] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 770] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 770] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 770] close(5) = 0 [pid 770] close(6) = 0 [pid 770] mkdir("./file0", 0777) = 0 [pid 770] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 770] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 770] chdir("./file0") = 0 [pid 770] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 770] ioctl(6, LOOP_CLR_FD) = 0 [pid 770] close(6) = 0 [pid 770] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 770] write(6, "#! ./file1\n", 11) = 11 [pid 770] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 770] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 770] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=87, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./85", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 45.337715][ T770] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 45.354566][ T770] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz-executor243: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./85/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./85/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./85/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./85/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./85/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./85/file0") = 0 [pid 343] umount2("./85/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./85/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./85/binderfs") = 0 [pid 343] umount2("./85/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./85/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./85/cgroup.net") = 0 [pid 343] umount2("./85/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./85/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./85/cgroup.cpu") = 0 [pid 343] umount2("./85/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./85/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./85/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./85") = 0 [pid 343] mkdir("./86", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 775 attached [pid 775] set_robust_list(0x55556f72b660, 24) = 0 [pid 775] chdir("./86") = 0 [pid 343] <... clone resumed>, child_tidptr=0x55556f72b650) = 88 [pid 775] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 775] setpgid(0, 0) = 0 [pid 775] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 775] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 775] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 775] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 775] write(3, "1000", 4) = 4 [pid 775] close(3) = 0 [pid 775] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 775] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 775] write(1, "executing program\n", 18) = 18 [pid 775] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 775] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 775] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 775] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 775] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 775] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 775] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 775] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 775] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 775] memfd_create("syzkaller", 0) = 5 [pid 775] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 775] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 775] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 775] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 775] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 775] close(5) = 0 [pid 775] close(6) = 0 [pid 775] mkdir("./file0", 0777) = 0 [pid 775] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 775] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 775] chdir("./file0") = 0 [pid 775] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 775] ioctl(6, LOOP_CLR_FD) = 0 [pid 775] close(6) = 0 [pid 775] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 775] write(6, "#! ./file1\n", 11) = 11 [pid 775] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 775] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 775] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=88, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./86", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 45.521458][ T775] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 45.540439][ T776] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-775: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./86/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./86/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./86/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./86/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./86/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./86/file0") = 0 [pid 343] umount2("./86/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./86/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./86/binderfs") = 0 [pid 343] umount2("./86/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./86/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./86/cgroup.net") = 0 [pid 343] umount2("./86/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./86/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./86/cgroup.cpu") = 0 [pid 343] umount2("./86/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./86/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./86/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./86") = 0 [pid 343] mkdir("./87", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 780 attached [pid 780] set_robust_list(0x55556f72b660, 24) = 0 [pid 780] chdir("./87") = 0 [pid 780] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 780] setpgid(0, 0) = 0 [pid 780] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 343] <... clone resumed>, child_tidptr=0x55556f72b650) = 89 [pid 780] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 780] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 780] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 780] write(3, "1000", 4) = 4 [pid 780] close(3) = 0 [pid 780] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 780] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 780] write(1, "executing program\n", 18) = 18 [pid 780] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 780] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 780] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 780] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 780] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 780] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 780] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 780] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 780] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 780] memfd_create("syzkaller", 0) = 5 [pid 780] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 780] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 780] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 780] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 780] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 780] close(5) = 0 [pid 780] close(6) = 0 [pid 780] mkdir("./file0", 0777) = 0 [pid 780] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 780] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 780] chdir("./file0") = 0 [pid 780] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 780] ioctl(6, LOOP_CLR_FD) = 0 [pid 780] close(6) = 0 [pid 780] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 780] write(6, "#! ./file1\n", 11) = 11 [pid 780] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 780] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 780] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=89, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./87", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 45.726481][ T780] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 45.745488][ T781] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-780: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./87/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./87/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./87/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./87/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./87/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./87/file0") = 0 [pid 343] umount2("./87/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./87/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./87/binderfs") = 0 [pid 343] umount2("./87/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./87/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./87/cgroup.net") = 0 [pid 343] umount2("./87/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./87/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./87/cgroup.cpu") = 0 [pid 343] umount2("./87/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./87/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./87/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./87") = 0 [pid 343] mkdir("./88", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 785 attached [pid 785] set_robust_list(0x55556f72b660, 24) = 0 [pid 785] chdir("./88") = 0 [pid 785] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 785] setpgid(0, 0) = 0 [pid 785] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 785] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 785] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 785] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 785] write(3, "1000", 4) = 4 [pid 785] close(3) = 0 [pid 785] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 785] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 785] write(1, "executing program\n", 18) = 18 [pid 785] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 785] ioctl(3, VHOST_SET_OWNER [pid 343] <... clone resumed>, child_tidptr=0x55556f72b650) = 90 [pid 785] <... ioctl resumed>, 0) = 0 [pid 785] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 785] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 785] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 785] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 785] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 785] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 785] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 785] memfd_create("syzkaller", 0) = 5 [pid 785] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 785] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 785] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 785] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 785] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 785] close(5) = 0 [pid 785] close(6) = 0 [pid 785] mkdir("./file0", 0777) = 0 [pid 785] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 785] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 785] chdir("./file0") = 0 [pid 785] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 785] ioctl(6, LOOP_CLR_FD) = 0 [pid 785] close(6) = 0 [pid 785] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 785] write(6, "#! ./file1\n", 11) = 11 [pid 785] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 785] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 785] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=90, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./88", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 45.862663][ T785] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 45.879858][ T785] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz-executor243: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./88/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./88/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./88/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./88/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./88/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./88/file0") = 0 [pid 343] umount2("./88/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./88/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./88/binderfs") = 0 [pid 343] umount2("./88/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./88/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./88/cgroup.net") = 0 [pid 343] umount2("./88/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./88/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./88/cgroup.cpu") = 0 [pid 343] umount2("./88/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./88/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./88/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./88") = 0 [pid 343] mkdir("./89", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 790 attached [pid 790] set_robust_list(0x55556f72b660, 24) = 0 [pid 790] chdir("./89") = 0 [pid 790] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 790] setpgid(0, 0) = 0 [pid 790] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 343] <... clone resumed>, child_tidptr=0x55556f72b650) = 91 [pid 790] <... symlink resumed>) = 0 [pid 790] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 790] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 790] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 790] write(3, "1000", 4) = 4 [pid 790] close(3) = 0 [pid 790] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 790] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 790] write(1, "executing program\n", 18) = 18 [pid 790] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 790] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 790] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 790] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 790] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 790] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 790] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 790] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 790] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 790] memfd_create("syzkaller", 0) = 5 [pid 790] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 790] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 790] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 790] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 790] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 790] close(5) = 0 [pid 790] close(6) = 0 [pid 790] mkdir("./file0", 0777) = 0 [pid 790] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 790] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 790] chdir("./file0") = 0 [pid 790] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 790] ioctl(6, LOOP_CLR_FD) = 0 [pid 790] close(6) = 0 [pid 790] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 790] write(6, "#! ./file1\n", 11) = 11 [pid 790] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 790] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 790] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=91, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./89", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 45.995692][ T790] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 46.015270][ T791] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-790: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./89/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./89/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./89/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./89/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./89/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./89/file0") = 0 [pid 343] umount2("./89/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./89/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./89/binderfs") = 0 [pid 343] umount2("./89/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./89/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./89/cgroup.net") = 0 [pid 343] umount2("./89/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./89/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./89/cgroup.cpu") = 0 [pid 343] umount2("./89/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./89/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./89/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./89") = 0 [pid 343] mkdir("./90", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556f72b650) = 92 ./strace-static-x86_64: Process 795 attached [pid 795] set_robust_list(0x55556f72b660, 24) = 0 [pid 795] chdir("./90") = 0 [pid 795] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 795] setpgid(0, 0) = 0 [pid 795] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 795] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 795] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 795] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 795] write(3, "1000", 4) = 4 [pid 795] close(3) = 0 [pid 795] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 795] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 795] write(1, "executing program\n", 18) = 18 [pid 795] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 795] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 795] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 795] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 795] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 795] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 795] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 795] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 795] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 795] memfd_create("syzkaller", 0) = 5 [pid 795] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 795] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 795] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 795] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 795] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 795] close(5) = 0 [pid 795] close(6) = 0 [pid 795] mkdir("./file0", 0777) = 0 [pid 795] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 795] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 795] chdir("./file0") = 0 [pid 795] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 795] ioctl(6, LOOP_CLR_FD) = 0 [pid 795] close(6) = 0 [pid 795] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 795] write(6, "#! ./file1\n", 11) = 11 [pid 795] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 795] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 795] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=92, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./90", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 46.156470][ T795] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz-executor243: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./90/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./90/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./90/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./90/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./90/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./90/file0") = 0 [pid 343] umount2("./90/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./90/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./90/binderfs") = 0 [pid 343] umount2("./90/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./90/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./90/cgroup.net") = 0 [pid 343] umount2("./90/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./90/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./90/cgroup.cpu") = 0 [pid 343] umount2("./90/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./90/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./90/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./90") = 0 [pid 343] mkdir("./91", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 800 attached [pid 800] set_robust_list(0x55556f72b660, 24) = 0 [pid 800] chdir("./91") = 0 [pid 343] <... clone resumed>, child_tidptr=0x55556f72b650) = 93 [pid 800] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 800] setpgid(0, 0) = 0 [pid 800] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 800] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 800] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 800] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 800] write(3, "1000", 4) = 4 [pid 800] close(3) = 0 [pid 800] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 800] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 800] write(1, "executing program\n", 18) = 18 [pid 800] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 800] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 800] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 800] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 800] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 800] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 800] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 800] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 800] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 800] memfd_create("syzkaller", 0) = 5 [pid 800] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 800] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 800] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 800] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 800] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 800] close(5) = 0 [pid 800] close(6) = 0 [pid 800] mkdir("./file0", 0777) = 0 [pid 800] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 800] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 800] chdir("./file0") = 0 [pid 800] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 800] ioctl(6, LOOP_CLR_FD) = 0 [pid 800] close(6) = 0 [pid 800] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 800] write(6, "#! ./file1\n", 11) = 11 [pid 800] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 800] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 800] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=93, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./91", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 46.469083][ T801] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-800: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./91/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./91/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./91/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./91/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./91/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./91/file0") = 0 [pid 343] umount2("./91/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./91/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./91/binderfs") = 0 [pid 343] umount2("./91/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./91/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./91/cgroup.net") = 0 [pid 343] umount2("./91/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./91/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./91/cgroup.cpu") = 0 [pid 343] umount2("./91/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./91/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./91/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./91") = 0 [pid 343] mkdir("./92", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556f72b650) = 94 ./strace-static-x86_64: Process 805 attached [pid 805] set_robust_list(0x55556f72b660, 24) = 0 [pid 805] chdir("./92") = 0 [pid 805] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 805] setpgid(0, 0) = 0 [pid 805] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 805] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 805] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 805] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 805] write(3, "1000", 4) = 4 [pid 805] close(3) = 0 [pid 805] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 805] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 805] write(1, "executing program\n", 18) = 18 [pid 805] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 805] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 805] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 805] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 805] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 805] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 805] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 805] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 805] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 805] memfd_create("syzkaller", 0) = 5 [pid 805] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 805] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 805] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 805] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 805] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 805] close(5) = 0 [pid 805] close(6) = 0 [pid 805] mkdir("./file0", 0777) = 0 [pid 805] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 805] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 805] chdir("./file0") = 0 [pid 805] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 805] ioctl(6, LOOP_CLR_FD) = 0 [pid 805] close(6) = 0 [pid 805] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 805] write(6, "#! ./file1\n", 11) = 11 [pid 805] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 805] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 805] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=94, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./92", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./92", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 46.667924][ T806] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-805: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./92/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./92/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./92/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./92/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./92/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./92/file0") = 0 [pid 343] umount2("./92/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./92/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./92/binderfs") = 0 [pid 343] umount2("./92/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./92/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./92/cgroup.net") = 0 [pid 343] umount2("./92/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./92/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./92/cgroup.cpu") = 0 [pid 343] umount2("./92/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./92/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./92/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./92") = 0 [pid 343] mkdir("./93", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556f72b650) = 95 ./strace-static-x86_64: Process 810 attached [pid 810] set_robust_list(0x55556f72b660, 24) = 0 [pid 810] chdir("./93") = 0 [pid 810] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 810] setpgid(0, 0) = 0 [pid 810] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 810] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 810] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 810] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 810] write(3, "1000", 4) = 4 [pid 810] close(3) = 0 [pid 810] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 810] symlink("/dev/binderfs", "./binderfs") = 0 [pid 810] write(1, "executing program\n", 18executing program ) = 18 [pid 810] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 810] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 810] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 810] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 810] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 810] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 810] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 810] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 810] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 810] memfd_create("syzkaller", 0) = 5 [pid 810] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 810] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 810] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 810] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 810] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 810] close(5) = 0 [pid 810] close(6) = 0 [pid 810] mkdir("./file0", 0777) = 0 [pid 810] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 810] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 810] chdir("./file0") = 0 [pid 810] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 810] ioctl(6, LOOP_CLR_FD) = 0 [pid 810] close(6) = 0 [pid 810] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 810] write(6, "#! ./file1\n", 11) = 11 [pid 810] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 810] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 810] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=95, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./93", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./93", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 47.007469][ T811] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-810: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./93/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./93/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./93/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./93/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./93/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./93/file0") = 0 [pid 343] umount2("./93/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./93/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./93/binderfs") = 0 [pid 343] umount2("./93/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./93/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./93/cgroup.net") = 0 [pid 343] umount2("./93/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./93/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./93/cgroup.cpu") = 0 [pid 343] umount2("./93/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./93/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./93/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./93") = 0 [pid 343] mkdir("./94", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 815 attached , child_tidptr=0x55556f72b650) = 96 [pid 815] set_robust_list(0x55556f72b660, 24) = 0 [pid 815] chdir("./94") = 0 [pid 815] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 815] setpgid(0, 0) = 0 [pid 815] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 815] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 815] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 815] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 815] write(3, "1000", 4) = 4 [pid 815] close(3) = 0 [pid 815] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 815] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 815] write(1, "executing program\n", 18) = 18 [pid 815] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 815] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 815] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 815] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 815] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 815] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 815] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 815] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 815] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 815] memfd_create("syzkaller", 0) = 5 [pid 815] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 815] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 815] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 815] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 815] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 815] close(5) = 0 [pid 815] close(6) = 0 [pid 815] mkdir("./file0", 0777) = 0 [pid 815] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 815] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 815] chdir("./file0") = 0 [pid 815] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 815] ioctl(6, LOOP_CLR_FD) = 0 [pid 815] close(6) = 0 [pid 815] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 815] write(6, "#! ./file1\n", 11) = 11 [pid 815] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 815] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 815] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=96, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./94", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./94", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 47.167329][ T815] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz-executor243: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./94/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./94/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./94/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./94/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./94/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./94/file0") = 0 [pid 343] umount2("./94/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./94/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./94/binderfs") = 0 [pid 343] umount2("./94/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./94/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./94/cgroup.net") = 0 [pid 343] umount2("./94/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./94/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./94/cgroup.cpu") = 0 [pid 343] umount2("./94/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./94/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./94/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./94") = 0 [pid 343] mkdir("./95", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 820 attached , child_tidptr=0x55556f72b650) = 97 [pid 820] set_robust_list(0x55556f72b660, 24) = 0 [pid 820] chdir("./95") = 0 [pid 820] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 820] setpgid(0, 0) = 0 [pid 820] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 820] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 820] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 820] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 820] write(3, "1000", 4) = 4 [pid 820] close(3) = 0 [pid 820] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 820] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 820] write(1, "executing program\n", 18) = 18 [pid 820] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 820] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 820] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 820] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 820] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 820] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 820] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 820] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 820] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 820] memfd_create("syzkaller", 0) = 5 [pid 820] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 820] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 820] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 820] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 820] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 820] close(5) = 0 [pid 820] close(6) = 0 [pid 820] mkdir("./file0", 0777) = 0 [pid 820] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 820] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 820] chdir("./file0") = 0 [pid 820] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 820] ioctl(6, LOOP_CLR_FD) = 0 [pid 820] close(6) = 0 [pid 820] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 820] write(6, "#! ./file1\n", 11) = 11 [pid 820] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 820] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 820] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=97, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./95", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./95", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 47.379329][ T821] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-820: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./95/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./95/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./95/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./95/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./95/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./95/file0") = 0 [pid 343] umount2("./95/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./95/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./95/binderfs") = 0 [pid 343] umount2("./95/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./95/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./95/cgroup.net") = 0 [pid 343] umount2("./95/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./95/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./95/cgroup.cpu") = 0 [pid 343] umount2("./95/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./95/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./95/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./95") = 0 [pid 343] mkdir("./96", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FDexecuting program ) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 825 attached [pid 825] set_robust_list(0x55556f72b660, 24 [pid 343] <... clone resumed>, child_tidptr=0x55556f72b650) = 98 [pid 825] <... set_robust_list resumed>) = 0 [pid 825] chdir("./96") = 0 [pid 825] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 825] setpgid(0, 0) = 0 [pid 825] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 825] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 825] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 825] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 825] write(3, "1000", 4) = 4 [pid 825] close(3) = 0 [pid 825] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 825] symlink("/dev/binderfs", "./binderfs") = 0 [pid 825] write(1, "executing program\n", 18) = 18 [pid 825] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 825] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 825] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 825] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 825] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 825] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 825] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 825] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 825] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 825] memfd_create("syzkaller", 0) = 5 [pid 825] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 825] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 825] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 825] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 825] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 825] close(5) = 0 [pid 825] close(6) = 0 [pid 825] mkdir("./file0", 0777) = 0 [pid 825] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 825] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 825] chdir("./file0") = 0 [pid 825] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 825] ioctl(6, LOOP_CLR_FD) = 0 [pid 825] close(6) = 0 [pid 825] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 825] write(6, "#! ./file1\n", 11) = 11 [pid 825] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 825] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 825] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=98, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./96", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./96", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 47.510219][ T826] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-825: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./96/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./96/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./96/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./96/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./96/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./96/file0") = 0 [pid 343] umount2("./96/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./96/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./96/binderfs") = 0 [pid 343] umount2("./96/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./96/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./96/cgroup.net") = 0 [pid 343] umount2("./96/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./96/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./96/cgroup.cpu") = 0 [pid 343] umount2("./96/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./96/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./96/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./96") = 0 [pid 343] mkdir("./97", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556f72b650) = 99 ./strace-static-x86_64: Process 830 attached [pid 830] set_robust_list(0x55556f72b660, 24) = 0 [pid 830] chdir("./97") = 0 [pid 830] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 830] setpgid(0, 0) = 0 [pid 830] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 830] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 830] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 830] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 830] write(3, "1000", 4) = 4 [pid 830] close(3) = 0 [pid 830] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 830] symlink("/dev/binderfs", "./binderfs") = 0 [pid 830] write(1, "executing program\n", 18executing program ) = 18 [pid 830] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 830] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 830] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 830] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 830] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 830] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 830] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 830] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 830] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 830] memfd_create("syzkaller", 0) = 5 [pid 830] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 830] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 830] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 830] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 830] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 830] close(5) = 0 [pid 830] close(6) = 0 [pid 830] mkdir("./file0", 0777) = 0 [pid 830] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 830] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 830] chdir("./file0") = 0 [pid 830] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 830] ioctl(6, LOOP_CLR_FD) = 0 [pid 830] close(6) = 0 [pid 830] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 830] write(6, "#! ./file1\n", 11) = 11 [pid 830] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 830] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x2000000006c4} --- [pid 830] +++ killed by SIGBUS (core dumped) +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=99, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=0} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./97", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./97", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 47.699118][ T831] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-830: bg 0: block 234: padding at end of block bitmap is not set [pid 343] umount2("./97/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 343] umount2("./97/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./97/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] umount2("./97/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./97/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 343] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(4, 0x55556f734730 /* 2 entries */, 32768) = 48 [pid 343] getdents64(4, 0x55556f734730 /* 0 entries */, 32768) = 0 [pid 343] close(4) = 0 [pid 343] rmdir("./97/file0") = 0 [pid 343] umount2("./97/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./97/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./97/binderfs") = 0 [pid 343] umount2("./97/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./97/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./97/cgroup.net") = 0 [pid 343] umount2("./97/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./97/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./97/cgroup.cpu") = 0 [pid 343] umount2("./97/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] newfstatat(AT_FDCWD, "./97/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] unlink("./97/cgroup") = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 0 entries */, 32768) = 0 [pid 343] close(3) = 0 [pid 343] rmdir("./97") = 0 [pid 343] mkdir("./98", 0777) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 343] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 343] close(3) = 0 [pid 343] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 835 attached [pid 835] set_robust_list(0x55556f72b660, 24 [pid 343] <... clone resumed>, child_tidptr=0x55556f72b650) = 100 [pid 835] <... set_robust_list resumed>) = 0 [pid 835] chdir("./98") = 0 [pid 835] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 835] setpgid(0, 0) = 0 [pid 835] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 835] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 835] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 835] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 835] write(3, "1000", 4) = 4 [pid 835] close(3) = 0 [pid 835] read(200, 0x7ffde2569890, 1000) = -1 EAGAIN (Resource temporarily unavailable) executing program [pid 835] symlink("/dev/binderfs", "./binderfs") = 0 [pid 835] write(1, "executing program\n", 18) = 18 [pid 835] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 835] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 835] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000300) = 0 [pid 835] ioctl(3, VHOST_SET_MEM_TABLE, 0x200000003380) = 0 [pid 835] eventfd2(118, EFD_SEMAPHORE) = 4 [pid 835] ioctl(3, VHOST_SET_VRING_ERR, 0x2000000001c0) = 0 [pid 835] ioctl(3, VHOST_SET_VRING_ADDR, 0x200000000240) = 0 [pid 835] ioctl(3, VHOST_SET_VRING_KICK, 0x200000000000) = 0 [pid 835] ioctl(3, VHOST_VSOCK_SET_RUNNING, 0x200000000140) = 0 [pid 835] memfd_create("syzkaller", 0) = 5 [pid 835] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca8e8ff000 [pid 835] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 835] munmap(0x7fca8e8ff000, 138412032) = 0 [pid 835] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 835] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 835] close(5) = 0 [pid 835] close(6) = 0 [pid 835] mkdir("./file0", 0777) = 0 [pid 835] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_STRICTATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 835] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 835] chdir("./file0") = 0 [pid 835] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 835] ioctl(6, LOOP_CLR_FD) = 0 [pid 835] close(6) = 0 [pid 835] openat(AT_FDCWD, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 835] write(6, "#! ./file1\n", 11) = 11 [pid 835] mmap(0x200000000000, 11755520, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSUP|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 835] epoll_ctl(-1, EPOLL_CTL_ADD, 6, {events=EPOLLOUT|EPOLLEXCLUSIVE|EPOLLET, data={u32=0, u64=0}}) = -1 EBADF (Bad file descriptor) [pid 835] close(3) = 0 [pid 835] close(4) = 0 [pid 835] close(5) = 0 [pid 835] close(6) = 0 [pid 835] close(7) = -1 EBADF (Bad file descriptor) [pid 835] close(8) = -1 EBADF (Bad file descriptor) [pid 835] close(9) = -1 EBADF (Bad file descriptor) [pid 835] close(10) = -1 EBADF (Bad file descriptor) [pid 835] close(11) = -1 EBADF (Bad file descriptor) [pid 835] close(12) = -1 EBADF (Bad file descriptor) [pid 835] close(13) = -1 EBADF (Bad file descriptor) [pid 835] close(14) = -1 EBADF (Bad file descriptor) [pid 835] close(15) = -1 EBADF (Bad file descriptor) [pid 835] close(16) = -1 EBADF (Bad file descriptor) [pid 835] close(17) = -1 EBADF (Bad file descriptor) [pid 835] close(18) = -1 EBADF (Bad file descriptor) [pid 835] close(19) = -1 EBADF (Bad file descriptor) [pid 835] close(20) = -1 EBADF (Bad file descriptor) [pid 835] close(21) = -1 EBADF (Bad file descriptor) [pid 835] close(22) = -1 EBADF (Bad file descriptor) [pid 835] close(23) = -1 EBADF (Bad file descriptor) [pid 835] close(24) = -1 EBADF (Bad file descriptor) [pid 835] close(25) = -1 EBADF (Bad file descriptor) [pid 835] close(26) = -1 EBADF (Bad file descriptor) [pid 835] close(27) = -1 EBADF (Bad file descriptor) [pid 835] close(28) = -1 EBADF (Bad file descriptor) [pid 835] close(29) = -1 EBADF (Bad file descriptor) [pid 835] exit_group(0) = ? [pid 835] +++ exited with 0 +++ [pid 343] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=100, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 343] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 343] umount2("./98", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "./98", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 343] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 343] getdents64(3, 0x55556f72c6f0 /* 7 entries */, 32768) = 208 [ 47.908216][ T836] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm vhost-835: bg 0: block 234: padding at end of block bitmap is not set [ 47.940303][ T7] ------------[ cut here ]------------ [ 47.945788][ T7] kernel BUG at fs/ext4/inode.c:2844! [ 47.951806][ T7] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 47.957869][ T7] CPU: 1 PID: 7 Comm: kworker/u4:0 Not tainted 5.4.292-syzkaller-00021-gcd8e74fa0fa3 #0 [ 47.967706][ T7] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 47.977780][ T7] Workqueue: writeback wb_workfn (flush-7:0) [ 47.983763][ T7] RIP: 0010:ext4_writepages+0x2f83/0x2fb0 [ 47.989461][ T7] Code: 0f 94 c6 bf 02 00 00 00 e8 6a 29 a1 ff 84 db 75 2e e8 11 27 a1 ff 49 bc 00 00 00 00 00 fc ff df e9 47 f9 ff ff e8 fd 26 a1 ff <0f> 0b e8 f6 26 a1 ff 0f 0b e8 ef 26 a1 ff e8 ba ef 41 ff eb 9b e8 [ 48.009053][ T7] RSP: 0018:ffff8881f5db71a0 EFLAGS: 00010293 [ 48.015110][ T7] RAX: ffffffff81be57e3 RBX: 0000010410000000 RCX: ffff8881f5d6cec0 [ 48.023066][ T7] RDX: 0000000000000000 RSI: 0000010000000000 RDI: 0000000000000000 [ 48.031019][ T7] RBP: ffff8881f5db74f0 R08: dffffc0000000000 R09: ffffed103b9e700b [ 48.038972][ T7] R10: ffffed103b9e700b R11: 1ffff1103b9e700a R12: dffffc0000000000 [ 48.046922][ T7] R13: ffff8881f5db7810 R14: 0000010000000000 R15: ffff8881dcf38128 [ 48.054874][ T7] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 48.064040][ T7] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.070606][ T7] CR2: 000055556f7346f8 CR3: 00000001ddf2b000 CR4: 00000000003406a0 [ 48.078554][ T7] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 48.086506][ T7] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 48.094451][ T7] Call Trace: [ 48.097723][ T7] ? __kasan_check_read+0x11/0x20 [ 48.102731][ T7] ? __find_get_block+0xab4/0xe90 [ 48.107742][ T7] ? write_boundary_block+0x140/0x140 [ 48.113113][ T7] ? ext4_readpage+0x310/0x310 [ 48.117897][ T7] ? __getblk_gfp+0x3b/0x760 [ 48.122469][ T7] ? debug_smp_processor_id+0x20/0x20 [ 48.127822][ T7] ? ext4_get_group_desc+0x249/0x2a0 [ 48.133095][ T7] ? debug_smp_processor_id+0x20/0x20 [ 48.138446][ T7] ? ext4_readpage+0x310/0x310 [ 48.143187][ T7] do_writepages+0x127/0x270 [ 48.147754][ T7] ? debug_smp_processor_id+0x20/0x20 [ 48.153104][ T7] ? __writepage+0x120/0x120 [ 48.157675][ T7] ? __kasan_check_write+0x14/0x20 [ 48.162776][ T7] ? _raw_spin_lock+0x8e/0xe0 [ 48.167431][ T7] ? __kasan_check_write+0x14/0x20 [ 48.172519][ T7] ? _raw_spin_lock+0x8e/0xe0 [ 48.177186][ T7] __writeback_single_inode+0xd9/0xc30 [ 48.182620][ T7] ? wbc_attach_and_unlock_inode+0x175/0x5b0 [ 48.188585][ T7] writeback_sb_inodes+0x94f/0x1700 [ 48.193762][ T7] ? _raw_spin_lock+0x8e/0xe0 [ 48.198420][ T7] ? queue_io+0x4e0/0x4e0 [ 48.202749][ T7] ? __kasan_check_read+0x11/0x20 [ 48.207780][ T7] wb_writeback+0x3e1/0xc20 [ 48.212288][ T7] ? wb_io_lists_depopulated+0x170/0x170 [ 48.217916][ T7] ? check_preemption_disabled+0x9b/0x300 [ 48.223626][ T7] ? debug_smp_processor_id+0x20/0x20 [ 48.228997][ T7] ? __kasan_check_write+0x14/0x20 [ 48.234124][ T7] ? check_preemption_disabled+0x9b/0x300 [ 48.239837][ T7] wb_workfn+0x375/0xf90 [ 48.244086][ T7] ? inode_wait_for_writeback+0x200/0x200 [ 48.249892][ T7] ? _raw_spin_unlock_irq+0x4e/0x70 [ 48.255175][ T7] ? finish_task_switch+0x12e/0x590 [ 48.260411][ T7] ? __schedule+0xa57/0x12a0 [ 48.265001][ T7] ? __kasan_check_read+0x11/0x20 [ 48.270054][ T7] ? read_word_at_a_time+0x12/0x20 [ 48.275150][ T7] ? strscpy+0x9b/0x290 [ 48.279295][ T7] process_one_work+0x73b/0xcc0 [ 48.284135][ T7] worker_thread+0xa5c/0x13b0 [ 48.288893][ T7] ? __kasan_check_read+0x11/0x20 [ 48.294016][ T7] kthread+0x31e/0x3a0 [ 48.298060][ T7] ? worker_clr_flags+0x190/0x190 [ 48.303059][ T7] ? kthread_blkcg+0xd0/0xd0 [ 48.307648][ T7] ret_from_fork+0x1f/0x30 [ 48.312059][ T7] Modules linked in: [ 48.316579][ T7] ---[ end trace 3f4feebcf0f4988a ]--- [ 48.322077][ T7] RIP: 0010:ext4_writepages+0x2f83/0x2fb0 [ 48.327919][ T7] Code: 0f 94 c6 bf 02 00 00 00 e8 6a 29 a1 ff 84 db 75 2e e8 11 27 a1 ff 49 bc 00 00 00 00 00 fc ff df e9 47 f9 ff ff e8 fd 26 a1 ff <0f> 0b e8 f6 26 a1 ff 0f 0b e8 ef 26 a1 ff e8 ba ef 41 ff eb 9b e8 [ 48.348509][ T7] RSP: 0018:ffff8881f5db71a0 EFLAGS: 00010293 [ 48.354571][ T7] RAX: ffffffff81be57e3 RBX: 0000010410000000 RCX: ffff8881f5d6cec0 [ 48.362549][ T7] RDX: 0000000000000000 RSI: 0000010000000000 RDI: 0000000000000000 [ 48.370554][ T7] RBP: ffff8881f5db74f0 R08: dffffc0000000000 R09: ffffed103b9e700b [ 48.378575][ T7] R10: ffffed103b9e700b R11: 1ffff1103b9e700a R12: dffffc0000000000 [ 48.386564][ T7] R13: ffff8881f5db7810 R14: 0000010000000000 R15: ffff8881dcf38128 [ 48.394518][ T7] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 48.403501][ T7] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.410216][ T7] CR2: 000055556f7346f8 CR3: 0000000005c0e000 CR4: 00000000003406a0 [ 48.418308][ T7] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 48.426310][ T7] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 48.434480][ T7] Kernel panic - not syncing: Fatal exception [ 48.440755][ T7] Kernel Offset: disabled [ 48.445079][ T7] Rebooting in 86400 seconds..