./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1373413451 <...> Warning: Permanently added '10.128.1.158' (ED25519) to the list of known hosts. execve("./syz-executor1373413451", ["./syz-executor1373413451"], 0x7ffef8cb8720 /* 10 vars */) = 0 brk(NULL) = 0x5555598f0000 brk(0x5555598f0d40) = 0x5555598f0d40 arch_prctl(ARCH_SET_FS, 0x5555598f03c0) = 0 set_tid_address(0x5555598f0690) = 5089 set_robust_list(0x5555598f06a0, 24) = 0 rseq(0x5555598f0ce0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1373413451", 4096) = 28 getrandom("\x34\x2f\x2f\x54\xf9\xa2\xa8\x22", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555598f0d40 brk(0x555559911d40) = 0x555559911d40 brk(0x555559912000) = 0x555559912000 mprotect(0x7f135b5b8000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5090 attached , child_tidptr=0x5555598f0690) = 5090 [pid 5090] set_robust_list(0x5555598f06a0, 24) = 0 [pid 5089] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5090] mkdir("./syzkaller.DWn4bu", 0700./strace-static-x86_64: Process 5091 attached [pid 5089] <... clone resumed>, child_tidptr=0x5555598f0690) = 5091 [pid 5090] <... mkdir resumed>) = 0 [pid 5089] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5091] set_robust_list(0x5555598f06a0, 24 [pid 5090] chmod("./syzkaller.DWn4bu", 0777 [pid 5091] <... set_robust_list resumed>) = 0 [pid 5091] mkdir("./syzkaller.IDkdgG", 0700 [pid 5090] <... chmod resumed>) = 0 [pid 5090] chdir("./syzkaller.DWn4bu") = 0 [pid 5091] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5092 attached [pid 5089] <... clone resumed>, child_tidptr=0x5555598f0690) = 5092 [pid 5090] mkdir("./0", 0777 [pid 5089] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5092] set_robust_list(0x5555598f06a0, 24 [pid 5091] chmod("./syzkaller.IDkdgG", 0777 [pid 5090] <... mkdir resumed>) = 0 [pid 5092] <... set_robust_list resumed>) = 0 [pid 5091] <... chmod resumed>) = 0 [pid 5090] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5092] mkdir("./syzkaller.2gp02f", 0700 [pid 5091] chdir("./syzkaller.IDkdgG"./strace-static-x86_64: Process 5093 attached [pid 5092] <... mkdir resumed>) = 0 [pid 5091] <... chdir resumed>) = 0 [pid 5090] <... openat resumed>) = 3 [pid 5089] <... clone resumed>, child_tidptr=0x5555598f0690) = 5093 [pid 5092] chmod("./syzkaller.2gp02f", 0777 [pid 5091] mkdir("./0", 0777 [pid 5089] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5093] set_robust_list(0x5555598f06a0, 24 [pid 5090] ioctl(3, LOOP_CLR_FD [pid 5093] <... set_robust_list resumed>) = 0 [pid 5092] <... chmod resumed>) = 0 [pid 5091] <... mkdir resumed>) = 0 [pid 5090] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 5094 attached [pid 5093] mkdir("./syzkaller.ojpkej", 0700 [pid 5092] chdir("./syzkaller.2gp02f" [pid 5091] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5090] close(3 [pid 5089] <... clone resumed>, child_tidptr=0x5555598f0690) = 5094 [pid 5094] set_robust_list(0x5555598f06a0, 24 [pid 5089] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5094] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 5095 attached [pid 5094] mkdir("./syzkaller.g3ZpV4", 0700 [pid 5093] <... mkdir resumed>) = 0 [pid 5092] <... chdir resumed>) = 0 [pid 5091] <... openat resumed>) = 3 [pid 5090] <... close resumed>) = 0 [pid 5094] <... mkdir resumed>) = 0 [pid 5089] <... clone resumed>, child_tidptr=0x5555598f0690) = 5095 [pid 5095] set_robust_list(0x5555598f06a0, 24 [pid 5093] chmod("./syzkaller.ojpkej", 0777 [pid 5092] mkdir("./0", 0777 [pid 5091] ioctl(3, LOOP_CLR_FD [pid 5090] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5094] chmod("./syzkaller.g3ZpV4", 0777 [pid 5093] <... chmod resumed>) = 0 [pid 5091] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5094] <... chmod resumed>) = 0 ./strace-static-x86_64: Process 5096 attached [pid 5095] <... set_robust_list resumed>) = 0 [pid 5094] chdir("./syzkaller.g3ZpV4" [pid 5093] chdir("./syzkaller.ojpkej" [pid 5092] <... mkdir resumed>) = 0 [pid 5091] close(3) = 0 [pid 5091] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5096] set_robust_list(0x5555598f06a0, 24 [pid 5095] mkdir("./syzkaller.RtQM37", 0700 [pid 5094] <... chdir resumed>) = 0 [pid 5093] <... chdir resumed>) = 0 [pid 5092] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5090] <... clone resumed>, child_tidptr=0x5555598f0690) = 5096 [pid 5096] <... set_robust_list resumed>) = 0 [pid 5093] mkdir("./0", 0777 [pid 5096] chdir("./0"./strace-static-x86_64: Process 5097 attached ) = 0 [pid 5095] <... mkdir resumed>) = 0 [pid 5094] mkdir("./0", 0777 [pid 5093] <... mkdir resumed>) = 0 [pid 5092] <... openat resumed>) = 3 [pid 5096] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5091] <... clone resumed>, child_tidptr=0x5555598f0690) = 5097 [pid 5097] set_robust_list(0x5555598f06a0, 24) = 0 [pid 5097] chdir("./0") = 0 [pid 5096] <... prctl resumed>) = 0 [pid 5095] chmod("./syzkaller.RtQM37", 0777 [pid 5094] <... mkdir resumed>) = 0 [pid 5093] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5092] ioctl(3, LOOP_CLR_FD [pid 5097] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5097] setpgid(0, 0) = 0 [pid 5097] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5095] <... chmod resumed>) = 0 [pid 5096] setpgid(0, 0 [pid 5097] <... openat resumed>) = 3 [pid 5096] <... setpgid resumed>) = 0 [pid 5095] chdir("./syzkaller.RtQM37" [pid 5092] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5095] <... chdir resumed>) = 0 [pid 5096] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5095] mkdir("./0", 0777 [pid 5092] close(3 [pid 5097] write(3, "1000", 4) = 4 [pid 5097] close(3) = 0 [pid 5097] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5095] <... mkdir resumed>) = 0 [pid 5093] <... openat resumed>) = 3 [pid 5092] <... close resumed>) = 0 [pid 5097] futex(0x7f135b5be6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5096] <... openat resumed>) = 3 [pid 5092] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5097] <... futex resumed>) = 0 [pid 5097] rt_sigaction(SIGRT_1, {sa_handler=0x7f135b556fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f135b548190}, NULL, 8) = 0 [pid 5094] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5097] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5094] <... openat resumed>) = 3 [pid 5097] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5097] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f135b4c7000 [pid 5097] mprotect(0x7f135b4c8000, 131072, PROT_READ|PROT_WRITE [pid 5094] ioctl(3, LOOP_CLR_FD [pid 5096] write(3, "1000", 4 [pid 5093] ioctl(3, LOOP_CLR_FD [pid 5096] <... write resumed>) = 4 [pid 5097] <... mprotect resumed>) = 0 [pid 5096] close(3 [pid 5094] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5093] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5096] <... close resumed>) = 0 [pid 5095] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5093] close(3 [pid 5096] symlink("/dev/binderfs", "./binderfs" [pid 5097] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5094] close(3) = 0 [pid 5095] <... openat resumed>) = 3 [pid 5094] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5096] <... symlink resumed>) = 0 [pid 5095] ioctl(3, LOOP_CLR_FD [pid 5093] <... close resumed>) = 0 [pid 5097] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5097] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f135b4e7990, parent_tid=0x7f135b4e7990, exit_signal=0, stack=0x7f135b4c7000, stack_size=0x20300, tls=0x7f135b4e76c0}./strace-static-x86_64: Process 5098 attached [pid 5098] set_robust_list(0x5555598f06a0, 24 [pid 5097] <... clone3 resumed> => {parent_tid=[5099]}, 88) = 5099 ./strace-static-x86_64: Process 5099 attached [pid 5098] <... set_robust_list resumed>) = 0 [pid 5097] rt_sigprocmask(SIG_SETMASK, [], [pid 5099] rseq(0x7f135b4e7fe0, 0x20, 0, 0x53053053 [pid 5098] chdir("./0" [pid 5097] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 5100 attached [pid 5099] <... rseq resumed>) = 0 [pid 5098] <... chdir resumed>) = 0 [pid 5097] futex(0x7f135b5be6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] set_robust_list(0x5555598f06a0, 24 [pid 5099] set_robust_list(0x7f135b4e79a0, 24 [pid 5098] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5097] <... futex resumed>) = 0 [pid 5094] <... clone resumed>, child_tidptr=0x5555598f0690) = 5100 [pid 5100] <... set_robust_list resumed>) = 0 [pid 5099] <... set_robust_list resumed>) = 0 [pid 5098] <... prctl resumed>) = 0 [pid 5097] futex(0x7f135b5be6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5100] chdir("./0" [pid 5099] rt_sigprocmask(SIG_SETMASK, [], [pid 5098] setpgid(0, 0 [pid 5099] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5100] <... chdir resumed>) = 0 [pid 5098] <... setpgid resumed>) = 0 [pid 5100] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5098] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5095] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5093] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5092] <... clone resumed>, child_tidptr=0x5555598f0690) = 5098 [pid 5100] <... prctl resumed>) = 0 [pid 5099] memfd_create("syzkaller", 0 [pid 5096] futex(0x7f135b5be6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] setpgid(0, 0 [pid 5096] <... futex resumed>) = 0 [pid 5100] <... setpgid resumed>) = 0 [pid 5099] <... memfd_create resumed>) = 3 [pid 5098] <... openat resumed>) = 3 [pid 5096] rt_sigaction(SIGRT_1, {sa_handler=0x7f135b556fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f135b548190}, [pid 5100] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5096] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5099] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5096] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5095] close(3 [pid 5099] <... mmap resumed>) = 0x7f1353000000 [pid 5098] write(3, "1000", 4 [pid 5096] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5095] <... close resumed>) = 0 ./strace-static-x86_64: Process 5101 attached [pid 5100] <... openat resumed>) = 3 [pid 5095] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5101] set_robust_list(0x5555598f06a0, 24 [pid 5100] write(3, "1000", 4) = 4 [pid 5100] close(3) = 0 [pid 5100] symlink("/dev/binderfs", "./binderfs" [pid 5101] <... set_robust_list resumed>) = 0 [pid 5100] <... symlink resumed>) = 0 [pid 5096] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5093] <... clone resumed>, child_tidptr=0x5555598f0690) = 5101 ./strace-static-x86_64: Process 5102 attached [pid 5098] <... write resumed>) = 4 [pid 5096] <... mmap resumed>) = 0x7f135b4c7000 [pid 5095] <... clone resumed>, child_tidptr=0x5555598f0690) = 5102 [pid 5102] set_robust_list(0x5555598f06a0, 24 [pid 5101] chdir("./0" [pid 5100] futex(0x7f135b5be6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] <... set_robust_list resumed>) = 0 [pid 5098] close(3 [pid 5102] chdir("./0" [pid 5100] <... futex resumed>) = 0 [pid 5098] <... close resumed>) = 0 [pid 5101] <... chdir resumed>) = 0 [pid 5100] rt_sigaction(SIGRT_1, {sa_handler=0x7f135b556fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f135b548190}, [pid 5098] symlink("/dev/binderfs", "./binderfs" [pid 5101] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5100] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5098] <... symlink resumed>) = 0 [pid 5096] mprotect(0x7f135b4c8000, 131072, PROT_READ|PROT_WRITE [pid 5100] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5102] <... chdir resumed>) = 0 [pid 5100] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5098] futex(0x7f135b5be6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5100] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5102] <... prctl resumed>) = 0 [pid 5100] <... mmap resumed>) = 0x7f135b4c7000 [pid 5102] setpgid(0, 0 [pid 5100] mprotect(0x7f135b4c8000, 131072, PROT_READ|PROT_WRITE [pid 5098] <... futex resumed>) = 0 [pid 5102] <... setpgid resumed>) = 0 [pid 5101] <... prctl resumed>) = 0 [pid 5100] <... mprotect resumed>) = 0 [pid 5098] rt_sigaction(SIGRT_1, {sa_handler=0x7f135b556fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f135b548190}, [pid 5096] <... mprotect resumed>) = 0 [pid 5102] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5101] setpgid(0, 0 [pid 5100] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5096] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5102] write(3, "1000", 4 [pid 5101] <... setpgid resumed>) = 0 [pid 5098] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5102] <... write resumed>) = 4 [pid 5101] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5100] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5098] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5102] close(3 [pid 5100] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f135b4e7990, parent_tid=0x7f135b4e7990, exit_signal=0, stack=0x7f135b4c7000, stack_size=0x20300, tls=0x7f135b4e76c0} [pid 5098] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5102] <... close resumed>) = 0 [pid 5098] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5102] symlink("/dev/binderfs", "./binderfs" [pid 5100] <... clone3 resumed> => {parent_tid=[5103]}, 88) = 5103 [pid 5098] <... mmap resumed>) = 0x7f135b4c7000 [pid 5096] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5102] <... symlink resumed>) = 0 [pid 5101] <... openat resumed>) = 3 [pid 5100] rt_sigprocmask(SIG_SETMASK, [], [pid 5098] mprotect(0x7f135b4c8000, 131072, PROT_READ|PROT_WRITE [pid 5096] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f135b4e7990, parent_tid=0x7f135b4e7990, exit_signal=0, stack=0x7f135b4c7000, stack_size=0x20300, tls=0x7f135b4e76c0}./strace-static-x86_64: Process 5103 attached [pid 5102] futex(0x7f135b5be6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5101] write(3, "1000", 4 [pid 5100] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5098] <... mprotect resumed>) = 0 ./strace-static-x86_64: Process 5104 attached [pid 5103] rseq(0x7f135b4e7fe0, 0x20, 0, 0x53053053 [pid 5102] <... futex resumed>) = 0 [pid 5101] <... write resumed>) = 4 [pid 5100] futex(0x7f135b5be6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5098] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5104] rseq(0x7f135b4e7fe0, 0x20, 0, 0x53053053 [pid 5103] <... rseq resumed>) = 0 [pid 5101] close(3 [pid 5100] <... futex resumed>) = 0 [pid 5104] <... rseq resumed>) = 0 [pid 5103] set_robust_list(0x7f135b4e79a0, 24 [pid 5102] rt_sigaction(SIGRT_1, {sa_handler=0x7f135b556fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f135b548190}, [pid 5098] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5096] <... clone3 resumed> => {parent_tid=[5104]}, 88) = 5104 [pid 5103] <... set_robust_list resumed>) = 0 [pid 5103] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5103] memfd_create("syzkaller", 0 [pid 5104] set_robust_list(0x7f135b4e79a0, 24 [pid 5102] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5101] <... close resumed>) = 0 [pid 5100] futex(0x7f135b5be6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5098] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f135b4e7990, parent_tid=0x7f135b4e7990, exit_signal=0, stack=0x7f135b4c7000, stack_size=0x20300, tls=0x7f135b4e76c0} [pid 5096] rt_sigprocmask(SIG_SETMASK, [], [pid 5101] symlink("/dev/binderfs", "./binderfs" [pid 5096] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 5105 attached [pid 5104] <... set_robust_list resumed>) = 0 [pid 5102] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5096] futex(0x7f135b5be6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5105] rseq(0x7f135b4e7fe0, 0x20, 0, 0x53053053 [pid 5102] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5098] <... clone3 resumed> => {parent_tid=[5105]}, 88) = 5105 [pid 5105] <... rseq resumed>) = 0 [pid 5104] rt_sigprocmask(SIG_SETMASK, [], [pid 5103] <... memfd_create resumed>) = 3 [pid 5102] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5101] <... symlink resumed>) = 0 [pid 5098] rt_sigprocmask(SIG_SETMASK, [], [pid 5096] <... futex resumed>) = 0 [pid 5105] set_robust_list(0x7f135b4e79a0, 24 [pid 5104] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5103] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5102] <... mmap resumed>) = 0x7f135b4c7000 [pid 5101] futex(0x7f135b5be6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5098] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5096] futex(0x7f135b5be6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5105] <... set_robust_list resumed>) = 0 [pid 5103] <... mmap resumed>) = 0x7f1353000000 [pid 5102] mprotect(0x7f135b4c8000, 131072, PROT_READ|PROT_WRITE [pid 5098] futex(0x7f135b5be6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5105] rt_sigprocmask(SIG_SETMASK, [], [pid 5104] memfd_create("syzkaller", 0 [pid 5101] <... futex resumed>) = 0 [pid 5101] rt_sigaction(SIGRT_1, {sa_handler=0x7f135b556fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f135b548190}, NULL, 8) = 0 [pid 5101] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5105] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5105] memfd_create("syzkaller", 0 [pid 5102] <... mprotect resumed>) = 0 [pid 5101] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5104] <... memfd_create resumed>) = 3 [pid 5101] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5105] <... memfd_create resumed>) = 3 [pid 5104] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5102] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5101] <... mmap resumed>) = 0x7f135b4c7000 [pid 5098] <... futex resumed>) = 0 [pid 5105] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5104] <... mmap resumed>) = 0x7f1353000000 [pid 5098] futex(0x7f135b5be6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5105] <... mmap resumed>) = 0x7f1353000000 [pid 5101] mprotect(0x7f135b4c8000, 131072, PROT_READ|PROT_WRITE [pid 5102] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5102] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f135b4e7990, parent_tid=0x7f135b4e7990, exit_signal=0, stack=0x7f135b4c7000, stack_size=0x20300, tls=0x7f135b4e76c0} => {parent_tid=[5106]}, 88) = 5106 [pid 5102] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5101] <... mprotect resumed>) = 0 [pid 5102] futex(0x7f135b5be6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5102] futex(0x7f135b5be6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5106 attached [pid 5106] rseq(0x7f135b4e7fe0, 0x20, 0, 0x53053053) = 0 [pid 5101] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5106] set_robust_list(0x7f135b4e79a0, 24) = 0 [pid 5106] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5106] memfd_create("syzkaller", 0) = 3 [pid 5106] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1353000000 [pid 5101] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5101] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f135b4e7990, parent_tid=0x7f135b4e7990, exit_signal=0, stack=0x7f135b4c7000, stack_size=0x20300, tls=0x7f135b4e76c0} => {parent_tid=[5107]}, 88) = 5107 ./strace-static-x86_64: Process 5107 attached [pid 5101] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5107] rseq(0x7f135b4e7fe0, 0x20, 0, 0x53053053) = 0 [pid 5107] set_robust_list(0x7f135b4e79a0, 24) = 0 [pid 5107] rt_sigprocmask(SIG_SETMASK, [], [pid 5101] futex(0x7f135b5be6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5107] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5101] <... futex resumed>) = 0 [pid 5107] memfd_create("syzkaller", 0 [pid 5101] futex(0x7f135b5be6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5107] <... memfd_create resumed>) = 3 [pid 5107] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1353000000 [pid 5099] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5103] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5104] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5105] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5106] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5107] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5103] <... write resumed>) = 16777216 [pid 5103] munmap(0x7f1353000000, 138412032 [pid 5104] <... write resumed>) = 16777216 [pid 5103] <... munmap resumed>) = 0 [pid 5104] munmap(0x7f1353000000, 138412032 [pid 5103] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5103] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5103] close(3) = 0 [pid 5103] close(4) = 0 [pid 5103] mkdir("./file0", 0777) = 0 [ 112.270125][ T5103] loop4: detected capacity change from 0 to 32768 [ 112.304706][ T5103] ======================================================= [ 112.304706][ T5103] WARNING: The mand mount option has been deprecated and [pid 5103] mount("/dev/loop4", "./file0", "jfs", MS_MANDLOCK|MS_NOATIME, "" [pid 5105] <... write resumed>) = 16777216 [pid 5104] <... munmap resumed>) = 0 [pid 5099] <... write resumed>) = 16777216 [pid 5104] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5104] ioctl(4, LOOP_SET_FD, 3 [pid 5099] munmap(0x7f1353000000, 138412032 [pid 5105] munmap(0x7f1353000000, 138412032 [ 112.304706][ T5103] and is ignored by this kernel. Remove the mand [ 112.304706][ T5103] option from the mount to silence this warning. [ 112.304706][ T5103] ======================================================= [ 112.358931][ T5104] loop0: detected capacity change from 0 to 32768 [pid 5104] <... ioctl resumed>) = 0 [pid 5104] close(3) = 0 [pid 5104] close(4) = 0 [pid 5104] mkdir("./file0", 0777) = 0 [pid 5104] mount("/dev/loop0", "./file0", "jfs", MS_MANDLOCK|MS_NOATIME, "" [pid 5099] <... munmap resumed>) = 0 [pid 5104] <... mount resumed>) = 0 [pid 5104] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5105] <... munmap resumed>) = 0 [pid 5104] <... openat resumed>) = 3 [pid 5104] chdir("./file0" [pid 5105] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5107] <... write resumed>) = 16777216 [pid 5103] <... mount resumed>) = 0 [pid 5099] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5104] <... chdir resumed>) = 0 [pid 5099] <... openat resumed>) = 4 [pid 5104] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5099] ioctl(4, LOOP_SET_FD, 3 [pid 5105] <... openat resumed>) = 4 [pid 5104] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5103] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5104] futex(0x7f135b5be6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5103] <... openat resumed>) = 3 [pid 5104] <... futex resumed>) = 1 [pid 5103] chdir("./file0" [pid 5104] futex(0x7f135b5be6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5103] <... chdir resumed>) = 0 [pid 5103] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5103] futex(0x7f135b5be6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5100] <... futex resumed>) = 0 [pid 5103] futex(0x7f135b5be6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5100] futex(0x7f135b5be6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5103] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5100] <... futex resumed>) = 0 [pid 5103] lsetxattr("./file0", "security.ima", "\x04\x05", 2, 0 [pid 5100] futex(0x7f135b5be6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5107] munmap(0x7f1353000000, 138412032 [pid 5096] <... futex resumed>) = 0 [pid 5096] futex(0x7f135b5be6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5106] <... write resumed>) = 16777216 [pid 5096] <... futex resumed>) = 1 [pid 5105] ioctl(4, LOOP_SET_FD, 3 [pid 5096] futex(0x7f135b5be6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5104] <... futex resumed>) = 0 [pid 5104] lsetxattr("./file0", "security.ima", "\x04\x05", 2, 0 [pid 5099] <... ioctl resumed>) = 0 [pid 5105] <... ioctl resumed>) = 0 [ 112.484798][ T5099] loop1: detected capacity change from 0 to 32768 [ 112.513536][ T5105] loop2: detected capacity change from 0 to 32768 [pid 5105] close(3 [pid 5099] close(3 [pid 5105] <... close resumed>) = 0 [pid 5106] munmap(0x7f1353000000, 138412032 [pid 5105] close(4 [pid 5099] <... close resumed>) = 0 [pid 5105] <... close resumed>) = 0 [pid 5105] mkdir("./file0", 0777 [pid 5099] close(4 [pid 5100] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5099] <... close resumed>) = 0 [pid 5100] futex(0x7f135b5be6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5099] mkdir("./file0", 0777 [pid 5105] <... mkdir resumed>) = 0 [pid 5105] mount("/dev/loop2", "./file0", "jfs", MS_MANDLOCK|MS_NOATIME, "" [pid 5100] <... futex resumed>) = 0 [pid 5099] <... mkdir resumed>) = 0 [pid 5100] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5099] mount("/dev/loop1", "./file0", "jfs", MS_MANDLOCK|MS_NOATIME, "" [pid 5105] <... mount resumed>) = 0 [pid 5100] <... mmap resumed>) = 0x7f135b4a6000 [pid 5100] mprotect(0x7f135b4a7000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5100] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5096] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5100] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5096] futex(0x7f135b5be6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5105] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5100] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f135b4c6990, parent_tid=0x7f135b4c6990, exit_signal=0, stack=0x7f135b4a6000, stack_size=0x20300, tls=0x7f135b4c66c0} [pid 5096] <... futex resumed>) = 0 [pid 5105] <... openat resumed>) = 3 [pid 5096] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5100] <... clone3 resumed> => {parent_tid=[5109]}, 88) = 5109 [ 112.536252][ T5104] ERROR: (device loop0): diWrite: ixpxd invalid [ 112.536252][ T5104] [ 112.551835][ T5103] ERROR: (device loop4): diWrite: ixpxd invalid [ 112.551835][ T5103] [pid 5096] <... mmap resumed>) = 0x7f135b4a6000 ./strace-static-x86_64: Process 5109 attached [pid 5105] chdir("./file0" [pid 5100] rt_sigprocmask(SIG_SETMASK, [], [pid 5109] rseq(0x7f135b4c6fe0, 0x20, 0, 0x53053053 [pid 5100] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5109] <... rseq resumed>) = 0 [pid 5107] <... munmap resumed>) = 0 [pid 5105] <... chdir resumed>) = 0 [pid 5100] futex(0x7f135b5be6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5096] mprotect(0x7f135b4a7000, 131072, PROT_READ|PROT_WRITE [pid 5105] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5109] set_robust_list(0x7f135b4c69a0, 24 [pid 5105] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5100] <... futex resumed>) = 0 [pid 5096] <... mprotect resumed>) = 0 [pid 5105] futex(0x7f135b5be6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] futex(0x7f135b5be6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5105] <... futex resumed>) = 1 [pid 5096] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5105] futex(0x7f135b5be6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5096] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5096] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f135b4c6990, parent_tid=0x7f135b4c6990, exit_signal=0, stack=0x7f135b4a6000, stack_size=0x20300, tls=0x7f135b4c66c0} [pid 5109] <... set_robust_list resumed>) = 0 [pid 5098] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5110 attached [pid 5110] rseq(0x7f135b4c6fe0, 0x20, 0, 0x53053053) = 0 [pid 5110] set_robust_list(0x7f135b4c69a0, 24 [pid 5109] rt_sigprocmask(SIG_SETMASK, [], [pid 5099] <... mount resumed>) = 0 [pid 5098] futex(0x7f135b5be6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5096] <... clone3 resumed> => {parent_tid=[5110]}, 88) = 5110 [pid 5109] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5098] <... futex resumed>) = 1 [pid 5109] openat(AT_FDCWD, "cgroup.controllers", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5098] futex(0x7f135b5be6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5110] <... set_robust_list resumed>) = 0 [pid 5109] <... openat resumed>) = 4 [pid 5105] <... futex resumed>) = 0 [pid 5099] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5096] rt_sigprocmask(SIG_SETMASK, [], [pid 5110] rt_sigprocmask(SIG_SETMASK, [], [pid 5105] lsetxattr("./file0", "security.ima", "\x04\x05", 2, 0 [pid 5096] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5099] <... openat resumed>) = 3 [ 112.581450][ T5104] ERROR: (device loop0): remounting filesystem as read-only [ 112.603250][ T5103] ERROR: (device loop4): remounting filesystem as read-only [ 112.607698][ T5104] ERROR: (device loop0): txAbort: [ 112.607698][ T5104] [pid 5110] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5107] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5099] chdir("./file0" [pid 5096] futex(0x7f135b5be6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5110] openat(AT_FDCWD, "cgroup.controllers", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5099] <... chdir resumed>) = 0 [pid 5096] <... futex resumed>) = 0 [pid 5107] <... openat resumed>) = 4 [pid 5107] ioctl(4, LOOP_SET_FD, 3 [pid 5110] <... openat resumed>) = -1 EROFS (Read-only file system) [pid 5107] <... ioctl resumed>) = 0 [pid 5106] <... munmap resumed>) = 0 [pid 5104] <... lsetxattr resumed>) = -1 EIO (Input/output error) [pid 5099] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5096] futex(0x7f135b5be6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5110] futex(0x7f135b5be6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5109] futex(0x7f135b5be6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5106] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5104] futex(0x7f135b5be6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5099] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5109] <... futex resumed>) = 0 [pid 5109] futex(0x7f135b5be6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5107] close(3) = 0 [pid 5107] close(4) = 0 [pid 5107] mkdir("./file0", 0777) = 0 [pid 5098] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5098] futex(0x7f135b5be6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5098] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f135b4a6000 [pid 5098] mprotect(0x7f135b4a7000, 131072, PROT_READ|PROT_WRITE [pid 5100] futex(0x7f135b5be6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5098] <... mprotect resumed>) = 0 [pid 5099] futex(0x7f135b5be6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5106] <... openat resumed>) = 4 [pid 5104] <... futex resumed>) = 0 [pid 5106] ioctl(4, LOOP_SET_FD, 3 [pid 5104] futex(0x7f135b5be6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5109] <... futex resumed>) = 0 [pid 5100] <... futex resumed>) = 1 [pid 5099] <... futex resumed>) = 1 [pid 5098] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5109] write(4, "2", 1) = 1 [pid 5100] futex(0x7f135b5be6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5099] futex(0x7f135b5be6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5098] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5109] futex(0x7f135b5be6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5107] mount("/dev/loop3", "./file0", "jfs", MS_MANDLOCK|MS_NOATIME, "" [pid 5098] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f135b4c6990, parent_tid=0x7f135b4c6990, exit_signal=0, stack=0x7f135b4a6000, stack_size=0x20300, tls=0x7f135b4c66c0} [pid 5097] <... futex resumed>) = 0 [pid 5110] <... futex resumed>) = 1 [pid 5109] <... futex resumed>) = 0 [pid 5106] <... ioctl resumed>) = 0 [pid 5105] <... lsetxattr resumed>) = -1 EIO (Input/output error) [pid 5103] <... lsetxattr resumed>) = -1 EIO (Input/output error) [pid 5100] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5099] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5097] futex(0x7f135b5be6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5096] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5111 attached [pid 5110] futex(0x7f135b5be6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5109] futex(0x7f135b5be6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5106] close(3 [pid 5105] futex(0x7f135b5be6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5103] futex(0x7f135b5be6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] exit_group(0 [pid 5099] lsetxattr("./file0", "security.ima", "\x04\x05", 2, 0 [pid 5098] <... clone3 resumed> => {parent_tid=[5111]}, 88) = 5111 [pid 5097] <... futex resumed>) = 0 [pid 5096] futex(0x7f135b5be6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5111] rseq(0x7f135b4c6fe0, 0x20, 0, 0x53053053 [pid 5109] <... futex resumed>) = ? [pid 5106] <... close resumed>) = 0 [pid 5105] <... futex resumed>) = 0 [pid 5103] <... futex resumed>) = ? [pid 5100] <... exit_group resumed>) = ? [pid 5098] rt_sigprocmask(SIG_SETMASK, [], [pid 5097] futex(0x7f135b5be6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5096] <... futex resumed>) = 1 [pid 5104] <... futex resumed>) = 0 [pid 5111] <... rseq resumed>) = 0 [pid 5109] +++ exited with 0 +++ [pid 5106] close(4 [pid 5104] write(-1, "2", 1 [pid 5098] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5096] futex(0x7f135b5be6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5111] set_robust_list(0x7f135b4c69a0, 24 [pid 5106] <... close resumed>) = 0 [pid 5105] futex(0x7f135b5be6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5104] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5098] futex(0x7f135b5be6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5111] <... set_robust_list resumed>) = 0 [pid 5106] mkdir("./file0", 0777 [pid 5104] futex(0x7f135b5be6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5098] <... futex resumed>) = 0 [pid 5111] rt_sigprocmask(SIG_SETMASK, [], [pid 5098] futex(0x7f135b5be6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5111] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5104] <... futex resumed>) = 1 [pid 5111] openat(AT_FDCWD, "cgroup.controllers", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5106] <... mkdir resumed>) = 0 [pid 5104] futex(0x7f135b5be6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5096] <... futex resumed>) = 0 [pid 5111] <... openat resumed>) = -1 EROFS (Read-only file system) [pid 5106] mount("/dev/loop5", "./file0", "jfs", MS_MANDLOCK|MS_NOATIME, "" [pid 5096] exit_group(0 [pid 5111] futex(0x7f135b5be6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5110] <... futex resumed>) = ? [pid 5104] <... futex resumed>) = ? [pid 5096] <... exit_group resumed>) = ? [pid 5111] <... futex resumed>) = 1 [pid 5098] <... futex resumed>) = 0 [pid 5110] +++ exited with 0 +++ [pid 5111] futex(0x7f135b5be6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5104] +++ exited with 0 +++ [pid 5103] +++ exited with 0 +++ [pid 5100] +++ exited with 0 +++ [pid 5098] futex(0x7f135b5be6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5098] futex(0x7f135b5be6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5105] <... futex resumed>) = 0 [pid 5094] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5100, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=40 /* 0.40 s */} --- [pid 5105] write(-1, "2", 1) = -1 EBADF (Bad file descriptor) [ 112.628576][ T5105] ERROR: (device loop2): diWrite: ixpxd invalid [ 112.628576][ T5105] [ 112.639237][ T5107] loop3: detected capacity change from 0 to 32768 [ 112.642243][ T5105] ERROR: (device loop2): remounting filesystem as read-only [ 112.647240][ T5103] ERROR: (device loop4): txAbort: [ 112.647240][ T5103] [ 112.654659][ T5105] ERROR: (device loop2): txAbort: [ 112.654659][ T5105] [ 112.671328][ T5106] loop5: detected capacity change from 0 to 32768 [pid 5105] futex(0x7f135b5be6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5098] <... futex resumed>) = 0 [pid 5094] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5098] exit_group(0 [pid 5111] <... futex resumed>) = ? [pid 5098] <... exit_group resumed>) = ? [pid 5094] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5111] +++ exited with 0 +++ [pid 5094] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5094] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5107] <... mount resumed>) = 0 [pid 5105] +++ exited with 0 +++ [pid 5098] +++ exited with 0 +++ [pid 5096] +++ exited with 0 +++ [pid 5094] getdents64(3, [pid 5107] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5094] <... getdents64 resumed>0x5555598f1730 /* 4 entries */, 32768) = 112 [pid 5107] <... openat resumed>) = 3 [pid 5097] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5092] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5098, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=42 /* 0.42 s */} --- [pid 5094] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5090] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5096, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=49 /* 0.49 s */} --- [pid 5107] chdir("./file0" [pid 5097] futex(0x7f135b5be6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5107] <... chdir resumed>) = 0 [pid 5097] <... futex resumed>) = 0 [pid 5107] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5097] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5107] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5097] <... mmap resumed>) = 0x7f135b4a6000 [pid 5097] mprotect(0x7f135b4a7000, 131072, PROT_READ|PROT_WRITE [pid 5094] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5090] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5107] futex(0x7f135b5be6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5097] <... mprotect resumed>) = 0 [pid 5092] restart_syscall(<... resuming interrupted clone ...> [pid 5107] <... futex resumed>) = 1 [pid 5094] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5092] <... restart_syscall resumed>) = 0 [pid 5090] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5107] futex(0x7f135b5be6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5101] <... futex resumed>) = 0 [pid 5097] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5090] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5101] futex(0x7f135b5be6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5094] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5107] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5107] lsetxattr("./file0", "security.ima", "\x04\x05", 2, 0 [pid 5090] <... openat resumed>) = 3 [pid 5101] <... futex resumed>) = 0 [ 112.719437][ T5099] ERROR: (device loop1): diWrite: ixpxd invalid [ 112.719437][ T5099] [ 112.741343][ T5099] ERROR: (device loop1): remounting filesystem as read-only [ 112.762347][ T5107] ERROR: (device loop3): diWrite: ixpxd invalid [pid 5094] unlink("./0/binderfs" [pid 5101] futex(0x7f135b5be6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5097] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5094] <... unlink resumed>) = 0 [pid 5092] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5090] newfstatat(3, "", [pid 5097] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f135b4c6990, parent_tid=0x7f135b4c6990, exit_signal=0, stack=0x7f135b4a6000, stack_size=0x20300, tls=0x7f135b4c66c0} [pid 5090] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5092] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5090] getdents64(3, [pid 5092] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5090] <... getdents64 resumed>0x5555598f1730 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 5112 attached [pid 5094] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5112] rseq(0x7f135b4c6fe0, 0x20, 0, 0x53053053 [pid 5092] <... openat resumed>) = 3 [pid 5112] <... rseq resumed>) = 0 [pid 5112] set_robust_list(0x7f135b4c69a0, 24 [pid 5090] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5112] <... set_robust_list resumed>) = 0 [pid 5097] <... clone3 resumed> => {parent_tid=[5112]}, 88) = 5112 [pid 5092] newfstatat(3, "", [pid 5090] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5112] rt_sigprocmask(SIG_SETMASK, [], [pid 5097] rt_sigprocmask(SIG_SETMASK, [], [pid 5112] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5097] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5092] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5090] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5112] futex(0x7f135b5be6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5097] futex(0x7f135b5be6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5112] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5097] <... futex resumed>) = 0 [pid 5112] openat(AT_FDCWD, "cgroup.controllers", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5097] futex(0x7f135b5be6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5090] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5112] <... openat resumed>) = -1 EROFS (Read-only file system) [pid 5090] unlink("./0/binderfs" [pid 5112] futex(0x7f135b5be6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5106] <... mount resumed>) = 0 [pid 5097] <... futex resumed>) = 0 [pid 5112] write(-1, "2", 1 [pid 5106] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5097] futex(0x7f135b5be6d8, FUTEX_WAKE_PRIVATE, 1000000 [ 112.762347][ T5107] [ 112.766654][ T5099] ERROR: (device loop1): txAbort: [ 112.766654][ T5099] [ 112.799111][ T5107] ERROR: (device loop3): remounting filesystem as read-only [ 112.799532][ T5094] ------------[ cut here ]------------ [ 112.806443][ T5107] ERROR: (device loop3): txAbort: [ 112.806443][ T5107] [pid 5092] getdents64(3, [pid 5090] <... unlink resumed>) = 0 [pid 5112] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5106] <... openat resumed>) = 3 [pid 5097] <... futex resumed>) = 0 [pid 5097] futex(0x7f135b5be6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5092] <... getdents64 resumed>0x5555598f1730 /* 4 entries */, 32768) = 112 [pid 5092] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5090] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5092] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5092] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5092] unlink("./0/binderfs" [pid 5112] futex(0x7f135b5be6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5106] chdir("./file0" [pid 5092] <... unlink resumed>) = 0 [pid 5106] <... chdir resumed>) = 0 [pid 5112] <... futex resumed>) = 1 [pid 5106] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5112] futex(0x7f135b5be6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5097] <... futex resumed>) = 0 [pid 5106] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5099] <... lsetxattr resumed>) = -1 EIO (Input/output error) [pid 5092] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5106] futex(0x7f135b5be6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5101] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5099] futex(0x7f135b5be6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5106] <... futex resumed>) = 1 [pid 5102] <... futex resumed>) = 0 [pid 5101] futex(0x7f135b5be6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5099] <... futex resumed>) = 0 [pid 5106] futex(0x7f135b5be6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5101] <... futex resumed>) = 0 [pid 5099] futex(0x7f135b5be6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5097] exit_group(0 [pid 5112] <... futex resumed>) = ? [pid 5102] futex(0x7f135b5be6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5101] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5099] <... futex resumed>) = ? [pid 5097] <... exit_group resumed>) = ? [pid 5112] +++ exited with 0 +++ [pid 5099] +++ exited with 0 +++ [pid 5106] <... futex resumed>) = 0 [pid 5102] <... futex resumed>) = 1 [pid 5101] <... mmap resumed>) = 0x7f135b4a6000 [pid 5097] +++ exited with 0 +++ [pid 5106] lsetxattr("./file0", "security.ima", "\x04\x05", 2, 0 [pid 5101] mprotect(0x7f135b4a7000, 131072, PROT_READ|PROT_WRITE [pid 5091] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5097, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=51 /* 0.51 s */} --- [ 112.812855][ T5094] kernel BUG at fs/jfs/inode.c:169! [pid 5102] futex(0x7f135b5be6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5101] <... mprotect resumed>) = 0 [pid 5101] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5090] <... umount2 resumed>) = 0 [pid 5101] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f135b4c6990, parent_tid=0x7f135b4c6990, exit_signal=0, stack=0x7f135b4a6000, stack_size=0x20300, tls=0x7f135b4c66c0} [pid 5090] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5101] <... clone3 resumed> => {parent_tid=[5113]}, 88) = 5113 [pid 5091] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5090] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5090] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5090] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5090] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5090] getdents64(4, 0x5555598f9770 /* 2 entries */, 32768) = 48 [pid 5090] getdents64(4, 0x5555598f9770 /* 0 entries */, 32768) = 0 [pid 5090] close(4) = 0 [pid 5090] rmdir("./0/file0") = 0 [pid 5090] getdents64(3, 0x5555598f1730 /* 0 entries */, 32768) = 0 [ 112.849225][ T5106] ERROR: (device loop5): diWrite: ixpxd invalid [ 112.849225][ T5106] [ 112.873481][ T5094] invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 112.880149][ T5094] CPU: 1 PID: 5094 Comm: syz-executor137 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [pid 5092] <... umount2 resumed>) = 0 [pid 5102] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5090] close(3 [pid 5102] futex(0x7f135b5be6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5092] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5090] <... close resumed>) = 0 [pid 5102] <... futex resumed>) = 0 [pid 5092] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5090] rmdir("./0" [pid 5102] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5092] newfstatat(AT_FDCWD, "./0/file0", [pid 5091] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5102] <... mmap resumed>) = 0x7f135b4a6000 [pid 5092] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5091] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5090] <... rmdir resumed>) = 0 [pid 5102] mprotect(0x7f135b4a7000, 131072, PROT_READ|PROT_WRITE [pid 5092] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5091] <... openat resumed>) = 3 [pid 5102] <... mprotect resumed>) = 0 [pid 5092] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5091] newfstatat(3, "", [pid 5090] mkdir("./1", 0777 [pid 5107] <... lsetxattr resumed>) = -1 EIO (Input/output error) [pid 5102] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5092] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5091] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5090] <... mkdir resumed>) = 0 [pid 5107] futex(0x7f135b5be6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5092] <... openat resumed>) = 4 [pid 5091] getdents64(3, [pid 5107] <... futex resumed>) = 0 [pid 5102] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f135b4c6990, parent_tid=0x7f135b4c6990, exit_signal=0, stack=0x7f135b4a6000, stack_size=0x20300, tls=0x7f135b4c66c0} [pid 5092] newfstatat(4, "", [pid 5091] <... getdents64 resumed>0x5555598f1730 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 5114 attached [pid 5107] futex(0x7f135b5be6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5091] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5102] <... clone3 resumed> => {parent_tid=[5114]}, 88) = 5114 [pid 5091] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5102] rt_sigprocmask(SIG_SETMASK, [], [pid 5091] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5102] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5091] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5102] futex(0x7f135b5be6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5092] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5091] unlink("./0/binderfs" [pid 5090] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5102] <... futex resumed>) = 0 [pid 5092] getdents64(4, [pid 5091] <... unlink resumed>) = 0 [pid 5102] futex(0x7f135b5be6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5092] <... getdents64 resumed>0x5555598f9770 /* 2 entries */, 32768) = 48 [pid 5091] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5090] <... openat resumed>) = 3 [pid 5092] getdents64(4, [pid 5090] ioctl(3, LOOP_CLR_FD [pid 5092] <... getdents64 resumed>0x5555598f9770 /* 0 entries */, 32768) = 0 [pid 5092] close(4 [pid 5114] rseq(0x7f135b4c6fe0, 0x20, 0, 0x53053053 [pid 5092] <... close resumed>) = 0 [pid 5114] <... rseq resumed>) = 0 [pid 5092] rmdir("./0/file0" [pid 5114] set_robust_list(0x7f135b4c69a0, 24 [pid 5092] <... rmdir resumed>) = 0 [ 112.890609][ T5094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 112.900702][ T5094] RIP: 0010:jfs_evict_inode+0x3ec/0x4b0 [ 112.906307][ T5094] Code: 24 80 00 74 0d e8 d4 04 89 fe 48 89 df e8 2c 85 02 00 e8 c7 04 89 fe 48 89 df e8 3f 88 18 ff e9 e3 fc ff ff e8 b5 04 89 fe 90 <0f> 0b 48 c7 c7 80 ef f4 8d e8 86 d7 e4 fe e9 43 fc ff ff e8 7c d7 [ 112.925965][ T5094] RSP: 0018:ffffc90002f0fbb8 EFLAGS: 00010293 [ 112.932076][ T5094] RAX: 0000000000000000 RBX: ffff8880789e0430 RCX: ffffffff821e7f4b [ 112.940082][ T5094] RDX: ffff88807e0d1e00 RSI: ffffffff8305ff4b RDI: ffff8880789e0420 [ 112.948080][ T5094] RBP: ffff8880789e00b8 R08: 0000000000000005 R09: 0000000000000000 [ 112.956066][ T5094] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880789e0508 [ 112.964056][ T5094] R13: ffff8880789e0458 R14: ffffffff8b6a6a20 R15: ffff88801f5869c0 [ 112.972051][ T5094] FS: 00005555598f03c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 112.981004][ T5094] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.987608][ T5094] CR2: 00007fff11b0989c CR3: 000000002c604000 CR4: 0000000000350ef0 [ 112.995596][ T5094] Call Trace: [ 112.998888][ T5094] [ 113.001831][ T5094] ? show_regs+0x8c/0xa0 [ 113.006098][ T5094] ? die+0x36/0xa0 [ 113.009841][ T5094] ? do_trap+0x232/0x430 [ 113.014121][ T5094] ? jfs_evict_inode+0x3ec/0x4b0 [ 113.019112][ T5094] ? jfs_evict_inode+0x3ec/0x4b0 [ 113.024075][ T5094] ? do_error_trap+0xf4/0x230 [ 113.028794][ T5094] ? jfs_evict_inode+0x3ec/0x4b0 [ 113.033759][ T5094] ? handle_invalid_op+0x34/0x40 [ 113.038739][ T5094] ? jfs_evict_inode+0x3ec/0x4b0 [ 113.043701][ T5094] ? exc_invalid_op+0x2e/0x50 [ 113.048422][ T5094] ? asm_exc_invalid_op+0x1a/0x20 [ 113.053476][ T5094] ? dquot_drop+0x4b/0x1a0 [ 113.057928][ T5094] ? jfs_evict_inode+0x3eb/0x4b0 [ 113.062893][ T5094] ? jfs_evict_inode+0x3ec/0x4b0 [ 113.067858][ T5094] ? jfs_evict_inode+0x3eb/0x4b0 [ 113.072818][ T5094] ? __pfx_jfs_evict_inode+0x10/0x10 [ 113.078128][ T5094] evict+0x2f0/0x6c0 [ 113.082060][ T5094] dispose_list+0x117/0x1e0 [ 113.086594][ T5094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 113.092261][ T5094] evict_inodes+0x34e/0x450 [ 113.096803][ T5094] ? __pfx_evict_inodes+0x10/0x10 [ 113.101857][ T5094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 113.107520][ T5094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 113.113181][ T5094] ? shrink_dcache_for_umount+0x17e/0x390 [ 113.118947][ T5094] generic_shutdown_super+0xb5/0x3d0 [ 113.124282][ T5094] kill_block_super+0x3b/0x90 [ 113.128997][ T5094] deactivate_locked_super+0xc1/0x1a0 [ 113.134393][ T5094] deactivate_super+0xde/0x100 [ 113.139181][ T5094] cleanup_mnt+0x222/0x450 [ 113.143640][ T5094] task_work_run+0x151/0x250 [ 113.148265][ T5094] ? __pfx_task_work_run+0x10/0x10 [ 113.153415][ T5094] ptrace_notify+0x10e/0x130 [ 113.158048][ T5094] syscall_exit_to_user_mode_prepare+0x126/0x260 [ 113.164417][ T5094] syscall_exit_to_user_mode+0x11/0x2a0 [ 113.170012][ T5094] do_syscall_64+0xdc/0x260 [ 113.174543][ T5094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.180483][ T5094] RIP: 0033:0x7f135b531e27 [ 113.184913][ T5094] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 113.204551][ T5094] RSP: 002b:00007fff11b09888 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 113.212991][ T5094] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f135b531e27 [ 113.220984][ T5094] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff11b09940 [ 113.228972][ T5094] RBP: 00007fff11b09940 R08: 0000000000000000 R09: 0000000000000000 [ 113.236962][ T5094] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007fff11b0aa00 [pid 5114] <... set_robust_list resumed>) = 0 [pid 5092] getdents64(3, [pid 5114] rt_sigprocmask(SIG_SETMASK, [], [pid 5092] <... getdents64 resumed>0x5555598f1730 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5113 attached [pid 5114] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5102] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5101] rt_sigprocmask(SIG_SETMASK, [], [pid 5114] openat(AT_FDCWD, "cgroup.controllers", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5102] futex(0x7f135b5be6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5092] close(3 [pid 5114] <... openat resumed>) = -1 EROFS (Read-only file system) [pid 5102] <... futex resumed>) = 0 [pid 5092] <... close resumed>) = 0 [pid 5114] futex(0x7f135b5be6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5092] rmdir("./0" [pid 5114] <... futex resumed>) = 0 [pid 5106] <... lsetxattr resumed>) = -1 EIO (Input/output error) [pid 5102] <... mmap resumed>) = 0x7f135b485000 [pid 5092] <... rmdir resumed>) = 0 [pid 5114] futex(0x7f135b5be6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5113] rseq(0x7f135b4c6fe0, 0x20, 0, 0x53053053 [pid 5101] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5091] <... umount2 resumed>) = 0 [pid 5102] mprotect(0x7f135b486000, 131072, PROT_READ|PROT_WRITE [pid 5092] mkdir("./1", 0777 [ 113.244947][ T5094] R13: 00005555598f1700 R14: 431bde82d7b634db R15: 00007fff11b0a9a4 [ 113.253917][ T5094] [ 113.256980][ T5094] Modules linked in: [ 113.261521][ T5106] ERROR: (device loop5): remounting filesystem as read-only [ 113.269102][ T5106] ERROR: (device loop5): txAbort: [ 113.269102][ T5106] [pid 5091] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5113] <... rseq resumed>) = 0 [pid 5106] futex(0x7f135b5be6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] <... mprotect resumed>) = 0 [pid 5101] futex(0x7f135b5be6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5092] <... mkdir resumed>) = 0 [pid 5091] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5113] set_robust_list(0x7f135b4c69a0, 24 [pid 5106] <... futex resumed>) = 0 [pid 5113] <... set_robust_list resumed>) = 0 [pid 5106] futex(0x7f135b5be6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5102] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5101] <... futex resumed>) = 0 [pid 5092] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5091] newfstatat(AT_FDCWD, "./0/file0", [pid 5102] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5092] <... openat resumed>) = 3 [pid 5091] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5102] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f135b4a5990, parent_tid=0x7f135b4a5990, exit_signal=0, stack=0x7f135b485000, stack_size=0x20300, tls=0x7f135b4a56c0} [pid 5092] ioctl(3, LOOP_CLR_FD [pid 5091] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5102] <... clone3 resumed> => {parent_tid=[5116]}, 88) = 5116 [pid 5091] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5102] rt_sigprocmask(SIG_SETMASK, [], [pid 5091] <... openat resumed>) = 4 [pid 5102] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5091] newfstatat(4, "", [pid 5102] futex(0x7f135b5be6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5091] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5102] <... futex resumed>) = 0 [pid 5091] getdents64(4, [pid 5102] futex(0x7f135b5be6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5091] <... getdents64 resumed>0x5555598f9770 /* 2 entries */, 32768) = 48 [pid 5091] getdents64(4, 0x5555598f9770 /* 0 entries */, 32768) = 0 [pid 5091] close(4) = 0 [pid 5091] rmdir("./0/file0") = 0 [pid 5091] getdents64(3, 0x5555598f1730 /* 0 entries */, 32768) = 0 [pid 5091] close(3) = 0 [pid 5091] rmdir("./0") = 0 [pid 5091] mkdir("./1", 0777) = 0 [pid 5091] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5091] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5116 attached