./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor207180929 <...> DUID 00:04:23:68:77:f1:65:66:05:56:fc:6e:24:65:03:30:d5:25 forked to background, child pid 4749 [ 46.818122][ T4750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.828673][ T4750] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.46' (ED25519) to the list of known hosts. execve("./syz-executor207180929", ["./syz-executor207180929"], 0x7ffd0a7287a0 /* 10 vars */) = 0 brk(NULL) = 0x55559309e000 brk(0x55559309ed00) = 0x55559309ed00 arch_prctl(ARCH_SET_FS, 0x55559309e380) = 0 set_tid_address(0x55559309e650) = 5086 set_robust_list(0x55559309e660, 24) = 0 rseq(0x55559309eca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor207180929", 4096) = 27 getrandom("\xce\x09\xa0\x8e\x46\x6d\x0d\x7a", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55559309ed00 brk(0x5555930bfd00) = 0x5555930bfd00 brk(0x5555930c0000) = 0x5555930c0000 mprotect(0x7f5e15760000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 mkdir("./syzkaller.cYCR9P", 0700) = 0 chmod("./syzkaller.cYCR9P", 0777) = 0 chdir("./syzkaller.cYCR9P") = 0 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5087 attached [pid 5087] set_robust_list(0x55559309e660, 24 [pid 5086] <... clone resumed>, child_tidptr=0x55559309e650) = 5087 [pid 5087] <... set_robust_list resumed>) = 0 [pid 5087] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5087] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5087] setsid() = 1 [pid 5087] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5087] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5087] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5087] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5087] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5087] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5087] unshare(CLONE_NEWNS) = 0 [pid 5087] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5087] unshare(CLONE_NEWIPC) = 0 [pid 5087] unshare(CLONE_NEWCGROUP) = 0 [pid 5087] unshare(CLONE_NEWUTS) = 0 [pid 5087] unshare(CLONE_SYSVSEM) = 0 [pid 5087] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5087] write(3, "16777216", 8) = 8 [pid 5087] close(3) = 0 [pid 5087] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5087] write(3, "536870912", 9) = 9 [pid 5087] close(3) = 0 [pid 5087] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5087] write(3, "1024", 4) = 4 [pid 5087] close(3) = 0 [pid 5087] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5087] write(3, "8192", 4) = 4 [pid 5087] close(3) = 0 [pid 5087] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5087] write(3, "1024", 4) = 4 [pid 5087] close(3) = 0 [pid 5087] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5087] write(3, "1024", 4) = 4 [pid 5087] close(3) = 0 [pid 5087] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5087] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5087] close(3) = 0 [pid 5087] getpid() = 1 [pid 5087] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<) = 0 [pid 5087] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./0/binderfs") = 0 [ 80.297682][ T61] [ 80.297682][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.297682][ T61] [ 80.308465][ T61] [ 80.308465][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.308465][ T61] [ 80.322460][ T114] [ 80.322460][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.322460][ T114] [ 80.333277][ T61] [ 80.333277][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.333277][ T61] [ 80.344019][ T61] [ 80.344019][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.344019][ T61] [ 80.355556][ T113] [ 80.355556][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.355556][ T113] [ 80.366540][ T61] [ 80.366540][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.366540][ T61] [ 80.377041][ T61] [ 80.377041][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.377041][ T61] [ 80.388478][ T114] [ 80.388478][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 5087] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./0/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./0") = 0 [pid 5087] mkdir("./1", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 80.388478][ T114] [ 80.399545][ T5087] [ 80.399545][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.399545][ T5087] [ 80.411783][ T5087] [ 80.411783][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.411783][ T5087] [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5098 attached [pid 5098] set_robust_list(0x55559309e660, 24 [pid 5087] <... clone resumed>, child_tidptr=0x55559309e650) = 3 [pid 5098] <... set_robust_list resumed>) = 0 [pid 5098] chdir("./1") = 0 [pid 5098] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5098] setpgid(0, 0) = 0 [pid 5098] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5098] write(3, "1000", 4) = 4 [pid 5098] close(3) = 0 [pid 5098] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5098] memfd_create("syzkaller", 0) = 3 [pid 5098] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5098] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5098] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5098] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5098] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5098] close(3) = 0 [pid 5098] close(4) = 0 [pid 5098] mkdir("./file0", 0777) = 0 [pid 5098] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5098] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5098] chdir("./file0") = 0 [pid 5098] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 80.900884][ T5098] loop0: detected capacity change from 0 to 32768 [ 80.933894][ T5098] [ 80.933894][ T5098] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.933894][ T5098] [pid 5098] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5098] close(3) = 0 [pid 5098] close(4) = -1 EBADF (Bad file descriptor) [pid 5098] close(5) = -1 EBADF (Bad file descriptor) [pid 5098] close(6) = -1 EBADF (Bad file descriptor) [pid 5098] close(7) = -1 EBADF (Bad file descriptor) [pid 5098] close(8) = -1 EBADF (Bad file descriptor) [pid 5098] close(9) = -1 EBADF (Bad file descriptor) [pid 5098] close(10) = -1 EBADF (Bad file descriptor) [pid 5098] close(11) = -1 EBADF (Bad file descriptor) [pid 5098] close(12) = -1 EBADF (Bad file descriptor) [pid 5098] close(13) = -1 EBADF (Bad file descriptor) [pid 5098] close(14) = -1 EBADF (Bad file descriptor) [pid 5098] close(15) = -1 EBADF (Bad file descriptor) [pid 5098] close(16) = -1 EBADF (Bad file descriptor) [pid 5098] close(17) = -1 EBADF (Bad file descriptor) [pid 5098] close(18) = -1 EBADF (Bad file descriptor) [pid 5098] close(19) = -1 EBADF (Bad file descriptor) [pid 5098] close(20) = -1 EBADF (Bad file descriptor) [pid 5098] close(21) = -1 EBADF (Bad file descriptor) [pid 5098] close(22) = -1 EBADF (Bad file descriptor) [pid 5098] close(23) = -1 EBADF (Bad file descriptor) [ 80.964011][ T5098] read_mapping_page failed! [ 80.968528][ T5098] ERROR: (device loop0): txCommit: [ 80.968528][ T5098] [pid 5098] close(24) = -1 EBADF (Bad file descriptor) [pid 5098] close(25) = -1 EBADF (Bad file descriptor) [pid 5098] close(26) = -1 EBADF (Bad file descriptor) [pid 5098] close(27) = -1 EBADF (Bad file descriptor) [pid 5098] close(28) = -1 EBADF (Bad file descriptor) [pid 5098] close(29) = -1 EBADF (Bad file descriptor) [pid 5098] exit_group(0) = ? [pid 5098] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5087] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./1/binderfs") = 0 [ 81.088349][ T61] [ 81.088349][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.088349][ T61] [ 81.098925][ T61] [ 81.098925][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.098925][ T61] [ 81.110067][ T113] [ 81.110067][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.110067][ T113] [ 81.120714][ T61] [ 81.120714][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.120714][ T61] [ 81.131327][ T61] [ 81.131327][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.131327][ T61] [ 81.142342][ T113] [ 81.142342][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.142342][ T113] [ 81.153981][ T61] [ 81.153981][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.153981][ T61] [ 81.165014][ T61] [ 81.165014][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.165014][ T61] [ 81.176068][ T5087] [ 81.176068][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.176068][ T5087] [pid 5087] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./1/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./1") = 0 [pid 5087] mkdir("./2", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 81.186930][ T114] [ 81.186930][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.186930][ T114] [ 81.200109][ T5087] [ 81.200109][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.200109][ T5087] [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5099 attached [pid 5099] set_robust_list(0x55559309e660, 24) = 0 [pid 5087] <... clone resumed>, child_tidptr=0x55559309e650) = 4 [pid 5099] chdir("./2") = 0 [pid 5099] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5099] setpgid(0, 0) = 0 [pid 5099] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5099] write(3, "1000", 4) = 4 [pid 5099] close(3) = 0 [pid 5099] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5099] memfd_create("syzkaller", 0) = 3 [pid 5099] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5099] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5099] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5099] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5099] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5099] close(3) = 0 [pid 5099] close(4) = 0 [pid 5099] mkdir("./file0", 0777) = 0 [pid 5099] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5099] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5099] chdir("./file0") = 0 [pid 5099] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 81.856672][ T5099] loop0: detected capacity change from 0 to 32768 [ 81.890601][ T5099] [ 81.890601][ T5099] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.890601][ T5099] [pid 5099] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5099] close(3) = 0 [pid 5099] close(4) = -1 EBADF (Bad file descriptor) [pid 5099] close(5) = -1 EBADF (Bad file descriptor) [pid 5099] close(6) = -1 EBADF (Bad file descriptor) [pid 5099] close(7) = -1 EBADF (Bad file descriptor) [pid 5099] close(8) = -1 EBADF (Bad file descriptor) [pid 5099] close(9) = -1 EBADF (Bad file descriptor) [pid 5099] close(10) = -1 EBADF (Bad file descriptor) [pid 5099] close(11) = -1 EBADF (Bad file descriptor) [pid 5099] close(12) = -1 EBADF (Bad file descriptor) [pid 5099] close(13) = -1 EBADF (Bad file descriptor) [pid 5099] close(14) = -1 EBADF (Bad file descriptor) [ 81.929041][ T5099] read_mapping_page failed! [ 81.933856][ T5099] ERROR: (device loop0): txCommit: [ 81.933856][ T5099] [pid 5099] close(15) = -1 EBADF (Bad file descriptor) [pid 5099] close(16) = -1 EBADF (Bad file descriptor) [pid 5099] close(17) = -1 EBADF (Bad file descriptor) [pid 5099] close(18) = -1 EBADF (Bad file descriptor) [pid 5099] close(19) = -1 EBADF (Bad file descriptor) [pid 5099] close(20) = -1 EBADF (Bad file descriptor) [pid 5099] close(21) = -1 EBADF (Bad file descriptor) [pid 5099] close(22) = -1 EBADF (Bad file descriptor) [pid 5099] close(23) = -1 EBADF (Bad file descriptor) [pid 5099] close(24) = -1 EBADF (Bad file descriptor) [pid 5099] close(25) = -1 EBADF (Bad file descriptor) [pid 5099] close(26) = -1 EBADF (Bad file descriptor) [pid 5099] close(27) = -1 EBADF (Bad file descriptor) [pid 5099] close(28) = -1 EBADF (Bad file descriptor) [pid 5099] close(29) = -1 EBADF (Bad file descriptor) [pid 5099] exit_group(0) = ? [pid 5099] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=28 /* 0.28 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./2/binderfs") = 0 [ 82.091508][ T61] [ 82.091508][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.091508][ T61] [ 82.102073][ T61] [ 82.102073][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.102073][ T61] [ 82.113043][ T114] [ 82.113043][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.113043][ T114] [ 82.123983][ T61] [ 82.123983][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.123983][ T61] [ 82.134610][ T61] [ 82.134610][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.134610][ T61] [ 82.145581][ T114] [ 82.145581][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.145581][ T114] [ 82.156145][ T61] [ 82.156145][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.156145][ T61] [ 82.166641][ T61] [ 82.166641][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.166641][ T61] [ 82.177540][ T5087] [ 82.177540][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.177540][ T5087] [ 82.189463][ T113] [pid 5087] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [ 82.189463][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.189463][ T113] [ 82.199946][ T5087] [ 82.199946][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.199946][ T5087] [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./2/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./2") = 0 [pid 5087] mkdir("./3", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5100 attached , child_tidptr=0x55559309e650) = 5 [pid 5100] set_robust_list(0x55559309e660, 24) = 0 [pid 5100] chdir("./3") = 0 [pid 5100] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5100] setpgid(0, 0) = 0 [pid 5100] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5100] write(3, "1000", 4) = 4 [pid 5100] close(3) = 0 [pid 5100] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5100] memfd_create("syzkaller", 0) = 3 [pid 5100] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5100] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5100] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5100] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5100] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5100] close(3) = 0 [pid 5100] close(4) = 0 [pid 5100] mkdir("./file0", 0777) = 0 [ 82.735527][ T5100] loop0: detected capacity change from 0 to 32768 [pid 5100] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5100] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5100] chdir("./file0") = 0 [pid 5100] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5100] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5100] close(3) = 0 [pid 5100] close(4) = -1 EBADF (Bad file descriptor) [pid 5100] close(5) = -1 EBADF (Bad file descriptor) [pid 5100] close(6) = -1 EBADF (Bad file descriptor) [pid 5100] close(7) = -1 EBADF (Bad file descriptor) [pid 5100] close(8) = -1 EBADF (Bad file descriptor) [pid 5100] close(9) = -1 EBADF (Bad file descriptor) [pid 5100] close(10) = -1 EBADF (Bad file descriptor) [pid 5100] close(11) = -1 EBADF (Bad file descriptor) [pid 5100] close(12) = -1 EBADF (Bad file descriptor) [pid 5100] close(13) = -1 EBADF (Bad file descriptor) [pid 5100] close(14) = -1 EBADF (Bad file descriptor) [pid 5100] close(15) = -1 EBADF (Bad file descriptor) [pid 5100] close(16) = -1 EBADF (Bad file descriptor) [pid 5100] close(17) = -1 EBADF (Bad file descriptor) [ 82.779847][ T5100] [ 82.779847][ T5100] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.779847][ T5100] [ 82.796565][ T5100] read_mapping_page failed! [ 82.801075][ T5100] ERROR: (device loop0): txCommit: [ 82.801075][ T5100] [pid 5100] close(18) = -1 EBADF (Bad file descriptor) [pid 5100] close(19) = -1 EBADF (Bad file descriptor) [pid 5100] close(20) = -1 EBADF (Bad file descriptor) [pid 5100] close(21) = -1 EBADF (Bad file descriptor) [pid 5100] close(22) = -1 EBADF (Bad file descriptor) [pid 5100] close(23) = -1 EBADF (Bad file descriptor) [pid 5100] close(24) = -1 EBADF (Bad file descriptor) [pid 5100] close(25) = -1 EBADF (Bad file descriptor) [pid 5100] close(26) = -1 EBADF (Bad file descriptor) [pid 5100] close(27) = -1 EBADF (Bad file descriptor) [pid 5100] close(28) = -1 EBADF (Bad file descriptor) [pid 5100] close(29) = -1 EBADF (Bad file descriptor) [pid 5100] exit_group(0) = ? [pid 5100] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 5087] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./3/binderfs") = 0 [ 82.949228][ T61] [ 82.949228][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.949228][ T61] [ 82.959943][ T61] [ 82.959943][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.959943][ T61] [ 82.971076][ T114] [ 82.971076][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.971076][ T114] [ 82.981704][ T61] [ 82.981704][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.981704][ T61] [ 82.992415][ T61] [ 82.992415][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.992415][ T61] [ 83.003663][ T114] [ 83.003663][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.003663][ T114] [ 83.014413][ T61] [ 83.014413][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.014413][ T61] [ 83.024879][ T61] [ 83.024879][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.024879][ T61] [ 83.035793][ T114] [ 83.035793][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.035793][ T114] [ 83.046593][ T5087] [pid 5087] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./3/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [ 83.046593][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.046593][ T5087] [ 83.057611][ T5087] [ 83.057611][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.057611][ T5087] [pid 5087] close(3) = 0 [pid 5087] rmdir("./3") = 0 [pid 5087] mkdir("./4", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5102 attached , child_tidptr=0x55559309e650) = 6 [pid 5102] set_robust_list(0x55559309e660, 24) = 0 [pid 5102] chdir("./4") = 0 [pid 5102] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5102] setpgid(0, 0) = 0 [pid 5102] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5102] write(3, "1000", 4) = 4 [pid 5102] close(3) = 0 [pid 5102] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5102] memfd_create("syzkaller", 0) = 3 [pid 5102] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5102] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5102] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5102] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5102] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5102] close(3) = 0 [pid 5102] close(4) = 0 [pid 5102] mkdir("./file0", 0777) = 0 [ 83.545116][ T5102] loop0: detected capacity change from 0 to 32768 [pid 5102] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5102] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5102] chdir("./file0") = 0 [pid 5102] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5102] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5102] close(3) = 0 [pid 5102] close(4) = -1 EBADF (Bad file descriptor) [pid 5102] close(5) = -1 EBADF (Bad file descriptor) [pid 5102] close(6) = -1 EBADF (Bad file descriptor) [pid 5102] close(7) = -1 EBADF (Bad file descriptor) [pid 5102] close(8) = -1 EBADF (Bad file descriptor) [pid 5102] close(9) = -1 EBADF (Bad file descriptor) [pid 5102] close(10) = -1 EBADF (Bad file descriptor) [pid 5102] close(11) = -1 EBADF (Bad file descriptor) [pid 5102] close(12) = -1 EBADF (Bad file descriptor) [pid 5102] close(13) = -1 EBADF (Bad file descriptor) [pid 5102] close(14) = -1 EBADF (Bad file descriptor) [pid 5102] close(15) = -1 EBADF (Bad file descriptor) [ 83.588447][ T5102] [ 83.588447][ T5102] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.588447][ T5102] [ 83.604997][ T5102] read_mapping_page failed! [ 83.609509][ T5102] ERROR: (device loop0): txCommit: [ 83.609509][ T5102] [pid 5102] close(16) = -1 EBADF (Bad file descriptor) [pid 5102] close(17) = -1 EBADF (Bad file descriptor) [pid 5102] close(18) = -1 EBADF (Bad file descriptor) [pid 5102] close(19) = -1 EBADF (Bad file descriptor) [pid 5102] close(20) = -1 EBADF (Bad file descriptor) [pid 5102] close(21) = -1 EBADF (Bad file descriptor) [pid 5102] close(22) = -1 EBADF (Bad file descriptor) [pid 5102] close(23) = -1 EBADF (Bad file descriptor) [pid 5102] close(24) = -1 EBADF (Bad file descriptor) [pid 5102] close(25) = -1 EBADF (Bad file descriptor) [pid 5102] close(26) = -1 EBADF (Bad file descriptor) [pid 5102] close(27) = -1 EBADF (Bad file descriptor) [pid 5102] close(28) = -1 EBADF (Bad file descriptor) [pid 5102] close(29) = -1 EBADF (Bad file descriptor) [pid 5102] exit_group(0) = ? [pid 5102] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./4/binderfs") = 0 [ 83.780344][ T61] [ 83.780344][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.780344][ T61] [ 83.791011][ T61] [ 83.791011][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.791011][ T61] [ 83.802214][ T113] [ 83.802214][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.802214][ T113] [ 83.812831][ T61] [ 83.812831][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.812831][ T61] [ 83.823448][ T61] [ 83.823448][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.823448][ T61] [ 83.834708][ T114] [ 83.834708][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.834708][ T114] [ 83.845277][ T61] [ 83.845277][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.845277][ T61] [ 83.855810][ T61] [ 83.855810][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.855810][ T61] [ 83.866475][ T5087] [ 83.866475][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.866475][ T5087] [ 83.877972][ T5087] [pid 5087] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./4/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [ 83.877972][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.877972][ T5087] [ 83.888907][ T114] [ 83.888907][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.888907][ T114] [pid 5087] rmdir("./4") = 0 [pid 5087] mkdir("./5", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5103 attached [pid 5103] set_robust_list(0x55559309e660, 24) = 0 [pid 5103] chdir("./5") = 0 [pid 5103] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5103] setpgid(0, 0) = 0 [pid 5103] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5087] <... clone resumed>, child_tidptr=0x55559309e650) = 7 [pid 5103] write(3, "1000", 4) = 4 [pid 5103] close(3) = 0 [pid 5103] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5103] memfd_create("syzkaller", 0) = 3 [pid 5103] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5103] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5103] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5103] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5103] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5103] close(3) = 0 [pid 5103] close(4) = 0 [pid 5103] mkdir("./file0", 0777) = 0 [pid 5103] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5103] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5103] chdir("./file0") = 0 [pid 5103] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 84.368913][ T5103] loop0: detected capacity change from 0 to 32768 [ 84.399704][ T5103] [ 84.399704][ T5103] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 84.399704][ T5103] [pid 5103] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5103] close(3) = 0 [pid 5103] close(4) = -1 EBADF (Bad file descriptor) [pid 5103] close(5) = -1 EBADF (Bad file descriptor) [pid 5103] close(6) = -1 EBADF (Bad file descriptor) [pid 5103] close(7) = -1 EBADF (Bad file descriptor) [pid 5103] close(8) = -1 EBADF (Bad file descriptor) [pid 5103] close(9) = -1 EBADF (Bad file descriptor) [pid 5103] close(10) = -1 EBADF (Bad file descriptor) [pid 5103] close(11) = -1 EBADF (Bad file descriptor) [pid 5103] close(12) = -1 EBADF (Bad file descriptor) [pid 5103] close(13) = -1 EBADF (Bad file descriptor) [pid 5103] close(14) = -1 EBADF (Bad file descriptor) [ 84.438535][ T5103] read_mapping_page failed! [ 84.443390][ T5103] ERROR: (device loop0): txCommit: [ 84.443390][ T5103] [pid 5103] close(15) = -1 EBADF (Bad file descriptor) [pid 5103] close(16) = -1 EBADF (Bad file descriptor) [pid 5103] close(17) = -1 EBADF (Bad file descriptor) [pid 5103] close(18) = -1 EBADF (Bad file descriptor) [pid 5103] close(19) = -1 EBADF (Bad file descriptor) [pid 5103] close(20) = -1 EBADF (Bad file descriptor) [pid 5103] close(21) = -1 EBADF (Bad file descriptor) [pid 5103] close(22) = -1 EBADF (Bad file descriptor) [pid 5103] close(23) = -1 EBADF (Bad file descriptor) [pid 5103] close(24) = -1 EBADF (Bad file descriptor) [pid 5103] close(25) = -1 EBADF (Bad file descriptor) [pid 5103] close(26) = -1 EBADF (Bad file descriptor) [pid 5103] close(27) = -1 EBADF (Bad file descriptor) [pid 5103] close(28) = -1 EBADF (Bad file descriptor) [pid 5103] close(29) = -1 EBADF (Bad file descriptor) [pid 5103] exit_group(0) = ? [pid 5103] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./5/binderfs") = 0 [ 84.627996][ T1097] [ 84.627996][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 84.627996][ T1097] [ 84.638534][ T1097] [ 84.638534][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 84.638534][ T1097] [ 84.649679][ T114] [ 84.649679][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 84.649679][ T114] [ 84.660395][ T1097] [ 84.660395][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 84.660395][ T1097] [ 84.670912][ T1097] [ 84.670912][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 84.670912][ T1097] [ 84.682091][ T114] [ 84.682091][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 84.682091][ T114] [ 84.692791][ T1097] [ 84.692791][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 84.692791][ T1097] [ 84.703296][ T1097] [ 84.703296][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 84.703296][ T1097] [ 84.714159][ T113] [ 84.714159][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 84.714159][ T113] [ 84.725237][ T5087] [pid 5087] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./5/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./5") = 0 [pid 5087] mkdir("./6", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 84.725237][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 84.725237][ T5087] [ 84.736161][ T5087] [ 84.736161][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 84.736161][ T5087] [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55559309e650) = 8 ./strace-static-x86_64: Process 5104 attached [pid 5104] set_robust_list(0x55559309e660, 24) = 0 [pid 5104] chdir("./6") = 0 [pid 5104] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5104] setpgid(0, 0) = 0 [pid 5104] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5104] write(3, "1000", 4) = 4 [pid 5104] close(3) = 0 [pid 5104] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5104] memfd_create("syzkaller", 0) = 3 [pid 5104] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5104] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5104] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5104] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5104] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5104] close(3) = 0 [pid 5104] close(4) = 0 [pid 5104] mkdir("./file0", 0777) = 0 [ 85.220339][ T5104] loop0: detected capacity change from 0 to 32768 [pid 5104] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5104] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5104] chdir("./file0") = 0 [pid 5104] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5104] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5104] close(3) = 0 [pid 5104] close(4) = -1 EBADF (Bad file descriptor) [pid 5104] close(5) = -1 EBADF (Bad file descriptor) [pid 5104] close(6) = -1 EBADF (Bad file descriptor) [pid 5104] close(7) = -1 EBADF (Bad file descriptor) [pid 5104] close(8) = -1 EBADF (Bad file descriptor) [pid 5104] close(9) = -1 EBADF (Bad file descriptor) [pid 5104] close(10) = -1 EBADF (Bad file descriptor) [pid 5104] close(11) = -1 EBADF (Bad file descriptor) [pid 5104] close(12) = -1 EBADF (Bad file descriptor) [pid 5104] close(13) = -1 EBADF (Bad file descriptor) [pid 5104] close(14) = -1 EBADF (Bad file descriptor) [pid 5104] close(15) = -1 EBADF (Bad file descriptor) [pid 5104] close(16) = -1 EBADF (Bad file descriptor) [pid 5104] close(17) = -1 EBADF (Bad file descriptor) [pid 5104] close(18) = -1 EBADF (Bad file descriptor) [pid 5104] close(19) = -1 EBADF (Bad file descriptor) [pid 5104] close(20) = -1 EBADF (Bad file descriptor) [ 85.265179][ T5104] [ 85.265179][ T5104] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.265179][ T5104] [ 85.284142][ T5104] read_mapping_page failed! [ 85.288690][ T5104] ERROR: (device loop0): txCommit: [ 85.288690][ T5104] [pid 5104] close(21) = -1 EBADF (Bad file descriptor) [pid 5104] close(22) = -1 EBADF (Bad file descriptor) [pid 5104] close(23) = -1 EBADF (Bad file descriptor) [pid 5104] close(24) = -1 EBADF (Bad file descriptor) [pid 5104] close(25) = -1 EBADF (Bad file descriptor) [pid 5104] close(26) = -1 EBADF (Bad file descriptor) [pid 5104] close(27) = -1 EBADF (Bad file descriptor) [pid 5104] close(28) = -1 EBADF (Bad file descriptor) [pid 5104] close(29) = -1 EBADF (Bad file descriptor) [pid 5104] exit_group(0) = ? [pid 5104] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=24 /* 0.24 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./6/binderfs") = 0 [ 85.442585][ T1097] [ 85.442585][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.442585][ T1097] [ 85.453224][ T1097] [ 85.453224][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.453224][ T1097] [ 85.464394][ T114] [ 85.464394][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.464394][ T114] [ 85.474937][ T1097] [ 85.474937][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.474937][ T1097] [ 85.485603][ T1097] [ 85.485603][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.485603][ T1097] [ 85.496580][ T113] [ 85.496580][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.496580][ T113] [ 85.507213][ T1097] [ 85.507213][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.507213][ T1097] [ 85.517825][ T1097] [ 85.517825][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.517825][ T1097] [ 85.529605][ T5087] [ 85.529605][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.529605][ T5087] [ 85.540446][ T114] [pid 5087] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [ 85.540446][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.540446][ T114] [ 85.550996][ T5087] [ 85.550996][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.550996][ T5087] [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./6/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./6") = 0 [pid 5087] mkdir("./7", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5105 attached [pid 5105] set_robust_list(0x55559309e660, 24) = 0 [pid 5105] chdir("./7" [pid 5087] <... clone resumed>, child_tidptr=0x55559309e650) = 9 [pid 5105] <... chdir resumed>) = 0 [pid 5105] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5105] setpgid(0, 0) = 0 [pid 5105] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5105] write(3, "1000", 4) = 4 [pid 5105] close(3) = 0 [pid 5105] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5105] memfd_create("syzkaller", 0) = 3 [pid 5105] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5105] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5105] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5105] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5105] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5105] close(3) = 0 [pid 5105] close(4) = 0 [pid 5105] mkdir("./file0", 0777) = 0 [pid 5105] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5105] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5105] chdir("./file0") = 0 [pid 5105] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 86.080543][ T5105] loop0: detected capacity change from 0 to 32768 [ 86.115573][ T5105] [ 86.115573][ T5105] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 86.115573][ T5105] [pid 5105] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5105] close(3) = 0 [pid 5105] close(4) = -1 EBADF (Bad file descriptor) [pid 5105] close(5) = -1 EBADF (Bad file descriptor) [pid 5105] close(6) = -1 EBADF (Bad file descriptor) [pid 5105] close(7) = -1 EBADF (Bad file descriptor) [pid 5105] close(8) = -1 EBADF (Bad file descriptor) [pid 5105] close(9) = -1 EBADF (Bad file descriptor) [pid 5105] close(10) = -1 EBADF (Bad file descriptor) [pid 5105] close(11) = -1 EBADF (Bad file descriptor) [ 86.148997][ T5105] read_mapping_page failed! [ 86.154165][ T5105] ERROR: (device loop0): txCommit: [ 86.154165][ T5105] [pid 5105] close(12) = -1 EBADF (Bad file descriptor) [pid 5105] close(13) = -1 EBADF (Bad file descriptor) [pid 5105] close(14) = -1 EBADF (Bad file descriptor) [pid 5105] close(15) = -1 EBADF (Bad file descriptor) [pid 5105] close(16) = -1 EBADF (Bad file descriptor) [pid 5105] close(17) = -1 EBADF (Bad file descriptor) [pid 5105] close(18) = -1 EBADF (Bad file descriptor) [pid 5105] close(19) = -1 EBADF (Bad file descriptor) [pid 5105] close(20) = -1 EBADF (Bad file descriptor) [pid 5105] close(21) = -1 EBADF (Bad file descriptor) [pid 5105] close(22) = -1 EBADF (Bad file descriptor) [pid 5105] close(23) = -1 EBADF (Bad file descriptor) [pid 5105] close(24) = -1 EBADF (Bad file descriptor) [pid 5105] close(25) = -1 EBADF (Bad file descriptor) [pid 5105] close(26) = -1 EBADF (Bad file descriptor) [pid 5105] close(27) = -1 EBADF (Bad file descriptor) [pid 5105] close(28) = -1 EBADF (Bad file descriptor) [pid 5105] close(29) = -1 EBADF (Bad file descriptor) [pid 5105] exit_group(0) = ? [pid 5105] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./7/binderfs") = 0 [ 86.315190][ T56] cfg80211: failed to load regulatory.db [ 86.336218][ T61] [ 86.336218][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 86.336218][ T61] [ 86.346921][ T61] [ 86.346921][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 86.346921][ T61] [ 86.358230][ T114] [ 86.358230][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 86.358230][ T114] [ 86.369325][ T61] [ 86.369325][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 86.369325][ T61] [ 86.379846][ T61] [ 86.379846][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 86.379846][ T61] [ 86.390961][ T113] [ 86.390961][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 86.390961][ T113] [ 86.401746][ T61] [ 86.401746][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 86.401746][ T61] [ 86.412274][ T61] [pid 5087] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./7/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./7") = 0 [pid 5087] mkdir("./8", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 86.412274][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 86.412274][ T61] [ 86.422942][ T5087] [ 86.422942][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 86.422942][ T5087] [ 86.433725][ T114] [ 86.433725][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 86.433725][ T114] [ 86.444715][ T5087] [ 86.444715][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 86.444715][ T5087] [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5106 attached [pid 5106] set_robust_list(0x55559309e660, 24 [pid 5087] <... clone resumed>, child_tidptr=0x55559309e650) = 10 [pid 5106] <... set_robust_list resumed>) = 0 [pid 5106] chdir("./8") = 0 [pid 5106] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5106] setpgid(0, 0) = 0 [pid 5106] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5106] write(3, "1000", 4) = 4 [pid 5106] close(3) = 0 [pid 5106] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5106] memfd_create("syzkaller", 0) = 3 [pid 5106] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5106] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5106] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5106] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5106] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5106] close(3) = 0 [pid 5106] close(4) = 0 [pid 5106] mkdir("./file0", 0777) = 0 [ 86.935894][ T5106] loop0: detected capacity change from 0 to 32768 [pid 5106] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5106] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5106] chdir("./file0") = 0 [pid 5106] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5106] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5106] close(3) = 0 [pid 5106] close(4) = -1 EBADF (Bad file descriptor) [pid 5106] close(5) = -1 EBADF (Bad file descriptor) [pid 5106] close(6) = -1 EBADF (Bad file descriptor) [pid 5106] close(7) = -1 EBADF (Bad file descriptor) [pid 5106] close(8) = -1 EBADF (Bad file descriptor) [pid 5106] close(9) = -1 EBADF (Bad file descriptor) [pid 5106] close(10) = -1 EBADF (Bad file descriptor) [pid 5106] close(11) = -1 EBADF (Bad file descriptor) [pid 5106] close(12) = -1 EBADF (Bad file descriptor) [pid 5106] close(13) = -1 EBADF (Bad file descriptor) [pid 5106] close(14) = -1 EBADF (Bad file descriptor) [pid 5106] close(15) = -1 EBADF (Bad file descriptor) [pid 5106] close(16) = -1 EBADF (Bad file descriptor) [pid 5106] close(17) = -1 EBADF (Bad file descriptor) [pid 5106] close(18) = -1 EBADF (Bad file descriptor) [pid 5106] close(19) = -1 EBADF (Bad file descriptor) [ 86.981684][ T5106] [ 86.981684][ T5106] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 86.981684][ T5106] [ 87.017103][ T5106] read_mapping_page failed! [ 87.021755][ T5106] ERROR: (device loop0): txCommit: [ 87.021755][ T5106] [pid 5106] close(20) = -1 EBADF (Bad file descriptor) [pid 5106] close(21) = -1 EBADF (Bad file descriptor) [pid 5106] close(22) = -1 EBADF (Bad file descriptor) [pid 5106] close(23) = -1 EBADF (Bad file descriptor) [pid 5106] close(24) = -1 EBADF (Bad file descriptor) [pid 5106] close(25) = -1 EBADF (Bad file descriptor) [pid 5106] close(26) = -1 EBADF (Bad file descriptor) [pid 5106] close(27) = -1 EBADF (Bad file descriptor) [pid 5106] close(28) = -1 EBADF (Bad file descriptor) [pid 5106] close(29) = -1 EBADF (Bad file descriptor) [pid 5106] exit_group(0) = ? [pid 5106] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=23 /* 0.23 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./8/binderfs") = 0 [ 87.119187][ T1097] [ 87.119187][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.119187][ T1097] [ 87.129712][ T1097] [ 87.129712][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.129712][ T1097] [ 87.141199][ T113] [ 87.141199][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.141199][ T113] [ 87.152142][ T1097] [ 87.152142][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.152142][ T1097] [ 87.162686][ T1097] [ 87.162686][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.162686][ T1097] [ 87.173923][ T114] [ 87.173923][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.173923][ T114] [ 87.185049][ T1097] [ 87.185049][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.185049][ T1097] [ 87.195900][ T1097] [ 87.195900][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.195900][ T1097] [ 87.206670][ T5087] [ 87.206670][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.206670][ T5087] [pid 5087] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./8/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [ 87.218563][ T114] [ 87.218563][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.218563][ T114] [ 87.229127][ T5087] [ 87.229127][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.229127][ T5087] [pid 5087] rmdir("./8") = 0 [pid 5087] mkdir("./9", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5107 attached , child_tidptr=0x55559309e650) = 11 [pid 5107] set_robust_list(0x55559309e660, 24) = 0 [pid 5107] chdir("./9") = 0 [pid 5107] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5107] setpgid(0, 0) = 0 [pid 5107] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5107] write(3, "1000", 4) = 4 [pid 5107] close(3) = 0 [pid 5107] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5107] memfd_create("syzkaller", 0) = 3 [pid 5107] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5107] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5107] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5107] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5107] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5107] close(3) = 0 [pid 5107] close(4) = 0 [pid 5107] mkdir("./file0", 0777) = 0 [ 87.745167][ T5107] loop0: detected capacity change from 0 to 32768 [pid 5107] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5107] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5107] chdir("./file0") = 0 [pid 5107] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5107] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5107] close(3) = 0 [pid 5107] close(4) = -1 EBADF (Bad file descriptor) [pid 5107] close(5) = -1 EBADF (Bad file descriptor) [pid 5107] close(6) = -1 EBADF (Bad file descriptor) [pid 5107] close(7) = -1 EBADF (Bad file descriptor) [pid 5107] close(8) = -1 EBADF (Bad file descriptor) [pid 5107] close(9) = -1 EBADF (Bad file descriptor) [pid 5107] close(10) = -1 EBADF (Bad file descriptor) [pid 5107] close(11) = -1 EBADF (Bad file descriptor) [pid 5107] close(12) = -1 EBADF (Bad file descriptor) [pid 5107] close(13) = -1 EBADF (Bad file descriptor) [pid 5107] close(14) = -1 EBADF (Bad file descriptor) [pid 5107] close(15) = -1 EBADF (Bad file descriptor) [pid 5107] close(16) = -1 EBADF (Bad file descriptor) [ 87.802393][ T5107] [ 87.802393][ T5107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.802393][ T5107] [ 87.820707][ T5107] read_mapping_page failed! [ 87.825696][ T5107] ERROR: (device loop0): txCommit: [ 87.825696][ T5107] [pid 5107] close(17) = -1 EBADF (Bad file descriptor) [pid 5107] close(18) = -1 EBADF (Bad file descriptor) [pid 5107] close(19) = -1 EBADF (Bad file descriptor) [pid 5107] close(20) = -1 EBADF (Bad file descriptor) [pid 5107] close(21) = -1 EBADF (Bad file descriptor) [pid 5107] close(22) = -1 EBADF (Bad file descriptor) [pid 5107] close(23) = -1 EBADF (Bad file descriptor) [pid 5107] close(24) = -1 EBADF (Bad file descriptor) [pid 5107] close(25) = -1 EBADF (Bad file descriptor) [pid 5107] close(26) = -1 EBADF (Bad file descriptor) [pid 5107] close(27) = -1 EBADF (Bad file descriptor) [pid 5107] close(28) = -1 EBADF (Bad file descriptor) [pid 5107] close(29) = -1 EBADF (Bad file descriptor) [pid 5107] exit_group(0) = ? [pid 5107] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=11, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=25 /* 0.25 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./9/binderfs") = 0 [ 87.993085][ T1097] [ 87.993085][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.993085][ T1097] [ 88.003618][ T1097] [ 88.003618][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 88.003618][ T1097] [ 88.014748][ T114] [ 88.014748][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 88.014748][ T114] [ 88.025403][ T1097] [ 88.025403][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 88.025403][ T1097] [ 88.036166][ T1097] [ 88.036166][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 88.036166][ T1097] [ 88.047256][ T113] [ 88.047256][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 88.047256][ T113] [ 88.057929][ T1097] [ 88.057929][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 88.057929][ T1097] [ 88.068404][ T1097] [ 88.068404][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 88.068404][ T1097] [ 88.079260][ T5087] [ 88.079260][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 88.079260][ T5087] [ 88.090127][ T113] [pid 5087] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./9/file0") = 0 [ 88.090127][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 88.090127][ T113] [ 88.101056][ T5087] [ 88.101056][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 88.101056][ T5087] [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./9") = 0 [pid 5087] mkdir("./10", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5108 attached , child_tidptr=0x55559309e650) = 12 [pid 5108] set_robust_list(0x55559309e660, 24) = 0 [pid 5108] chdir("./10") = 0 [pid 5108] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5108] setpgid(0, 0) = 0 [pid 5108] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5108] write(3, "1000", 4) = 4 [pid 5108] close(3) = 0 [pid 5108] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5108] memfd_create("syzkaller", 0) = 3 [pid 5108] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5108] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5108] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5108] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5108] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5108] close(3) = 0 [pid 5108] close(4) = 0 [pid 5108] mkdir("./file0", 0777) = 0 [pid 5108] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5108] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5108] chdir("./file0") = 0 [pid 5108] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 88.625657][ T5108] loop0: detected capacity change from 0 to 32768 [ 88.661870][ T5108] [ 88.661870][ T5108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 88.661870][ T5108] [pid 5108] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5108] close(3) = 0 [pid 5108] close(4) = -1 EBADF (Bad file descriptor) [pid 5108] close(5) = -1 EBADF (Bad file descriptor) [pid 5108] close(6) = -1 EBADF (Bad file descriptor) [pid 5108] close(7) = -1 EBADF (Bad file descriptor) [pid 5108] close(8) = -1 EBADF (Bad file descriptor) [pid 5108] close(9) = -1 EBADF (Bad file descriptor) [pid 5108] close(10) = -1 EBADF (Bad file descriptor) [ 88.689284][ T5108] read_mapping_page failed! [ 88.693942][ T5108] ERROR: (device loop0): txCommit: [ 88.693942][ T5108] [pid 5108] close(11) = -1 EBADF (Bad file descriptor) [pid 5108] close(12) = -1 EBADF (Bad file descriptor) [pid 5108] close(13) = -1 EBADF (Bad file descriptor) [pid 5108] close(14) = -1 EBADF (Bad file descriptor) [pid 5108] close(15) = -1 EBADF (Bad file descriptor) [pid 5108] close(16) = -1 EBADF (Bad file descriptor) [pid 5108] close(17) = -1 EBADF (Bad file descriptor) [pid 5108] close(18) = -1 EBADF (Bad file descriptor) [pid 5108] close(19) = -1 EBADF (Bad file descriptor) [pid 5108] close(20) = -1 EBADF (Bad file descriptor) [pid 5108] close(21) = -1 EBADF (Bad file descriptor) [pid 5108] close(22) = -1 EBADF (Bad file descriptor) [pid 5108] close(23) = -1 EBADF (Bad file descriptor) [pid 5108] close(24) = -1 EBADF (Bad file descriptor) [pid 5108] close(25) = -1 EBADF (Bad file descriptor) [pid 5108] close(26) = -1 EBADF (Bad file descriptor) [pid 5108] close(27) = -1 EBADF (Bad file descriptor) [pid 5108] close(28) = -1 EBADF (Bad file descriptor) [pid 5108] close(29) = -1 EBADF (Bad file descriptor) [pid 5108] exit_group(0) = ? [pid 5108] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./10/binderfs") = 0 [ 88.866032][ T61] [ 88.866032][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 88.866032][ T61] [ 88.877294][ T61] [ 88.877294][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 88.877294][ T61] [ 88.888510][ T113] [ 88.888510][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 88.888510][ T113] [ 88.899499][ T61] [ 88.899499][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 88.899499][ T61] [ 88.909990][ T61] [ 88.909990][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 88.909990][ T61] [ 88.921080][ T114] [ 88.921080][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 88.921080][ T114] [ 88.931719][ T61] [ 88.931719][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 88.931719][ T61] [ 88.942179][ T61] [ 88.942179][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 88.942179][ T61] [ 88.953035][ T114] [ 88.953035][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 88.953035][ T114] [ 88.963585][ T5087] [pid 5087] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 88.963585][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 88.963585][ T5087] [ 88.975031][ T5087] [ 88.975031][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 88.975031][ T5087] [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./10/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./10") = 0 [pid 5087] mkdir("./11", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5109 attached [pid 5109] set_robust_list(0x55559309e660, 24 [pid 5087] <... clone resumed>, child_tidptr=0x55559309e650) = 13 [pid 5109] <... set_robust_list resumed>) = 0 [pid 5109] chdir("./11") = 0 [pid 5109] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5109] setpgid(0, 0) = 0 [pid 5109] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5109] write(3, "1000", 4) = 4 [pid 5109] close(3) = 0 [pid 5109] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5109] memfd_create("syzkaller", 0) = 3 [pid 5109] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5109] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5109] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5109] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5109] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5109] close(3) = 0 [pid 5109] close(4) = 0 [pid 5109] mkdir("./file0", 0777) = 0 [ 89.500817][ T5109] loop0: detected capacity change from 0 to 32768 [pid 5109] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5109] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5109] chdir("./file0") = 0 [pid 5109] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5109] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5109] close(3) = 0 [pid 5109] close(4) = -1 EBADF (Bad file descriptor) [pid 5109] close(5) = -1 EBADF (Bad file descriptor) [pid 5109] close(6) = -1 EBADF (Bad file descriptor) [pid 5109] close(7) = -1 EBADF (Bad file descriptor) [pid 5109] close(8) = -1 EBADF (Bad file descriptor) [pid 5109] close(9) = -1 EBADF (Bad file descriptor) [ 89.549076][ T5109] [ 89.549076][ T5109] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 89.549076][ T5109] [ 89.579117][ T5109] read_mapping_page failed! [ 89.585220][ T5109] ERROR: (device loop0): txCommit: [ 89.585220][ T5109] [pid 5109] close(10) = -1 EBADF (Bad file descriptor) [pid 5109] close(11) = -1 EBADF (Bad file descriptor) [pid 5109] close(12) = -1 EBADF (Bad file descriptor) [pid 5109] close(13) = -1 EBADF (Bad file descriptor) [pid 5109] close(14) = -1 EBADF (Bad file descriptor) [pid 5109] close(15) = -1 EBADF (Bad file descriptor) [pid 5109] close(16) = -1 EBADF (Bad file descriptor) [pid 5109] close(17) = -1 EBADF (Bad file descriptor) [pid 5109] close(18) = -1 EBADF (Bad file descriptor) [pid 5109] close(19) = -1 EBADF (Bad file descriptor) [pid 5109] close(20) = -1 EBADF (Bad file descriptor) [pid 5109] close(21) = -1 EBADF (Bad file descriptor) [pid 5109] close(22) = -1 EBADF (Bad file descriptor) [pid 5109] close(23) = -1 EBADF (Bad file descriptor) [pid 5109] close(24) = -1 EBADF (Bad file descriptor) [pid 5109] close(25) = -1 EBADF (Bad file descriptor) [pid 5109] close(26) = -1 EBADF (Bad file descriptor) [pid 5109] close(27) = -1 EBADF (Bad file descriptor) [pid 5109] close(28) = -1 EBADF (Bad file descriptor) [pid 5109] close(29) = -1 EBADF (Bad file descriptor) [pid 5109] exit_group(0) = ? [pid 5109] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=13, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./11/binderfs") = 0 [ 89.761257][ T11] [ 89.761257][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 89.761257][ T11] [ 89.772139][ T11] [ 89.772139][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 89.772139][ T11] [ 89.783485][ T113] [ 89.783485][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 89.783485][ T113] [ 89.794115][ T11] [ 89.794115][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 89.794115][ T11] [ 89.804839][ T11] [ 89.804839][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 89.804839][ T11] [ 89.815865][ T113] [ 89.815865][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 89.815865][ T113] [ 89.827419][ T11] [ 89.827419][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 89.827419][ T11] [ 89.837939][ T11] [ 89.837939][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 89.837939][ T11] [ 89.848557][ T5087] [ 89.848557][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 89.848557][ T5087] [ 89.859490][ T114] [pid 5087] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./11/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./11") = 0 [pid 5087] mkdir("./12", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 89.859490][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 89.859490][ T114] [ 89.870151][ T5087] [ 89.870151][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 89.870151][ T5087] [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55559309e650) = 14 ./strace-static-x86_64: Process 5110 attached [pid 5110] set_robust_list(0x55559309e660, 24) = 0 [pid 5110] chdir("./12") = 0 [pid 5110] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5110] setpgid(0, 0) = 0 [pid 5110] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5110] write(3, "1000", 4) = 4 [pid 5110] close(3) = 0 [pid 5110] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5110] memfd_create("syzkaller", 0) = 3 [pid 5110] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5110] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5110] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5110] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5110] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5110] close(3) = 0 [pid 5110] close(4) = 0 [pid 5110] mkdir("./file0", 0777) = 0 [pid 5110] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5110] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5110] chdir("./file0") = 0 [ 90.351527][ T5110] loop0: detected capacity change from 0 to 32768 [ 90.386824][ T5110] [ 90.386824][ T5110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.386824][ T5110] [pid 5110] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5110] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5110] close(3) = 0 [pid 5110] close(4) = -1 EBADF (Bad file descriptor) [pid 5110] close(5) = -1 EBADF (Bad file descriptor) [pid 5110] close(6) = -1 EBADF (Bad file descriptor) [pid 5110] close(7) = -1 EBADF (Bad file descriptor) [pid 5110] close(8) = -1 EBADF (Bad file descriptor) [pid 5110] close(9) = -1 EBADF (Bad file descriptor) [pid 5110] close(10) = -1 EBADF (Bad file descriptor) [pid 5110] close(11) = -1 EBADF (Bad file descriptor) [ 90.446036][ T5110] read_mapping_page failed! [ 90.450570][ T5110] ERROR: (device loop0): txCommit: [ 90.450570][ T5110] [pid 5110] close(12) = -1 EBADF (Bad file descriptor) [pid 5110] close(13) = -1 EBADF (Bad file descriptor) [pid 5110] close(14) = -1 EBADF (Bad file descriptor) [pid 5110] close(15) = -1 EBADF (Bad file descriptor) [pid 5110] close(16) = -1 EBADF (Bad file descriptor) [pid 5110] close(17) = -1 EBADF (Bad file descriptor) [pid 5110] close(18) = -1 EBADF (Bad file descriptor) [pid 5110] close(19) = -1 EBADF (Bad file descriptor) [pid 5110] close(20) = -1 EBADF (Bad file descriptor) [pid 5110] close(21) = -1 EBADF (Bad file descriptor) [pid 5110] close(22) = -1 EBADF (Bad file descriptor) [pid 5110] close(23) = -1 EBADF (Bad file descriptor) [pid 5110] close(24) = -1 EBADF (Bad file descriptor) [pid 5110] close(25) = -1 EBADF (Bad file descriptor) [pid 5110] close(26) = -1 EBADF (Bad file descriptor) [pid 5110] close(27) = -1 EBADF (Bad file descriptor) [pid 5110] close(28) = -1 EBADF (Bad file descriptor) [pid 5110] close(29) = -1 EBADF (Bad file descriptor) [pid 5110] exit_group(0) = ? [pid 5110] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=14, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=21 /* 0.21 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./12/binderfs") = 0 [ 90.621331][ T1097] [ 90.621331][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.621331][ T1097] [ 90.632026][ T1097] [ 90.632026][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.632026][ T1097] [ 90.643651][ T113] [ 90.643651][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.643651][ T113] [ 90.654199][ T1097] [ 90.654199][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.654199][ T1097] [ 90.664675][ T1097] [ 90.664675][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.664675][ T1097] [ 90.675806][ T114] [ 90.675806][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.675806][ T114] [ 90.686351][ T1097] [ 90.686351][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.686351][ T1097] [ 90.696965][ T1097] [ 90.696965][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.696965][ T1097] [ 90.707588][ T5087] [ 90.707588][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.707588][ T5087] [ 90.719561][ T114] [pid 5087] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [ 90.719561][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.719561][ T114] [ 90.730032][ T5087] [ 90.730032][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.730032][ T5087] [pid 5087] rmdir("./12/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./12") = 0 [pid 5087] mkdir("./13", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55559309e650) = 15 ./strace-static-x86_64: Process 5111 attached [pid 5111] set_robust_list(0x55559309e660, 24) = 0 [pid 5111] chdir("./13") = 0 [pid 5111] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5111] setpgid(0, 0) = 0 [pid 5111] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5111] write(3, "1000", 4) = 4 [pid 5111] close(3) = 0 [pid 5111] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5111] memfd_create("syzkaller", 0) = 3 [pid 5111] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5111] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5111] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5111] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5111] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5111] close(3) = 0 [pid 5111] close(4) = 0 [pid 5111] mkdir("./file0", 0777) = 0 [ 91.249519][ T5111] loop0: detected capacity change from 0 to 32768 [pid 5111] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5111] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5111] chdir("./file0") = 0 [pid 5111] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5111] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5111] close(3) = 0 [pid 5111] close(4) = -1 EBADF (Bad file descriptor) [pid 5111] close(5) = -1 EBADF (Bad file descriptor) [pid 5111] close(6) = -1 EBADF (Bad file descriptor) [pid 5111] close(7) = -1 EBADF (Bad file descriptor) [pid 5111] close(8) = -1 EBADF (Bad file descriptor) [pid 5111] close(9) = -1 EBADF (Bad file descriptor) [pid 5111] close(10) = -1 EBADF (Bad file descriptor) [pid 5111] close(11) = -1 EBADF (Bad file descriptor) [pid 5111] close(12) = -1 EBADF (Bad file descriptor) [pid 5111] close(13) = -1 EBADF (Bad file descriptor) [pid 5111] close(14) = -1 EBADF (Bad file descriptor) [pid 5111] close(15) = -1 EBADF (Bad file descriptor) [pid 5111] close(16) = -1 EBADF (Bad file descriptor) [ 91.292527][ T5111] [ 91.292527][ T5111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 91.292527][ T5111] [ 91.320287][ T5111] read_mapping_page failed! [ 91.325066][ T5111] ERROR: (device loop0): txCommit: [ 91.325066][ T5111] [pid 5111] close(17) = -1 EBADF (Bad file descriptor) [pid 5111] close(18) = -1 EBADF (Bad file descriptor) [pid 5111] close(19) = -1 EBADF (Bad file descriptor) [pid 5111] close(20) = -1 EBADF (Bad file descriptor) [pid 5111] close(21) = -1 EBADF (Bad file descriptor) [pid 5111] close(22) = -1 EBADF (Bad file descriptor) [pid 5111] close(23) = -1 EBADF (Bad file descriptor) [pid 5111] close(24) = -1 EBADF (Bad file descriptor) [pid 5111] close(25) = -1 EBADF (Bad file descriptor) [pid 5111] close(26) = -1 EBADF (Bad file descriptor) [pid 5111] close(27) = -1 EBADF (Bad file descriptor) [pid 5111] close(28) = -1 EBADF (Bad file descriptor) [pid 5111] close(29) = -1 EBADF (Bad file descriptor) [pid 5111] exit_group(0) = ? [pid 5111] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=15, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./13/binderfs") = 0 [ 91.487678][ T1059] [ 91.487678][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 91.487678][ T1059] [ 91.498223][ T1059] [ 91.498223][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 91.498223][ T1059] [ 91.510344][ T114] [ 91.510344][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 91.510344][ T114] [ 91.521066][ T1059] [ 91.521066][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 91.521066][ T1059] [ 91.531857][ T1059] [ 91.531857][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 91.531857][ T1059] [ 91.543090][ T114] [ 91.543090][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 91.543090][ T114] [ 91.553681][ T1059] [ 91.553681][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 91.553681][ T1059] [ 91.564397][ T1059] [ 91.564397][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 91.564397][ T1059] [ 91.575085][ T5087] [ 91.575085][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 91.575085][ T5087] [ 91.585931][ T113] [pid 5087] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./13/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./13") = 0 [pid 5087] mkdir("./14", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 91.585931][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 91.585931][ T113] [ 91.596570][ T5087] [ 91.596570][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 91.596570][ T5087] [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5112 attached [pid 5112] set_robust_list(0x55559309e660, 24 [pid 5087] <... clone resumed>, child_tidptr=0x55559309e650) = 16 [pid 5112] <... set_robust_list resumed>) = 0 [pid 5112] chdir("./14") = 0 [pid 5112] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5112] setpgid(0, 0) = 0 [pid 5112] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5112] write(3, "1000", 4) = 4 [pid 5112] close(3) = 0 [pid 5112] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5112] memfd_create("syzkaller", 0) = 3 [pid 5112] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5112] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5112] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5112] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5112] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5112] close(3) = 0 [pid 5112] close(4) = 0 [pid 5112] mkdir("./file0", 0777) = 0 [ 92.095991][ T5112] loop0: detected capacity change from 0 to 32768 [pid 5112] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5112] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5112] chdir("./file0") = 0 [pid 5112] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5112] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5112] close(3) = 0 [pid 5112] close(4) = -1 EBADF (Bad file descriptor) [pid 5112] close(5) = -1 EBADF (Bad file descriptor) [pid 5112] close(6) = -1 EBADF (Bad file descriptor) [pid 5112] close(7) = -1 EBADF (Bad file descriptor) [pid 5112] close(8) = -1 EBADF (Bad file descriptor) [pid 5112] close(9) = -1 EBADF (Bad file descriptor) [ 92.142501][ T5112] [ 92.142501][ T5112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.142501][ T5112] [ 92.179050][ T5112] read_mapping_page failed! [ 92.183676][ T5112] ERROR: (device loop0): txCommit: [ 92.183676][ T5112] [pid 5112] close(10) = -1 EBADF (Bad file descriptor) [pid 5112] close(11) = -1 EBADF (Bad file descriptor) [pid 5112] close(12) = -1 EBADF (Bad file descriptor) [pid 5112] close(13) = -1 EBADF (Bad file descriptor) [pid 5112] close(14) = -1 EBADF (Bad file descriptor) [pid 5112] close(15) = -1 EBADF (Bad file descriptor) [pid 5112] close(16) = -1 EBADF (Bad file descriptor) [pid 5112] close(17) = -1 EBADF (Bad file descriptor) [pid 5112] close(18) = -1 EBADF (Bad file descriptor) [pid 5112] close(19) = -1 EBADF (Bad file descriptor) [pid 5112] close(20) = -1 EBADF (Bad file descriptor) [pid 5112] close(21) = -1 EBADF (Bad file descriptor) [pid 5112] close(22) = -1 EBADF (Bad file descriptor) [pid 5112] close(23) = -1 EBADF (Bad file descriptor) [pid 5112] close(24) = -1 EBADF (Bad file descriptor) [pid 5112] close(25) = -1 EBADF (Bad file descriptor) [pid 5112] close(26) = -1 EBADF (Bad file descriptor) [pid 5112] close(27) = -1 EBADF (Bad file descriptor) [pid 5112] close(28) = -1 EBADF (Bad file descriptor) [pid 5112] close(29) = -1 EBADF (Bad file descriptor) [pid 5112] exit_group(0) = ? [pid 5112] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=16, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./14/binderfs") = 0 [ 92.365254][ T1097] [ 92.365254][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.365254][ T1097] [ 92.375773][ T1097] [ 92.375773][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.375773][ T1097] [ 92.387014][ T114] [ 92.387014][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.387014][ T114] [ 92.398816][ T1097] [ 92.398816][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.398816][ T1097] [ 92.409321][ T1097] [ 92.409321][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.409321][ T1097] [ 92.420228][ T113] [ 92.420228][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.420228][ T113] [ 92.430835][ T1097] [ 92.430835][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.430835][ T1097] [ 92.441752][ T1097] [ 92.441752][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.441752][ T1097] [ 92.452688][ T113] [ 92.452688][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.452688][ T113] [ 92.463157][ T5087] [pid 5087] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [ 92.463157][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.463157][ T5087] [ 92.474270][ T5087] [ 92.474270][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.474270][ T5087] [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./14/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./14") = 0 [pid 5087] mkdir("./15", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5113 attached [pid 5113] set_robust_list(0x55559309e660, 24 [pid 5087] <... clone resumed>, child_tidptr=0x55559309e650) = 17 [pid 5113] <... set_robust_list resumed>) = 0 [pid 5113] chdir("./15") = 0 [pid 5113] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5113] setpgid(0, 0) = 0 [pid 5113] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5113] write(3, "1000", 4) = 4 [pid 5113] close(3) = 0 [pid 5113] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5113] memfd_create("syzkaller", 0) = 3 [pid 5113] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5113] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5113] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5113] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5113] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5113] close(3) = 0 [pid 5113] close(4) = 0 [pid 5113] mkdir("./file0", 0777) = 0 [pid 5113] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5113] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5113] chdir("./file0") = 0 [pid 5113] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 93.024578][ T5113] loop0: detected capacity change from 0 to 32768 [ 93.057815][ T5113] [ 93.057815][ T5113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.057815][ T5113] [pid 5113] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5113] close(3) = 0 [pid 5113] close(4) = -1 EBADF (Bad file descriptor) [pid 5113] close(5) = -1 EBADF (Bad file descriptor) [pid 5113] close(6) = -1 EBADF (Bad file descriptor) [pid 5113] close(7) = -1 EBADF (Bad file descriptor) [pid 5113] close(8) = -1 EBADF (Bad file descriptor) [pid 5113] close(9) = -1 EBADF (Bad file descriptor) [pid 5113] close(10) = -1 EBADF (Bad file descriptor) [ 93.107065][ T5113] read_mapping_page failed! [ 93.111593][ T5113] ERROR: (device loop0): txCommit: [ 93.111593][ T5113] [pid 5113] close(11) = -1 EBADF (Bad file descriptor) [pid 5113] close(12) = -1 EBADF (Bad file descriptor) [pid 5113] close(13) = -1 EBADF (Bad file descriptor) [pid 5113] close(14) = -1 EBADF (Bad file descriptor) [pid 5113] close(15) = -1 EBADF (Bad file descriptor) [pid 5113] close(16) = -1 EBADF (Bad file descriptor) [pid 5113] close(17) = -1 EBADF (Bad file descriptor) [pid 5113] close(18) = -1 EBADF (Bad file descriptor) [pid 5113] close(19) = -1 EBADF (Bad file descriptor) [pid 5113] close(20) = -1 EBADF (Bad file descriptor) [pid 5113] close(21) = -1 EBADF (Bad file descriptor) [pid 5113] close(22) = -1 EBADF (Bad file descriptor) [pid 5113] close(23) = -1 EBADF (Bad file descriptor) [pid 5113] close(24) = -1 EBADF (Bad file descriptor) [pid 5113] close(25) = -1 EBADF (Bad file descriptor) [pid 5113] close(26) = -1 EBADF (Bad file descriptor) [pid 5113] close(27) = -1 EBADF (Bad file descriptor) [pid 5113] close(28) = -1 EBADF (Bad file descriptor) [pid 5113] close(29) = -1 EBADF (Bad file descriptor) [pid 5113] exit_group(0) = ? [pid 5113] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=17, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./15/binderfs") = 0 [ 93.284462][ T1097] [ 93.284462][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.284462][ T1097] [ 93.295001][ T1097] [ 93.295001][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.295001][ T1097] [ 93.306272][ T114] [ 93.306272][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.306272][ T114] [ 93.317485][ T1097] [ 93.317485][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.317485][ T1097] [ 93.328117][ T1097] [ 93.328117][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.328117][ T1097] [ 93.339243][ T113] [ 93.339243][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.339243][ T113] [ 93.349868][ T1097] [ 93.349868][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.349868][ T1097] [ 93.360952][ T1097] [ 93.360952][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.360952][ T1097] [ 93.372065][ T113] [ 93.372065][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.372065][ T113] [ 93.382756][ T5087] [pid 5087] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./15/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [ 93.382756][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.382756][ T5087] [ 93.394406][ T5087] [ 93.394406][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.394406][ T5087] [pid 5087] close(4) = 0 [pid 5087] rmdir("./15/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./15") = 0 [pid 5087] mkdir("./16", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5115 attached , child_tidptr=0x55559309e650) = 18 [pid 5115] set_robust_list(0x55559309e660, 24) = 0 [pid 5115] chdir("./16") = 0 [pid 5115] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5115] setpgid(0, 0) = 0 [pid 5115] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5115] write(3, "1000", 4) = 4 [pid 5115] close(3) = 0 [pid 5115] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5115] memfd_create("syzkaller", 0) = 3 [pid 5115] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5115] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5115] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5115] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5115] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5115] close(3) = 0 [pid 5115] close(4) = 0 [pid 5115] mkdir("./file0", 0777) = 0 [pid 5115] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5115] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5115] chdir("./file0") = 0 [pid 5115] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 93.903725][ T5115] loop0: detected capacity change from 0 to 32768 [ 93.939729][ T5115] [ 93.939729][ T5115] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.939729][ T5115] [pid 5115] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5115] close(3) = 0 [pid 5115] close(4) = -1 EBADF (Bad file descriptor) [pid 5115] close(5) = -1 EBADF (Bad file descriptor) [pid 5115] close(6) = -1 EBADF (Bad file descriptor) [pid 5115] close(7) = -1 EBADF (Bad file descriptor) [pid 5115] close(8) = -1 EBADF (Bad file descriptor) [pid 5115] close(9) = -1 EBADF (Bad file descriptor) [pid 5115] close(10) = -1 EBADF (Bad file descriptor) [pid 5115] close(11) = -1 EBADF (Bad file descriptor) [pid 5115] close(12) = -1 EBADF (Bad file descriptor) [pid 5115] close(13) = -1 EBADF (Bad file descriptor) [pid 5115] close(14) = -1 EBADF (Bad file descriptor) [pid 5115] close(15) = -1 EBADF (Bad file descriptor) [pid 5115] close(16) = -1 EBADF (Bad file descriptor) [pid 5115] close(17) = -1 EBADF (Bad file descriptor) [pid 5115] close(18) = -1 EBADF (Bad file descriptor) [ 93.976747][ T5115] read_mapping_page failed! [ 93.981322][ T5115] ERROR: (device loop0): txCommit: [ 93.981322][ T5115] [pid 5115] close(19) = -1 EBADF (Bad file descriptor) [pid 5115] close(20) = -1 EBADF (Bad file descriptor) [pid 5115] close(21) = -1 EBADF (Bad file descriptor) [pid 5115] close(22) = -1 EBADF (Bad file descriptor) [pid 5115] close(23) = -1 EBADF (Bad file descriptor) [pid 5115] close(24) = -1 EBADF (Bad file descriptor) [pid 5115] close(25) = -1 EBADF (Bad file descriptor) [pid 5115] close(26) = -1 EBADF (Bad file descriptor) [pid 5115] close(27) = -1 EBADF (Bad file descriptor) [pid 5115] close(28) = -1 EBADF (Bad file descriptor) [pid 5115] close(29) = -1 EBADF (Bad file descriptor) [pid 5115] exit_group(0) = ? [pid 5115] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=18, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./16/binderfs") = 0 [ 94.131386][ T11] [ 94.131386][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 94.131386][ T11] [ 94.142404][ T11] [ 94.142404][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 94.142404][ T11] [ 94.153887][ T114] [ 94.153887][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 94.153887][ T114] [ 94.164686][ T11] [ 94.164686][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 94.164686][ T11] [ 94.175204][ T11] [ 94.175204][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 94.175204][ T11] [ 94.186207][ T114] [ 94.186207][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 94.186207][ T114] [ 94.196786][ T11] [ 94.196786][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 94.196786][ T11] [ 94.207287][ T11] [ 94.207287][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 94.207287][ T11] [ 94.218146][ T5087] [ 94.218146][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 94.218146][ T5087] [ 94.228830][ T113] [pid 5087] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./16/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./16/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./16") = 0 [pid 5087] mkdir("./17", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 94.228830][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 94.228830][ T113] [ 94.239360][ T5087] [ 94.239360][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 94.239360][ T5087] [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5116 attached , child_tidptr=0x55559309e650) = 19 [pid 5116] set_robust_list(0x55559309e660, 24) = 0 [pid 5116] chdir("./17") = 0 [pid 5116] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5116] setpgid(0, 0) = 0 [pid 5116] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5116] write(3, "1000", 4) = 4 [pid 5116] close(3) = 0 [pid 5116] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5116] memfd_create("syzkaller", 0) = 3 [pid 5116] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5116] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5116] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5116] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5116] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5116] close(3) = 0 [pid 5116] close(4) = 0 [pid 5116] mkdir("./file0", 0777) = 0 [pid 5116] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5116] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5116] chdir("./file0") = 0 [pid 5116] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 94.729401][ T5116] loop0: detected capacity change from 0 to 32768 [ 94.764518][ T5116] [ 94.764518][ T5116] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 94.764518][ T5116] [pid 5116] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5116] close(3) = 0 [pid 5116] close(4) = -1 EBADF (Bad file descriptor) [pid 5116] close(5) = -1 EBADF (Bad file descriptor) [pid 5116] close(6) = -1 EBADF (Bad file descriptor) [pid 5116] close(7) = -1 EBADF (Bad file descriptor) [pid 5116] close(8) = -1 EBADF (Bad file descriptor) [pid 5116] close(9) = -1 EBADF (Bad file descriptor) [pid 5116] close(10) = -1 EBADF (Bad file descriptor) [pid 5116] close(11) = -1 EBADF (Bad file descriptor) [pid 5116] close(12) = -1 EBADF (Bad file descriptor) [ 94.781157][ T5116] read_mapping_page failed! [ 94.785843][ T5116] ERROR: (device loop0): txCommit: [ 94.785843][ T5116] [pid 5116] close(13) = -1 EBADF (Bad file descriptor) [pid 5116] close(14) = -1 EBADF (Bad file descriptor) [pid 5116] close(15) = -1 EBADF (Bad file descriptor) [pid 5116] close(16) = -1 EBADF (Bad file descriptor) [pid 5116] close(17) = -1 EBADF (Bad file descriptor) [pid 5116] close(18) = -1 EBADF (Bad file descriptor) [pid 5116] close(19) = -1 EBADF (Bad file descriptor) [pid 5116] close(20) = -1 EBADF (Bad file descriptor) [pid 5116] close(21) = -1 EBADF (Bad file descriptor) [pid 5116] close(22) = -1 EBADF (Bad file descriptor) [pid 5116] close(23) = -1 EBADF (Bad file descriptor) [pid 5116] close(24) = -1 EBADF (Bad file descriptor) [pid 5116] close(25) = -1 EBADF (Bad file descriptor) [pid 5116] close(26) = -1 EBADF (Bad file descriptor) [pid 5116] close(27) = -1 EBADF (Bad file descriptor) [pid 5116] close(28) = -1 EBADF (Bad file descriptor) [pid 5116] close(29) = -1 EBADF (Bad file descriptor) [pid 5116] exit_group(0) = ? [pid 5116] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=19, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./17/binderfs") = 0 [ 94.973606][ T1097] [ 94.973606][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 94.973606][ T1097] [ 94.984180][ T1097] [ 94.984180][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 94.984180][ T1097] [ 94.995369][ T114] [ 94.995369][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 94.995369][ T114] [ 95.006261][ T1097] [ 95.006261][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 95.006261][ T1097] [ 95.017001][ T1097] [ 95.017001][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 95.017001][ T1097] [ 95.028088][ T114] [ 95.028088][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 95.028088][ T114] [ 95.038640][ T1097] [ 95.038640][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 95.038640][ T1097] [ 95.049147][ T1097] [ 95.049147][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 95.049147][ T1097] [ 95.060232][ T114] [ 95.060232][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 95.060232][ T114] [ 95.070799][ T5087] [pid 5087] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./17/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [ 95.070799][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 95.070799][ T5087] [ 95.082096][ T5087] [ 95.082096][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 95.082096][ T5087] [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./17/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./17") = 0 [pid 5087] mkdir("./18", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5117 attached , child_tidptr=0x55559309e650) = 20 [pid 5117] set_robust_list(0x55559309e660, 24) = 0 [pid 5117] chdir("./18") = 0 [pid 5117] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5117] setpgid(0, 0) = 0 [pid 5117] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5117] write(3, "1000", 4) = 4 [pid 5117] close(3) = 0 [pid 5117] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5117] memfd_create("syzkaller", 0) = 3 [pid 5117] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5117] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5117] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5117] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5117] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5117] close(3) = 0 [pid 5117] close(4) = 0 [pid 5117] mkdir("./file0", 0777) = 0 [ 95.624076][ T5117] loop0: detected capacity change from 0 to 32768 [pid 5117] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5117] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5117] chdir("./file0") = 0 [pid 5117] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5117] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5117] close(3) = 0 [pid 5117] close(4) = -1 EBADF (Bad file descriptor) [pid 5117] close(5) = -1 EBADF (Bad file descriptor) [pid 5117] close(6) = -1 EBADF (Bad file descriptor) [pid 5117] close(7) = -1 EBADF (Bad file descriptor) [pid 5117] close(8) = -1 EBADF (Bad file descriptor) [pid 5117] close(9) = -1 EBADF (Bad file descriptor) [pid 5117] close(10) = -1 EBADF (Bad file descriptor) [pid 5117] close(11) = -1 EBADF (Bad file descriptor) [pid 5117] close(12) = -1 EBADF (Bad file descriptor) [pid 5117] close(13) = -1 EBADF (Bad file descriptor) [pid 5117] close(14) = -1 EBADF (Bad file descriptor) [pid 5117] close(15) = -1 EBADF (Bad file descriptor) [ 95.675643][ T5117] [ 95.675643][ T5117] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 95.675643][ T5117] [ 95.694893][ T5117] read_mapping_page failed! [ 95.699440][ T5117] ERROR: (device loop0): txCommit: [ 95.699440][ T5117] [pid 5117] close(16) = -1 EBADF (Bad file descriptor) [pid 5117] close(17) = -1 EBADF (Bad file descriptor) [pid 5117] close(18) = -1 EBADF (Bad file descriptor) [pid 5117] close(19) = -1 EBADF (Bad file descriptor) [pid 5117] close(20) = -1 EBADF (Bad file descriptor) [pid 5117] close(21) = -1 EBADF (Bad file descriptor) [pid 5117] close(22) = -1 EBADF (Bad file descriptor) [pid 5117] close(23) = -1 EBADF (Bad file descriptor) [pid 5117] close(24) = -1 EBADF (Bad file descriptor) [pid 5117] close(25) = -1 EBADF (Bad file descriptor) [pid 5117] close(26) = -1 EBADF (Bad file descriptor) [pid 5117] close(27) = -1 EBADF (Bad file descriptor) [pid 5117] close(28) = -1 EBADF (Bad file descriptor) [pid 5117] close(29) = -1 EBADF (Bad file descriptor) [pid 5117] exit_group(0) = ? [pid 5117] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=20, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5087] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./18/binderfs") = 0 [ 95.852128][ T11] [ 95.852128][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 95.852128][ T11] [ 95.863247][ T11] [ 95.863247][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 95.863247][ T11] [ 95.874410][ T113] [ 95.874410][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 95.874410][ T113] [ 95.885134][ T11] [ 95.885134][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 95.885134][ T11] [ 95.895641][ T11] [ 95.895641][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 95.895641][ T11] [ 95.907315][ T113] [ 95.907315][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 95.907315][ T113] [ 95.918073][ T11] [ 95.918073][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 95.918073][ T11] [ 95.928592][ T11] [ 95.928592][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 95.928592][ T11] [ 95.939233][ T5087] [ 95.939233][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 95.939233][ T5087] [ 95.950148][ T113] [pid 5087] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./18/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./18/file0") = 0 [ 95.950148][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 95.950148][ T113] [ 95.960999][ T5087] [ 95.960999][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 95.960999][ T5087] [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./18") = 0 [pid 5087] mkdir("./19", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5118 attached [pid 5118] set_robust_list(0x55559309e660, 24 [pid 5087] <... clone resumed>, child_tidptr=0x55559309e650) = 21 [pid 5118] <... set_robust_list resumed>) = 0 [pid 5118] chdir("./19") = 0 [pid 5118] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5118] setpgid(0, 0) = 0 [pid 5118] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5118] write(3, "1000", 4) = 4 [pid 5118] close(3) = 0 [pid 5118] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5118] memfd_create("syzkaller", 0) = 3 [pid 5118] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5118] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5118] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5118] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5118] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5118] close(3) = 0 [pid 5118] close(4) = 0 [pid 5118] mkdir("./file0", 0777) = 0 [pid 5118] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5118] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5118] chdir("./file0") = 0 [pid 5118] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 96.476531][ T5118] loop0: detected capacity change from 0 to 32768 [ 96.504880][ T5118] [ 96.504880][ T5118] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 96.504880][ T5118] [ 96.522625][ T5118] read_mapping_page failed! [pid 5118] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5118] close(3) = 0 [pid 5118] close(4) = -1 EBADF (Bad file descriptor) [pid 5118] close(5) = -1 EBADF (Bad file descriptor) [pid 5118] close(6) = -1 EBADF (Bad file descriptor) [pid 5118] close(7) = -1 EBADF (Bad file descriptor) [pid 5118] close(8) = -1 EBADF (Bad file descriptor) [pid 5118] close(9) = -1 EBADF (Bad file descriptor) [pid 5118] close(10) = -1 EBADF (Bad file descriptor) [pid 5118] close(11) = -1 EBADF (Bad file descriptor) [pid 5118] close(12) = -1 EBADF (Bad file descriptor) [pid 5118] close(13) = -1 EBADF (Bad file descriptor) [pid 5118] close(14) = -1 EBADF (Bad file descriptor) [pid 5118] close(15) = -1 EBADF (Bad file descriptor) [pid 5118] close(16) = -1 EBADF (Bad file descriptor) [pid 5118] close(17) = -1 EBADF (Bad file descriptor) [pid 5118] close(18) = -1 EBADF (Bad file descriptor) [ 96.527190][ T5118] ERROR: (device loop0): txCommit: [ 96.527190][ T5118] [pid 5118] close(19) = -1 EBADF (Bad file descriptor) [pid 5118] close(20) = -1 EBADF (Bad file descriptor) [pid 5118] close(21) = -1 EBADF (Bad file descriptor) [pid 5118] close(22) = -1 EBADF (Bad file descriptor) [pid 5118] close(23) = -1 EBADF (Bad file descriptor) [pid 5118] close(24) = -1 EBADF (Bad file descriptor) [pid 5118] close(25) = -1 EBADF (Bad file descriptor) [pid 5118] close(26) = -1 EBADF (Bad file descriptor) [pid 5118] close(27) = -1 EBADF (Bad file descriptor) [pid 5118] close(28) = -1 EBADF (Bad file descriptor) [pid 5118] close(29) = -1 EBADF (Bad file descriptor) [pid 5118] exit_group(0) = ? [pid 5118] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=21, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=23 /* 0.23 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./19/binderfs") = 0 [ 96.645921][ T1097] [ 96.645921][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 96.645921][ T1097] [ 96.656496][ T1097] [ 96.656496][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 96.656496][ T1097] [ 96.670373][ T113] [ 96.670373][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 96.670373][ T113] [ 96.681324][ T1097] [ 96.681324][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 96.681324][ T1097] [ 96.692132][ T1097] [ 96.692132][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 96.692132][ T1097] [ 96.703258][ T114] [ 96.703258][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 96.703258][ T114] [ 96.713850][ T1097] [ 96.713850][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 96.713850][ T1097] [ 96.724317][ T1097] [ 96.724317][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 96.724317][ T1097] [ 96.735194][ T113] [ 96.735194][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 96.735194][ T113] [pid 5087] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./19/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./19/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./19") = 0 [pid 5087] mkdir("./20", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 96.745727][ T5087] [ 96.745727][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 96.745727][ T5087] [ 96.757111][ T5087] [ 96.757111][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 96.757111][ T5087] [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5119 attached , child_tidptr=0x55559309e650) = 22 [pid 5119] set_robust_list(0x55559309e660, 24) = 0 [pid 5119] chdir("./20") = 0 [pid 5119] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5119] setpgid(0, 0) = 0 [pid 5119] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5119] write(3, "1000", 4) = 4 [pid 5119] close(3) = 0 [pid 5119] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5119] memfd_create("syzkaller", 0) = 3 [pid 5119] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5119] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5119] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5119] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5119] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5119] close(3) = 0 [pid 5119] close(4) = 0 [pid 5119] mkdir("./file0", 0777) = 0 [pid 5119] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5119] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5119] chdir("./file0") = 0 [pid 5119] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 97.238355][ T5119] loop0: detected capacity change from 0 to 32768 [ 97.269607][ T5119] [ 97.269607][ T5119] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 97.269607][ T5119] [pid 5119] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5119] close(3) = 0 [pid 5119] close(4) = -1 EBADF (Bad file descriptor) [pid 5119] close(5) = -1 EBADF (Bad file descriptor) [pid 5119] close(6) = -1 EBADF (Bad file descriptor) [pid 5119] close(7) = -1 EBADF (Bad file descriptor) [pid 5119] close(8) = -1 EBADF (Bad file descriptor) [pid 5119] close(9) = -1 EBADF (Bad file descriptor) [pid 5119] close(10) = -1 EBADF (Bad file descriptor) [pid 5119] close(11) = -1 EBADF (Bad file descriptor) [pid 5119] close(12) = -1 EBADF (Bad file descriptor) [pid 5119] close(13) = -1 EBADF (Bad file descriptor) [ 97.306606][ T5119] read_mapping_page failed! [ 97.311168][ T5119] ERROR: (device loop0): txCommit: [ 97.311168][ T5119] [pid 5119] close(14) = -1 EBADF (Bad file descriptor) [pid 5119] close(15) = -1 EBADF (Bad file descriptor) [pid 5119] close(16) = -1 EBADF (Bad file descriptor) [pid 5119] close(17) = -1 EBADF (Bad file descriptor) [pid 5119] close(18) = -1 EBADF (Bad file descriptor) [pid 5119] close(19) = -1 EBADF (Bad file descriptor) [pid 5119] close(20) = -1 EBADF (Bad file descriptor) [pid 5119] close(21) = -1 EBADF (Bad file descriptor) [pid 5119] close(22) = -1 EBADF (Bad file descriptor) [pid 5119] close(23) = -1 EBADF (Bad file descriptor) [pid 5119] close(24) = -1 EBADF (Bad file descriptor) [pid 5119] close(25) = -1 EBADF (Bad file descriptor) [pid 5119] close(26) = -1 EBADF (Bad file descriptor) [pid 5119] close(27) = -1 EBADF (Bad file descriptor) [pid 5119] close(28) = -1 EBADF (Bad file descriptor) [pid 5119] close(29) = -1 EBADF (Bad file descriptor) [pid 5119] exit_group(0) = ? [pid 5119] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=22, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=23 /* 0.23 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./20/binderfs") = 0 [ 97.492110][ T1097] [ 97.492110][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 97.492110][ T1097] [ 97.502750][ T1097] [ 97.502750][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 97.502750][ T1097] [ 97.513988][ T114] [ 97.513988][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 97.513988][ T114] [ 97.524527][ T1097] [ 97.524527][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 97.524527][ T1097] [ 97.535108][ T1097] [ 97.535108][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 97.535108][ T1097] [ 97.546469][ T113] [ 97.546469][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 97.546469][ T113] [ 97.557102][ T1097] [ 97.557102][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 97.557102][ T1097] [ 97.567820][ T1097] [ 97.567820][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 97.567820][ T1097] [ 97.578860][ T114] [ 97.578860][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 97.578860][ T114] [ 97.589409][ T5087] [pid 5087] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./20/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./20/file0") = 0 [ 97.589409][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 97.589409][ T5087] [ 97.600168][ T5087] [ 97.600168][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 97.600168][ T5087] [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./20") = 0 [pid 5087] mkdir("./21", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5120 attached , child_tidptr=0x55559309e650) = 23 [pid 5120] set_robust_list(0x55559309e660, 24) = 0 [pid 5120] chdir("./21") = 0 [pid 5120] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5120] setpgid(0, 0) = 0 [pid 5120] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5120] write(3, "1000", 4) = 4 [pid 5120] close(3) = 0 [pid 5120] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5120] memfd_create("syzkaller", 0) = 3 [pid 5120] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5120] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5120] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5120] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5120] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5120] close(3) = 0 [pid 5120] close(4) = 0 [pid 5120] mkdir("./file0", 0777) = 0 [pid 5120] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5120] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5120] chdir("./file0") = 0 [pid 5120] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 98.128748][ T5120] loop0: detected capacity change from 0 to 32768 [ 98.167275][ T5120] [ 98.167275][ T5120] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 98.167275][ T5120] [pid 5120] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5120] close(3) = 0 [pid 5120] close(4) = -1 EBADF (Bad file descriptor) [pid 5120] close(5) = -1 EBADF (Bad file descriptor) [pid 5120] close(6) = -1 EBADF (Bad file descriptor) [pid 5120] close(7) = -1 EBADF (Bad file descriptor) [pid 5120] close(8) = -1 EBADF (Bad file descriptor) [pid 5120] close(9) = -1 EBADF (Bad file descriptor) [pid 5120] close(10) = -1 EBADF (Bad file descriptor) [pid 5120] close(11) = -1 EBADF (Bad file descriptor) [pid 5120] close(12) = -1 EBADF (Bad file descriptor) [pid 5120] close(13) = -1 EBADF (Bad file descriptor) [pid 5120] close(14) = -1 EBADF (Bad file descriptor) [pid 5120] close(15) = -1 EBADF (Bad file descriptor) [pid 5120] close(16) = -1 EBADF (Bad file descriptor) [pid 5120] close(17) = -1 EBADF (Bad file descriptor) [pid 5120] close(18) = -1 EBADF (Bad file descriptor) [pid 5120] close(19) = -1 EBADF (Bad file descriptor) [pid 5120] close(20) = -1 EBADF (Bad file descriptor) [ 98.186285][ T5120] read_mapping_page failed! [ 98.190819][ T5120] ERROR: (device loop0): txCommit: [ 98.190819][ T5120] [pid 5120] close(21) = -1 EBADF (Bad file descriptor) [pid 5120] close(22) = -1 EBADF (Bad file descriptor) [pid 5120] close(23) = -1 EBADF (Bad file descriptor) [pid 5120] close(24) = -1 EBADF (Bad file descriptor) [pid 5120] close(25) = -1 EBADF (Bad file descriptor) [pid 5120] close(26) = -1 EBADF (Bad file descriptor) [pid 5120] close(27) = -1 EBADF (Bad file descriptor) [pid 5120] close(28) = -1 EBADF (Bad file descriptor) [pid 5120] close(29) = -1 EBADF (Bad file descriptor) [pid 5120] exit_group(0) = ? [pid 5120] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=23, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=22 /* 0.22 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./21/binderfs") = 0 [ 98.341564][ T1059] [ 98.341564][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 98.341564][ T1059] [ 98.352189][ T1059] [ 98.352189][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 98.352189][ T1059] [ 98.363564][ T113] [ 98.363564][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 98.363564][ T113] [ 98.374253][ T1059] [ 98.374253][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 98.374253][ T1059] [ 98.384827][ T1059] [ 98.384827][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 98.384827][ T1059] [ 98.396009][ T114] [ 98.396009][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 98.396009][ T114] [ 98.406671][ T1059] [ 98.406671][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 98.406671][ T1059] [ 98.417204][ T1059] [ 98.417204][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 98.417204][ T1059] [ 98.427951][ T5087] [ 98.427951][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 98.427951][ T5087] [ 98.438756][ T114] [pid 5087] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./21/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [ 98.438756][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 98.438756][ T114] [ 98.449237][ T5087] [ 98.449237][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 98.449237][ T5087] [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./21/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./21") = 0 [pid 5087] mkdir("./22", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55559309e650) = 24 ./strace-static-x86_64: Process 5121 attached [pid 5121] set_robust_list(0x55559309e660, 24) = 0 [pid 5121] chdir("./22") = 0 [pid 5121] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5121] setpgid(0, 0) = 0 [pid 5121] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5121] write(3, "1000", 4) = 4 [pid 5121] close(3) = 0 [pid 5121] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5121] memfd_create("syzkaller", 0) = 3 [pid 5121] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5121] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5121] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5121] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5121] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5121] close(3) = 0 [pid 5121] close(4) = 0 [pid 5121] mkdir("./file0", 0777) = 0 [pid 5121] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5121] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5121] chdir("./file0") = 0 [pid 5121] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 98.987846][ T5121] loop0: detected capacity change from 0 to 32768 [ 99.024773][ T5121] [ 99.024773][ T5121] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 99.024773][ T5121] [pid 5121] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5121] close(3) = 0 [pid 5121] close(4) = -1 EBADF (Bad file descriptor) [pid 5121] close(5) = -1 EBADF (Bad file descriptor) [pid 5121] close(6) = -1 EBADF (Bad file descriptor) [pid 5121] close(7) = -1 EBADF (Bad file descriptor) [pid 5121] close(8) = -1 EBADF (Bad file descriptor) [pid 5121] close(9) = -1 EBADF (Bad file descriptor) [pid 5121] close(10) = -1 EBADF (Bad file descriptor) [ 99.044632][ T5121] read_mapping_page failed! [ 99.049209][ T5121] ERROR: (device loop0): txCommit: [ 99.049209][ T5121] [pid 5121] close(11) = -1 EBADF (Bad file descriptor) [pid 5121] close(12) = -1 EBADF (Bad file descriptor) [pid 5121] close(13) = -1 EBADF (Bad file descriptor) [pid 5121] close(14) = -1 EBADF (Bad file descriptor) [pid 5121] close(15) = -1 EBADF (Bad file descriptor) [pid 5121] close(16) = -1 EBADF (Bad file descriptor) [pid 5121] close(17) = -1 EBADF (Bad file descriptor) [pid 5121] close(18) = -1 EBADF (Bad file descriptor) [pid 5121] close(19) = -1 EBADF (Bad file descriptor) [pid 5121] close(20) = -1 EBADF (Bad file descriptor) [pid 5121] close(21) = -1 EBADF (Bad file descriptor) [pid 5121] close(22) = -1 EBADF (Bad file descriptor) [pid 5121] close(23) = -1 EBADF (Bad file descriptor) [pid 5121] close(24) = -1 EBADF (Bad file descriptor) [pid 5121] close(25) = -1 EBADF (Bad file descriptor) [pid 5121] close(26) = -1 EBADF (Bad file descriptor) [pid 5121] close(27) = -1 EBADF (Bad file descriptor) [pid 5121] close(28) = -1 EBADF (Bad file descriptor) [pid 5121] close(29) = -1 EBADF (Bad file descriptor) [pid 5121] exit_group(0) = ? [pid 5121] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=24, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./22/binderfs") = 0 [ 99.226460][ T11] [ 99.226460][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 99.226460][ T11] [ 99.237041][ T11] [ 99.237041][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 99.237041][ T11] [ 99.248232][ T113] [ 99.248232][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 99.248232][ T113] [ 99.258812][ T11] [ 99.258812][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 99.258812][ T11] [ 99.269583][ T11] [ 99.269583][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 99.269583][ T11] [ 99.281158][ T113] [ 99.281158][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 99.281158][ T113] [ 99.293035][ T11] [ 99.293035][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 99.293035][ T11] [ 99.303713][ T11] [ 99.303713][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 99.303713][ T11] [ 99.314494][ T5087] [ 99.314494][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 99.314494][ T5087] [pid 5087] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./22/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [ 99.325634][ T114] [ 99.325634][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 99.325634][ T114] [ 99.336300][ T5087] [ 99.336300][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 99.336300][ T5087] [pid 5087] close(4) = 0 [pid 5087] rmdir("./22/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./22") = 0 [pid 5087] mkdir("./23", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5122 attached , child_tidptr=0x55559309e650) = 25 [pid 5122] set_robust_list(0x55559309e660, 24) = 0 [pid 5122] chdir("./23") = 0 [pid 5122] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5122] setpgid(0, 0) = 0 [pid 5122] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5122] write(3, "1000", 4) = 4 [pid 5122] close(3) = 0 [pid 5122] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5122] memfd_create("syzkaller", 0) = 3 [pid 5122] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5122] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5122] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5122] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5122] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5122] close(3) = 0 [pid 5122] close(4) = 0 [pid 5122] mkdir("./file0", 0777) = 0 [ 99.834975][ T5122] loop0: detected capacity change from 0 to 32768 [pid 5122] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5122] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5122] chdir("./file0") = 0 [pid 5122] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5122] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5122] close(3) = 0 [pid 5122] close(4) = -1 EBADF (Bad file descriptor) [pid 5122] close(5) = -1 EBADF (Bad file descriptor) [pid 5122] close(6) = -1 EBADF (Bad file descriptor) [pid 5122] close(7) = -1 EBADF (Bad file descriptor) [pid 5122] close(8) = -1 EBADF (Bad file descriptor) [pid 5122] close(9) = -1 EBADF (Bad file descriptor) [pid 5122] close(10) = -1 EBADF (Bad file descriptor) [pid 5122] close(11) = -1 EBADF (Bad file descriptor) [pid 5122] close(12) = -1 EBADF (Bad file descriptor) [pid 5122] close(13) = -1 EBADF (Bad file descriptor) [pid 5122] close(14) = -1 EBADF (Bad file descriptor) [pid 5122] close(15) = -1 EBADF (Bad file descriptor) [pid 5122] close(16) = -1 EBADF (Bad file descriptor) [pid 5122] close(17) = -1 EBADF (Bad file descriptor) [pid 5122] close(18) = -1 EBADF (Bad file descriptor) [pid 5122] close(19) = -1 EBADF (Bad file descriptor) [pid 5122] close(20) = -1 EBADF (Bad file descriptor) [ 99.879056][ T5122] [ 99.879056][ T5122] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 99.879056][ T5122] [ 99.902850][ T5122] read_mapping_page failed! [ 99.907390][ T5122] ERROR: (device loop0): txCommit: [ 99.907390][ T5122] [pid 5122] close(21) = -1 EBADF (Bad file descriptor) [pid 5122] close(22) = -1 EBADF (Bad file descriptor) [pid 5122] close(23) = -1 EBADF (Bad file descriptor) [pid 5122] close(24) = -1 EBADF (Bad file descriptor) [pid 5122] close(25) = -1 EBADF (Bad file descriptor) [pid 5122] close(26) = -1 EBADF (Bad file descriptor) [pid 5122] close(27) = -1 EBADF (Bad file descriptor) [pid 5122] close(28) = -1 EBADF (Bad file descriptor) [pid 5122] close(29) = -1 EBADF (Bad file descriptor) [pid 5122] exit_group(0) = ? [pid 5122] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=25, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./23", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./23/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./23/binderfs") = 0 [ 100.048527][ T11] [ 100.048527][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.048527][ T11] [ 100.059041][ T11] [ 100.059041][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.059041][ T11] [ 100.070141][ T114] [ 100.070141][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.070141][ T114] [ 100.080873][ T11] [ 100.080873][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.080873][ T11] [ 100.091493][ T11] [ 100.091493][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.091493][ T11] [ 100.102552][ T114] [ 100.102552][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.102552][ T114] [ 100.114163][ T11] [ 100.114163][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.114163][ T11] [ 100.124664][ T11] [ 100.124664][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.124664][ T11] [ 100.135591][ T113] [ 100.135591][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.135591][ T113] [ 100.146130][ T5087] [pid 5087] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./23/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [ 100.146130][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.146130][ T5087] [ 100.156883][ T5087] [ 100.156883][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.156883][ T5087] [pid 5087] rmdir("./23/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./23") = 0 [pid 5087] mkdir("./24", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5123 attached , child_tidptr=0x55559309e650) = 26 [pid 5123] set_robust_list(0x55559309e660, 24) = 0 [pid 5123] chdir("./24") = 0 [pid 5123] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5123] setpgid(0, 0) = 0 [pid 5123] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5123] write(3, "1000", 4) = 4 [pid 5123] close(3) = 0 [pid 5123] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5123] memfd_create("syzkaller", 0) = 3 [pid 5123] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5123] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5123] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5123] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5123] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5123] close(3) = 0 [pid 5123] close(4) = 0 [pid 5123] mkdir("./file0", 0777) = 0 [ 100.636373][ T5123] loop0: detected capacity change from 0 to 32768 [pid 5123] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5123] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5123] chdir("./file0") = 0 [pid 5123] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5123] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5123] close(3) = 0 [pid 5123] close(4) = -1 EBADF (Bad file descriptor) [pid 5123] close(5) = -1 EBADF (Bad file descriptor) [pid 5123] close(6) = -1 EBADF (Bad file descriptor) [pid 5123] close(7) = -1 EBADF (Bad file descriptor) [pid 5123] close(8) = -1 EBADF (Bad file descriptor) [pid 5123] close(9) = -1 EBADF (Bad file descriptor) [pid 5123] close(10) = -1 EBADF (Bad file descriptor) [pid 5123] close(11) = -1 EBADF (Bad file descriptor) [pid 5123] close(12) = -1 EBADF (Bad file descriptor) [pid 5123] close(13) = -1 EBADF (Bad file descriptor) [pid 5123] close(14) = -1 EBADF (Bad file descriptor) [pid 5123] close(15) = -1 EBADF (Bad file descriptor) [pid 5123] close(16) = -1 EBADF (Bad file descriptor) [ 100.689753][ T5123] [ 100.689753][ T5123] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.689753][ T5123] [ 100.711131][ T5123] read_mapping_page failed! [ 100.715950][ T5123] ERROR: (device loop0): txCommit: [ 100.715950][ T5123] [pid 5123] close(17) = -1 EBADF (Bad file descriptor) [pid 5123] close(18) = -1 EBADF (Bad file descriptor) [pid 5123] close(19) = -1 EBADF (Bad file descriptor) [pid 5123] close(20) = -1 EBADF (Bad file descriptor) [pid 5123] close(21) = -1 EBADF (Bad file descriptor) [pid 5123] close(22) = -1 EBADF (Bad file descriptor) [pid 5123] close(23) = -1 EBADF (Bad file descriptor) [pid 5123] close(24) = -1 EBADF (Bad file descriptor) [pid 5123] close(25) = -1 EBADF (Bad file descriptor) [pid 5123] close(26) = -1 EBADF (Bad file descriptor) [pid 5123] close(27) = -1 EBADF (Bad file descriptor) [pid 5123] close(28) = -1 EBADF (Bad file descriptor) [pid 5123] close(29) = -1 EBADF (Bad file descriptor) [pid 5123] exit_group(0) = ? [pid 5123] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=26, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./24", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./24/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./24/binderfs") = 0 [ 100.898168][ T1097] [ 100.898168][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.898168][ T1097] [ 100.909112][ T1097] [ 100.909112][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.909112][ T1097] [ 100.920942][ T113] [ 100.920942][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.920942][ T113] [ 100.931738][ T1097] [ 100.931738][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.931738][ T1097] [ 100.942247][ T1097] [ 100.942247][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.942247][ T1097] [ 100.953549][ T113] [ 100.953549][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.953549][ T113] [ 100.964127][ T1097] [ 100.964127][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.964127][ T1097] [ 100.974666][ T1097] [ 100.974666][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.974666][ T1097] [ 100.986296][ T114] [ 100.986296][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.986296][ T114] [pid 5087] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./24/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [ 100.996947][ T5087] [ 100.996947][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.996947][ T5087] [ 101.007632][ T5087] [ 101.007632][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.007632][ T5087] [pid 5087] close(4) = 0 [pid 5087] rmdir("./24/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./24") = 0 [pid 5087] mkdir("./25", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5124 attached , child_tidptr=0x55559309e650) = 27 [pid 5124] set_robust_list(0x55559309e660, 24) = 0 [pid 5124] chdir("./25") = 0 [pid 5124] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5124] setpgid(0, 0) = 0 [pid 5124] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5124] write(3, "1000", 4) = 4 [pid 5124] close(3) = 0 [pid 5124] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5124] memfd_create("syzkaller", 0) = 3 [pid 5124] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5124] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5124] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5124] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5124] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5124] close(3) = 0 [pid 5124] close(4) = 0 [pid 5124] mkdir("./file0", 0777) = 0 [ 101.515307][ T5124] loop0: detected capacity change from 0 to 32768 [pid 5124] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5124] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5124] chdir("./file0") = 0 [pid 5124] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5124] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5124] close(3) = 0 [pid 5124] close(4) = -1 EBADF (Bad file descriptor) [pid 5124] close(5) = -1 EBADF (Bad file descriptor) [pid 5124] close(6) = -1 EBADF (Bad file descriptor) [pid 5124] close(7) = -1 EBADF (Bad file descriptor) [pid 5124] close(8) = -1 EBADF (Bad file descriptor) [pid 5124] close(9) = -1 EBADF (Bad file descriptor) [pid 5124] close(10) = -1 EBADF (Bad file descriptor) [pid 5124] close(11) = -1 EBADF (Bad file descriptor) [pid 5124] close(12) = -1 EBADF (Bad file descriptor) [pid 5124] close(13) = -1 EBADF (Bad file descriptor) [pid 5124] close(14) = -1 EBADF (Bad file descriptor) [pid 5124] close(15) = -1 EBADF (Bad file descriptor) [pid 5124] close(16) = -1 EBADF (Bad file descriptor) [pid 5124] close(17) = -1 EBADF (Bad file descriptor) [pid 5124] close(18) = -1 EBADF (Bad file descriptor) [pid 5124] close(19) = -1 EBADF (Bad file descriptor) [ 101.558636][ T5124] [ 101.558636][ T5124] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.558636][ T5124] [ 101.589095][ T5124] read_mapping_page failed! [ 101.593802][ T5124] ERROR: (device loop0): txCommit: [ 101.593802][ T5124] [pid 5124] close(20) = -1 EBADF (Bad file descriptor) [pid 5124] close(21) = -1 EBADF (Bad file descriptor) [pid 5124] close(22) = -1 EBADF (Bad file descriptor) [pid 5124] close(23) = -1 EBADF (Bad file descriptor) [pid 5124] close(24) = -1 EBADF (Bad file descriptor) [pid 5124] close(25) = -1 EBADF (Bad file descriptor) [pid 5124] close(26) = -1 EBADF (Bad file descriptor) [pid 5124] close(27) = -1 EBADF (Bad file descriptor) [pid 5124] close(28) = -1 EBADF (Bad file descriptor) [pid 5124] close(29) = -1 EBADF (Bad file descriptor) [pid 5124] exit_group(0) = ? [pid 5124] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=27, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./25", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./25/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./25/binderfs") = 0 [ 101.720774][ T1059] [ 101.720774][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.720774][ T1059] [ 101.731426][ T1059] [ 101.731426][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.731426][ T1059] [ 101.742580][ T113] [ 101.742580][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.742580][ T113] [ 101.753223][ T1059] [ 101.753223][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.753223][ T1059] [ 101.763798][ T1059] [ 101.763798][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.763798][ T1059] [ 101.774745][ T113] [ 101.774745][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.774745][ T113] [ 101.785332][ T1059] [ 101.785332][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.785332][ T1059] [ 101.795783][ T1059] [ 101.795783][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.795783][ T1059] [ 101.806822][ T114] [ 101.806822][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.806822][ T114] [ 101.817574][ T5087] [pid 5087] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./25/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [ 101.817574][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.817574][ T5087] [ 101.828538][ T5087] [ 101.828538][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.828538][ T5087] [pid 5087] rmdir("./25/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./25") = 0 [pid 5087] mkdir("./26", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5125 attached [pid 5125] set_robust_list(0x55559309e660, 24 [pid 5087] <... clone resumed>, child_tidptr=0x55559309e650) = 28 [pid 5125] <... set_robust_list resumed>) = 0 [pid 5125] chdir("./26") = 0 [pid 5125] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5125] setpgid(0, 0) = 0 [pid 5125] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5125] write(3, "1000", 4) = 4 [pid 5125] close(3) = 0 [pid 5125] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5125] memfd_create("syzkaller", 0) = 3 [pid 5125] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5125] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5125] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5125] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5125] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5125] close(3) = 0 [pid 5125] close(4) = 0 [pid 5125] mkdir("./file0", 0777) = 0 [pid 5125] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5125] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5125] chdir("./file0") = 0 [pid 5125] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 102.334314][ T5125] loop0: detected capacity change from 0 to 32768 [ 102.366314][ T5125] [ 102.366314][ T5125] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.366314][ T5125] [pid 5125] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5125] close(3) = 0 [pid 5125] close(4) = -1 EBADF (Bad file descriptor) [pid 5125] close(5) = -1 EBADF (Bad file descriptor) [pid 5125] close(6) = -1 EBADF (Bad file descriptor) [pid 5125] close(7) = -1 EBADF (Bad file descriptor) [pid 5125] close(8) = -1 EBADF (Bad file descriptor) [pid 5125] close(9) = -1 EBADF (Bad file descriptor) [pid 5125] close(10) = -1 EBADF (Bad file descriptor) [pid 5125] close(11) = -1 EBADF (Bad file descriptor) [pid 5125] close(12) = -1 EBADF (Bad file descriptor) [pid 5125] close(13) = -1 EBADF (Bad file descriptor) [pid 5125] close(14) = -1 EBADF (Bad file descriptor) [pid 5125] close(15) = -1 EBADF (Bad file descriptor) [ 102.400468][ T5125] read_mapping_page failed! [ 102.405107][ T5125] ERROR: (device loop0): txCommit: [ 102.405107][ T5125] [pid 5125] close(16) = -1 EBADF (Bad file descriptor) [pid 5125] close(17) = -1 EBADF (Bad file descriptor) [pid 5125] close(18) = -1 EBADF (Bad file descriptor) [pid 5125] close(19) = -1 EBADF (Bad file descriptor) [pid 5125] close(20) = -1 EBADF (Bad file descriptor) [pid 5125] close(21) = -1 EBADF (Bad file descriptor) [pid 5125] close(22) = -1 EBADF (Bad file descriptor) [pid 5125] close(23) = -1 EBADF (Bad file descriptor) [pid 5125] close(24) = -1 EBADF (Bad file descriptor) [pid 5125] close(25) = -1 EBADF (Bad file descriptor) [pid 5125] close(26) = -1 EBADF (Bad file descriptor) [pid 5125] close(27) = -1 EBADF (Bad file descriptor) [pid 5125] close(28) = -1 EBADF (Bad file descriptor) [pid 5125] close(29) = -1 EBADF (Bad file descriptor) [pid 5125] exit_group(0) = ? [pid 5125] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=28, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./26", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./26/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./26/binderfs") = 0 [ 102.604016][ T1059] [ 102.604016][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.604016][ T1059] [ 102.614678][ T1059] [ 102.614678][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.614678][ T1059] [ 102.626964][ T114] [ 102.626964][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.626964][ T114] [ 102.637761][ T1059] [ 102.637761][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.637761][ T1059] [ 102.648516][ T1059] [ 102.648516][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.648516][ T1059] [ 102.659507][ T114] [ 102.659507][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.659507][ T114] [ 102.670118][ T1059] [ 102.670118][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.670118][ T1059] [ 102.680680][ T1059] [ 102.680680][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.680680][ T1059] [ 102.691325][ T5087] [ 102.691325][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.691325][ T5087] [pid 5087] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./26/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [ 102.702910][ T114] [ 102.702910][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.702910][ T114] [ 102.713407][ T5087] [ 102.713407][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.713407][ T5087] [pid 5087] close(4) = 0 [pid 5087] rmdir("./26/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./26") = 0 [pid 5087] mkdir("./27", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5126 attached [pid 5126] set_robust_list(0x55559309e660, 24 [pid 5087] <... clone resumed>, child_tidptr=0x55559309e650) = 29 [pid 5126] <... set_robust_list resumed>) = 0 [pid 5126] chdir("./27") = 0 [pid 5126] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5126] setpgid(0, 0) = 0 [pid 5126] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5126] write(3, "1000", 4) = 4 [pid 5126] close(3) = 0 [pid 5126] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5126] memfd_create("syzkaller", 0) = 3 [pid 5126] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5126] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5126] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5126] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5126] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5126] close(3) = 0 [pid 5126] close(4) = 0 [pid 5126] mkdir("./file0", 0777) = 0 [ 103.228185][ T5126] loop0: detected capacity change from 0 to 32768 [pid 5126] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5126] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5126] chdir("./file0") = 0 [pid 5126] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5126] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5126] close(3) = 0 [pid 5126] close(4) = -1 EBADF (Bad file descriptor) [pid 5126] close(5) = -1 EBADF (Bad file descriptor) [pid 5126] close(6) = -1 EBADF (Bad file descriptor) [pid 5126] close(7) = -1 EBADF (Bad file descriptor) [pid 5126] close(8) = -1 EBADF (Bad file descriptor) [pid 5126] close(9) = -1 EBADF (Bad file descriptor) [pid 5126] close(10) = -1 EBADF (Bad file descriptor) [pid 5126] close(11) = -1 EBADF (Bad file descriptor) [pid 5126] close(12) = -1 EBADF (Bad file descriptor) [ 103.277374][ T5126] [ 103.277374][ T5126] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 103.277374][ T5126] [ 103.297037][ T5126] read_mapping_page failed! [ 103.301582][ T5126] ERROR: (device loop0): txCommit: [ 103.301582][ T5126] [pid 5126] close(13) = -1 EBADF (Bad file descriptor) [pid 5126] close(14) = -1 EBADF (Bad file descriptor) [pid 5126] close(15) = -1 EBADF (Bad file descriptor) [pid 5126] close(16) = -1 EBADF (Bad file descriptor) [pid 5126] close(17) = -1 EBADF (Bad file descriptor) [pid 5126] close(18) = -1 EBADF (Bad file descriptor) [pid 5126] close(19) = -1 EBADF (Bad file descriptor) [pid 5126] close(20) = -1 EBADF (Bad file descriptor) [pid 5126] close(21) = -1 EBADF (Bad file descriptor) [pid 5126] close(22) = -1 EBADF (Bad file descriptor) [pid 5126] close(23) = -1 EBADF (Bad file descriptor) [pid 5126] close(24) = -1 EBADF (Bad file descriptor) [pid 5126] close(25) = -1 EBADF (Bad file descriptor) [pid 5126] close(26) = -1 EBADF (Bad file descriptor) [pid 5126] close(27) = -1 EBADF (Bad file descriptor) [pid 5126] close(28) = -1 EBADF (Bad file descriptor) [pid 5126] close(29) = -1 EBADF (Bad file descriptor) [pid 5126] exit_group(0) = ? [pid 5126] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=29, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- [pid 5087] umount2("./27", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./27/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./27/binderfs") = 0 [ 103.479144][ T1097] [ 103.479144][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 103.479144][ T1097] [ 103.489891][ T1097] [ 103.489891][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 103.489891][ T1097] [ 103.501100][ T113] [ 103.501100][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 103.501100][ T113] [ 103.511825][ T1097] [ 103.511825][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 103.511825][ T1097] [ 103.522403][ T1097] [ 103.522403][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 103.522403][ T1097] [ 103.533889][ T114] [ 103.533889][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 103.533889][ T114] [ 103.544518][ T1097] [ 103.544518][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 103.544518][ T1097] [ 103.555070][ T1097] [ 103.555070][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 103.555070][ T1097] [ 103.566032][ T113] [ 103.566032][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 103.566032][ T113] [ 103.576490][ T5087] [pid 5087] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./27/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./27/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./27") = 0 [pid 5087] mkdir("./28", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 103.576490][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 103.576490][ T5087] [ 103.587210][ T5087] [ 103.587210][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 103.587210][ T5087] [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5127 attached [pid 5127] set_robust_list(0x55559309e660, 24) = 0 [pid 5127] chdir("./28" [pid 5087] <... clone resumed>, child_tidptr=0x55559309e650) = 30 [pid 5127] <... chdir resumed>) = 0 [pid 5127] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5127] setpgid(0, 0) = 0 [pid 5127] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5127] write(3, "1000", 4) = 4 [pid 5127] close(3) = 0 [pid 5127] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5127] memfd_create("syzkaller", 0) = 3 [pid 5127] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5127] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5127] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5127] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5127] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5127] close(3) = 0 [pid 5127] close(4) = 0 [pid 5127] mkdir("./file0", 0777) = 0 [pid 5127] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5127] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5127] chdir("./file0") = 0 [pid 5127] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 104.088301][ T5127] loop0: detected capacity change from 0 to 32768 [ 104.118491][ T5127] [ 104.118491][ T5127] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 104.118491][ T5127] [pid 5127] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5127] close(3) = 0 [pid 5127] close(4) = -1 EBADF (Bad file descriptor) [pid 5127] close(5) = -1 EBADF (Bad file descriptor) [pid 5127] close(6) = -1 EBADF (Bad file descriptor) [pid 5127] close(7) = -1 EBADF (Bad file descriptor) [pid 5127] close(8) = -1 EBADF (Bad file descriptor) [pid 5127] close(9) = -1 EBADF (Bad file descriptor) [pid 5127] close(10) = -1 EBADF (Bad file descriptor) [pid 5127] close(11) = -1 EBADF (Bad file descriptor) [pid 5127] close(12) = -1 EBADF (Bad file descriptor) [pid 5127] close(13) = -1 EBADF (Bad file descriptor) [pid 5127] close(14) = -1 EBADF (Bad file descriptor) [pid 5127] close(15) = -1 EBADF (Bad file descriptor) [pid 5127] close(16) = -1 EBADF (Bad file descriptor) [pid 5127] close(17) = -1 EBADF (Bad file descriptor) [ 104.165348][ T5127] read_mapping_page failed! [ 104.169916][ T5127] ERROR: (device loop0): txCommit: [ 104.169916][ T5127] [pid 5127] close(18) = -1 EBADF (Bad file descriptor) [pid 5127] close(19) = -1 EBADF (Bad file descriptor) [pid 5127] close(20) = -1 EBADF (Bad file descriptor) [pid 5127] close(21) = -1 EBADF (Bad file descriptor) [pid 5127] close(22) = -1 EBADF (Bad file descriptor) [pid 5127] close(23) = -1 EBADF (Bad file descriptor) [pid 5127] close(24) = -1 EBADF (Bad file descriptor) [pid 5127] close(25) = -1 EBADF (Bad file descriptor) [pid 5127] close(26) = -1 EBADF (Bad file descriptor) [pid 5127] close(27) = -1 EBADF (Bad file descriptor) [pid 5127] close(28) = -1 EBADF (Bad file descriptor) [pid 5127] close(29) = -1 EBADF (Bad file descriptor) [pid 5127] exit_group(0) = ? [pid 5127] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=30, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./28", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./28/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./28/binderfs") = 0 [ 104.337513][ T1097] [ 104.337513][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 104.337513][ T1097] [ 104.348083][ T1097] [ 104.348083][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 104.348083][ T1097] [ 104.359262][ T114] [ 104.359262][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 104.359262][ T114] [ 104.369825][ T1097] [ 104.369825][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 104.369825][ T1097] [ 104.380344][ T1097] [ 104.380344][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 104.380344][ T1097] [ 104.391410][ T113] [ 104.391410][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 104.391410][ T113] [ 104.402028][ T1097] [ 104.402028][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 104.402028][ T1097] [ 104.412512][ T1097] [ 104.412512][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 104.412512][ T1097] [ 104.423182][ T5087] [ 104.423182][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 104.423182][ T5087] [ 104.435015][ T113] [pid 5087] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./28/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 104.435015][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 104.435015][ T113] [ 104.445538][ T5087] [ 104.445538][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 104.445538][ T5087] [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./28/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./28") = 0 [pid 5087] mkdir("./29", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55559309e650) = 31 ./strace-static-x86_64: Process 5128 attached [pid 5128] set_robust_list(0x55559309e660, 24) = 0 [pid 5128] chdir("./29") = 0 [pid 5128] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5128] setpgid(0, 0) = 0 [pid 5128] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5128] write(3, "1000", 4) = 4 [pid 5128] close(3) = 0 [pid 5128] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5128] memfd_create("syzkaller", 0) = 3 [pid 5128] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5128] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5128] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5128] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5128] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5128] close(3) = 0 [pid 5128] close(4) = 0 [pid 5128] mkdir("./file0", 0777) = 0 [ 104.961466][ T5128] loop0: detected capacity change from 0 to 32768 [pid 5128] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5128] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5128] chdir("./file0") = 0 [pid 5128] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5128] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5128] close(3) = 0 [pid 5128] close(4) = -1 EBADF (Bad file descriptor) [pid 5128] close(5) = -1 EBADF (Bad file descriptor) [pid 5128] close(6) = -1 EBADF (Bad file descriptor) [ 105.008007][ T5128] [ 105.008007][ T5128] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 105.008007][ T5128] [ 105.046118][ T5128] read_mapping_page failed! [ 105.050678][ T5128] ERROR: (device loop0): txCommit: [ 105.050678][ T5128] [pid 5128] close(7) = -1 EBADF (Bad file descriptor) [pid 5128] close(8) = -1 EBADF (Bad file descriptor) [pid 5128] close(9) = -1 EBADF (Bad file descriptor) [pid 5128] close(10) = -1 EBADF (Bad file descriptor) [pid 5128] close(11) = -1 EBADF (Bad file descriptor) [pid 5128] close(12) = -1 EBADF (Bad file descriptor) [pid 5128] close(13) = -1 EBADF (Bad file descriptor) [pid 5128] close(14) = -1 EBADF (Bad file descriptor) [pid 5128] close(15) = -1 EBADF (Bad file descriptor) [pid 5128] close(16) = -1 EBADF (Bad file descriptor) [pid 5128] close(17) = -1 EBADF (Bad file descriptor) [pid 5128] close(18) = -1 EBADF (Bad file descriptor) [pid 5128] close(19) = -1 EBADF (Bad file descriptor) [pid 5128] close(20) = -1 EBADF (Bad file descriptor) [pid 5128] close(21) = -1 EBADF (Bad file descriptor) [pid 5128] close(22) = -1 EBADF (Bad file descriptor) [pid 5128] close(23) = -1 EBADF (Bad file descriptor) [pid 5128] close(24) = -1 EBADF (Bad file descriptor) [pid 5128] close(25) = -1 EBADF (Bad file descriptor) [pid 5128] close(26) = -1 EBADF (Bad file descriptor) [pid 5128] close(27) = -1 EBADF (Bad file descriptor) [pid 5128] close(28) = -1 EBADF (Bad file descriptor) [pid 5128] close(29) = -1 EBADF (Bad file descriptor) [pid 5128] exit_group(0) = ? [pid 5128] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=31, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./29", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./29/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./29/binderfs") = 0 [ 105.205084][ T1059] [ 105.205084][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 105.205084][ T1059] [ 105.216196][ T1059] [ 105.216196][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 105.216196][ T1059] [ 105.227602][ T114] [ 105.227602][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 105.227602][ T114] [ 105.238306][ T1059] [ 105.238306][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 105.238306][ T1059] [ 105.249139][ T1059] [ 105.249139][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 105.249139][ T1059] [ 105.260880][ T113] [ 105.260880][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 105.260880][ T113] [ 105.271439][ T1059] [ 105.271439][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 105.271439][ T1059] [ 105.282016][ T1059] [ 105.282016][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 105.282016][ T1059] [ 105.293315][ T113] [ 105.293315][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 105.293315][ T113] [pid 5087] umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./29/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./29/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./29") = 0 [pid 5087] mkdir("./30", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 105.303801][ T5087] [ 105.303801][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 105.303801][ T5087] [ 105.314491][ T5087] [ 105.314491][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 105.314491][ T5087] [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5129 attached , child_tidptr=0x55559309e650) = 32 [pid 5129] set_robust_list(0x55559309e660, 24) = 0 [pid 5129] chdir("./30") = 0 [pid 5129] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5129] setpgid(0, 0) = 0 [pid 5129] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5129] write(3, "1000", 4) = 4 [pid 5129] close(3) = 0 [pid 5129] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5129] memfd_create("syzkaller", 0) = 3 [pid 5129] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5129] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5129] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5129] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5129] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5129] close(3) = 0 [pid 5129] close(4) = 0 [pid 5129] mkdir("./file0", 0777) = 0 [ 105.779315][ T5129] loop0: detected capacity change from 0 to 32768 [pid 5129] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5129] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5129] chdir("./file0") = 0 [pid 5129] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5129] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5129] close(3) = 0 [pid 5129] close(4) = -1 EBADF (Bad file descriptor) [pid 5129] close(5) = -1 EBADF (Bad file descriptor) [pid 5129] close(6) = -1 EBADF (Bad file descriptor) [pid 5129] close(7) = -1 EBADF (Bad file descriptor) [pid 5129] close(8) = -1 EBADF (Bad file descriptor) [pid 5129] close(9) = -1 EBADF (Bad file descriptor) [pid 5129] close(10) = -1 EBADF (Bad file descriptor) [pid 5129] close(11) = -1 EBADF (Bad file descriptor) [ 105.834621][ T5129] [ 105.834621][ T5129] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 105.834621][ T5129] [ 105.852566][ T5129] read_mapping_page failed! [ 105.857169][ T5129] ERROR: (device loop0): txCommit: [ 105.857169][ T5129] [pid 5129] close(12) = -1 EBADF (Bad file descriptor) [pid 5129] close(13) = -1 EBADF (Bad file descriptor) [pid 5129] close(14) = -1 EBADF (Bad file descriptor) [pid 5129] close(15) = -1 EBADF (Bad file descriptor) [pid 5129] close(16) = -1 EBADF (Bad file descriptor) [pid 5129] close(17) = -1 EBADF (Bad file descriptor) [pid 5129] close(18) = -1 EBADF (Bad file descriptor) [pid 5129] close(19) = -1 EBADF (Bad file descriptor) [pid 5129] close(20) = -1 EBADF (Bad file descriptor) [pid 5129] close(21) = -1 EBADF (Bad file descriptor) [pid 5129] close(22) = -1 EBADF (Bad file descriptor) [pid 5129] close(23) = -1 EBADF (Bad file descriptor) [pid 5129] close(24) = -1 EBADF (Bad file descriptor) [pid 5129] close(25) = -1 EBADF (Bad file descriptor) [pid 5129] close(26) = -1 EBADF (Bad file descriptor) [pid 5129] close(27) = -1 EBADF (Bad file descriptor) [pid 5129] close(28) = -1 EBADF (Bad file descriptor) [pid 5129] close(29) = -1 EBADF (Bad file descriptor) [pid 5129] exit_group(0) = ? [pid 5129] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=32, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./30", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./30/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./30/binderfs") = 0 [ 106.013490][ T1097] [ 106.013490][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 106.013490][ T1097] [ 106.024031][ T1097] [ 106.024031][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 106.024031][ T1097] [ 106.035524][ T114] [ 106.035524][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 106.035524][ T114] [ 106.046357][ T1097] [ 106.046357][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 106.046357][ T1097] [ 106.056864][ T1097] [ 106.056864][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 106.056864][ T1097] [ 106.067912][ T113] [ 106.067912][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 106.067912][ T113] [ 106.079523][ T1097] [ 106.079523][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 106.079523][ T1097] [ 106.090003][ T1097] [ 106.090003][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 106.090003][ T1097] [ 106.101218][ T113] [ 106.101218][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 106.101218][ T113] [pid 5087] umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./30/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./30/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./30") = 0 [pid 5087] mkdir("./31", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 106.111819][ T5087] [ 106.111819][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 106.111819][ T5087] [ 106.122606][ T5087] [ 106.122606][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 106.122606][ T5087] [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5130 attached , child_tidptr=0x55559309e650) = 33 [pid 5130] set_robust_list(0x55559309e660, 24) = 0 [pid 5130] chdir("./31") = 0 [pid 5130] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5130] setpgid(0, 0) = 0 [pid 5130] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5130] write(3, "1000", 4) = 4 [pid 5130] close(3) = 0 [pid 5130] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5130] memfd_create("syzkaller", 0) = 3 [pid 5130] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5130] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5130] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5130] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5130] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5130] close(3) = 0 [pid 5130] close(4) = 0 [pid 5130] mkdir("./file0", 0777) = 0 [pid 5130] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5130] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5130] chdir("./file0") = 0 [pid 5130] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 106.663913][ T5130] loop0: detected capacity change from 0 to 32768 [ 106.695822][ T5130] [ 106.695822][ T5130] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 106.695822][ T5130] [pid 5130] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5130] close(3) = 0 [pid 5130] close(4) = -1 EBADF (Bad file descriptor) [pid 5130] close(5) = -1 EBADF (Bad file descriptor) [pid 5130] close(6) = -1 EBADF (Bad file descriptor) [pid 5130] close(7) = -1 EBADF (Bad file descriptor) [pid 5130] close(8) = -1 EBADF (Bad file descriptor) [pid 5130] close(9) = -1 EBADF (Bad file descriptor) [ 106.734234][ T5130] read_mapping_page failed! [ 106.738860][ T5130] ERROR: (device loop0): txCommit: [ 106.738860][ T5130] [pid 5130] close(10) = -1 EBADF (Bad file descriptor) [pid 5130] close(11) = -1 EBADF (Bad file descriptor) [pid 5130] close(12) = -1 EBADF (Bad file descriptor) [pid 5130] close(13) = -1 EBADF (Bad file descriptor) [pid 5130] close(14) = -1 EBADF (Bad file descriptor) [pid 5130] close(15) = -1 EBADF (Bad file descriptor) [pid 5130] close(16) = -1 EBADF (Bad file descriptor) [pid 5130] close(17) = -1 EBADF (Bad file descriptor) [pid 5130] close(18) = -1 EBADF (Bad file descriptor) [pid 5130] close(19) = -1 EBADF (Bad file descriptor) [pid 5130] close(20) = -1 EBADF (Bad file descriptor) [pid 5130] close(21) = -1 EBADF (Bad file descriptor) [pid 5130] close(22) = -1 EBADF (Bad file descriptor) [pid 5130] close(23) = -1 EBADF (Bad file descriptor) [pid 5130] close(24) = -1 EBADF (Bad file descriptor) [pid 5130] close(25) = -1 EBADF (Bad file descriptor) [pid 5130] close(26) = -1 EBADF (Bad file descriptor) [pid 5130] close(27) = -1 EBADF (Bad file descriptor) [pid 5130] close(28) = -1 EBADF (Bad file descriptor) [pid 5130] close(29) = -1 EBADF (Bad file descriptor) [pid 5130] exit_group(0) = ? [pid 5130] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=33, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=23 /* 0.23 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./31", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./31/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./31/binderfs") = 0 [ 106.948534][ T1097] [ 106.948534][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 106.948534][ T1097] [ 106.959213][ T1097] [ 106.959213][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 106.959213][ T1097] [ 106.970476][ T114] [ 106.970476][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 106.970476][ T114] [ 106.981101][ T1097] [ 106.981101][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 106.981101][ T1097] [ 106.991589][ T1097] [ 106.991589][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 106.991589][ T1097] [ 107.003512][ T114] [ 107.003512][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.003512][ T114] [ 107.014068][ T1097] [ 107.014068][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.014068][ T1097] [ 107.024646][ T1097] [ 107.024646][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.024646][ T1097] [ 107.035578][ T113] [ 107.035578][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.035578][ T113] [ 107.046190][ T5087] [pid 5087] umount2("./31/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./31/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./31/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./31/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./31/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./31") = 0 [pid 5087] mkdir("./32", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 107.046190][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.046190][ T5087] [ 107.057088][ T5087] [ 107.057088][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.057088][ T5087] [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55559309e650) = 34 ./strace-static-x86_64: Process 5131 attached [pid 5131] set_robust_list(0x55559309e660, 24) = 0 [pid 5131] chdir("./32") = 0 [pid 5131] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5131] setpgid(0, 0) = 0 [pid 5131] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5131] write(3, "1000", 4) = 4 [pid 5131] close(3) = 0 [pid 5131] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5131] memfd_create("syzkaller", 0) = 3 [pid 5131] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5131] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5131] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5131] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5131] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5131] close(3) = 0 [pid 5131] close(4) = 0 [pid 5131] mkdir("./file0", 0777) = 0 [ 107.554369][ T5131] loop0: detected capacity change from 0 to 32768 [pid 5131] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5131] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5131] chdir("./file0") = 0 [pid 5131] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5131] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5131] close(3) = 0 [pid 5131] close(4) = -1 EBADF (Bad file descriptor) [pid 5131] close(5) = -1 EBADF (Bad file descriptor) [pid 5131] close(6) = -1 EBADF (Bad file descriptor) [pid 5131] close(7) = -1 EBADF (Bad file descriptor) [pid 5131] close(8) = -1 EBADF (Bad file descriptor) [pid 5131] close(9) = -1 EBADF (Bad file descriptor) [pid 5131] close(10) = -1 EBADF (Bad file descriptor) [pid 5131] close(11) = -1 EBADF (Bad file descriptor) [pid 5131] close(12) = -1 EBADF (Bad file descriptor) [pid 5131] close(13) = -1 EBADF (Bad file descriptor) [pid 5131] close(14) = -1 EBADF (Bad file descriptor) [ 107.595449][ T5131] [ 107.595449][ T5131] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.595449][ T5131] [ 107.621500][ T5131] read_mapping_page failed! [ 107.626706][ T5131] ERROR: (device loop0): txCommit: [ 107.626706][ T5131] [pid 5131] close(15) = -1 EBADF (Bad file descriptor) [pid 5131] close(16) = -1 EBADF (Bad file descriptor) [pid 5131] close(17) = -1 EBADF (Bad file descriptor) [pid 5131] close(18) = -1 EBADF (Bad file descriptor) [pid 5131] close(19) = -1 EBADF (Bad file descriptor) [pid 5131] close(20) = -1 EBADF (Bad file descriptor) [pid 5131] close(21) = -1 EBADF (Bad file descriptor) [pid 5131] close(22) = -1 EBADF (Bad file descriptor) [pid 5131] close(23) = -1 EBADF (Bad file descriptor) [pid 5131] close(24) = -1 EBADF (Bad file descriptor) [pid 5131] close(25) = -1 EBADF (Bad file descriptor) [pid 5131] close(26) = -1 EBADF (Bad file descriptor) [pid 5131] close(27) = -1 EBADF (Bad file descriptor) [pid 5131] close(28) = -1 EBADF (Bad file descriptor) [pid 5131] close(29) = -1 EBADF (Bad file descriptor) [pid 5131] exit_group(0) = ? [pid 5131] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=34, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=22 /* 0.22 s */} --- [pid 5087] umount2("./32", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./32/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./32/binderfs") = 0 [ 107.777439][ T1059] [ 107.777439][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.777439][ T1059] [ 107.788121][ T1059] [ 107.788121][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.788121][ T1059] [ 107.799901][ T114] [ 107.799901][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.799901][ T114] [ 107.811046][ T1059] [ 107.811046][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.811046][ T1059] [ 107.822318][ T1059] [ 107.822318][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.822318][ T1059] [ 107.834229][ T114] [ 107.834229][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.834229][ T114] [ 107.844936][ T1059] [ 107.844936][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.844936][ T1059] [ 107.855428][ T1059] [ 107.855428][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.855428][ T1059] [ 107.866132][ T5087] [ 107.866132][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.866132][ T5087] [pid 5087] umount2("./32/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./32/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./32/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./32/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [ 107.876947][ T113] [ 107.876947][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.876947][ T113] [ 107.888050][ T5087] [ 107.888050][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.888050][ T5087] [pid 5087] close(4) = 0 [pid 5087] rmdir("./32/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./32") = 0 [pid 5087] mkdir("./33", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5132 attached , child_tidptr=0x55559309e650) = 35 [pid 5132] set_robust_list(0x55559309e660, 24) = 0 [pid 5132] chdir("./33") = 0 [pid 5132] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5132] setpgid(0, 0) = 0 [pid 5132] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5132] write(3, "1000", 4) = 4 [pid 5132] close(3) = 0 [pid 5132] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5132] memfd_create("syzkaller", 0) = 3 [pid 5132] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5132] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5132] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5132] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5132] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5132] close(3) = 0 [pid 5132] close(4) = 0 [pid 5132] mkdir("./file0", 0777) = 0 [pid 5132] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5132] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5132] chdir("./file0") = 0 [pid 5132] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 108.382009][ T5132] loop0: detected capacity change from 0 to 32768 [ 108.410863][ T5132] [ 108.410863][ T5132] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 108.410863][ T5132] [pid 5132] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5132] close(3) = 0 [pid 5132] close(4) = -1 EBADF (Bad file descriptor) [pid 5132] close(5) = -1 EBADF (Bad file descriptor) [pid 5132] close(6) = -1 EBADF (Bad file descriptor) [pid 5132] close(7) = -1 EBADF (Bad file descriptor) [pid 5132] close(8) = -1 EBADF (Bad file descriptor) [pid 5132] close(9) = -1 EBADF (Bad file descriptor) [pid 5132] close(10) = -1 EBADF (Bad file descriptor) [pid 5132] close(11) = -1 EBADF (Bad file descriptor) [pid 5132] close(12) = -1 EBADF (Bad file descriptor) [pid 5132] close(13) = -1 EBADF (Bad file descriptor) [pid 5132] close(14) = -1 EBADF (Bad file descriptor) [pid 5132] close(15) = -1 EBADF (Bad file descriptor) [pid 5132] close(16) = -1 EBADF (Bad file descriptor) [pid 5132] close(17) = -1 EBADF (Bad file descriptor) [ 108.447815][ T5132] read_mapping_page failed! [ 108.452470][ T5132] ERROR: (device loop0): txCommit: [ 108.452470][ T5132] [pid 5132] close(18) = -1 EBADF (Bad file descriptor) [pid 5132] close(19) = -1 EBADF (Bad file descriptor) [pid 5132] close(20) = -1 EBADF (Bad file descriptor) [pid 5132] close(21) = -1 EBADF (Bad file descriptor) [pid 5132] close(22) = -1 EBADF (Bad file descriptor) [pid 5132] close(23) = -1 EBADF (Bad file descriptor) [pid 5132] close(24) = -1 EBADF (Bad file descriptor) [pid 5132] close(25) = -1 EBADF (Bad file descriptor) [pid 5132] close(26) = -1 EBADF (Bad file descriptor) [pid 5132] close(27) = -1 EBADF (Bad file descriptor) [pid 5132] close(28) = -1 EBADF (Bad file descriptor) [pid 5132] close(29) = -1 EBADF (Bad file descriptor) [pid 5132] exit_group(0) = ? [pid 5132] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=35, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5087] umount2("./33", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./33/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./33/binderfs") = 0 [ 108.603268][ T1059] [ 108.603268][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 108.603268][ T1059] [ 108.613799][ T1059] [ 108.613799][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 108.613799][ T1059] [ 108.624960][ T113] [ 108.624960][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 108.624960][ T113] [ 108.635592][ T1059] [ 108.635592][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 108.635592][ T1059] [ 108.646321][ T1059] [ 108.646321][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 108.646321][ T1059] [ 108.657449][ T113] [ 108.657449][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 108.657449][ T113] [ 108.668060][ T1059] [ 108.668060][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 108.668060][ T1059] [ 108.678545][ T1059] [ 108.678545][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 108.678545][ T1059] [ 108.689521][ T113] [ 108.689521][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 108.689521][ T113] [ 108.700036][ T5087] [pid 5087] umount2("./33/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./33/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./33/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./33/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./33/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./33") = 0 [pid 5087] mkdir("./34", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 108.700036][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 108.700036][ T5087] [ 108.712351][ T5087] [ 108.712351][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 108.712351][ T5087] [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5133 attached , child_tidptr=0x55559309e650) = 36 [pid 5133] set_robust_list(0x55559309e660, 24) = 0 [pid 5133] chdir("./34") = 0 [pid 5133] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5133] setpgid(0, 0) = 0 [pid 5133] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5133] write(3, "1000", 4) = 4 [pid 5133] close(3) = 0 [pid 5133] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5133] memfd_create("syzkaller", 0) = 3 [pid 5133] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5133] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5133] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5133] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5133] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5133] close(3) = 0 [pid 5133] close(4) = 0 [pid 5133] mkdir("./file0", 0777) = 0 [pid 5133] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5133] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5133] chdir("./file0") = 0 [pid 5133] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 109.182800][ T5133] loop0: detected capacity change from 0 to 32768 [ 109.212611][ T5133] [ 109.212611][ T5133] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 109.212611][ T5133] [pid 5133] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5133] close(3) = 0 [pid 5133] close(4) = -1 EBADF (Bad file descriptor) [pid 5133] close(5) = -1 EBADF (Bad file descriptor) [pid 5133] close(6) = -1 EBADF (Bad file descriptor) [pid 5133] close(7) = -1 EBADF (Bad file descriptor) [pid 5133] close(8) = -1 EBADF (Bad file descriptor) [pid 5133] close(9) = -1 EBADF (Bad file descriptor) [pid 5133] close(10) = -1 EBADF (Bad file descriptor) [pid 5133] close(11) = -1 EBADF (Bad file descriptor) [pid 5133] close(12) = -1 EBADF (Bad file descriptor) [ 109.239155][ T5133] read_mapping_page failed! [ 109.243894][ T5133] ERROR: (device loop0): txCommit: [ 109.243894][ T5133] [pid 5133] close(13) = -1 EBADF (Bad file descriptor) [pid 5133] close(14) = -1 EBADF (Bad file descriptor) [pid 5133] close(15) = -1 EBADF (Bad file descriptor) [pid 5133] close(16) = -1 EBADF (Bad file descriptor) [pid 5133] close(17) = -1 EBADF (Bad file descriptor) [pid 5133] close(18) = -1 EBADF (Bad file descriptor) [pid 5133] close(19) = -1 EBADF (Bad file descriptor) [pid 5133] close(20) = -1 EBADF (Bad file descriptor) [pid 5133] close(21) = -1 EBADF (Bad file descriptor) [pid 5133] close(22) = -1 EBADF (Bad file descriptor) [pid 5133] close(23) = -1 EBADF (Bad file descriptor) [pid 5133] close(24) = -1 EBADF (Bad file descriptor) [pid 5133] close(25) = -1 EBADF (Bad file descriptor) [pid 5133] close(26) = -1 EBADF (Bad file descriptor) [pid 5133] close(27) = -1 EBADF (Bad file descriptor) [pid 5133] close(28) = -1 EBADF (Bad file descriptor) [pid 5133] close(29) = -1 EBADF (Bad file descriptor) [pid 5133] exit_group(0) = ? [pid 5133] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=36, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./34", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./34/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./34/binderfs") = 0 [ 109.434822][ T1097] [ 109.434822][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 109.434822][ T1097] [ 109.445356][ T1097] [ 109.445356][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 109.445356][ T1097] [ 109.456480][ T114] [ 109.456480][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 109.456480][ T114] [ 109.467060][ T1097] [ 109.467060][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 109.467060][ T1097] [ 109.477717][ T1097] [ 109.477717][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 109.477717][ T1097] [ 109.488728][ T114] [ 109.488728][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 109.488728][ T114] [ 109.499541][ T1097] [ 109.499541][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 109.499541][ T1097] [ 109.511337][ T1097] [ 109.511337][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 109.511337][ T1097] [ 109.522197][ T5087] [ 109.522197][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 109.522197][ T5087] [pid 5087] umount2("./34/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./34/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./34/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./34/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [ 109.539080][ T114] [ 109.539080][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 109.539080][ T114] [ 109.550245][ T5087] [ 109.550245][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 109.550245][ T5087] [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./34/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./34") = 0 [pid 5087] mkdir("./35", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5134 attached , child_tidptr=0x55559309e650) = 37 [pid 5134] set_robust_list(0x55559309e660, 24) = 0 [pid 5134] chdir("./35") = 0 [pid 5134] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5134] setpgid(0, 0) = 0 [pid 5134] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5134] write(3, "1000", 4) = 4 [pid 5134] close(3) = 0 [pid 5134] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5134] memfd_create("syzkaller", 0) = 3 [pid 5134] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5134] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5134] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5134] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5134] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5134] close(3) = 0 [pid 5134] close(4) = 0 [pid 5134] mkdir("./file0", 0777) = 0 [ 110.098921][ T5134] loop0: detected capacity change from 0 to 32768 [pid 5134] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5134] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5134] chdir("./file0") = 0 [pid 5134] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5134] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5134] close(3) = 0 [pid 5134] close(4) = -1 EBADF (Bad file descriptor) [pid 5134] close(5) = -1 EBADF (Bad file descriptor) [pid 5134] close(6) = -1 EBADF (Bad file descriptor) [pid 5134] close(7) = -1 EBADF (Bad file descriptor) [pid 5134] close(8) = -1 EBADF (Bad file descriptor) [pid 5134] close(9) = -1 EBADF (Bad file descriptor) [pid 5134] close(10) = -1 EBADF (Bad file descriptor) [pid 5134] close(11) = -1 EBADF (Bad file descriptor) [pid 5134] close(12) = -1 EBADF (Bad file descriptor) [pid 5134] close(13) = -1 EBADF (Bad file descriptor) [pid 5134] close(14) = -1 EBADF (Bad file descriptor) [ 110.143211][ T5134] [ 110.143211][ T5134] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 110.143211][ T5134] [ 110.159795][ T5134] read_mapping_page failed! [ 110.164653][ T5134] ERROR: (device loop0): txCommit: [ 110.164653][ T5134] [pid 5134] close(15) = -1 EBADF (Bad file descriptor) [pid 5134] close(16) = -1 EBADF (Bad file descriptor) [pid 5134] close(17) = -1 EBADF (Bad file descriptor) [pid 5134] close(18) = -1 EBADF (Bad file descriptor) [pid 5134] close(19) = -1 EBADF (Bad file descriptor) [pid 5134] close(20) = -1 EBADF (Bad file descriptor) [pid 5134] close(21) = -1 EBADF (Bad file descriptor) [pid 5134] close(22) = -1 EBADF (Bad file descriptor) [pid 5134] close(23) = -1 EBADF (Bad file descriptor) [pid 5134] close(24) = -1 EBADF (Bad file descriptor) [pid 5134] close(25) = -1 EBADF (Bad file descriptor) [pid 5134] close(26) = -1 EBADF (Bad file descriptor) [pid 5134] close(27) = -1 EBADF (Bad file descriptor) [pid 5134] close(28) = -1 EBADF (Bad file descriptor) [pid 5134] close(29) = -1 EBADF (Bad file descriptor) [pid 5134] exit_group(0) = ? [pid 5134] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=37, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=25 /* 0.25 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./35", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./35/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./35/binderfs") = 0 [ 110.275472][ T1097] [ 110.275472][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 110.275472][ T1097] [ 110.286239][ T1097] [ 110.286239][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 110.286239][ T1097] [ 110.298129][ T114] [ 110.298129][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 110.298129][ T114] [ 110.308728][ T1097] [ 110.308728][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 110.308728][ T1097] [ 110.319250][ T1097] [ 110.319250][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 110.319250][ T1097] [ 110.330480][ T113] [ 110.330480][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 110.330480][ T113] [ 110.341167][ T1097] [ 110.341167][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 110.341167][ T1097] [ 110.351915][ T1097] [ 110.351915][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 110.351915][ T1097] [ 110.362678][ T5087] [ 110.362678][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 110.362678][ T5087] [ 110.373780][ T5087] [pid 5087] umount2("./35/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./35/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./35/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./35/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [ 110.373780][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 110.373780][ T5087] [ 110.384734][ T113] [ 110.384734][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 110.384734][ T113] [pid 5087] rmdir("./35/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./35") = 0 [pid 5087] mkdir("./36", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5136 attached , child_tidptr=0x55559309e650) = 38 [pid 5136] set_robust_list(0x55559309e660, 24) = 0 [pid 5136] chdir("./36") = 0 [pid 5136] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5136] setpgid(0, 0) = 0 [pid 5136] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5136] write(3, "1000", 4) = 4 [pid 5136] close(3) = 0 [pid 5136] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5136] memfd_create("syzkaller", 0) = 3 [pid 5136] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5136] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5136] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5136] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5136] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5136] close(3) = 0 [pid 5136] close(4) = 0 [pid 5136] mkdir("./file0", 0777) = 0 [ 110.899834][ T5136] loop0: detected capacity change from 0 to 32768 [pid 5136] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5136] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5136] chdir("./file0") = 0 [pid 5136] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 110.940480][ T5136] [ 110.940480][ T5136] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 110.940480][ T5136] [pid 5136] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5136] close(3) = 0 [pid 5136] close(4) = -1 EBADF (Bad file descriptor) [pid 5136] close(5) = -1 EBADF (Bad file descriptor) [pid 5136] close(6) = -1 EBADF (Bad file descriptor) [pid 5136] close(7) = -1 EBADF (Bad file descriptor) [pid 5136] close(8) = -1 EBADF (Bad file descriptor) [pid 5136] close(9) = -1 EBADF (Bad file descriptor) [pid 5136] close(10) = -1 EBADF (Bad file descriptor) [ 110.987265][ T5136] read_mapping_page failed! [ 110.991988][ T5136] ERROR: (device loop0): txCommit: [ 110.991988][ T5136] [pid 5136] close(11) = -1 EBADF (Bad file descriptor) [pid 5136] close(12) = -1 EBADF (Bad file descriptor) [pid 5136] close(13) = -1 EBADF (Bad file descriptor) [pid 5136] close(14) = -1 EBADF (Bad file descriptor) [pid 5136] close(15) = -1 EBADF (Bad file descriptor) [pid 5136] close(16) = -1 EBADF (Bad file descriptor) [pid 5136] close(17) = -1 EBADF (Bad file descriptor) [pid 5136] close(18) = -1 EBADF (Bad file descriptor) [pid 5136] close(19) = -1 EBADF (Bad file descriptor) [pid 5136] close(20) = -1 EBADF (Bad file descriptor) [pid 5136] close(21) = -1 EBADF (Bad file descriptor) [pid 5136] close(22) = -1 EBADF (Bad file descriptor) [pid 5136] close(23) = -1 EBADF (Bad file descriptor) [pid 5136] close(24) = -1 EBADF (Bad file descriptor) [pid 5136] close(25) = -1 EBADF (Bad file descriptor) [pid 5136] close(26) = -1 EBADF (Bad file descriptor) [pid 5136] close(27) = -1 EBADF (Bad file descriptor) [pid 5136] close(28) = -1 EBADF (Bad file descriptor) [pid 5136] close(29) = -1 EBADF (Bad file descriptor) [pid 5136] exit_group(0) = ? [pid 5136] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=38, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=23 /* 0.23 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./36", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./36/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./36/binderfs") = 0 [ 111.190178][ T1097] [ 111.190178][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 111.190178][ T1097] [ 111.200888][ T1097] [ 111.200888][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 111.200888][ T1097] [ 111.212257][ T113] [ 111.212257][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 111.212257][ T113] [ 111.222983][ T1097] [ 111.222983][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 111.222983][ T1097] [ 111.233484][ T1097] [ 111.233484][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 111.233484][ T1097] [ 111.244475][ T113] [ 111.244475][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 111.244475][ T113] [ 111.255026][ T1097] [ 111.255026][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 111.255026][ T1097] [ 111.265503][ T1097] [ 111.265503][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 111.265503][ T1097] [ 111.276463][ T113] [ 111.276463][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 111.276463][ T113] [ 111.287336][ T5087] [pid 5087] umount2("./36/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./36/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./36/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./36/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./36/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./36") = 0 [pid 5087] mkdir("./37", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 111.287336][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 111.287336][ T5087] [ 111.298539][ T5087] [ 111.298539][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 111.298539][ T5087] [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55559309e650) = 39 ./strace-static-x86_64: Process 5137 attached [pid 5137] set_robust_list(0x55559309e660, 24) = 0 [pid 5137] chdir("./37") = 0 [pid 5137] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5137] setpgid(0, 0) = 0 [pid 5137] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5137] write(3, "1000", 4) = 4 [pid 5137] close(3) = 0 [pid 5137] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5137] memfd_create("syzkaller", 0) = 3 [pid 5137] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5137] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5137] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5137] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5137] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5137] close(3) = 0 [pid 5137] close(4) = 0 [pid 5137] mkdir("./file0", 0777) = 0 [pid 5137] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5137] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5137] chdir("./file0") = 0 [pid 5137] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 111.773869][ T5137] loop0: detected capacity change from 0 to 32768 [ 111.801036][ T5137] [ 111.801036][ T5137] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 111.801036][ T5137] [pid 5137] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5137] close(3) = 0 [pid 5137] close(4) = -1 EBADF (Bad file descriptor) [pid 5137] close(5) = -1 EBADF (Bad file descriptor) [pid 5137] close(6) = -1 EBADF (Bad file descriptor) [pid 5137] close(7) = -1 EBADF (Bad file descriptor) [pid 5137] close(8) = -1 EBADF (Bad file descriptor) [pid 5137] close(9) = -1 EBADF (Bad file descriptor) [pid 5137] close(10) = -1 EBADF (Bad file descriptor) [pid 5137] close(11) = -1 EBADF (Bad file descriptor) [pid 5137] close(12) = -1 EBADF (Bad file descriptor) [pid 5137] close(13) = -1 EBADF (Bad file descriptor) [ 111.837203][ T5137] read_mapping_page failed! [ 111.842065][ T5137] ERROR: (device loop0): txCommit: [ 111.842065][ T5137] [pid 5137] close(14) = -1 EBADF (Bad file descriptor) [pid 5137] close(15) = -1 EBADF (Bad file descriptor) [pid 5137] close(16) = -1 EBADF (Bad file descriptor) [pid 5137] close(17) = -1 EBADF (Bad file descriptor) [pid 5137] close(18) = -1 EBADF (Bad file descriptor) [pid 5137] close(19) = -1 EBADF (Bad file descriptor) [pid 5137] close(20) = -1 EBADF (Bad file descriptor) [pid 5137] close(21) = -1 EBADF (Bad file descriptor) [pid 5137] close(22) = -1 EBADF (Bad file descriptor) [pid 5137] close(23) = -1 EBADF (Bad file descriptor) [pid 5137] close(24) = -1 EBADF (Bad file descriptor) [pid 5137] close(25) = -1 EBADF (Bad file descriptor) [pid 5137] close(26) = -1 EBADF (Bad file descriptor) [pid 5137] close(27) = -1 EBADF (Bad file descriptor) [pid 5137] close(28) = -1 EBADF (Bad file descriptor) [pid 5137] close(29) = -1 EBADF (Bad file descriptor) [pid 5137] exit_group(0) = ? [pid 5137] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=39, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- [pid 5087] umount2("./37", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./37/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./37/binderfs") = 0 [ 112.028799][ T1059] [ 112.028799][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 112.028799][ T1059] [ 112.039384][ T1059] [ 112.039384][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 112.039384][ T1059] [ 112.050837][ T114] [ 112.050837][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 112.050837][ T114] [ 112.061458][ T1059] [ 112.061458][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 112.061458][ T1059] [ 112.072248][ T1059] [ 112.072248][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 112.072248][ T1059] [ 112.083623][ T114] [ 112.083623][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 112.083623][ T114] [ 112.094164][ T1059] [ 112.094164][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 112.094164][ T1059] [ 112.104771][ T1059] [ 112.104771][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 112.104771][ T1059] [ 112.115505][ T5087] [ 112.115505][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 112.115505][ T5087] [ 112.126371][ T114] [pid 5087] umount2("./37/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./37/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./37/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./37/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 112.126371][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 112.126371][ T114] [ 112.136916][ T5087] [ 112.136916][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 112.136916][ T5087] [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./37/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./37") = 0 [pid 5087] mkdir("./38", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55559309e650) = 40 ./strace-static-x86_64: Process 5141 attached [pid 5141] set_robust_list(0x55559309e660, 24) = 0 [pid 5141] chdir("./38") = 0 [pid 5141] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5141] setpgid(0, 0) = 0 [pid 5141] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5141] write(3, "1000", 4) = 4 [pid 5141] close(3) = 0 [pid 5141] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5141] memfd_create("syzkaller", 0) = 3 [pid 5141] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5141] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5141] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5141] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5141] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5141] close(3) = 0 [pid 5141] close(4) = 0 [pid 5141] mkdir("./file0", 0777) = 0 [pid 5141] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5141] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5141] chdir("./file0") = 0 [pid 5141] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 112.697407][ T5141] loop0: detected capacity change from 0 to 32768 [ 112.730016][ T5141] [ 112.730016][ T5141] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 112.730016][ T5141] [pid 5141] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5141] close(3) = 0 [pid 5141] close(4) = -1 EBADF (Bad file descriptor) [pid 5141] close(5) = -1 EBADF (Bad file descriptor) [pid 5141] close(6) = -1 EBADF (Bad file descriptor) [pid 5141] close(7) = -1 EBADF (Bad file descriptor) [pid 5141] close(8) = -1 EBADF (Bad file descriptor) [pid 5141] close(9) = -1 EBADF (Bad file descriptor) [pid 5141] close(10) = -1 EBADF (Bad file descriptor) [pid 5141] close(11) = -1 EBADF (Bad file descriptor) [pid 5141] close(12) = -1 EBADF (Bad file descriptor) [pid 5141] close(13) = -1 EBADF (Bad file descriptor) [pid 5141] close(14) = -1 EBADF (Bad file descriptor) [pid 5141] close(15) = -1 EBADF (Bad file descriptor) [pid 5141] close(16) = -1 EBADF (Bad file descriptor) [pid 5141] close(17) = -1 EBADF (Bad file descriptor) [pid 5141] close(18) = -1 EBADF (Bad file descriptor) [ 112.766435][ T5141] read_mapping_page failed! [ 112.770993][ T5141] ERROR: (device loop0): txCommit: [ 112.770993][ T5141] [pid 5141] close(19) = -1 EBADF (Bad file descriptor) [pid 5141] close(20) = -1 EBADF (Bad file descriptor) [pid 5141] close(21) = -1 EBADF (Bad file descriptor) [pid 5141] close(22) = -1 EBADF (Bad file descriptor) [pid 5141] close(23) = -1 EBADF (Bad file descriptor) [pid 5141] close(24) = -1 EBADF (Bad file descriptor) [pid 5141] close(25) = -1 EBADF (Bad file descriptor) [pid 5141] close(26) = -1 EBADF (Bad file descriptor) [pid 5141] close(27) = -1 EBADF (Bad file descriptor) [pid 5141] close(28) = -1 EBADF (Bad file descriptor) [pid 5141] close(29) = -1 EBADF (Bad file descriptor) [pid 5141] exit_group(0) = ? [pid 5141] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=40, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=22 /* 0.22 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./38/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./38/binderfs") = 0 [ 112.914043][ T61] [ 112.914043][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 112.914043][ T61] [ 112.924557][ T61] [ 112.924557][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 112.924557][ T61] [ 112.936135][ T113] [ 112.936135][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 112.936135][ T113] [ 112.946777][ T61] [ 112.946777][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 112.946777][ T61] [ 112.957329][ T61] [ 112.957329][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 112.957329][ T61] [ 112.968661][ T114] [ 112.968661][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 112.968661][ T114] [ 112.979227][ T61] [ 112.979227][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 112.979227][ T61] [ 112.989710][ T61] [ 112.989710][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 112.989710][ T61] [ 113.000891][ T113] [ 113.000891][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 113.000891][ T113] [ 113.011463][ T5087] [pid 5087] umount2("./38/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./38/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./38/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./38/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 113.011463][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 113.011463][ T5087] [ 113.022863][ T5087] [ 113.022863][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 113.022863][ T5087] [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./38/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./38") = 0 [pid 5087] mkdir("./39", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5144 attached [pid 5144] set_robust_list(0x55559309e660, 24 [pid 5087] <... clone resumed>, child_tidptr=0x55559309e650) = 41 [pid 5144] <... set_robust_list resumed>) = 0 [pid 5144] chdir("./39") = 0 [pid 5144] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5144] setpgid(0, 0) = 0 [pid 5144] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5144] write(3, "1000", 4) = 4 [pid 5144] close(3) = 0 [pid 5144] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5144] memfd_create("syzkaller", 0) = 3 [pid 5144] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5144] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5144] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5144] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5144] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5144] close(3) = 0 [pid 5144] close(4) = 0 [pid 5144] mkdir("./file0", 0777) = 0 [ 113.527206][ T5144] loop0: detected capacity change from 0 to 32768 [pid 5144] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5144] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5144] chdir("./file0") = 0 [pid 5144] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5144] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5144] close(3) = 0 [pid 5144] close(4) = -1 EBADF (Bad file descriptor) [pid 5144] close(5) = -1 EBADF (Bad file descriptor) [pid 5144] close(6) = -1 EBADF (Bad file descriptor) [pid 5144] close(7) = -1 EBADF (Bad file descriptor) [pid 5144] close(8) = -1 EBADF (Bad file descriptor) [pid 5144] close(9) = -1 EBADF (Bad file descriptor) [pid 5144] close(10) = -1 EBADF (Bad file descriptor) [pid 5144] close(11) = -1 EBADF (Bad file descriptor) [pid 5144] close(12) = -1 EBADF (Bad file descriptor) [pid 5144] close(13) = -1 EBADF (Bad file descriptor) [pid 5144] close(14) = -1 EBADF (Bad file descriptor) [pid 5144] close(15) = -1 EBADF (Bad file descriptor) [pid 5144] close(16) = -1 EBADF (Bad file descriptor) [pid 5144] close(17) = -1 EBADF (Bad file descriptor) [ 113.569957][ T5144] [ 113.569957][ T5144] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 113.569957][ T5144] [ 113.598220][ T5144] read_mapping_page failed! [ 113.602890][ T5144] ERROR: (device loop0): txCommit: [ 113.602890][ T5144] [pid 5144] close(18) = -1 EBADF (Bad file descriptor) [pid 5144] close(19) = -1 EBADF (Bad file descriptor) [pid 5144] close(20) = -1 EBADF (Bad file descriptor) [pid 5144] close(21) = -1 EBADF (Bad file descriptor) [pid 5144] close(22) = -1 EBADF (Bad file descriptor) [pid 5144] close(23) = -1 EBADF (Bad file descriptor) [pid 5144] close(24) = -1 EBADF (Bad file descriptor) [pid 5144] close(25) = -1 EBADF (Bad file descriptor) [pid 5144] close(26) = -1 EBADF (Bad file descriptor) [pid 5144] close(27) = -1 EBADF (Bad file descriptor) [pid 5144] close(28) = -1 EBADF (Bad file descriptor) [pid 5144] close(29) = -1 EBADF (Bad file descriptor) [pid 5144] exit_group(0) = ? [pid 5144] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=41, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./39", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./39/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./39/binderfs") = 0 [ 113.744270][ T1059] [ 113.744270][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 113.744270][ T1059] [ 113.755103][ T1059] [ 113.755103][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 113.755103][ T1059] [ 113.766259][ T114] [ 113.766259][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 113.766259][ T114] [ 113.776949][ T1059] [ 113.776949][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 113.776949][ T1059] [ 113.787437][ T1059] [ 113.787437][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 113.787437][ T1059] [ 113.798591][ T114] [ 113.798591][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 113.798591][ T114] [ 113.809272][ T1059] [ 113.809272][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 113.809272][ T1059] [ 113.819850][ T1059] [ 113.819850][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 113.819850][ T1059] [ 113.830802][ T113] [ 113.830802][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 113.830802][ T113] [ 113.841939][ T5087] [pid 5087] umount2("./39/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./39/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./39/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./39/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [ 113.841939][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 113.841939][ T5087] [ 113.852779][ T5087] [ 113.852779][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 113.852779][ T5087] [pid 5087] close(4) = 0 [pid 5087] rmdir("./39/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./39") = 0 [pid 5087] mkdir("./40", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5145 attached [pid 5145] set_robust_list(0x55559309e660, 24 [pid 5087] <... clone resumed>, child_tidptr=0x55559309e650) = 42 [pid 5145] <... set_robust_list resumed>) = 0 [pid 5145] chdir("./40") = 0 [pid 5145] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5145] setpgid(0, 0) = 0 [pid 5145] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5145] write(3, "1000", 4) = 4 [pid 5145] close(3) = 0 [pid 5145] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5145] memfd_create("syzkaller", 0) = 3 [pid 5145] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5145] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5145] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5145] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5145] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5145] close(3) = 0 [pid 5145] close(4) = 0 [pid 5145] mkdir("./file0", 0777) = 0 [pid 5145] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5145] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5145] chdir("./file0") = 0 [ 114.398380][ T5145] loop0: detected capacity change from 0 to 32768 [ 114.437500][ T5145] [ 114.437500][ T5145] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 114.437500][ T5145] [pid 5145] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5145] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5145] close(3) = 0 [pid 5145] close(4) = -1 EBADF (Bad file descriptor) [pid 5145] close(5) = -1 EBADF (Bad file descriptor) [pid 5145] close(6) = -1 EBADF (Bad file descriptor) [pid 5145] close(7) = -1 EBADF (Bad file descriptor) [pid 5145] close(8) = -1 EBADF (Bad file descriptor) [pid 5145] close(9) = -1 EBADF (Bad file descriptor) [pid 5145] close(10) = -1 EBADF (Bad file descriptor) [pid 5145] close(11) = -1 EBADF (Bad file descriptor) [pid 5145] close(12) = -1 EBADF (Bad file descriptor) [ 114.482451][ T5145] read_mapping_page failed! [ 114.487033][ T5145] ERROR: (device loop0): txCommit: [ 114.487033][ T5145] [pid 5145] close(13) = -1 EBADF (Bad file descriptor) [pid 5145] close(14) = -1 EBADF (Bad file descriptor) [pid 5145] close(15) = -1 EBADF (Bad file descriptor) [pid 5145] close(16) = -1 EBADF (Bad file descriptor) [pid 5145] close(17) = -1 EBADF (Bad file descriptor) [pid 5145] close(18) = -1 EBADF (Bad file descriptor) [pid 5145] close(19) = -1 EBADF (Bad file descriptor) [pid 5145] close(20) = -1 EBADF (Bad file descriptor) [pid 5145] close(21) = -1 EBADF (Bad file descriptor) [pid 5145] close(22) = -1 EBADF (Bad file descriptor) [pid 5145] close(23) = -1 EBADF (Bad file descriptor) [pid 5145] close(24) = -1 EBADF (Bad file descriptor) [pid 5145] close(25) = -1 EBADF (Bad file descriptor) [pid 5145] close(26) = -1 EBADF (Bad file descriptor) [pid 5145] close(27) = -1 EBADF (Bad file descriptor) [pid 5145] close(28) = -1 EBADF (Bad file descriptor) [pid 5145] close(29) = -1 EBADF (Bad file descriptor) [pid 5145] exit_group(0) = ? [pid 5145] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=42, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=26 /* 0.26 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./40", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./40/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./40/binderfs") = 0 [ 114.678223][ T1059] [ 114.678223][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 114.678223][ T1059] [ 114.688899][ T1059] [ 114.688899][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 114.688899][ T1059] [ 114.700060][ T114] [ 114.700060][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 114.700060][ T114] [ 114.710959][ T1059] [ 114.710959][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 114.710959][ T1059] [ 114.721725][ T1059] [ 114.721725][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 114.721725][ T1059] [ 114.734234][ T113] [ 114.734234][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 114.734234][ T113] [ 114.744826][ T1059] [ 114.744826][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 114.744826][ T1059] [ 114.755364][ T1059] [ 114.755364][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 114.755364][ T1059] [ 114.766301][ T113] [ 114.766301][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 114.766301][ T113] [pid 5087] umount2("./40/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./40/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./40/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./40/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./40/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [ 114.776944][ T5087] [ 114.776944][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 114.776944][ T5087] [ 114.787820][ T5087] [ 114.787820][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 114.787820][ T5087] [pid 5087] rmdir("./40/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./40") = 0 [pid 5087] mkdir("./41", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5146 attached , child_tidptr=0x55559309e650) = 43 [pid 5146] set_robust_list(0x55559309e660, 24) = 0 [pid 5146] chdir("./41") = 0 [pid 5146] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5146] setpgid(0, 0) = 0 [pid 5146] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5146] write(3, "1000", 4) = 4 [pid 5146] close(3) = 0 [pid 5146] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5146] memfd_create("syzkaller", 0) = 3 [pid 5146] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5146] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5146] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5146] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5146] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5146] close(3) = 0 [pid 5146] close(4) = 0 [pid 5146] mkdir("./file0", 0777) = 0 [pid 5146] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5146] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5146] chdir("./file0") = 0 [pid 5146] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 115.296780][ T5146] loop0: detected capacity change from 0 to 32768 [ 115.328757][ T5146] [ 115.328757][ T5146] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 115.328757][ T5146] [pid 5146] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5146] close(3) = 0 [pid 5146] close(4) = -1 EBADF (Bad file descriptor) [pid 5146] close(5) = -1 EBADF (Bad file descriptor) [pid 5146] close(6) = -1 EBADF (Bad file descriptor) [pid 5146] close(7) = -1 EBADF (Bad file descriptor) [pid 5146] close(8) = -1 EBADF (Bad file descriptor) [pid 5146] close(9) = -1 EBADF (Bad file descriptor) [pid 5146] close(10) = -1 EBADF (Bad file descriptor) [pid 5146] close(11) = -1 EBADF (Bad file descriptor) [ 115.357538][ T5146] read_mapping_page failed! [ 115.362500][ T5146] ERROR: (device loop0): txCommit: [ 115.362500][ T5146] [pid 5146] close(12) = -1 EBADF (Bad file descriptor) [pid 5146] close(13) = -1 EBADF (Bad file descriptor) [pid 5146] close(14) = -1 EBADF (Bad file descriptor) [pid 5146] close(15) = -1 EBADF (Bad file descriptor) [pid 5146] close(16) = -1 EBADF (Bad file descriptor) [pid 5146] close(17) = -1 EBADF (Bad file descriptor) [pid 5146] close(18) = -1 EBADF (Bad file descriptor) [pid 5146] close(19) = -1 EBADF (Bad file descriptor) [pid 5146] close(20) = -1 EBADF (Bad file descriptor) [pid 5146] close(21) = -1 EBADF (Bad file descriptor) [pid 5146] close(22) = -1 EBADF (Bad file descriptor) [pid 5146] close(23) = -1 EBADF (Bad file descriptor) [pid 5146] close(24) = -1 EBADF (Bad file descriptor) [pid 5146] close(25) = -1 EBADF (Bad file descriptor) [pid 5146] close(26) = -1 EBADF (Bad file descriptor) [pid 5146] close(27) = -1 EBADF (Bad file descriptor) [pid 5146] close(28) = -1 EBADF (Bad file descriptor) [pid 5146] close(29) = -1 EBADF (Bad file descriptor) [pid 5146] exit_group(0) = ? [pid 5146] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=43, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=24 /* 0.24 s */} --- [pid 5087] umount2("./41", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./41/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./41/binderfs") = 0 [ 115.534849][ T1059] [ 115.534849][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 115.534849][ T1059] [ 115.545804][ T1059] [ 115.545804][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 115.545804][ T1059] [ 115.557478][ T114] [ 115.557478][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 115.557478][ T114] [ 115.568150][ T1059] [ 115.568150][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 115.568150][ T1059] [ 115.578872][ T1059] [ 115.578872][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 115.578872][ T1059] [ 115.590412][ T114] [ 115.590412][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 115.590412][ T114] [ 115.600997][ T1059] [ 115.600997][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 115.600997][ T1059] [ 115.611536][ T1059] [ 115.611536][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 115.611536][ T1059] [ 115.622429][ T114] [ 115.622429][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 115.622429][ T114] [ 115.633010][ T5087] [pid 5087] umount2("./41/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./41/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./41/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./41/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./41/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./41/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./41") = 0 [pid 5087] mkdir("./42", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 115.633010][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 115.633010][ T5087] [ 115.643733][ T5087] [ 115.643733][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 115.643733][ T5087] [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55559309e650) = 44 ./strace-static-x86_64: Process 5147 attached [pid 5147] set_robust_list(0x55559309e660, 24) = 0 [pid 5147] chdir("./42") = 0 [pid 5147] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5147] setpgid(0, 0) = 0 [pid 5147] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5147] write(3, "1000", 4) = 4 [pid 5147] close(3) = 0 [pid 5147] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5147] memfd_create("syzkaller", 0) = 3 [pid 5147] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5147] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5147] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5147] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5147] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5147] close(3) = 0 [pid 5147] close(4) = 0 [pid 5147] mkdir("./file0", 0777) = 0 [ 116.129481][ T5147] loop0: detected capacity change from 0 to 32768 [pid 5147] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5147] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5147] chdir("./file0") = 0 [pid 5147] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 116.185247][ T5147] [ 116.185247][ T5147] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 116.185247][ T5147] [pid 5147] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5147] close(3) = 0 [pid 5147] close(4) = -1 EBADF (Bad file descriptor) [pid 5147] close(5) = -1 EBADF (Bad file descriptor) [pid 5147] close(6) = -1 EBADF (Bad file descriptor) [pid 5147] close(7) = -1 EBADF (Bad file descriptor) [pid 5147] close(8) = -1 EBADF (Bad file descriptor) [pid 5147] close(9) = -1 EBADF (Bad file descriptor) [pid 5147] close(10) = -1 EBADF (Bad file descriptor) [pid 5147] close(11) = -1 EBADF (Bad file descriptor) [pid 5147] close(12) = -1 EBADF (Bad file descriptor) [pid 5147] close(13) = -1 EBADF (Bad file descriptor) [pid 5147] close(14) = -1 EBADF (Bad file descriptor) [pid 5147] close(15) = -1 EBADF (Bad file descriptor) [pid 5147] close(16) = -1 EBADF (Bad file descriptor) [pid 5147] close(17) = -1 EBADF (Bad file descriptor) [ 116.226010][ T5147] read_mapping_page failed! [ 116.230542][ T5147] ERROR: (device loop0): txCommit: [ 116.230542][ T5147] [pid 5147] close(18) = -1 EBADF (Bad file descriptor) [pid 5147] close(19) = -1 EBADF (Bad file descriptor) [pid 5147] close(20) = -1 EBADF (Bad file descriptor) [pid 5147] close(21) = -1 EBADF (Bad file descriptor) [pid 5147] close(22) = -1 EBADF (Bad file descriptor) [pid 5147] close(23) = -1 EBADF (Bad file descriptor) [pid 5147] close(24) = -1 EBADF (Bad file descriptor) [pid 5147] close(25) = -1 EBADF (Bad file descriptor) [pid 5147] close(26) = -1 EBADF (Bad file descriptor) [pid 5147] close(27) = -1 EBADF (Bad file descriptor) [pid 5147] close(28) = -1 EBADF (Bad file descriptor) [pid 5147] close(29) = -1 EBADF (Bad file descriptor) [pid 5147] exit_group(0) = ? [pid 5147] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=44, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=23 /* 0.23 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./42", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./42/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./42/binderfs") = 0 [ 116.374781][ T1097] [ 116.374781][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 116.374781][ T1097] [ 116.385327][ T1097] [ 116.385327][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 116.385327][ T1097] [ 116.397145][ T113] [ 116.397145][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 116.397145][ T113] [ 116.407729][ T1097] [ 116.407729][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 116.407729][ T1097] [ 116.418335][ T1097] [ 116.418335][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 116.418335][ T1097] [ 116.429601][ T113] [ 116.429601][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 116.429601][ T113] [ 116.440167][ T1097] [ 116.440167][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 116.440167][ T1097] [ 116.450850][ T1097] [ 116.450850][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 116.450850][ T1097] [ 116.461519][ T5087] [ 116.461519][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 116.461519][ T5087] [ 116.472574][ T5087] [pid 5087] umount2("./42/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./42/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./42/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./42/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./42/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./42/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [ 116.472574][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 116.472574][ T5087] [ 116.483157][ T114] [ 116.483157][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 116.483157][ T114] [pid 5087] close(3) = 0 [pid 5087] rmdir("./42") = 0 [pid 5087] mkdir("./43", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5148 attached , child_tidptr=0x55559309e650) = 45 [pid 5148] set_robust_list(0x55559309e660, 24) = 0 [pid 5148] chdir("./43") = 0 [pid 5148] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5148] setpgid(0, 0) = 0 [pid 5148] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5148] write(3, "1000", 4) = 4 [pid 5148] close(3) = 0 [pid 5148] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5148] memfd_create("syzkaller", 0) = 3 [pid 5148] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5148] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5148] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5148] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5148] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5148] close(3) = 0 [pid 5148] close(4) = 0 [pid 5148] mkdir("./file0", 0777) = 0 [pid 5148] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5148] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5148] chdir("./file0") = 0 [ 117.001853][ T5148] loop0: detected capacity change from 0 to 32768 [ 117.039149][ T5148] [ 117.039149][ T5148] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 117.039149][ T5148] [pid 5148] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5148] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5148] close(3) = 0 [pid 5148] close(4) = -1 EBADF (Bad file descriptor) [pid 5148] close(5) = -1 EBADF (Bad file descriptor) [pid 5148] close(6) = -1 EBADF (Bad file descriptor) [pid 5148] close(7) = -1 EBADF (Bad file descriptor) [pid 5148] close(8) = -1 EBADF (Bad file descriptor) [pid 5148] close(9) = -1 EBADF (Bad file descriptor) [pid 5148] close(10) = -1 EBADF (Bad file descriptor) [pid 5148] close(11) = -1 EBADF (Bad file descriptor) [pid 5148] close(12) = -1 EBADF (Bad file descriptor) [pid 5148] close(13) = -1 EBADF (Bad file descriptor) [pid 5148] close(14) = -1 EBADF (Bad file descriptor) [pid 5148] close(15) = -1 EBADF (Bad file descriptor) [pid 5148] close(16) = -1 EBADF (Bad file descriptor) [pid 5148] close(17) = -1 EBADF (Bad file descriptor) [pid 5148] close(18) = -1 EBADF (Bad file descriptor) [ 117.085340][ T5148] read_mapping_page failed! [ 117.089901][ T5148] ERROR: (device loop0): txCommit: [ 117.089901][ T5148] [pid 5148] close(19) = -1 EBADF (Bad file descriptor) [pid 5148] close(20) = -1 EBADF (Bad file descriptor) [pid 5148] close(21) = -1 EBADF (Bad file descriptor) [pid 5148] close(22) = -1 EBADF (Bad file descriptor) [pid 5148] close(23) = -1 EBADF (Bad file descriptor) [pid 5148] close(24) = -1 EBADF (Bad file descriptor) [pid 5148] close(25) = -1 EBADF (Bad file descriptor) [pid 5148] close(26) = -1 EBADF (Bad file descriptor) [pid 5148] close(27) = -1 EBADF (Bad file descriptor) [pid 5148] close(28) = -1 EBADF (Bad file descriptor) [pid 5148] close(29) = -1 EBADF (Bad file descriptor) [pid 5148] exit_group(0) = ? [pid 5148] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=45, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=23 /* 0.23 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./43", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./43/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./43/binderfs") = 0 [ 117.227228][ T61] [ 117.227228][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 117.227228][ T61] [ 117.237812][ T61] [ 117.237812][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 117.237812][ T61] [ 117.249290][ T113] [ 117.249290][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 117.249290][ T113] [ 117.260171][ T61] [ 117.260171][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 117.260171][ T61] [ 117.270813][ T61] [ 117.270813][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 117.270813][ T61] [ 117.282084][ T113] [ 117.282084][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 117.282084][ T113] [ 117.292612][ T61] [ 117.292612][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 117.292612][ T61] [ 117.303175][ T61] [ 117.303175][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 117.303175][ T61] [ 117.314173][ T114] [ 117.314173][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 117.314173][ T114] [ 117.324697][ T5087] [pid 5087] umount2("./43/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./43/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./43/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./43/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./43/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 117.324697][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 117.324697][ T5087] [ 117.335456][ T5087] [ 117.335456][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 117.335456][ T5087] [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./43/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./43") = 0 [pid 5087] mkdir("./44", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5149 attached , child_tidptr=0x55559309e650) = 46 [pid 5149] set_robust_list(0x55559309e660, 24) = 0 [pid 5149] chdir("./44") = 0 [pid 5149] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5149] setpgid(0, 0) = 0 [pid 5149] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5149] write(3, "1000", 4) = 4 [pid 5149] close(3) = 0 [pid 5149] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5149] memfd_create("syzkaller", 0) = 3 [pid 5149] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5149] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5149] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5149] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5149] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5149] close(3) = 0 [pid 5149] close(4) = 0 [pid 5149] mkdir("./file0", 0777) = 0 [ 117.896159][ T5149] loop0: detected capacity change from 0 to 32768 [pid 5149] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5149] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5149] chdir("./file0") = 0 [pid 5149] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5149] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5149] close(3) = 0 [pid 5149] close(4) = -1 EBADF (Bad file descriptor) [pid 5149] close(5) = -1 EBADF (Bad file descriptor) [pid 5149] close(6) = -1 EBADF (Bad file descriptor) [pid 5149] close(7) = -1 EBADF (Bad file descriptor) [pid 5149] close(8) = -1 EBADF (Bad file descriptor) [pid 5149] close(9) = -1 EBADF (Bad file descriptor) [pid 5149] close(10) = -1 EBADF (Bad file descriptor) [pid 5149] close(11) = -1 EBADF (Bad file descriptor) [pid 5149] close(12) = -1 EBADF (Bad file descriptor) [pid 5149] close(13) = -1 EBADF (Bad file descriptor) [pid 5149] close(14) = -1 EBADF (Bad file descriptor) [pid 5149] close(15) = -1 EBADF (Bad file descriptor) [ 117.942628][ T5149] [ 117.942628][ T5149] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 117.942628][ T5149] [ 117.976608][ T5149] read_mapping_page failed! [ 117.981154][ T5149] ERROR: (device loop0): txCommit: [ 117.981154][ T5149] [pid 5149] close(16) = -1 EBADF (Bad file descriptor) [pid 5149] close(17) = -1 EBADF (Bad file descriptor) [pid 5149] close(18) = -1 EBADF (Bad file descriptor) [pid 5149] close(19) = -1 EBADF (Bad file descriptor) [pid 5149] close(20) = -1 EBADF (Bad file descriptor) [pid 5149] close(21) = -1 EBADF (Bad file descriptor) [pid 5149] close(22) = -1 EBADF (Bad file descriptor) [pid 5149] close(23) = -1 EBADF (Bad file descriptor) [pid 5149] close(24) = -1 EBADF (Bad file descriptor) [pid 5149] close(25) = -1 EBADF (Bad file descriptor) [pid 5149] close(26) = -1 EBADF (Bad file descriptor) [pid 5149] close(27) = -1 EBADF (Bad file descriptor) [pid 5149] close(28) = -1 EBADF (Bad file descriptor) [pid 5149] close(29) = -1 EBADF (Bad file descriptor) [pid 5149] exit_group(0) = ? [pid 5149] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=46, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5087] umount2("./44", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./44/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./44/binderfs") = 0 [ 118.107949][ T1097] [ 118.107949][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 118.107949][ T1097] [ 118.118421][ T1097] [ 118.118421][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 118.118421][ T1097] [ 118.130136][ T113] [ 118.130136][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 118.130136][ T113] [ 118.140760][ T1097] [ 118.140760][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 118.140760][ T1097] [ 118.151456][ T1097] [ 118.151456][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 118.151456][ T1097] [ 118.162350][ T114] [ 118.162350][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 118.162350][ T114] [ 118.173561][ T1097] [ 118.173561][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 118.173561][ T1097] [ 118.184118][ T1097] [ 118.184118][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 118.184118][ T1097] [ 118.195455][ T5087] [ 118.195455][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 118.195455][ T5087] [pid 5087] umount2("./44/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./44/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./44/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./44/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./44/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./44/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./44") = 0 [pid 5087] mkdir("./45", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 118.206548][ T114] [ 118.206548][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 118.206548][ T114] [ 118.217102][ T5087] [ 118.217102][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 118.217102][ T5087] [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55559309e650) = 47 ./strace-static-x86_64: Process 5150 attached [pid 5150] set_robust_list(0x55559309e660, 24) = 0 [pid 5150] chdir("./45") = 0 [pid 5150] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5150] setpgid(0, 0) = 0 [pid 5150] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5150] write(3, "1000", 4) = 4 [pid 5150] close(3) = 0 [pid 5150] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5150] memfd_create("syzkaller", 0) = 3 [pid 5150] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5150] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5150] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5150] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5150] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5150] close(3) = 0 [pid 5150] close(4) = 0 [pid 5150] mkdir("./file0", 0777) = 0 [ 118.678931][ T5150] loop0: detected capacity change from 0 to 32768 [pid 5150] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5150] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5150] chdir("./file0") = 0 [pid 5150] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5150] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5150] close(3) = 0 [pid 5150] close(4) = -1 EBADF (Bad file descriptor) [pid 5150] close(5) = -1 EBADF (Bad file descriptor) [pid 5150] close(6) = -1 EBADF (Bad file descriptor) [pid 5150] close(7) = -1 EBADF (Bad file descriptor) [pid 5150] close(8) = -1 EBADF (Bad file descriptor) [pid 5150] close(9) = -1 EBADF (Bad file descriptor) [pid 5150] close(10) = -1 EBADF (Bad file descriptor) [ 118.727533][ T5150] [ 118.727533][ T5150] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 118.727533][ T5150] [ 118.765297][ T5150] read_mapping_page failed! [ 118.769847][ T5150] ERROR: (device loop0): txCommit: [ 118.769847][ T5150] [pid 5150] close(11) = -1 EBADF (Bad file descriptor) [pid 5150] close(12) = -1 EBADF (Bad file descriptor) [pid 5150] close(13) = -1 EBADF (Bad file descriptor) [pid 5150] close(14) = -1 EBADF (Bad file descriptor) [pid 5150] close(15) = -1 EBADF (Bad file descriptor) [pid 5150] close(16) = -1 EBADF (Bad file descriptor) [pid 5150] close(17) = -1 EBADF (Bad file descriptor) [pid 5150] close(18) = -1 EBADF (Bad file descriptor) [pid 5150] close(19) = -1 EBADF (Bad file descriptor) [pid 5150] close(20) = -1 EBADF (Bad file descriptor) [pid 5150] close(21) = -1 EBADF (Bad file descriptor) [pid 5150] close(22) = -1 EBADF (Bad file descriptor) [pid 5150] close(23) = -1 EBADF (Bad file descriptor) [pid 5150] close(24) = -1 EBADF (Bad file descriptor) [pid 5150] close(25) = -1 EBADF (Bad file descriptor) [pid 5150] close(26) = -1 EBADF (Bad file descriptor) [pid 5150] close(27) = -1 EBADF (Bad file descriptor) [pid 5150] close(28) = -1 EBADF (Bad file descriptor) [pid 5150] close(29) = -1 EBADF (Bad file descriptor) [pid 5150] exit_group(0) = ? [pid 5150] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=47, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 5087] umount2("./45", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./45/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./45/binderfs") = 0 [ 118.914803][ T61] [ 118.914803][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 118.914803][ T61] [ 118.925336][ T61] [ 118.925336][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 118.925336][ T61] [ 118.936767][ T113] [ 118.936767][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 118.936767][ T113] [ 118.948435][ T61] [ 118.948435][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 118.948435][ T61] [ 118.959235][ T61] [ 118.959235][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 118.959235][ T61] [ 118.970875][ T114] [ 118.970875][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 118.970875][ T114] [ 118.981457][ T61] [ 118.981457][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 118.981457][ T61] [ 118.991987][ T61] [ 118.991987][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 118.991987][ T61] [ 119.002859][ T114] [ 119.002859][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 119.002859][ T114] [pid 5087] umount2("./45/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./45/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./45/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./45/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./45/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./45/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./45") = 0 [ 119.013422][ T5087] [ 119.013422][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 119.013422][ T5087] [ 119.024268][ T5087] [ 119.024268][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 119.024268][ T5087] [pid 5087] mkdir("./46", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5151 attached , child_tidptr=0x55559309e650) = 48 [pid 5151] set_robust_list(0x55559309e660, 24) = 0 [pid 5151] chdir("./46") = 0 [pid 5151] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5151] setpgid(0, 0) = 0 [pid 5151] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5151] write(3, "1000", 4) = 4 [pid 5151] close(3) = 0 [pid 5151] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5151] memfd_create("syzkaller", 0) = 3 [pid 5151] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5151] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5151] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5151] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5151] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5151] close(3) = 0 [pid 5151] close(4) = 0 [pid 5151] mkdir("./file0", 0777) = 0 [pid 5151] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5151] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5151] chdir("./file0") = 0 [pid 5151] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 119.527804][ T5151] loop0: detected capacity change from 0 to 32768 [ 119.564571][ T5151] [ 119.564571][ T5151] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 119.564571][ T5151] [pid 5151] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5151] close(3) = 0 [pid 5151] close(4) = -1 EBADF (Bad file descriptor) [pid 5151] close(5) = -1 EBADF (Bad file descriptor) [pid 5151] close(6) = -1 EBADF (Bad file descriptor) [pid 5151] close(7) = -1 EBADF (Bad file descriptor) [pid 5151] close(8) = -1 EBADF (Bad file descriptor) [pid 5151] close(9) = -1 EBADF (Bad file descriptor) [pid 5151] close(10) = -1 EBADF (Bad file descriptor) [pid 5151] close(11) = -1 EBADF (Bad file descriptor) [ 119.608684][ T5151] read_mapping_page failed! [ 119.613292][ T5151] ERROR: (device loop0): txCommit: [ 119.613292][ T5151] [pid 5151] close(12) = -1 EBADF (Bad file descriptor) [pid 5151] close(13) = -1 EBADF (Bad file descriptor) [pid 5151] close(14) = -1 EBADF (Bad file descriptor) [pid 5151] close(15) = -1 EBADF (Bad file descriptor) [pid 5151] close(16) = -1 EBADF (Bad file descriptor) [pid 5151] close(17) = -1 EBADF (Bad file descriptor) [pid 5151] close(18) = -1 EBADF (Bad file descriptor) [pid 5151] close(19) = -1 EBADF (Bad file descriptor) [pid 5151] close(20) = -1 EBADF (Bad file descriptor) [pid 5151] close(21) = -1 EBADF (Bad file descriptor) [pid 5151] close(22) = -1 EBADF (Bad file descriptor) [pid 5151] close(23) = -1 EBADF (Bad file descriptor) [pid 5151] close(24) = -1 EBADF (Bad file descriptor) [pid 5151] close(25) = -1 EBADF (Bad file descriptor) [pid 5151] close(26) = -1 EBADF (Bad file descriptor) [pid 5151] close(27) = -1 EBADF (Bad file descriptor) [pid 5151] close(28) = -1 EBADF (Bad file descriptor) [pid 5151] close(29) = -1 EBADF (Bad file descriptor) [pid 5151] exit_group(0) = ? [pid 5151] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=48, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./46", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./46/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./46/binderfs") = 0 [ 119.792861][ T11] [ 119.792861][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 119.792861][ T11] [ 119.803605][ T11] [ 119.803605][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 119.803605][ T11] [ 119.814950][ T114] [ 119.814950][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 119.814950][ T114] [ 119.825508][ T11] [ 119.825508][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 119.825508][ T11] [ 119.836022][ T11] [ 119.836022][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 119.836022][ T11] [ 119.847006][ T113] [ 119.847006][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 119.847006][ T113] [ 119.858721][ T11] [ 119.858721][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 119.858721][ T11] [ 119.869229][ T11] [ 119.869229][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 119.869229][ T11] [ 119.880216][ T114] [ 119.880216][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 119.880216][ T114] [ 119.890982][ T5087] [pid 5087] umount2("./46/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./46/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./46/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./46/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./46/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./46/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./46") = 0 [pid 5087] mkdir("./47", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 119.890982][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 119.890982][ T5087] [ 119.901886][ T5087] [ 119.901886][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 119.901886][ T5087] [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55559309e650) = 49 ./strace-static-x86_64: Process 5152 attached [pid 5152] set_robust_list(0x55559309e660, 24) = 0 [pid 5152] chdir("./47") = 0 [pid 5152] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5152] setpgid(0, 0) = 0 [pid 5152] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5152] write(3, "1000", 4) = 4 [pid 5152] close(3) = 0 [pid 5152] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5152] memfd_create("syzkaller", 0) = 3 [pid 5152] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5152] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5152] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5152] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5152] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5152] close(3) = 0 [pid 5152] close(4) = 0 [pid 5152] mkdir("./file0", 0777) = 0 [pid 5152] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5152] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5152] chdir("./file0") = 0 [pid 5152] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 120.382580][ T5152] loop0: detected capacity change from 0 to 32768 [ 120.410388][ T5152] [ 120.410388][ T5152] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.410388][ T5152] [pid 5152] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5152] close(3) = 0 [pid 5152] close(4) = -1 EBADF (Bad file descriptor) [pid 5152] close(5) = -1 EBADF (Bad file descriptor) [pid 5152] close(6) = -1 EBADF (Bad file descriptor) [pid 5152] close(7) = -1 EBADF (Bad file descriptor) [pid 5152] close(8) = -1 EBADF (Bad file descriptor) [pid 5152] close(9) = -1 EBADF (Bad file descriptor) [pid 5152] close(10) = -1 EBADF (Bad file descriptor) [pid 5152] close(11) = -1 EBADF (Bad file descriptor) [ 120.438682][ T5152] read_mapping_page failed! [ 120.443451][ T5152] ERROR: (device loop0): txCommit: [ 120.443451][ T5152] [pid 5152] close(12) = -1 EBADF (Bad file descriptor) [pid 5152] close(13) = -1 EBADF (Bad file descriptor) [pid 5152] close(14) = -1 EBADF (Bad file descriptor) [pid 5152] close(15) = -1 EBADF (Bad file descriptor) [pid 5152] close(16) = -1 EBADF (Bad file descriptor) [pid 5152] close(17) = -1 EBADF (Bad file descriptor) [pid 5152] close(18) = -1 EBADF (Bad file descriptor) [pid 5152] close(19) = -1 EBADF (Bad file descriptor) [pid 5152] close(20) = -1 EBADF (Bad file descriptor) [pid 5152] close(21) = -1 EBADF (Bad file descriptor) [pid 5152] close(22) = -1 EBADF (Bad file descriptor) [pid 5152] close(23) = -1 EBADF (Bad file descriptor) [pid 5152] close(24) = -1 EBADF (Bad file descriptor) [pid 5152] close(25) = -1 EBADF (Bad file descriptor) [pid 5152] close(26) = -1 EBADF (Bad file descriptor) [pid 5152] close(27) = -1 EBADF (Bad file descriptor) [pid 5152] close(28) = -1 EBADF (Bad file descriptor) [pid 5152] close(29) = -1 EBADF (Bad file descriptor) [pid 5152] exit_group(0) = ? [pid 5152] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=49, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=23 /* 0.23 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./47", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./47/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./47/binderfs") = 0 [ 120.582362][ T1059] [ 120.582362][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.582362][ T1059] [ 120.592942][ T1059] [ 120.592942][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.592942][ T1059] [ 120.604727][ T113] [ 120.604727][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.604727][ T113] [ 120.615492][ T1059] [ 120.615492][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.615492][ T1059] [ 120.625995][ T1059] [ 120.625995][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.625995][ T1059] [ 120.636868][ T113] [ 120.636868][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.636868][ T113] [ 120.648298][ T1059] [ 120.648298][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.648298][ T1059] [ 120.658910][ T1059] [ 120.658910][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.658910][ T1059] [ 120.669824][ T114] [ 120.669824][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.669824][ T114] [ 120.680392][ T5087] [pid 5087] umount2("./47/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./47/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./47/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./47/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./47/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [ 120.680392][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.680392][ T5087] [ 120.691122][ T5087] [ 120.691122][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.691122][ T5087] [pid 5087] close(4) = 0 [pid 5087] rmdir("./47/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./47") = 0 [pid 5087] mkdir("./48", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55559309e650) = 50 ./strace-static-x86_64: Process 5153 attached [pid 5153] set_robust_list(0x55559309e660, 24) = 0 [pid 5153] chdir("./48") = 0 [pid 5153] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5153] setpgid(0, 0) = 0 [pid 5153] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5153] write(3, "1000", 4) = 4 [pid 5153] close(3) = 0 [pid 5153] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5153] memfd_create("syzkaller", 0) = 3 [pid 5153] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5153] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5153] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5153] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5153] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5153] close(3) = 0 [pid 5153] close(4) = 0 [pid 5153] mkdir("./file0", 0777) = 0 [pid 5153] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5153] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5153] chdir("./file0") = 0 [pid 5153] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 121.227875][ T5153] loop0: detected capacity change from 0 to 32768 [ 121.265648][ T5153] [ 121.265648][ T5153] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 121.265648][ T5153] [pid 5153] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5153] close(3) = 0 [pid 5153] close(4) = -1 EBADF (Bad file descriptor) [pid 5153] close(5) = -1 EBADF (Bad file descriptor) [pid 5153] close(6) = -1 EBADF (Bad file descriptor) [pid 5153] close(7) = -1 EBADF (Bad file descriptor) [pid 5153] close(8) = -1 EBADF (Bad file descriptor) [pid 5153] close(9) = -1 EBADF (Bad file descriptor) [pid 5153] close(10) = -1 EBADF (Bad file descriptor) [pid 5153] close(11) = -1 EBADF (Bad file descriptor) [ 121.301401][ T5153] read_mapping_page failed! [ 121.306338][ T5153] ERROR: (device loop0): txCommit: [ 121.306338][ T5153] [pid 5153] close(12) = -1 EBADF (Bad file descriptor) [pid 5153] close(13) = -1 EBADF (Bad file descriptor) [pid 5153] close(14) = -1 EBADF (Bad file descriptor) [pid 5153] close(15) = -1 EBADF (Bad file descriptor) [pid 5153] close(16) = -1 EBADF (Bad file descriptor) [pid 5153] close(17) = -1 EBADF (Bad file descriptor) [pid 5153] close(18) = -1 EBADF (Bad file descriptor) [pid 5153] close(19) = -1 EBADF (Bad file descriptor) [pid 5153] close(20) = -1 EBADF (Bad file descriptor) [pid 5153] close(21) = -1 EBADF (Bad file descriptor) [pid 5153] close(22) = -1 EBADF (Bad file descriptor) [pid 5153] close(23) = -1 EBADF (Bad file descriptor) [pid 5153] close(24) = -1 EBADF (Bad file descriptor) [pid 5153] close(25) = -1 EBADF (Bad file descriptor) [pid 5153] close(26) = -1 EBADF (Bad file descriptor) [pid 5153] close(27) = -1 EBADF (Bad file descriptor) [pid 5153] close(28) = -1 EBADF (Bad file descriptor) [pid 5153] close(29) = -1 EBADF (Bad file descriptor) [pid 5153] exit_group(0) = ? [pid 5153] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=50, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=23 /* 0.23 s */} --- [pid 5087] umount2("./48", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./48/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./48/binderfs") = 0 [ 121.486237][ T11] [ 121.486237][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 121.486237][ T11] [ 121.496735][ T11] [ 121.496735][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 121.496735][ T11] [ 121.508672][ T114] [ 121.508672][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 121.508672][ T114] [ 121.519256][ T11] [ 121.519256][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 121.519256][ T11] [ 121.529752][ T11] [ 121.529752][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 121.529752][ T11] [ 121.540735][ T113] [ 121.540735][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 121.540735][ T113] [ 121.551315][ T11] [ 121.551315][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 121.551315][ T11] [ 121.561798][ T11] [ 121.561798][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 121.561798][ T11] [ 121.572654][ T113] [ 121.572654][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 121.572654][ T113] [ 121.583138][ T5087] [pid 5087] umount2("./48/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./48/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./48/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./48/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./48/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [ 121.583138][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 121.583138][ T5087] [ 121.593878][ T5087] [ 121.593878][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 121.593878][ T5087] [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./48/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./48") = 0 [pid 5087] mkdir("./49", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5154 attached , child_tidptr=0x55559309e650) = 51 [pid 5154] set_robust_list(0x55559309e660, 24) = 0 [pid 5154] chdir("./49") = 0 [pid 5154] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5154] setpgid(0, 0) = 0 [pid 5154] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5154] write(3, "1000", 4) = 4 [pid 5154] close(3) = 0 [pid 5154] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5154] memfd_create("syzkaller", 0) = 3 [pid 5154] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5154] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5154] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5154] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5154] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5154] close(3) = 0 [pid 5154] close(4) = 0 [pid 5154] mkdir("./file0", 0777) = 0 [pid 5154] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5154] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5154] chdir("./file0") = 0 [pid 5154] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 122.124532][ T5154] loop0: detected capacity change from 0 to 32768 [ 122.158810][ T5154] [ 122.158810][ T5154] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 122.158810][ T5154] [pid 5154] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5154] close(3) = 0 [pid 5154] close(4) = -1 EBADF (Bad file descriptor) [pid 5154] close(5) = -1 EBADF (Bad file descriptor) [pid 5154] close(6) = -1 EBADF (Bad file descriptor) [pid 5154] close(7) = -1 EBADF (Bad file descriptor) [pid 5154] close(8) = -1 EBADF (Bad file descriptor) [pid 5154] close(9) = -1 EBADF (Bad file descriptor) [pid 5154] close(10) = -1 EBADF (Bad file descriptor) [pid 5154] close(11) = -1 EBADF (Bad file descriptor) [pid 5154] close(12) = -1 EBADF (Bad file descriptor) [pid 5154] close(13) = -1 EBADF (Bad file descriptor) [pid 5154] close(14) = -1 EBADF (Bad file descriptor) [pid 5154] close(15) = -1 EBADF (Bad file descriptor) [ 122.182565][ T5154] read_mapping_page failed! [ 122.187096][ T5154] ERROR: (device loop0): txCommit: [ 122.187096][ T5154] [pid 5154] close(16) = -1 EBADF (Bad file descriptor) [pid 5154] close(17) = -1 EBADF (Bad file descriptor) [pid 5154] close(18) = -1 EBADF (Bad file descriptor) [pid 5154] close(19) = -1 EBADF (Bad file descriptor) [pid 5154] close(20) = -1 EBADF (Bad file descriptor) [pid 5154] close(21) = -1 EBADF (Bad file descriptor) [pid 5154] close(22) = -1 EBADF (Bad file descriptor) [pid 5154] close(23) = -1 EBADF (Bad file descriptor) [pid 5154] close(24) = -1 EBADF (Bad file descriptor) [pid 5154] close(25) = -1 EBADF (Bad file descriptor) [pid 5154] close(26) = -1 EBADF (Bad file descriptor) [pid 5154] close(27) = -1 EBADF (Bad file descriptor) [pid 5154] close(28) = -1 EBADF (Bad file descriptor) [pid 5154] close(29) = -1 EBADF (Bad file descriptor) [pid 5154] exit_group(0) = ? [pid 5154] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=51, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./49", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./49/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./49/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./49/binderfs") = 0 [ 122.315140][ T1059] [ 122.315140][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 122.315140][ T1059] [ 122.326641][ T1059] [ 122.326641][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 122.326641][ T1059] [ 122.339370][ T114] [ 122.339370][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 122.339370][ T114] [ 122.350151][ T1059] [ 122.350151][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 122.350151][ T1059] [ 122.360619][ T1059] [ 122.360619][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 122.360619][ T1059] [ 122.371957][ T114] [ 122.371957][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 122.371957][ T114] [ 122.382592][ T1059] [ 122.382592][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 122.382592][ T1059] [ 122.393152][ T1059] [ 122.393152][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 122.393152][ T1059] [ 122.404094][ T113] [ 122.404094][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 122.404094][ T113] [pid 5087] umount2("./49/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./49/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./49/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./49/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./49/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 122.415668][ T5087] [ 122.415668][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 122.415668][ T5087] [ 122.426391][ T5087] [ 122.426391][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 122.426391][ T5087] [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./49/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./49") = 0 [pid 5087] mkdir("./50", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5155 attached , child_tidptr=0x55559309e650) = 52 [pid 5155] set_robust_list(0x55559309e660, 24) = 0 [pid 5155] chdir("./50") = 0 [pid 5155] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5155] setpgid(0, 0) = 0 [pid 5155] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5155] write(3, "1000", 4) = 4 [pid 5155] close(3) = 0 [pid 5155] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5155] memfd_create("syzkaller", 0) = 3 [pid 5155] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5155] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5155] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5155] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5155] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5155] close(3) = 0 [pid 5155] close(4) = 0 [pid 5155] mkdir("./file0", 0777) = 0 [pid 5155] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5155] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5155] chdir("./file0") = 0 [pid 5155] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 122.994582][ T5155] loop0: detected capacity change from 0 to 32768 [ 123.012297][ T5155] [ 123.012297][ T5155] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.012297][ T5155] [pid 5155] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5155] close(3) = 0 [pid 5155] close(4) = -1 EBADF (Bad file descriptor) [pid 5155] close(5) = -1 EBADF (Bad file descriptor) [pid 5155] close(6) = -1 EBADF (Bad file descriptor) [pid 5155] close(7) = -1 EBADF (Bad file descriptor) [pid 5155] close(8) = -1 EBADF (Bad file descriptor) [pid 5155] close(9) = -1 EBADF (Bad file descriptor) [pid 5155] close(10) = -1 EBADF (Bad file descriptor) [pid 5155] close(11) = -1 EBADF (Bad file descriptor) [pid 5155] close(12) = -1 EBADF (Bad file descriptor) [pid 5155] close(13) = -1 EBADF (Bad file descriptor) [pid 5155] close(14) = -1 EBADF (Bad file descriptor) [pid 5155] close(15) = -1 EBADF (Bad file descriptor) [pid 5155] close(16) = -1 EBADF (Bad file descriptor) [pid 5155] close(17) = -1 EBADF (Bad file descriptor) [pid 5155] close(18) = -1 EBADF (Bad file descriptor) [pid 5155] close(19) = -1 EBADF (Bad file descriptor) [pid 5155] close(20) = -1 EBADF (Bad file descriptor) [pid 5155] close(21) = -1 EBADF (Bad file descriptor) [pid 5155] close(22) = -1 EBADF (Bad file descriptor) [pid 5155] close(23) = -1 EBADF (Bad file descriptor) [pid 5155] close(24) = -1 EBADF (Bad file descriptor) [pid 5155] close(25) = -1 EBADF (Bad file descriptor) [pid 5155] close(26) = -1 EBADF (Bad file descriptor) [pid 5155] close(27) = -1 EBADF (Bad file descriptor) [pid 5155] close(28) = -1 EBADF (Bad file descriptor) [pid 5155] close(29) = -1 EBADF (Bad file descriptor) [pid 5155] exit_group(0) = ? [ 123.055822][ T5155] read_mapping_page failed! [ 123.060349][ T5155] ERROR: (device loop0): txCommit: [ 123.060349][ T5155] [pid 5155] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=52, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5087] umount2("./50", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./50/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./50/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./50/binderfs") = 0 [ 123.167710][ T1059] [ 123.167710][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.167710][ T1059] [ 123.178336][ T1059] [ 123.178336][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.178336][ T1059] [ 123.189463][ T113] [ 123.189463][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.189463][ T113] [ 123.200104][ T1059] [ 123.200104][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.200104][ T1059] [ 123.210595][ T1059] [ 123.210595][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.210595][ T1059] [ 123.221493][ T113] [ 123.221493][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.221493][ T113] [ 123.232090][ T1059] [ 123.232090][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.232090][ T1059] [ 123.242562][ T1059] [ 123.242562][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.242562][ T1059] [ 123.253534][ T114] [ 123.253534][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.253534][ T114] [ 123.264246][ T5087] [pid 5087] umount2("./50/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./50/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./50/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./50/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./50/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 123.264246][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.264246][ T5087] [ 123.275125][ T5087] [ 123.275125][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.275125][ T5087] [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./50/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./50") = 0 [pid 5087] mkdir("./51", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5156 attached , child_tidptr=0x55559309e650) = 53 [pid 5156] set_robust_list(0x55559309e660, 24) = 0 [pid 5156] chdir("./51") = 0 [pid 5156] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5156] setpgid(0, 0) = 0 [pid 5156] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5156] write(3, "1000", 4) = 4 [pid 5156] close(3) = 0 [pid 5156] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5156] memfd_create("syzkaller", 0) = 3 [pid 5156] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5156] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5156] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5156] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5156] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5156] close(3) = 0 [pid 5156] close(4) = 0 [pid 5156] mkdir("./file0", 0777) = 0 [pid 5156] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5156] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5156] chdir("./file0") = 0 [pid 5156] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 123.822186][ T5156] loop0: detected capacity change from 0 to 32768 [ 123.847386][ T5156] [ 123.847386][ T5156] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.847386][ T5156] [pid 5156] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5156] close(3) = 0 [pid 5156] close(4) = -1 EBADF (Bad file descriptor) [pid 5156] close(5) = -1 EBADF (Bad file descriptor) [pid 5156] close(6) = -1 EBADF (Bad file descriptor) [pid 5156] close(7) = -1 EBADF (Bad file descriptor) [pid 5156] close(8) = -1 EBADF (Bad file descriptor) [pid 5156] close(9) = -1 EBADF (Bad file descriptor) [pid 5156] close(10) = -1 EBADF (Bad file descriptor) [pid 5156] close(11) = -1 EBADF (Bad file descriptor) [pid 5156] close(12) = -1 EBADF (Bad file descriptor) [pid 5156] close(13) = -1 EBADF (Bad file descriptor) [ 123.881333][ T5156] read_mapping_page failed! [ 123.886385][ T5156] ERROR: (device loop0): txCommit: [ 123.886385][ T5156] [pid 5156] close(14) = -1 EBADF (Bad file descriptor) [pid 5156] close(15) = -1 EBADF (Bad file descriptor) [pid 5156] close(16) = -1 EBADF (Bad file descriptor) [pid 5156] close(17) = -1 EBADF (Bad file descriptor) [pid 5156] close(18) = -1 EBADF (Bad file descriptor) [pid 5156] close(19) = -1 EBADF (Bad file descriptor) [pid 5156] close(20) = -1 EBADF (Bad file descriptor) [pid 5156] close(21) = -1 EBADF (Bad file descriptor) [pid 5156] close(22) = -1 EBADF (Bad file descriptor) [pid 5156] close(23) = -1 EBADF (Bad file descriptor) [pid 5156] close(24) = -1 EBADF (Bad file descriptor) [pid 5156] close(25) = -1 EBADF (Bad file descriptor) [pid 5156] close(26) = -1 EBADF (Bad file descriptor) [pid 5156] close(27) = -1 EBADF (Bad file descriptor) [pid 5156] close(28) = -1 EBADF (Bad file descriptor) [pid 5156] close(29) = -1 EBADF (Bad file descriptor) [pid 5156] exit_group(0) = ? [pid 5156] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=53, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=24 /* 0.24 s */} --- [pid 5087] umount2("./51", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./51/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./51/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./51/binderfs") = 0 [ 124.046237][ T1059] [ 124.046237][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.046237][ T1059] [ 124.056752][ T1059] [ 124.056752][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.056752][ T1059] [ 124.067990][ T114] [ 124.067990][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.067990][ T114] [ 124.079789][ T1059] [ 124.079789][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.079789][ T1059] [ 124.091464][ T1059] [ 124.091464][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.091464][ T1059] [ 124.102544][ T114] [ 124.102544][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.102544][ T114] [ 124.113342][ T1059] [ 124.113342][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.113342][ T1059] [ 124.123819][ T1059] [ 124.123819][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.123819][ T1059] [ 124.135273][ T113] [ 124.135273][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.135273][ T113] [pid 5087] umount2("./51/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./51/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./51/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./51/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./51/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./51/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./51") = 0 [ 124.146106][ T5087] [ 124.146106][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.146106][ T5087] [ 124.157864][ T5087] [ 124.157864][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.157864][ T5087] [pid 5087] mkdir("./52", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5157 attached , child_tidptr=0x55559309e650) = 54 [pid 5157] set_robust_list(0x55559309e660, 24) = 0 [pid 5157] chdir("./52") = 0 [pid 5157] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5157] setpgid(0, 0) = 0 [pid 5157] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5157] write(3, "1000", 4) = 4 [pid 5157] close(3) = 0 [pid 5157] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5157] memfd_create("syzkaller", 0) = 3 [pid 5157] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5157] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5157] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5157] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5157] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5157] close(3) = 0 [pid 5157] close(4) = 0 [pid 5157] mkdir("./file0", 0777) = 0 [pid 5157] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5157] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5157] chdir("./file0") = 0 [pid 5157] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 124.644121][ T5157] loop0: detected capacity change from 0 to 32768 [ 124.675690][ T5157] [ 124.675690][ T5157] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.675690][ T5157] [pid 5157] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5157] close(3) = 0 [pid 5157] close(4) = -1 EBADF (Bad file descriptor) [pid 5157] close(5) = -1 EBADF (Bad file descriptor) [pid 5157] close(6) = -1 EBADF (Bad file descriptor) [pid 5157] close(7) = -1 EBADF (Bad file descriptor) [pid 5157] close(8) = -1 EBADF (Bad file descriptor) [pid 5157] close(9) = -1 EBADF (Bad file descriptor) [pid 5157] close(10) = -1 EBADF (Bad file descriptor) [pid 5157] close(11) = -1 EBADF (Bad file descriptor) [pid 5157] close(12) = -1 EBADF (Bad file descriptor) [ 124.695741][ T5157] read_mapping_page failed! [ 124.700254][ T5157] ERROR: (device loop0): txCommit: [ 124.700254][ T5157] [pid 5157] close(13) = -1 EBADF (Bad file descriptor) [pid 5157] close(14) = -1 EBADF (Bad file descriptor) [pid 5157] close(15) = -1 EBADF (Bad file descriptor) [pid 5157] close(16) = -1 EBADF (Bad file descriptor) [pid 5157] close(17) = -1 EBADF (Bad file descriptor) [pid 5157] close(18) = -1 EBADF (Bad file descriptor) [pid 5157] close(19) = -1 EBADF (Bad file descriptor) [pid 5157] close(20) = -1 EBADF (Bad file descriptor) [pid 5157] close(21) = -1 EBADF (Bad file descriptor) [pid 5157] close(22) = -1 EBADF (Bad file descriptor) [pid 5157] close(23) = -1 EBADF (Bad file descriptor) [pid 5157] close(24) = -1 EBADF (Bad file descriptor) [pid 5157] close(25) = -1 EBADF (Bad file descriptor) [pid 5157] close(26) = -1 EBADF (Bad file descriptor) [pid 5157] close(27) = -1 EBADF (Bad file descriptor) [pid 5157] close(28) = -1 EBADF (Bad file descriptor) [pid 5157] close(29) = -1 EBADF (Bad file descriptor) [pid 5157] exit_group(0) = ? [pid 5157] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=54, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=24 /* 0.24 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./52", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./52/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./52/binderfs") = 0 [ 124.898114][ T1059] [ 124.898114][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.898114][ T1059] [ 124.908647][ T1059] [ 124.908647][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.908647][ T1059] [ 124.919943][ T114] [ 124.919943][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.919943][ T114] [ 124.930582][ T1059] [ 124.930582][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.930582][ T1059] [ 124.941272][ T1059] [ 124.941272][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.941272][ T1059] [ 124.953608][ T114] [ 124.953608][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.953608][ T114] [ 124.964275][ T1059] [ 124.964275][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.964275][ T1059] [ 124.974925][ T1059] [ 124.974925][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.974925][ T1059] [ 124.985892][ T114] [ 124.985892][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.985892][ T114] [ 124.996354][ T5087] [pid 5087] umount2("./52/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./52/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./52/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./52/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./52/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./52/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./52") = 0 [pid 5087] mkdir("./53", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 124.996354][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.996354][ T5087] [ 125.007198][ T5087] [ 125.007198][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 125.007198][ T5087] [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5158 attached , child_tidptr=0x55559309e650) = 55 [pid 5158] set_robust_list(0x55559309e660, 24) = 0 [pid 5158] chdir("./53") = 0 [pid 5158] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5158] setpgid(0, 0) = 0 [pid 5158] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5158] write(3, "1000", 4) = 4 [pid 5158] close(3) = 0 [pid 5158] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5158] memfd_create("syzkaller", 0) = 3 [pid 5158] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5158] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5158] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5158] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5158] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5158] close(3) = 0 [pid 5158] close(4) = 0 [pid 5158] mkdir("./file0", 0777) = 0 [ 125.465857][ T5158] loop0: detected capacity change from 0 to 32768 [pid 5158] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5158] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5158] chdir("./file0") = 0 [pid 5158] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5158] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5158] close(3) = 0 [pid 5158] close(4) = -1 EBADF (Bad file descriptor) [pid 5158] close(5) = -1 EBADF (Bad file descriptor) [pid 5158] close(6) = -1 EBADF (Bad file descriptor) [pid 5158] close(7) = -1 EBADF (Bad file descriptor) [pid 5158] close(8) = -1 EBADF (Bad file descriptor) [pid 5158] close(9) = -1 EBADF (Bad file descriptor) [pid 5158] close(10) = -1 EBADF (Bad file descriptor) [pid 5158] close(11) = -1 EBADF (Bad file descriptor) [pid 5158] close(12) = -1 EBADF (Bad file descriptor) [ 125.516324][ T5158] [ 125.516324][ T5158] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 125.516324][ T5158] [ 125.549207][ T5158] read_mapping_page failed! [ 125.553897][ T5158] ERROR: (device loop0): txCommit: [ 125.553897][ T5158] [pid 5158] close(13) = -1 EBADF (Bad file descriptor) [pid 5158] close(14) = -1 EBADF (Bad file descriptor) [pid 5158] close(15) = -1 EBADF (Bad file descriptor) [pid 5158] close(16) = -1 EBADF (Bad file descriptor) [pid 5158] close(17) = -1 EBADF (Bad file descriptor) [pid 5158] close(18) = -1 EBADF (Bad file descriptor) [pid 5158] close(19) = -1 EBADF (Bad file descriptor) [pid 5158] close(20) = -1 EBADF (Bad file descriptor) [pid 5158] close(21) = -1 EBADF (Bad file descriptor) [pid 5158] close(22) = -1 EBADF (Bad file descriptor) [pid 5158] close(23) = -1 EBADF (Bad file descriptor) [pid 5158] close(24) = -1 EBADF (Bad file descriptor) [pid 5158] close(25) = -1 EBADF (Bad file descriptor) [pid 5158] close(26) = -1 EBADF (Bad file descriptor) [pid 5158] close(27) = -1 EBADF (Bad file descriptor) [pid 5158] close(28) = -1 EBADF (Bad file descriptor) [pid 5158] close(29) = -1 EBADF (Bad file descriptor) [pid 5158] exit_group(0) = ? [pid 5158] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=55, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./53", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./53/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./53/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./53/binderfs") = 0 [ 125.694520][ T11] [ 125.694520][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 125.694520][ T11] [ 125.705314][ T11] [ 125.705314][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 125.705314][ T11] [ 125.716550][ T113] [ 125.716550][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 125.716550][ T113] [ 125.727209][ T11] [ 125.727209][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 125.727209][ T11] [ 125.737761][ T11] [ 125.737761][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 125.737761][ T11] [ 125.749500][ T113] [ 125.749500][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 125.749500][ T113] [ 125.760046][ T11] [ 125.760046][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 125.760046][ T11] [ 125.770553][ T11] [ 125.770553][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 125.770553][ T11] [ 125.781551][ T113] [ 125.781551][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 125.781551][ T113] [ 125.792174][ T5087] [pid 5087] umount2("./53/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./53/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./53/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./53/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./53/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./53/file0") = 0 [ 125.792174][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 125.792174][ T5087] [ 125.803036][ T5087] [ 125.803036][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 125.803036][ T5087] [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./53") = 0 [pid 5087] mkdir("./54", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5159 attached , child_tidptr=0x55559309e650) = 56 [pid 5159] set_robust_list(0x55559309e660, 24) = 0 [pid 5159] chdir("./54") = 0 [pid 5159] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5159] setpgid(0, 0) = 0 [pid 5159] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5159] write(3, "1000", 4) = 4 [pid 5159] close(3) = 0 [pid 5159] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5159] memfd_create("syzkaller", 0) = 3 [pid 5159] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5159] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5159] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5159] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5159] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5159] close(3) = 0 [pid 5159] close(4) = 0 [pid 5159] mkdir("./file0", 0777) = 0 [pid 5159] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5159] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5159] chdir("./file0") = 0 [pid 5159] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 126.294027][ T5159] loop0: detected capacity change from 0 to 32768 [ 126.312942][ T5159] [ 126.312942][ T5159] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 126.312942][ T5159] [pid 5159] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5159] close(3) = 0 [pid 5159] close(4) = -1 EBADF (Bad file descriptor) [pid 5159] close(5) = -1 EBADF (Bad file descriptor) [pid 5159] close(6) = -1 EBADF (Bad file descriptor) [pid 5159] close(7) = -1 EBADF (Bad file descriptor) [pid 5159] close(8) = -1 EBADF (Bad file descriptor) [pid 5159] close(9) = -1 EBADF (Bad file descriptor) [pid 5159] close(10) = -1 EBADF (Bad file descriptor) [pid 5159] close(11) = -1 EBADF (Bad file descriptor) [ 126.359919][ T5159] read_mapping_page failed! [ 126.364662][ T5159] ERROR: (device loop0): txCommit: [ 126.364662][ T5159] [pid 5159] close(12) = -1 EBADF (Bad file descriptor) [pid 5159] close(13) = -1 EBADF (Bad file descriptor) [pid 5159] close(14) = -1 EBADF (Bad file descriptor) [pid 5159] close(15) = -1 EBADF (Bad file descriptor) [pid 5159] close(16) = -1 EBADF (Bad file descriptor) [pid 5159] close(17) = -1 EBADF (Bad file descriptor) [pid 5159] close(18) = -1 EBADF (Bad file descriptor) [pid 5159] close(19) = -1 EBADF (Bad file descriptor) [pid 5159] close(20) = -1 EBADF (Bad file descriptor) [pid 5159] close(21) = -1 EBADF (Bad file descriptor) [pid 5159] close(22) = -1 EBADF (Bad file descriptor) [pid 5159] close(23) = -1 EBADF (Bad file descriptor) [pid 5159] close(24) = -1 EBADF (Bad file descriptor) [pid 5159] close(25) = -1 EBADF (Bad file descriptor) [pid 5159] close(26) = -1 EBADF (Bad file descriptor) [pid 5159] close(27) = -1 EBADF (Bad file descriptor) [pid 5159] close(28) = -1 EBADF (Bad file descriptor) [pid 5159] close(29) = -1 EBADF (Bad file descriptor) [pid 5159] exit_group(0) = ? [pid 5159] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=56, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./54", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./54/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./54/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./54/binderfs") = 0 [ 126.514878][ T61] [ 126.514878][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 126.514878][ T61] [ 126.525361][ T61] [ 126.525361][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 126.525361][ T61] [ 126.536521][ T114] [ 126.536521][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 126.536521][ T114] [ 126.547211][ T61] [ 126.547211][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 126.547211][ T61] [ 126.557926][ T61] [ 126.557926][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 126.557926][ T61] [ 126.568810][ T114] [ 126.568810][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 126.568810][ T114] [ 126.579352][ T61] [ 126.579352][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 126.579352][ T61] [ 126.589805][ T61] [ 126.589805][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 126.589805][ T61] [ 126.600823][ T114] [ 126.600823][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 126.600823][ T114] [ 126.611556][ T5087] [pid 5087] umount2("./54/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./54/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./54/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./54/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./54/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [ 126.611556][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 126.611556][ T5087] [ 126.622400][ T5087] [ 126.622400][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 126.622400][ T5087] [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./54/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./54") = 0 [pid 5087] mkdir("./55", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5160 attached [pid 5160] set_robust_list(0x55559309e660, 24) = 0 [pid 5087] <... clone resumed>, child_tidptr=0x55559309e650) = 57 [pid 5160] chdir("./55") = 0 [pid 5160] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5160] setpgid(0, 0) = 0 [pid 5160] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5160] write(3, "1000", 4) = 4 [pid 5160] close(3) = 0 [pid 5160] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5160] memfd_create("syzkaller", 0) = 3 [pid 5160] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5160] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5160] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5160] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5160] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5160] close(3) = 0 [pid 5160] close(4) = 0 [pid 5160] mkdir("./file0", 0777) = 0 [pid 5160] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5160] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5160] chdir("./file0") = 0 [pid 5160] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 127.111867][ T5160] loop0: detected capacity change from 0 to 32768 [ 127.143413][ T5160] [ 127.143413][ T5160] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 127.143413][ T5160] [pid 5160] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5160] close(3) = 0 [pid 5160] close(4) = -1 EBADF (Bad file descriptor) [pid 5160] close(5) = -1 EBADF (Bad file descriptor) [pid 5160] close(6) = -1 EBADF (Bad file descriptor) [pid 5160] close(7) = -1 EBADF (Bad file descriptor) [pid 5160] close(8) = -1 EBADF (Bad file descriptor) [pid 5160] close(9) = -1 EBADF (Bad file descriptor) [pid 5160] close(10) = -1 EBADF (Bad file descriptor) [pid 5160] close(11) = -1 EBADF (Bad file descriptor) [pid 5160] close(12) = -1 EBADF (Bad file descriptor) [pid 5160] close(13) = -1 EBADF (Bad file descriptor) [pid 5160] close(14) = -1 EBADF (Bad file descriptor) [pid 5160] close(15) = -1 EBADF (Bad file descriptor) [pid 5160] close(16) = -1 EBADF (Bad file descriptor) [pid 5160] close(17) = -1 EBADF (Bad file descriptor) [pid 5160] close(18) = -1 EBADF (Bad file descriptor) [pid 5160] close(19) = -1 EBADF (Bad file descriptor) [ 127.191068][ T5160] read_mapping_page failed! [ 127.195879][ T5160] ERROR: (device loop0): txCommit: [ 127.195879][ T5160] [pid 5160] close(20) = -1 EBADF (Bad file descriptor) [pid 5160] close(21) = -1 EBADF (Bad file descriptor) [pid 5160] close(22) = -1 EBADF (Bad file descriptor) [pid 5160] close(23) = -1 EBADF (Bad file descriptor) [pid 5160] close(24) = -1 EBADF (Bad file descriptor) [pid 5160] close(25) = -1 EBADF (Bad file descriptor) [pid 5160] close(26) = -1 EBADF (Bad file descriptor) [pid 5160] close(27) = -1 EBADF (Bad file descriptor) [pid 5160] close(28) = -1 EBADF (Bad file descriptor) [pid 5160] close(29) = -1 EBADF (Bad file descriptor) [pid 5160] exit_group(0) = ? [pid 5160] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=57, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=21 /* 0.21 s */} --- [pid 5087] umount2("./55", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./55/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./55/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./55/binderfs") = 0 [ 127.327325][ T61] [ 127.327325][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 127.327325][ T61] [ 127.337811][ T61] [ 127.337811][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 127.337811][ T61] [ 127.348968][ T113] [ 127.348968][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 127.348968][ T113] [ 127.359601][ T61] [ 127.359601][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 127.359601][ T61] [ 127.370177][ T61] [ 127.370177][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 127.370177][ T61] [ 127.381442][ T113] [ 127.381442][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 127.381442][ T113] [ 127.392079][ T61] [ 127.392079][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 127.392079][ T61] [ 127.402633][ T61] [ 127.402633][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 127.402633][ T61] [ 127.414048][ T113] [ 127.414048][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 127.414048][ T113] [ 127.424912][ T5087] [pid 5087] umount2("./55/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./55/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./55/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./55/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./55/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./55/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [ 127.424912][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 127.424912][ T5087] [ 127.436029][ T5087] [ 127.436029][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 127.436029][ T5087] [pid 5087] close(3) = 0 [pid 5087] rmdir("./55") = 0 [pid 5087] mkdir("./56", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5161 attached [pid 5161] set_robust_list(0x55559309e660, 24 [pid 5087] <... clone resumed>, child_tidptr=0x55559309e650) = 58 [pid 5161] <... set_robust_list resumed>) = 0 [pid 5161] chdir("./56") = 0 [pid 5161] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5161] setpgid(0, 0) = 0 [pid 5161] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5161] write(3, "1000", 4) = 4 [pid 5161] close(3) = 0 [pid 5161] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5161] memfd_create("syzkaller", 0) = 3 [pid 5161] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5161] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5161] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5161] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5161] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5161] close(3) = 0 [pid 5161] close(4) = 0 [pid 5161] mkdir("./file0", 0777) = 0 [pid 5161] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5161] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5161] chdir("./file0") = 0 [pid 5161] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 127.948165][ T5161] loop0: detected capacity change from 0 to 32768 [ 127.979689][ T5161] [ 127.979689][ T5161] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 127.979689][ T5161] [pid 5161] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5161] close(3) = 0 [pid 5161] close(4) = -1 EBADF (Bad file descriptor) [pid 5161] close(5) = -1 EBADF (Bad file descriptor) [pid 5161] close(6) = -1 EBADF (Bad file descriptor) [pid 5161] close(7) = -1 EBADF (Bad file descriptor) [pid 5161] close(8) = -1 EBADF (Bad file descriptor) [pid 5161] close(9) = -1 EBADF (Bad file descriptor) [pid 5161] close(10) = -1 EBADF (Bad file descriptor) [pid 5161] close(11) = -1 EBADF (Bad file descriptor) [pid 5161] close(12) = -1 EBADF (Bad file descriptor) [pid 5161] close(13) = -1 EBADF (Bad file descriptor) [pid 5161] close(14) = -1 EBADF (Bad file descriptor) [pid 5161] close(15) = -1 EBADF (Bad file descriptor) [pid 5161] close(16) = -1 EBADF (Bad file descriptor) [pid 5161] close(17) = -1 EBADF (Bad file descriptor) [pid 5161] close(18) = -1 EBADF (Bad file descriptor) [pid 5161] close(19) = -1 EBADF (Bad file descriptor) [pid 5161] close(20) = -1 EBADF (Bad file descriptor) [pid 5161] close(21) = -1 EBADF (Bad file descriptor) [pid 5161] close(22) = -1 EBADF (Bad file descriptor) [pid 5161] close(23) = -1 EBADF (Bad file descriptor) [pid 5161] close(24) = -1 EBADF (Bad file descriptor) [pid 5161] close(25) = -1 EBADF (Bad file descriptor) [pid 5161] close(26) = -1 EBADF (Bad file descriptor) [pid 5161] close(27) = -1 EBADF (Bad file descriptor) [pid 5161] close(28) = -1 EBADF (Bad file descriptor) [pid 5161] close(29) = -1 EBADF (Bad file descriptor) [pid 5161] exit_group(0) = ? [ 127.998012][ T5161] read_mapping_page failed! [ 128.003029][ T5161] ERROR: (device loop0): txCommit: [ 128.003029][ T5161] [pid 5161] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=58, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=24 /* 0.24 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./56", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./56/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./56/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./56/binderfs") = 0 [ 128.096958][ T11] [ 128.096958][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 128.096958][ T11] [ 128.107726][ T11] [ 128.107726][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 128.107726][ T11] [ 128.119146][ T114] [ 128.119146][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 128.119146][ T114] [ 128.129949][ T11] [ 128.129949][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 128.129949][ T11] [ 128.140453][ T11] [ 128.140453][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 128.140453][ T11] [ 128.151463][ T113] [ 128.151463][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 128.151463][ T113] [ 128.162311][ T11] [ 128.162311][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 128.162311][ T11] [ 128.172864][ T11] [ 128.172864][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 128.172864][ T11] [ 128.183532][ T5087] [ 128.183532][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 128.183532][ T5087] [ 128.194380][ T113] [pid 5087] umount2("./56/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./56/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./56/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./56/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./56/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [ 128.194380][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 128.194380][ T113] [ 128.204892][ T5087] [ 128.204892][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 128.204892][ T5087] [pid 5087] close(4) = 0 [pid 5087] rmdir("./56/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./56") = 0 [pid 5087] mkdir("./57", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5162 attached [pid 5162] set_robust_list(0x55559309e660, 24) = 0 [pid 5162] chdir("./57" [pid 5087] <... clone resumed>, child_tidptr=0x55559309e650) = 59 [pid 5162] <... chdir resumed>) = 0 [pid 5162] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5162] setpgid(0, 0) = 0 [pid 5162] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5162] write(3, "1000", 4) = 4 [pid 5162] close(3) = 0 [pid 5162] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5162] memfd_create("syzkaller", 0) = 3 [pid 5162] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5162] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5162] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5162] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5162] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5162] close(3) = 0 [pid 5162] close(4) = 0 [pid 5162] mkdir("./file0", 0777) = 0 [ 128.741859][ T5162] loop0: detected capacity change from 0 to 32768 [pid 5162] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5162] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5162] chdir("./file0") = 0 [pid 5162] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5162] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5162] close(3) = 0 [pid 5162] close(4) = -1 EBADF (Bad file descriptor) [pid 5162] close(5) = -1 EBADF (Bad file descriptor) [pid 5162] close(6) = -1 EBADF (Bad file descriptor) [pid 5162] close(7) = -1 EBADF (Bad file descriptor) [pid 5162] close(8) = -1 EBADF (Bad file descriptor) [pid 5162] close(9) = -1 EBADF (Bad file descriptor) [pid 5162] close(10) = -1 EBADF (Bad file descriptor) [pid 5162] close(11) = -1 EBADF (Bad file descriptor) [pid 5162] close(12) = -1 EBADF (Bad file descriptor) [pid 5162] close(13) = -1 EBADF (Bad file descriptor) [pid 5162] close(14) = -1 EBADF (Bad file descriptor) [pid 5162] close(15) = -1 EBADF (Bad file descriptor) [pid 5162] close(16) = -1 EBADF (Bad file descriptor) [pid 5162] close(17) = -1 EBADF (Bad file descriptor) [ 128.784804][ T5162] [ 128.784804][ T5162] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 128.784804][ T5162] [ 128.813447][ T5162] read_mapping_page failed! [ 128.818009][ T5162] ERROR: (device loop0): txCommit: [ 128.818009][ T5162] [pid 5162] close(18) = -1 EBADF (Bad file descriptor) [pid 5162] close(19) = -1 EBADF (Bad file descriptor) [pid 5162] close(20) = -1 EBADF (Bad file descriptor) [pid 5162] close(21) = -1 EBADF (Bad file descriptor) [pid 5162] close(22) = -1 EBADF (Bad file descriptor) [pid 5162] close(23) = -1 EBADF (Bad file descriptor) [pid 5162] close(24) = -1 EBADF (Bad file descriptor) [pid 5162] close(25) = -1 EBADF (Bad file descriptor) [pid 5162] close(26) = -1 EBADF (Bad file descriptor) [pid 5162] close(27) = -1 EBADF (Bad file descriptor) [pid 5162] close(28) = -1 EBADF (Bad file descriptor) [pid 5162] close(29) = -1 EBADF (Bad file descriptor) [pid 5162] exit_group(0) = ? [pid 5162] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=59, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./57", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./57/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./57/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./57/binderfs") = 0 [ 128.967718][ T61] [ 128.967718][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 128.967718][ T61] [ 128.978222][ T61] [ 128.978222][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 128.978222][ T61] [ 128.989501][ T113] [ 128.989501][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 128.989501][ T113] [ 129.000330][ T61] [ 129.000330][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.000330][ T61] [ 129.010885][ T61] [ 129.010885][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.010885][ T61] [ 129.022151][ T113] [ 129.022151][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.022151][ T113] [ 129.032733][ T61] [ 129.032733][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.032733][ T61] [ 129.043352][ T61] [ 129.043352][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.043352][ T61] [ 129.054106][ T5087] [ 129.054106][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.054106][ T5087] [ 129.064992][ T114] [pid 5087] umount2("./57/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./57/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./57/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./57/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./57/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [ 129.064992][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.064992][ T114] [ 129.075539][ T5087] [ 129.075539][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.075539][ T5087] [pid 5087] rmdir("./57/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./57") = 0 [pid 5087] mkdir("./58", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5163 attached [pid 5163] set_robust_list(0x55559309e660, 24) = 0 [pid 5087] <... clone resumed>, child_tidptr=0x55559309e650) = 60 [pid 5163] chdir("./58") = 0 [pid 5163] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5163] setpgid(0, 0) = 0 [pid 5163] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5163] write(3, "1000", 4) = 4 [pid 5163] close(3) = 0 [pid 5163] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5163] memfd_create("syzkaller", 0) = 3 [pid 5163] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5163] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5163] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5163] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5163] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5163] close(3) = 0 [pid 5163] close(4) = 0 [pid 5163] mkdir("./file0", 0777) = 0 [ 129.586269][ T5163] loop0: detected capacity change from 0 to 32768 [pid 5163] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5163] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5163] chdir("./file0") = 0 [pid 5163] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5163] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5163] close(3) = 0 [pid 5163] close(4) = -1 EBADF (Bad file descriptor) [pid 5163] close(5) = -1 EBADF (Bad file descriptor) [pid 5163] close(6) = -1 EBADF (Bad file descriptor) [pid 5163] close(7) = -1 EBADF (Bad file descriptor) [pid 5163] close(8) = -1 EBADF (Bad file descriptor) [pid 5163] close(9) = -1 EBADF (Bad file descriptor) [pid 5163] close(10) = -1 EBADF (Bad file descriptor) [pid 5163] close(11) = -1 EBADF (Bad file descriptor) [pid 5163] close(12) = -1 EBADF (Bad file descriptor) [pid 5163] close(13) = -1 EBADF (Bad file descriptor) [ 129.626711][ T5163] [ 129.626711][ T5163] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.626711][ T5163] [ 129.644284][ T5163] read_mapping_page failed! [ 129.648815][ T5163] ERROR: (device loop0): txCommit: [ 129.648815][ T5163] [pid 5163] close(14) = -1 EBADF (Bad file descriptor) [pid 5163] close(15) = -1 EBADF (Bad file descriptor) [pid 5163] close(16) = -1 EBADF (Bad file descriptor) [pid 5163] close(17) = -1 EBADF (Bad file descriptor) [pid 5163] close(18) = -1 EBADF (Bad file descriptor) [pid 5163] close(19) = -1 EBADF (Bad file descriptor) [pid 5163] close(20) = -1 EBADF (Bad file descriptor) [pid 5163] close(21) = -1 EBADF (Bad file descriptor) [pid 5163] close(22) = -1 EBADF (Bad file descriptor) [pid 5163] close(23) = -1 EBADF (Bad file descriptor) [pid 5163] close(24) = -1 EBADF (Bad file descriptor) [pid 5163] close(25) = -1 EBADF (Bad file descriptor) [pid 5163] close(26) = -1 EBADF (Bad file descriptor) [pid 5163] close(27) = -1 EBADF (Bad file descriptor) [pid 5163] close(28) = -1 EBADF (Bad file descriptor) [pid 5163] close(29) = -1 EBADF (Bad file descriptor) [pid 5163] exit_group(0) = ? [pid 5163] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=60, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=22 /* 0.22 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./58", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./58/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./58/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./58/binderfs") = 0 [ 129.814583][ T61] [ 129.814583][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.814583][ T61] [ 129.825250][ T61] [ 129.825250][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.825250][ T61] [ 129.836516][ T113] [ 129.836516][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.836516][ T113] [ 129.847363][ T61] [ 129.847363][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.847363][ T61] [ 129.857979][ T61] [ 129.857979][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.857979][ T61] [ 129.869279][ T113] [ 129.869279][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.869279][ T113] [ 129.879949][ T61] [ 129.879949][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.879949][ T61] [ 129.890562][ T61] [ 129.890562][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.890562][ T61] [ 129.901204][ T5087] [ 129.901204][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.901204][ T5087] [ 129.912816][ T113] [pid 5087] umount2("./58/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./58/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./58/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./58/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./58/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [ 129.912816][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.912816][ T113] [ 129.923378][ T5087] [ 129.923378][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.923378][ T5087] [pid 5087] close(4) = 0 [pid 5087] rmdir("./58/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./58") = 0 [pid 5087] mkdir("./59", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55559309e650) = 61 ./strace-static-x86_64: Process 5164 attached [pid 5164] set_robust_list(0x55559309e660, 24) = 0 [pid 5164] chdir("./59") = 0 [pid 5164] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5164] setpgid(0, 0) = 0 [pid 5164] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5164] write(3, "1000", 4) = 4 [pid 5164] close(3) = 0 [pid 5164] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5164] memfd_create("syzkaller", 0) = 3 [pid 5164] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5164] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5164] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5164] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5164] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5164] close(3) = 0 [pid 5164] close(4) = 0 [pid 5164] mkdir("./file0", 0777) = 0 [ 130.405973][ T5164] loop0: detected capacity change from 0 to 32768 [pid 5164] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5164] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5164] chdir("./file0") = 0 [pid 5164] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 130.470981][ T5164] [ 130.470981][ T5164] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 130.470981][ T5164] [pid 5164] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5164] close(3) = 0 [pid 5164] close(4) = -1 EBADF (Bad file descriptor) [pid 5164] close(5) = -1 EBADF (Bad file descriptor) [pid 5164] close(6) = -1 EBADF (Bad file descriptor) [pid 5164] close(7) = -1 EBADF (Bad file descriptor) [pid 5164] close(8) = -1 EBADF (Bad file descriptor) [pid 5164] close(9) = -1 EBADF (Bad file descriptor) [pid 5164] close(10) = -1 EBADF (Bad file descriptor) [pid 5164] close(11) = -1 EBADF (Bad file descriptor) [pid 5164] close(12) = -1 EBADF (Bad file descriptor) [pid 5164] close(13) = -1 EBADF (Bad file descriptor) [pid 5164] close(14) = -1 EBADF (Bad file descriptor) [pid 5164] close(15) = -1 EBADF (Bad file descriptor) [pid 5164] close(16) = -1 EBADF (Bad file descriptor) [pid 5164] close(17) = -1 EBADF (Bad file descriptor) [pid 5164] close(18) = -1 EBADF (Bad file descriptor) [pid 5164] close(19) = -1 EBADF (Bad file descriptor) [pid 5164] close(20) = -1 EBADF (Bad file descriptor) [pid 5164] close(21) = -1 EBADF (Bad file descriptor) [pid 5164] close(22) = -1 EBADF (Bad file descriptor) [pid 5164] close(23) = -1 EBADF (Bad file descriptor) [pid 5164] close(24) = -1 EBADF (Bad file descriptor) [ 130.512060][ T5164] read_mapping_page failed! [ 130.516599][ T5164] ERROR: (device loop0): txCommit: [ 130.516599][ T5164] [pid 5164] close(25) = -1 EBADF (Bad file descriptor) [pid 5164] close(26) = -1 EBADF (Bad file descriptor) [pid 5164] close(27) = -1 EBADF (Bad file descriptor) [pid 5164] close(28) = -1 EBADF (Bad file descriptor) [pid 5164] close(29) = -1 EBADF (Bad file descriptor) [pid 5164] exit_group(0) = ? [pid 5164] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=61, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=24 /* 0.24 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./59", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./59/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./59/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./59/binderfs") = 0 [ 130.627718][ T1097] [ 130.627718][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 130.627718][ T1097] [ 130.638496][ T1097] [ 130.638496][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 130.638496][ T1097] [ 130.650907][ T113] [ 130.650907][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 130.650907][ T113] [ 130.662075][ T1097] [ 130.662075][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 130.662075][ T1097] [ 130.672591][ T1097] [ 130.672591][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 130.672591][ T1097] [ 130.683623][ T113] [ 130.683623][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 130.683623][ T113] [ 130.694158][ T1097] [ 130.694158][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 130.694158][ T1097] [ 130.704662][ T1097] [ 130.704662][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 130.704662][ T1097] [ 130.715573][ T114] [ 130.715573][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 130.715573][ T114] [pid 5087] umount2("./59/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./59/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./59/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./59/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./59/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 130.726088][ T5087] [ 130.726088][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 130.726088][ T5087] [ 130.736752][ T5087] [ 130.736752][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 130.736752][ T5087] [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./59/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./59") = 0 [pid 5087] mkdir("./60", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5165 attached , child_tidptr=0x55559309e650) = 62 [pid 5165] set_robust_list(0x55559309e660, 24) = 0 [pid 5165] chdir("./60") = 0 [pid 5165] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5165] setpgid(0, 0) = 0 [pid 5165] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5165] write(3, "1000", 4) = 4 [pid 5165] close(3) = 0 [pid 5165] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5165] memfd_create("syzkaller", 0) = 3 [pid 5165] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5165] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5165] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5165] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5165] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5165] close(3) = 0 [pid 5165] close(4) = 0 [pid 5165] mkdir("./file0", 0777) = 0 [pid 5165] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5165] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5165] chdir("./file0") = 0 [pid 5165] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 131.311034][ T5165] loop0: detected capacity change from 0 to 32768 [ 131.348501][ T5165] [ 131.348501][ T5165] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 131.348501][ T5165] [pid 5165] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5165] close(3) = 0 [pid 5165] close(4) = -1 EBADF (Bad file descriptor) [pid 5165] close(5) = -1 EBADF (Bad file descriptor) [pid 5165] close(6) = -1 EBADF (Bad file descriptor) [pid 5165] close(7) = -1 EBADF (Bad file descriptor) [pid 5165] close(8) = -1 EBADF (Bad file descriptor) [pid 5165] close(9) = -1 EBADF (Bad file descriptor) [pid 5165] close(10) = -1 EBADF (Bad file descriptor) [pid 5165] close(11) = -1 EBADF (Bad file descriptor) [pid 5165] close(12) = -1 EBADF (Bad file descriptor) [pid 5165] close(13) = -1 EBADF (Bad file descriptor) [pid 5165] close(14) = -1 EBADF (Bad file descriptor) [ 131.385989][ T5165] read_mapping_page failed! [ 131.390518][ T5165] ERROR: (device loop0): txCommit: [ 131.390518][ T5165] [pid 5165] close(15) = -1 EBADF (Bad file descriptor) [pid 5165] close(16) = -1 EBADF (Bad file descriptor) [pid 5165] close(17) = -1 EBADF (Bad file descriptor) [pid 5165] close(18) = -1 EBADF (Bad file descriptor) [pid 5165] close(19) = -1 EBADF (Bad file descriptor) [pid 5165] close(20) = -1 EBADF (Bad file descriptor) [pid 5165] close(21) = -1 EBADF (Bad file descriptor) [pid 5165] close(22) = -1 EBADF (Bad file descriptor) [pid 5165] close(23) = -1 EBADF (Bad file descriptor) [pid 5165] close(24) = -1 EBADF (Bad file descriptor) [pid 5165] close(25) = -1 EBADF (Bad file descriptor) [pid 5165] close(26) = -1 EBADF (Bad file descriptor) [pid 5165] close(27) = -1 EBADF (Bad file descriptor) [pid 5165] close(28) = -1 EBADF (Bad file descriptor) [pid 5165] close(29) = -1 EBADF (Bad file descriptor) [pid 5165] exit_group(0) = ? [pid 5165] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=62, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=21 /* 0.21 s */} --- [pid 5087] umount2("./60", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./60/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./60/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./60/binderfs") = 0 [ 131.569645][ T1059] [ 131.569645][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 131.569645][ T1059] [ 131.580301][ T1059] [ 131.580301][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 131.580301][ T1059] [ 131.591498][ T113] [ 131.591498][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 131.591498][ T113] [ 131.602288][ T1059] [ 131.602288][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 131.602288][ T1059] [ 131.613547][ T1059] [ 131.613547][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 131.613547][ T1059] [ 131.624544][ T113] [ 131.624544][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 131.624544][ T113] [ 131.635096][ T1059] [ 131.635096][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 131.635096][ T1059] [ 131.645611][ T1059] [ 131.645611][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 131.645611][ T1059] [ 131.657487][ T113] [ 131.657487][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 131.657487][ T113] [pid 5087] umount2("./60/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./60/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./60/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./60/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./60/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [ 131.668069][ T5087] [ 131.668069][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 131.668069][ T5087] [ 131.678771][ T5087] [ 131.678771][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 131.678771][ T5087] [pid 5087] close(4) = 0 [pid 5087] rmdir("./60/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./60") = 0 [pid 5087] mkdir("./61", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55559309e650) = 63 ./strace-static-x86_64: Process 5166 attached [pid 5166] set_robust_list(0x55559309e660, 24) = 0 [pid 5166] chdir("./61") = 0 [pid 5166] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5166] setpgid(0, 0) = 0 [pid 5166] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5166] write(3, "1000", 4) = 4 [pid 5166] close(3) = 0 [pid 5166] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5166] memfd_create("syzkaller", 0) = 3 [pid 5166] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5166] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5166] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5166] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5166] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5166] close(3) = 0 [pid 5166] close(4) = 0 [pid 5166] mkdir("./file0", 0777) = 0 [pid 5166] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5166] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5166] chdir("./file0") = 0 [pid 5166] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 132.167667][ T5166] loop0: detected capacity change from 0 to 32768 [ 132.194075][ T5166] [ 132.194075][ T5166] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 132.194075][ T5166] [pid 5166] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5166] close(3) = 0 [pid 5166] close(4) = -1 EBADF (Bad file descriptor) [pid 5166] close(5) = -1 EBADF (Bad file descriptor) [pid 5166] close(6) = -1 EBADF (Bad file descriptor) [pid 5166] close(7) = -1 EBADF (Bad file descriptor) [pid 5166] close(8) = -1 EBADF (Bad file descriptor) [pid 5166] close(9) = -1 EBADF (Bad file descriptor) [pid 5166] close(10) = -1 EBADF (Bad file descriptor) [pid 5166] close(11) = -1 EBADF (Bad file descriptor) [pid 5166] close(12) = -1 EBADF (Bad file descriptor) [pid 5166] close(13) = -1 EBADF (Bad file descriptor) [pid 5166] close(14) = -1 EBADF (Bad file descriptor) [pid 5166] close(15) = -1 EBADF (Bad file descriptor) [pid 5166] close(16) = -1 EBADF (Bad file descriptor) [pid 5166] close(17) = -1 EBADF (Bad file descriptor) [ 132.219936][ T5166] read_mapping_page failed! [ 132.225776][ T5166] ERROR: (device loop0): txCommit: [ 132.225776][ T5166] [pid 5166] close(18) = -1 EBADF (Bad file descriptor) [pid 5166] close(19) = -1 EBADF (Bad file descriptor) [pid 5166] close(20) = -1 EBADF (Bad file descriptor) [pid 5166] close(21) = -1 EBADF (Bad file descriptor) [pid 5166] close(22) = -1 EBADF (Bad file descriptor) [pid 5166] close(23) = -1 EBADF (Bad file descriptor) [pid 5166] close(24) = -1 EBADF (Bad file descriptor) [pid 5166] close(25) = -1 EBADF (Bad file descriptor) [pid 5166] close(26) = -1 EBADF (Bad file descriptor) [pid 5166] close(27) = -1 EBADF (Bad file descriptor) [pid 5166] close(28) = -1 EBADF (Bad file descriptor) [pid 5166] close(29) = -1 EBADF (Bad file descriptor) [pid 5166] exit_group(0) = ? [pid 5166] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=63, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=20 /* 0.20 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./61", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./61/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./61/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./61/binderfs") = 0 [ 132.407481][ T1097] [ 132.407481][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 132.407481][ T1097] [ 132.418178][ T1097] [ 132.418178][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 132.418178][ T1097] [ 132.429368][ T114] [ 132.429368][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 132.429368][ T114] [ 132.439965][ T1097] [ 132.439965][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 132.439965][ T1097] [ 132.450419][ T1097] [ 132.450419][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 132.450419][ T1097] [ 132.462769][ T113] [ 132.462769][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 132.462769][ T113] [ 132.473378][ T1097] [ 132.473378][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 132.473378][ T1097] [ 132.483880][ T1097] [ 132.483880][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 132.483880][ T1097] [ 132.494675][ T5087] [ 132.494675][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 132.494675][ T5087] [ 132.505451][ T113] [pid 5087] umount2("./61/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./61/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./61/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./61/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./61/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./61/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./61") = 0 [pid 5087] mkdir("./62", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 132.505451][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 132.505451][ T113] [ 132.516010][ T5087] [ 132.516010][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 132.516010][ T5087] [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5167 attached , child_tidptr=0x55559309e650) = 64 [pid 5167] set_robust_list(0x55559309e660, 24) = 0 [pid 5167] chdir("./62") = 0 [pid 5167] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5167] setpgid(0, 0) = 0 [pid 5167] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5167] write(3, "1000", 4) = 4 [pid 5167] close(3) = 0 [pid 5167] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5167] memfd_create("syzkaller", 0) = 3 [pid 5167] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5167] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5167] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5167] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5167] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5167] close(3) = 0 [pid 5167] close(4) = 0 [pid 5167] mkdir("./file0", 0777) = 0 [ 133.009706][ T5167] loop0: detected capacity change from 0 to 32768 [pid 5167] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5167] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5167] chdir("./file0") = 0 [pid 5167] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5167] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5167] close(3) = 0 [pid 5167] close(4) = -1 EBADF (Bad file descriptor) [pid 5167] close(5) = -1 EBADF (Bad file descriptor) [pid 5167] close(6) = -1 EBADF (Bad file descriptor) [pid 5167] close(7) = -1 EBADF (Bad file descriptor) [pid 5167] close(8) = -1 EBADF (Bad file descriptor) [pid 5167] close(9) = -1 EBADF (Bad file descriptor) [ 133.061412][ T5167] [ 133.061412][ T5167] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 133.061412][ T5167] [ 133.095498][ T5167] read_mapping_page failed! [ 133.100018][ T5167] ERROR: (device loop0): txCommit: [ 133.100018][ T5167] [pid 5167] close(10) = -1 EBADF (Bad file descriptor) [pid 5167] close(11) = -1 EBADF (Bad file descriptor) [pid 5167] close(12) = -1 EBADF (Bad file descriptor) [pid 5167] close(13) = -1 EBADF (Bad file descriptor) [pid 5167] close(14) = -1 EBADF (Bad file descriptor) [pid 5167] close(15) = -1 EBADF (Bad file descriptor) [pid 5167] close(16) = -1 EBADF (Bad file descriptor) [pid 5167] close(17) = -1 EBADF (Bad file descriptor) [pid 5167] close(18) = -1 EBADF (Bad file descriptor) [pid 5167] close(19) = -1 EBADF (Bad file descriptor) [pid 5167] close(20) = -1 EBADF (Bad file descriptor) [pid 5167] close(21) = -1 EBADF (Bad file descriptor) [pid 5167] close(22) = -1 EBADF (Bad file descriptor) [pid 5167] close(23) = -1 EBADF (Bad file descriptor) [pid 5167] close(24) = -1 EBADF (Bad file descriptor) [pid 5167] close(25) = -1 EBADF (Bad file descriptor) [pid 5167] close(26) = -1 EBADF (Bad file descriptor) [pid 5167] close(27) = -1 EBADF (Bad file descriptor) [pid 5167] close(28) = -1 EBADF (Bad file descriptor) [pid 5167] close(29) = -1 EBADF (Bad file descriptor) [pid 5167] exit_group(0) = ? [pid 5167] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=64, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=24 /* 0.24 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./62", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./62/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./62/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./62/binderfs") = 0 [ 133.277256][ T1097] [ 133.277256][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 133.277256][ T1097] [ 133.287818][ T1097] [ 133.287818][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 133.287818][ T1097] [ 133.298992][ T114] [ 133.298992][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 133.298992][ T114] [ 133.309668][ T1097] [ 133.309668][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 133.309668][ T1097] [ 133.320173][ T1097] [ 133.320173][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 133.320173][ T1097] [ 133.331032][ T114] [ 133.331032][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 133.331032][ T114] [ 133.341542][ T1097] [ 133.341542][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 133.341542][ T1097] [ 133.351991][ T1097] [ 133.351991][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 133.351991][ T1097] [ 133.362892][ T114] [ 133.362892][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 133.362892][ T114] [ 133.373369][ T5087] [pid 5087] umount2("./62/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./62/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./62/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./62/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./62/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./62/file0") = 0 [ 133.373369][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 133.373369][ T5087] [ 133.384119][ T5087] [ 133.384119][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 133.384119][ T5087] [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./62") = 0 [pid 5087] mkdir("./63", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55559309e650) = 65 ./strace-static-x86_64: Process 5168 attached [pid 5168] set_robust_list(0x55559309e660, 24) = 0 [pid 5168] chdir("./63") = 0 [pid 5168] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5168] setpgid(0, 0) = 0 [pid 5168] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5168] write(3, "1000", 4) = 4 [pid 5168] close(3) = 0 [pid 5168] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5168] memfd_create("syzkaller", 0) = 3 [pid 5168] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5168] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5168] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5168] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5168] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5168] close(3) = 0 [pid 5168] close(4) = 0 [pid 5168] mkdir("./file0", 0777) = 0 [pid 5168] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5168] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5168] chdir("./file0") = 0 [pid 5168] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 133.879313][ T5168] loop0: detected capacity change from 0 to 32768 [ 133.917902][ T5168] [ 133.917902][ T5168] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 133.917902][ T5168] [pid 5168] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5168] close(3) = 0 [pid 5168] close(4) = -1 EBADF (Bad file descriptor) [pid 5168] close(5) = -1 EBADF (Bad file descriptor) [pid 5168] close(6) = -1 EBADF (Bad file descriptor) [pid 5168] close(7) = -1 EBADF (Bad file descriptor) [pid 5168] close(8) = -1 EBADF (Bad file descriptor) [pid 5168] close(9) = -1 EBADF (Bad file descriptor) [pid 5168] close(10) = -1 EBADF (Bad file descriptor) [pid 5168] close(11) = -1 EBADF (Bad file descriptor) [pid 5168] close(12) = -1 EBADF (Bad file descriptor) [ 133.945285][ T5168] read_mapping_page failed! [ 133.949819][ T5168] ERROR: (device loop0): txCommit: [ 133.949819][ T5168] [pid 5168] close(13) = -1 EBADF (Bad file descriptor) [pid 5168] close(14) = -1 EBADF (Bad file descriptor) [pid 5168] close(15) = -1 EBADF (Bad file descriptor) [pid 5168] close(16) = -1 EBADF (Bad file descriptor) [pid 5168] close(17) = -1 EBADF (Bad file descriptor) [pid 5168] close(18) = -1 EBADF (Bad file descriptor) [pid 5168] close(19) = -1 EBADF (Bad file descriptor) [pid 5168] close(20) = -1 EBADF (Bad file descriptor) [pid 5168] close(21) = -1 EBADF (Bad file descriptor) [pid 5168] close(22) = -1 EBADF (Bad file descriptor) [pid 5168] close(23) = -1 EBADF (Bad file descriptor) [pid 5168] close(24) = -1 EBADF (Bad file descriptor) [pid 5168] close(25) = -1 EBADF (Bad file descriptor) [pid 5168] close(26) = -1 EBADF (Bad file descriptor) [pid 5168] close(27) = -1 EBADF (Bad file descriptor) [pid 5168] close(28) = -1 EBADF (Bad file descriptor) [pid 5168] close(29) = -1 EBADF (Bad file descriptor) [pid 5168] exit_group(0) = ? [pid 5168] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=65, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5087] umount2("./63", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./63/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./63/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./63/binderfs") = 0 [ 134.119905][ T1097] [ 134.119905][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 134.119905][ T1097] [ 134.130519][ T1097] [ 134.130519][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 134.130519][ T1097] [ 134.141825][ T113] [ 134.141825][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 134.141825][ T113] [ 134.152369][ T1097] [ 134.152369][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 134.152369][ T1097] [ 134.164059][ T1097] [ 134.164059][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 134.164059][ T1097] [ 134.175625][ T114] [ 134.175625][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 134.175625][ T114] [ 134.186143][ T1097] [ 134.186143][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 134.186143][ T1097] [ 134.196614][ T1097] [ 134.196614][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 134.196614][ T1097] [ 134.207774][ T114] [ 134.207774][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 134.207774][ T114] [pid 5087] umount2("./63/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./63/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./63/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./63/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./63/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 134.218427][ T5087] [ 134.218427][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 134.218427][ T5087] [ 134.230063][ T5087] [ 134.230063][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 134.230063][ T5087] [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./63/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./63") = 0 [pid 5087] mkdir("./64", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5169 attached [pid 5169] set_robust_list(0x55559309e660, 24) = 0 [pid 5169] chdir("./64" [pid 5087] <... clone resumed>, child_tidptr=0x55559309e650) = 66 [pid 5169] <... chdir resumed>) = 0 [pid 5169] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5169] setpgid(0, 0) = 0 [pid 5169] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5169] write(3, "1000", 4) = 4 [pid 5169] close(3) = 0 [pid 5169] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5169] memfd_create("syzkaller", 0) = 3 [pid 5169] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5169] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5169] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5169] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5169] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5169] close(3) = 0 [pid 5169] close(4) = 0 [pid 5169] mkdir("./file0", 0777) = 0 [ 134.760806][ T5169] loop0: detected capacity change from 0 to 32768 [pid 5169] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5169] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5169] chdir("./file0") = 0 [pid 5169] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5169] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5169] close(3) = 0 [pid 5169] close(4) = -1 EBADF (Bad file descriptor) [pid 5169] close(5) = -1 EBADF (Bad file descriptor) [pid 5169] close(6) = -1 EBADF (Bad file descriptor) [pid 5169] close(7) = -1 EBADF (Bad file descriptor) [pid 5169] close(8) = -1 EBADF (Bad file descriptor) [pid 5169] close(9) = -1 EBADF (Bad file descriptor) [pid 5169] close(10) = -1 EBADF (Bad file descriptor) [pid 5169] close(11) = -1 EBADF (Bad file descriptor) [pid 5169] close(12) = -1 EBADF (Bad file descriptor) [pid 5169] close(13) = -1 EBADF (Bad file descriptor) [pid 5169] close(14) = -1 EBADF (Bad file descriptor) [ 134.801422][ T5169] [ 134.801422][ T5169] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 134.801422][ T5169] [ 134.819526][ T5169] read_mapping_page failed! [ 134.824315][ T5169] ERROR: (device loop0): txCommit: [ 134.824315][ T5169] [pid 5169] close(15) = -1 EBADF (Bad file descriptor) [pid 5169] close(16) = -1 EBADF (Bad file descriptor) [pid 5169] close(17) = -1 EBADF (Bad file descriptor) [pid 5169] close(18) = -1 EBADF (Bad file descriptor) [pid 5169] close(19) = -1 EBADF (Bad file descriptor) [pid 5169] close(20) = -1 EBADF (Bad file descriptor) [pid 5169] close(21) = -1 EBADF (Bad file descriptor) [pid 5169] close(22) = -1 EBADF (Bad file descriptor) [pid 5169] close(23) = -1 EBADF (Bad file descriptor) [pid 5169] close(24) = -1 EBADF (Bad file descriptor) [pid 5169] close(25) = -1 EBADF (Bad file descriptor) [pid 5169] close(26) = -1 EBADF (Bad file descriptor) [pid 5169] close(27) = -1 EBADF (Bad file descriptor) [pid 5169] close(28) = -1 EBADF (Bad file descriptor) [pid 5169] close(29) = -1 EBADF (Bad file descriptor) [pid 5169] exit_group(0) = ? [pid 5169] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=66, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=24 /* 0.24 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./64", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./64/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./64/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./64/binderfs") = 0 [ 135.003989][ T1097] [ 135.003989][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 135.003989][ T1097] [ 135.014625][ T1097] [ 135.014625][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 135.014625][ T1097] [ 135.025824][ T113] [ 135.025824][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 135.025824][ T113] [ 135.036568][ T1097] [ 135.036568][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 135.036568][ T1097] [ 135.047149][ T1097] [ 135.047149][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 135.047149][ T1097] [ 135.058144][ T113] [ 135.058144][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 135.058144][ T113] [ 135.069766][ T1097] [ 135.069766][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 135.069766][ T1097] [ 135.080371][ T1097] [ 135.080371][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 135.080371][ T1097] [ 135.091299][ T114] [ 135.091299][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 135.091299][ T114] [ 135.102205][ T5087] [pid 5087] umount2("./64/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./64/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./64/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./64/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./64/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [ 135.102205][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 135.102205][ T5087] [ 135.113482][ T5087] [ 135.113482][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 135.113482][ T5087] [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./64/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./64") = 0 [pid 5087] mkdir("./65", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5170 attached [pid 5170] set_robust_list(0x55559309e660, 24 [pid 5087] <... clone resumed>, child_tidptr=0x55559309e650) = 67 [pid 5170] <... set_robust_list resumed>) = 0 [pid 5170] chdir("./65") = 0 [pid 5170] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5170] setpgid(0, 0) = 0 [pid 5170] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5170] write(3, "1000", 4) = 4 [pid 5170] close(3) = 0 [pid 5170] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5170] memfd_create("syzkaller", 0) = 3 [pid 5170] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5170] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5170] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5170] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5170] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5170] close(3) = 0 [pid 5170] close(4) = 0 [pid 5170] mkdir("./file0", 0777) = 0 [pid 5170] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5170] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5170] chdir("./file0") = 0 [pid 5170] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 135.633512][ T5170] loop0: detected capacity change from 0 to 32768 [ 135.663325][ T5170] [ 135.663325][ T5170] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 135.663325][ T5170] [pid 5170] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5170] close(3) = 0 [pid 5170] close(4) = -1 EBADF (Bad file descriptor) [pid 5170] close(5) = -1 EBADF (Bad file descriptor) [pid 5170] close(6) = -1 EBADF (Bad file descriptor) [pid 5170] close(7) = -1 EBADF (Bad file descriptor) [pid 5170] close(8) = -1 EBADF (Bad file descriptor) [pid 5170] close(9) = -1 EBADF (Bad file descriptor) [ 135.691014][ T5170] read_mapping_page failed! [ 135.695687][ T5170] ERROR: (device loop0): txCommit: [ 135.695687][ T5170] [pid 5170] close(10) = -1 EBADF (Bad file descriptor) [pid 5170] close(11) = -1 EBADF (Bad file descriptor) [pid 5170] close(12) = -1 EBADF (Bad file descriptor) [pid 5170] close(13) = -1 EBADF (Bad file descriptor) [pid 5170] close(14) = -1 EBADF (Bad file descriptor) [pid 5170] close(15) = -1 EBADF (Bad file descriptor) [pid 5170] close(16) = -1 EBADF (Bad file descriptor) [pid 5170] close(17) = -1 EBADF (Bad file descriptor) [pid 5170] close(18) = -1 EBADF (Bad file descriptor) [pid 5170] close(19) = -1 EBADF (Bad file descriptor) [pid 5170] close(20) = -1 EBADF (Bad file descriptor) [pid 5170] close(21) = -1 EBADF (Bad file descriptor) [pid 5170] close(22) = -1 EBADF (Bad file descriptor) [pid 5170] close(23) = -1 EBADF (Bad file descriptor) [pid 5170] close(24) = -1 EBADF (Bad file descriptor) [pid 5170] close(25) = -1 EBADF (Bad file descriptor) [pid 5170] close(26) = -1 EBADF (Bad file descriptor) [pid 5170] close(27) = -1 EBADF (Bad file descriptor) [pid 5170] close(28) = -1 EBADF (Bad file descriptor) [pid 5170] close(29) = -1 EBADF (Bad file descriptor) [pid 5170] exit_group(0) = ? [pid 5170] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=67, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=24 /* 0.24 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./65", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./65/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./65/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./65/binderfs") = 0 [ 135.856881][ T1097] [ 135.856881][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 135.856881][ T1097] [ 135.867850][ T1097] [ 135.867850][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 135.867850][ T1097] [ 135.879097][ T113] [ 135.879097][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 135.879097][ T113] [ 135.889818][ T1097] [ 135.889818][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 135.889818][ T1097] [ 135.900326][ T1097] [ 135.900326][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 135.900326][ T1097] [ 135.911233][ T113] [ 135.911233][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 135.911233][ T113] [ 135.921776][ T1097] [ 135.921776][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 135.921776][ T1097] [ 135.932269][ T1097] [ 135.932269][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 135.932269][ T1097] [ 135.943260][ T114] [ 135.943260][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 135.943260][ T114] [ 135.953837][ T5087] [pid 5087] umount2("./65/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./65/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./65/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./65/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./65/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 135.953837][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 135.953837][ T5087] [ 135.964624][ T5087] [ 135.964624][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 135.964624][ T5087] [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./65/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./65") = 0 [pid 5087] mkdir("./66", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5171 attached , child_tidptr=0x55559309e650) = 68 [pid 5171] set_robust_list(0x55559309e660, 24) = 0 [pid 5171] chdir("./66") = 0 [pid 5171] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5171] setpgid(0, 0) = 0 [pid 5171] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5171] write(3, "1000", 4) = 4 [pid 5171] close(3) = 0 [pid 5171] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5171] memfd_create("syzkaller", 0) = 3 [pid 5171] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5171] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5171] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5171] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5171] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5171] close(3) = 0 [pid 5171] close(4) = 0 [pid 5171] mkdir("./file0", 0777) = 0 [pid 5171] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5171] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5171] chdir("./file0") = 0 [pid 5171] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 136.488995][ T5171] loop0: detected capacity change from 0 to 32768 [ 136.521284][ T5171] [ 136.521284][ T5171] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 136.521284][ T5171] [pid 5171] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5171] close(3) = 0 [pid 5171] close(4) = -1 EBADF (Bad file descriptor) [pid 5171] close(5) = -1 EBADF (Bad file descriptor) [pid 5171] close(6) = -1 EBADF (Bad file descriptor) [pid 5171] close(7) = -1 EBADF (Bad file descriptor) [pid 5171] close(8) = -1 EBADF (Bad file descriptor) [pid 5171] close(9) = -1 EBADF (Bad file descriptor) [pid 5171] close(10) = -1 EBADF (Bad file descriptor) [pid 5171] close(11) = -1 EBADF (Bad file descriptor) [pid 5171] close(12) = -1 EBADF (Bad file descriptor) [pid 5171] close(13) = -1 EBADF (Bad file descriptor) [ 136.558299][ T5171] read_mapping_page failed! [ 136.562954][ T5171] ERROR: (device loop0): txCommit: [ 136.562954][ T5171] [pid 5171] close(14) = -1 EBADF (Bad file descriptor) [pid 5171] close(15) = -1 EBADF (Bad file descriptor) [pid 5171] close(16) = -1 EBADF (Bad file descriptor) [pid 5171] close(17) = -1 EBADF (Bad file descriptor) [pid 5171] close(18) = -1 EBADF (Bad file descriptor) [pid 5171] close(19) = -1 EBADF (Bad file descriptor) [pid 5171] close(20) = -1 EBADF (Bad file descriptor) [pid 5171] close(21) = -1 EBADF (Bad file descriptor) [pid 5171] close(22) = -1 EBADF (Bad file descriptor) [pid 5171] close(23) = -1 EBADF (Bad file descriptor) [pid 5171] close(24) = -1 EBADF (Bad file descriptor) [pid 5171] close(25) = -1 EBADF (Bad file descriptor) [pid 5171] close(26) = -1 EBADF (Bad file descriptor) [pid 5171] close(27) = -1 EBADF (Bad file descriptor) [pid 5171] close(28) = -1 EBADF (Bad file descriptor) [pid 5171] close(29) = -1 EBADF (Bad file descriptor) [pid 5171] exit_group(0) = ? [pid 5171] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=68, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./66", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./66/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./66/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./66/binderfs") = 0 [ 136.733699][ T1097] [ 136.733699][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 136.733699][ T1097] [ 136.744210][ T1097] [ 136.744210][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 136.744210][ T1097] [ 136.755903][ T113] [ 136.755903][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 136.755903][ T113] [ 136.766963][ T1097] [ 136.766963][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 136.766963][ T1097] [ 136.777770][ T1097] [ 136.777770][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 136.777770][ T1097] [ 136.788841][ T114] [ 136.788841][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 136.788841][ T114] [ 136.799519][ T1097] [ 136.799519][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 136.799519][ T1097] [ 136.809984][ T1097] [ 136.809984][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 136.809984][ T1097] [ 136.820906][ T5087] [ 136.820906][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 136.820906][ T5087] [ 136.831593][ T113] [pid 5087] umount2("./66/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./66/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./66/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./66/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./66/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [ 136.831593][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 136.831593][ T113] [ 136.842781][ T5087] [ 136.842781][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 136.842781][ T5087] [pid 5087] close(4) = 0 [pid 5087] rmdir("./66/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./66") = 0 [pid 5087] mkdir("./67", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55559309e650) = 69 ./strace-static-x86_64: Process 5172 attached [pid 5172] set_robust_list(0x55559309e660, 24) = 0 [pid 5172] chdir("./67") = 0 [pid 5172] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5172] setpgid(0, 0) = 0 [pid 5172] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5172] write(3, "1000", 4) = 4 [pid 5172] close(3) = 0 [pid 5172] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5172] memfd_create("syzkaller", 0) = 3 [pid 5172] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5172] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5172] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5172] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5172] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5172] close(3) = 0 [pid 5172] close(4) = 0 [pid 5172] mkdir("./file0", 0777) = 0 [pid 5172] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5172] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5172] chdir("./file0") = 0 [pid 5172] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 137.330794][ T5172] loop0: detected capacity change from 0 to 32768 [ 137.362090][ T5172] [ 137.362090][ T5172] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 137.362090][ T5172] [pid 5172] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5172] close(3) = 0 [pid 5172] close(4) = -1 EBADF (Bad file descriptor) [pid 5172] close(5) = -1 EBADF (Bad file descriptor) [pid 5172] close(6) = -1 EBADF (Bad file descriptor) [pid 5172] close(7) = -1 EBADF (Bad file descriptor) [pid 5172] close(8) = -1 EBADF (Bad file descriptor) [pid 5172] close(9) = -1 EBADF (Bad file descriptor) [pid 5172] close(10) = -1 EBADF (Bad file descriptor) [pid 5172] close(11) = -1 EBADF (Bad file descriptor) [pid 5172] close(12) = -1 EBADF (Bad file descriptor) [pid 5172] close(13) = -1 EBADF (Bad file descriptor) [pid 5172] close(14) = -1 EBADF (Bad file descriptor) [pid 5172] close(15) = -1 EBADF (Bad file descriptor) [ 137.400306][ T5172] read_mapping_page failed! [ 137.405040][ T5172] ERROR: (device loop0): txCommit: [ 137.405040][ T5172] [pid 5172] close(16) = -1 EBADF (Bad file descriptor) [pid 5172] close(17) = -1 EBADF (Bad file descriptor) [pid 5172] close(18) = -1 EBADF (Bad file descriptor) [pid 5172] close(19) = -1 EBADF (Bad file descriptor) [pid 5172] close(20) = -1 EBADF (Bad file descriptor) [pid 5172] close(21) = -1 EBADF (Bad file descriptor) [pid 5172] close(22) = -1 EBADF (Bad file descriptor) [pid 5172] close(23) = -1 EBADF (Bad file descriptor) [pid 5172] close(24) = -1 EBADF (Bad file descriptor) [pid 5172] close(25) = -1 EBADF (Bad file descriptor) [pid 5172] close(26) = -1 EBADF (Bad file descriptor) [pid 5172] close(27) = -1 EBADF (Bad file descriptor) [pid 5172] close(28) = -1 EBADF (Bad file descriptor) [pid 5172] close(29) = -1 EBADF (Bad file descriptor) [pid 5172] exit_group(0) = ? [pid 5172] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=69, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=23 /* 0.23 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./67", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./67/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./67/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./67/binderfs") = 0 [ 137.565646][ T1059] [ 137.565646][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 137.565646][ T1059] [ 137.576356][ T1059] [ 137.576356][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 137.576356][ T1059] [ 137.587493][ T114] [ 137.587493][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 137.587493][ T114] [ 137.600501][ T1059] [ 137.600501][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 137.600501][ T1059] [ 137.611152][ T1059] [ 137.611152][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 137.611152][ T1059] [ 137.622203][ T113] [ 137.622203][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 137.622203][ T113] [ 137.632988][ T1059] [ 137.632988][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 137.632988][ T1059] [ 137.643783][ T1059] [ 137.643783][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 137.643783][ T1059] [ 137.654653][ T114] [ 137.654653][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 137.654653][ T114] [pid 5087] umount2("./67/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./67/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./67/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./67/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./67/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./67/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./67") = 0 [pid 5087] mkdir("./68", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 137.665131][ T5087] [ 137.665131][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 137.665131][ T5087] [ 137.676778][ T5087] [ 137.676778][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 137.676778][ T5087] [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55559309e650) = 70 ./strace-static-x86_64: Process 5173 attached [pid 5173] set_robust_list(0x55559309e660, 24) = 0 [pid 5173] chdir("./68") = 0 [pid 5173] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5173] setpgid(0, 0) = 0 [pid 5173] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5173] write(3, "1000", 4) = 4 [pid 5173] close(3) = 0 [pid 5173] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5173] memfd_create("syzkaller", 0) = 3 [pid 5173] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5173] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5173] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5173] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5173] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5173] close(3) = 0 [pid 5173] close(4) = 0 [pid 5173] mkdir("./file0", 0777) = 0 [ 138.201101][ T5173] loop0: detected capacity change from 0 to 32768 [pid 5173] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5173] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5173] chdir("./file0") = 0 [pid 5173] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5173] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5173] close(3) = 0 [pid 5173] close(4) = -1 EBADF (Bad file descriptor) [pid 5173] close(5) = -1 EBADF (Bad file descriptor) [pid 5173] close(6) = -1 EBADF (Bad file descriptor) [pid 5173] close(7) = -1 EBADF (Bad file descriptor) [pid 5173] close(8) = -1 EBADF (Bad file descriptor) [ 138.251304][ T5173] [ 138.251304][ T5173] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 138.251304][ T5173] [ 138.288649][ T5173] read_mapping_page failed! [ 138.293432][ T5173] ERROR: (device loop0): txCommit: [ 138.293432][ T5173] [pid 5173] close(9) = -1 EBADF (Bad file descriptor) [pid 5173] close(10) = -1 EBADF (Bad file descriptor) [pid 5173] close(11) = -1 EBADF (Bad file descriptor) [pid 5173] close(12) = -1 EBADF (Bad file descriptor) [pid 5173] close(13) = -1 EBADF (Bad file descriptor) [pid 5173] close(14) = -1 EBADF (Bad file descriptor) [pid 5173] close(15) = -1 EBADF (Bad file descriptor) [pid 5173] close(16) = -1 EBADF (Bad file descriptor) [pid 5173] close(17) = -1 EBADF (Bad file descriptor) [pid 5173] close(18) = -1 EBADF (Bad file descriptor) [pid 5173] close(19) = -1 EBADF (Bad file descriptor) [pid 5173] close(20) = -1 EBADF (Bad file descriptor) [pid 5173] close(21) = -1 EBADF (Bad file descriptor) [pid 5173] close(22) = -1 EBADF (Bad file descriptor) [pid 5173] close(23) = -1 EBADF (Bad file descriptor) [pid 5173] close(24) = -1 EBADF (Bad file descriptor) [pid 5173] close(25) = -1 EBADF (Bad file descriptor) [pid 5173] close(26) = -1 EBADF (Bad file descriptor) [pid 5173] close(27) = -1 EBADF (Bad file descriptor) [pid 5173] close(28) = -1 EBADF (Bad file descriptor) [pid 5173] close(29) = -1 EBADF (Bad file descriptor) [pid 5173] exit_group(0) = ? [pid 5173] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=70, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./68", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./68/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./68/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./68/binderfs") = 0 [ 138.470394][ T61] [ 138.470394][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 138.470394][ T61] [ 138.480956][ T61] [ 138.480956][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 138.480956][ T61] [ 138.493241][ T113] [ 138.493241][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 138.493241][ T113] [ 138.504003][ T61] [ 138.504003][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 138.504003][ T61] [ 138.514517][ T61] [ 138.514517][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 138.514517][ T61] [ 138.525446][ T114] [ 138.525446][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 138.525446][ T114] [ 138.536010][ T61] [ 138.536010][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 138.536010][ T61] [ 138.546457][ T61] [ 138.546457][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 138.546457][ T61] [ 138.557605][ T114] [ 138.557605][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 138.557605][ T114] [ 138.568226][ T5087] [pid 5087] umount2("./68/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./68/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./68/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./68/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./68/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [ 138.568226][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 138.568226][ T5087] [ 138.579594][ T5087] [ 138.579594][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 138.579594][ T5087] [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./68/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./68") = 0 [pid 5087] mkdir("./69", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5174 attached [pid 5174] set_robust_list(0x55559309e660, 24) = 0 [pid 5087] <... clone resumed>, child_tidptr=0x55559309e650) = 71 [pid 5174] chdir("./69") = 0 [pid 5174] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5174] setpgid(0, 0) = 0 [pid 5174] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5174] write(3, "1000", 4) = 4 [pid 5174] close(3) = 0 [pid 5174] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5174] memfd_create("syzkaller", 0) = 3 [pid 5174] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5174] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5174] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5174] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5174] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5174] close(3) = 0 [pid 5174] close(4) = 0 [pid 5174] mkdir("./file0", 0777) = 0 [ 139.067462][ T5174] loop0: detected capacity change from 0 to 32768 [pid 5174] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5174] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5174] chdir("./file0") = 0 [pid 5174] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 139.118003][ T5174] [ 139.118003][ T5174] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.118003][ T5174] [pid 5174] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5174] close(3) = 0 [pid 5174] close(4) = -1 EBADF (Bad file descriptor) [pid 5174] close(5) = -1 EBADF (Bad file descriptor) [pid 5174] close(6) = -1 EBADF (Bad file descriptor) [pid 5174] close(7) = -1 EBADF (Bad file descriptor) [pid 5174] close(8) = -1 EBADF (Bad file descriptor) [pid 5174] close(9) = -1 EBADF (Bad file descriptor) [pid 5174] close(10) = -1 EBADF (Bad file descriptor) [pid 5174] close(11) = -1 EBADF (Bad file descriptor) [pid 5174] close(12) = -1 EBADF (Bad file descriptor) [pid 5174] close(13) = -1 EBADF (Bad file descriptor) [pid 5174] close(14) = -1 EBADF (Bad file descriptor) [pid 5174] close(15) = -1 EBADF (Bad file descriptor) [pid 5174] close(16) = -1 EBADF (Bad file descriptor) [pid 5174] close(17) = -1 EBADF (Bad file descriptor) [pid 5174] close(18) = -1 EBADF (Bad file descriptor) [pid 5174] close(19) = -1 EBADF (Bad file descriptor) [pid 5174] close(20) = -1 EBADF (Bad file descriptor) [ 139.164168][ T5174] read_mapping_page failed! [ 139.168896][ T5174] ERROR: (device loop0): txCommit: [ 139.168896][ T5174] [pid 5174] close(21) = -1 EBADF (Bad file descriptor) [pid 5174] close(22) = -1 EBADF (Bad file descriptor) [pid 5174] close(23) = -1 EBADF (Bad file descriptor) [pid 5174] close(24) = -1 EBADF (Bad file descriptor) [pid 5174] close(25) = -1 EBADF (Bad file descriptor) [pid 5174] close(26) = -1 EBADF (Bad file descriptor) [pid 5174] close(27) = -1 EBADF (Bad file descriptor) [pid 5174] close(28) = -1 EBADF (Bad file descriptor) [pid 5174] close(29) = -1 EBADF (Bad file descriptor) [pid 5174] exit_group(0) = ? [pid 5174] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=71, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./69", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./69/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./69/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./69/binderfs") = 0 [ 139.294004][ T1059] [ 139.294004][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.294004][ T1059] [ 139.304529][ T1059] [ 139.304529][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.304529][ T1059] [ 139.315658][ T113] [ 139.315658][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.315658][ T113] [ 139.326315][ T1059] [ 139.326315][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.326315][ T1059] [ 139.336805][ T1059] [ 139.336805][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.336805][ T1059] [ 139.347760][ T113] [ 139.347760][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.347760][ T113] [ 139.358415][ T1059] [ 139.358415][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.358415][ T1059] [ 139.368893][ T1059] [ 139.368893][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.368893][ T1059] [ 139.379747][ T113] [ 139.379747][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.379747][ T113] [ 139.390221][ T5087] [pid 5087] umount2("./69/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./69/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./69/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./69/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./69/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [ 139.390221][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.390221][ T5087] [ 139.401112][ T5087] [ 139.401112][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.401112][ T5087] [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./69/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./69") = 0 [pid 5087] mkdir("./70", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5175 attached [pid 5175] set_robust_list(0x55559309e660, 24 [pid 5087] <... clone resumed>, child_tidptr=0x55559309e650) = 72 [pid 5175] <... set_robust_list resumed>) = 0 [pid 5175] chdir("./70") = 0 [pid 5175] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5175] setpgid(0, 0) = 0 [pid 5175] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5175] write(3, "1000", 4) = 4 [pid 5175] close(3) = 0 [pid 5175] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5175] memfd_create("syzkaller", 0) = 3 [pid 5175] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5175] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5175] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5175] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5175] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5175] close(3) = 0 [pid 5175] close(4) = 0 [pid 5175] mkdir("./file0", 0777) = 0 [ 139.892353][ T5175] loop0: detected capacity change from 0 to 32768 [pid 5175] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5175] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5175] chdir("./file0") = 0 [pid 5175] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5175] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5175] close(3) = 0 [pid 5175] close(4) = -1 EBADF (Bad file descriptor) [pid 5175] close(5) = -1 EBADF (Bad file descriptor) [pid 5175] close(6) = -1 EBADF (Bad file descriptor) [pid 5175] close(7) = -1 EBADF (Bad file descriptor) [pid 5175] close(8) = -1 EBADF (Bad file descriptor) [pid 5175] close(9) = -1 EBADF (Bad file descriptor) [pid 5175] close(10) = -1 EBADF (Bad file descriptor) [pid 5175] close(11) = -1 EBADF (Bad file descriptor) [pid 5175] close(12) = -1 EBADF (Bad file descriptor) [ 139.935105][ T5175] [ 139.935105][ T5175] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.935105][ T5175] [ 139.970325][ T5175] read_mapping_page failed! [ 139.974970][ T5175] ERROR: (device loop0): txCommit: [ 139.974970][ T5175] [pid 5175] close(13) = -1 EBADF (Bad file descriptor) [pid 5175] close(14) = -1 EBADF (Bad file descriptor) [pid 5175] close(15) = -1 EBADF (Bad file descriptor) [pid 5175] close(16) = -1 EBADF (Bad file descriptor) [pid 5175] close(17) = -1 EBADF (Bad file descriptor) [pid 5175] close(18) = -1 EBADF (Bad file descriptor) [pid 5175] close(19) = -1 EBADF (Bad file descriptor) [pid 5175] close(20) = -1 EBADF (Bad file descriptor) [pid 5175] close(21) = -1 EBADF (Bad file descriptor) [pid 5175] close(22) = -1 EBADF (Bad file descriptor) [pid 5175] close(23) = -1 EBADF (Bad file descriptor) [pid 5175] close(24) = -1 EBADF (Bad file descriptor) [pid 5175] close(25) = -1 EBADF (Bad file descriptor) [pid 5175] close(26) = -1 EBADF (Bad file descriptor) [pid 5175] close(27) = -1 EBADF (Bad file descriptor) [pid 5175] close(28) = -1 EBADF (Bad file descriptor) [pid 5175] close(29) = -1 EBADF (Bad file descriptor) [pid 5175] exit_group(0) = ? [pid 5175] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=72, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=24 /* 0.24 s */} --- [pid 5087] umount2("./70", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./70/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./70/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./70/binderfs") = 0 [ 140.115583][ T1059] [ 140.115583][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 140.115583][ T1059] [ 140.126156][ T1059] [ 140.126156][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 140.126156][ T1059] [ 140.137593][ T114] [ 140.137593][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 140.137593][ T114] [ 140.148140][ T1059] [ 140.148140][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 140.148140][ T1059] [ 140.158689][ T1059] [ 140.158689][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 140.158689][ T1059] [ 140.169636][ T113] [ 140.169636][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 140.169636][ T113] [ 140.180193][ T1059] [ 140.180193][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 140.180193][ T1059] [ 140.190818][ T1059] [ 140.190818][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 140.190818][ T1059] [ 140.202997][ T114] [ 140.202997][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 140.202997][ T114] [ 140.213517][ T5087] [pid 5087] umount2("./70/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./70/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./70/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./70/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./70/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./70/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./70") = 0 [pid 5087] mkdir("./71", 0777) = 0 [ 140.213517][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 140.213517][ T5087] [ 140.224278][ T5087] [ 140.224278][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 140.224278][ T5087] [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5176 attached , child_tidptr=0x55559309e650) = 73 [pid 5176] set_robust_list(0x55559309e660, 24) = 0 [pid 5176] chdir("./71") = 0 [pid 5176] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5176] setpgid(0, 0) = 0 [pid 5176] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5176] write(3, "1000", 4) = 4 [pid 5176] close(3) = 0 [pid 5176] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5176] memfd_create("syzkaller", 0) = 3 [pid 5176] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5176] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5176] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5176] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5176] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5176] close(3) = 0 [pid 5176] close(4) = 0 [pid 5176] mkdir("./file0", 0777) = 0 [pid 5176] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5176] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5176] chdir("./file0") = 0 [pid 5176] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 140.708299][ T5176] loop0: detected capacity change from 0 to 32768 [ 140.738875][ T5176] [ 140.738875][ T5176] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 140.738875][ T5176] [pid 5176] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5176] close(3) = 0 [pid 5176] close(4) = -1 EBADF (Bad file descriptor) [pid 5176] close(5) = -1 EBADF (Bad file descriptor) [pid 5176] close(6) = -1 EBADF (Bad file descriptor) [pid 5176] close(7) = -1 EBADF (Bad file descriptor) [pid 5176] close(8) = -1 EBADF (Bad file descriptor) [pid 5176] close(9) = -1 EBADF (Bad file descriptor) [pid 5176] close(10) = -1 EBADF (Bad file descriptor) [pid 5176] close(11) = -1 EBADF (Bad file descriptor) [pid 5176] close(12) = -1 EBADF (Bad file descriptor) [pid 5176] close(13) = -1 EBADF (Bad file descriptor) [pid 5176] close(14) = -1 EBADF (Bad file descriptor) [pid 5176] close(15) = -1 EBADF (Bad file descriptor) [pid 5176] close(16) = -1 EBADF (Bad file descriptor) [pid 5176] close(17) = -1 EBADF (Bad file descriptor) [pid 5176] close(18) = -1 EBADF (Bad file descriptor) [pid 5176] close(19) = -1 EBADF (Bad file descriptor) [pid 5176] close(20) = -1 EBADF (Bad file descriptor) [pid 5176] close(21) = -1 EBADF (Bad file descriptor) [pid 5176] close(22) = -1 EBADF (Bad file descriptor) [pid 5176] close(23) = -1 EBADF (Bad file descriptor) [pid 5176] close(24) = -1 EBADF (Bad file descriptor) [ 140.769512][ T5176] read_mapping_page failed! [ 140.774159][ T5176] ERROR: (device loop0): txCommit: [ 140.774159][ T5176] [pid 5176] close(25) = -1 EBADF (Bad file descriptor) [pid 5176] close(26) = -1 EBADF (Bad file descriptor) [pid 5176] close(27) = -1 EBADF (Bad file descriptor) [pid 5176] close(28) = -1 EBADF (Bad file descriptor) [pid 5176] close(29) = -1 EBADF (Bad file descriptor) [pid 5176] exit_group(0) = ? [pid 5176] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=73, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=24 /* 0.24 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./71", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./71/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./71/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./71/binderfs") = 0 [ 140.895655][ T61] [ 140.895655][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 140.895655][ T61] [ 140.906161][ T61] [ 140.906161][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 140.906161][ T61] [ 140.917207][ T113] [ 140.917207][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 140.917207][ T113] [ 140.927719][ T61] [ 140.927719][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 140.927719][ T61] [ 140.938302][ T61] [ 140.938302][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 140.938302][ T61] [ 140.949168][ T113] [ 140.949168][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 140.949168][ T113] [ 140.959690][ T61] [ 140.959690][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 140.959690][ T61] [ 140.970203][ T61] [ 140.970203][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 140.970203][ T61] [ 140.982762][ T114] [ 140.982762][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 140.982762][ T114] [ 140.993217][ T5087] [pid 5087] umount2("./71/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./71/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./71/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./71/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./71/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./71/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./71") = 0 [pid 5087] mkdir("./72", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 140.993217][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 140.993217][ T5087] [ 141.003887][ T5087] [ 141.003887][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 141.003887][ T5087] [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5177 attached , child_tidptr=0x55559309e650) = 74 [pid 5177] set_robust_list(0x55559309e660, 24) = 0 [pid 5177] chdir("./72") = 0 [pid 5177] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5177] setpgid(0, 0) = 0 [pid 5177] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5177] write(3, "1000", 4) = 4 [pid 5177] close(3) = 0 [pid 5177] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5177] memfd_create("syzkaller", 0) = 3 [pid 5177] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5177] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5177] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5177] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5177] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5177] close(3) = 0 [pid 5177] close(4) = 0 [pid 5177] mkdir("./file0", 0777) = 0 [pid 5177] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5177] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5177] chdir("./file0") = 0 [pid 5177] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 141.471978][ T5177] loop0: detected capacity change from 0 to 32768 [ 141.504983][ T5177] [ 141.504983][ T5177] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 141.504983][ T5177] [pid 5177] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5177] close(3) = 0 [pid 5177] close(4) = -1 EBADF (Bad file descriptor) [pid 5177] close(5) = -1 EBADF (Bad file descriptor) [pid 5177] close(6) = -1 EBADF (Bad file descriptor) [pid 5177] close(7) = -1 EBADF (Bad file descriptor) [pid 5177] close(8) = -1 EBADF (Bad file descriptor) [pid 5177] close(9) = -1 EBADF (Bad file descriptor) [pid 5177] close(10) = -1 EBADF (Bad file descriptor) [pid 5177] close(11) = -1 EBADF (Bad file descriptor) [pid 5177] close(12) = -1 EBADF (Bad file descriptor) [pid 5177] close(13) = -1 EBADF (Bad file descriptor) [pid 5177] close(14) = -1 EBADF (Bad file descriptor) [pid 5177] close(15) = -1 EBADF (Bad file descriptor) [pid 5177] close(16) = -1 EBADF (Bad file descriptor) [pid 5177] close(17) = -1 EBADF (Bad file descriptor) [pid 5177] close(18) = -1 EBADF (Bad file descriptor) [ 141.538554][ T5177] read_mapping_page failed! [ 141.543331][ T5177] ERROR: (device loop0): txCommit: [ 141.543331][ T5177] [pid 5177] close(19) = -1 EBADF (Bad file descriptor) [pid 5177] close(20) = -1 EBADF (Bad file descriptor) [pid 5177] close(21) = -1 EBADF (Bad file descriptor) [pid 5177] close(22) = -1 EBADF (Bad file descriptor) [pid 5177] close(23) = -1 EBADF (Bad file descriptor) [pid 5177] close(24) = -1 EBADF (Bad file descriptor) [pid 5177] close(25) = -1 EBADF (Bad file descriptor) [pid 5177] close(26) = -1 EBADF (Bad file descriptor) [pid 5177] close(27) = -1 EBADF (Bad file descriptor) [pid 5177] close(28) = -1 EBADF (Bad file descriptor) [pid 5177] close(29) = -1 EBADF (Bad file descriptor) [pid 5177] exit_group(0) = ? [pid 5177] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=74, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=23 /* 0.23 s */} --- [pid 5087] umount2("./72", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./72/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./72/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./72/binderfs") = 0 [ 141.673412][ T11] [ 141.673412][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 141.673412][ T11] [ 141.683894][ T11] [ 141.683894][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 141.683894][ T11] [ 141.695041][ T113] [ 141.695041][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 141.695041][ T113] [ 141.705558][ T11] [ 141.705558][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 141.705558][ T11] [ 141.716084][ T11] [ 141.716084][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 141.716084][ T11] [ 141.726926][ T114] [ 141.726926][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 141.726926][ T114] [ 141.737570][ T11] [ 141.737570][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 141.737570][ T11] [ 141.748043][ T11] [ 141.748043][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 141.748043][ T11] [ 141.759870][ T114] [ 141.759870][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 141.759870][ T114] [ 141.770818][ T5087] [pid 5087] umount2("./72/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./72/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./72/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./72/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./72/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [ 141.770818][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 141.770818][ T5087] [ 141.781801][ T5087] [ 141.781801][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 141.781801][ T5087] [pid 5087] close(4) = 0 [pid 5087] rmdir("./72/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./72") = 0 [pid 5087] mkdir("./73", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5178 attached , child_tidptr=0x55559309e650) = 75 [pid 5178] set_robust_list(0x55559309e660, 24) = 0 [pid 5178] chdir("./73") = 0 [pid 5178] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5178] setpgid(0, 0) = 0 [pid 5178] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5178] write(3, "1000", 4) = 4 [pid 5178] close(3) = 0 [pid 5178] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5178] memfd_create("syzkaller", 0) = 3 [pid 5178] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5178] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5178] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5178] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5178] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5178] close(3) = 0 [pid 5178] close(4) = 0 [pid 5178] mkdir("./file0", 0777) = 0 [ 142.288604][ T5178] loop0: detected capacity change from 0 to 32768 [pid 5178] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5178] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5178] chdir("./file0") = 0 [pid 5178] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5178] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5178] close(3) = 0 [pid 5178] close(4) = -1 EBADF (Bad file descriptor) [pid 5178] close(5) = -1 EBADF (Bad file descriptor) [pid 5178] close(6) = -1 EBADF (Bad file descriptor) [pid 5178] close(7) = -1 EBADF (Bad file descriptor) [pid 5178] close(8) = -1 EBADF (Bad file descriptor) [pid 5178] close(9) = -1 EBADF (Bad file descriptor) [pid 5178] close(10) = -1 EBADF (Bad file descriptor) [pid 5178] close(11) = -1 EBADF (Bad file descriptor) [pid 5178] close(12) = -1 EBADF (Bad file descriptor) [pid 5178] close(13) = -1 EBADF (Bad file descriptor) [pid 5178] close(14) = -1 EBADF (Bad file descriptor) [pid 5178] close(15) = -1 EBADF (Bad file descriptor) [ 142.338509][ T5178] [ 142.338509][ T5178] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 142.338509][ T5178] [ 142.353581][ T5178] read_mapping_page failed! [ 142.358097][ T5178] ERROR: (device loop0): txCommit: [ 142.358097][ T5178] [pid 5178] close(16) = -1 EBADF (Bad file descriptor) [pid 5178] close(17) = -1 EBADF (Bad file descriptor) [pid 5178] close(18) = -1 EBADF (Bad file descriptor) [pid 5178] close(19) = -1 EBADF (Bad file descriptor) [pid 5178] close(20) = -1 EBADF (Bad file descriptor) [pid 5178] close(21) = -1 EBADF (Bad file descriptor) [pid 5178] close(22) = -1 EBADF (Bad file descriptor) [pid 5178] close(23) = -1 EBADF (Bad file descriptor) [pid 5178] close(24) = -1 EBADF (Bad file descriptor) [pid 5178] close(25) = -1 EBADF (Bad file descriptor) [pid 5178] close(26) = -1 EBADF (Bad file descriptor) [pid 5178] close(27) = -1 EBADF (Bad file descriptor) [pid 5178] close(28) = -1 EBADF (Bad file descriptor) [pid 5178] close(29) = -1 EBADF (Bad file descriptor) [pid 5178] exit_group(0) = ? [pid 5178] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=75, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=24 /* 0.24 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./73", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./73/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./73/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./73/binderfs") = 0 [ 142.517190][ T61] [ 142.517190][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 142.517190][ T61] [ 142.527736][ T61] [ 142.527736][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 142.527736][ T61] [ 142.538983][ T113] [ 142.538983][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 142.538983][ T113] [ 142.549709][ T61] [ 142.549709][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 142.549709][ T61] [ 142.560275][ T61] [ 142.560275][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 142.560275][ T61] [ 142.572346][ T113] [ 142.572346][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 142.572346][ T113] [ 142.582866][ T61] [ 142.582866][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 142.582866][ T61] [ 142.593378][ T61] [ 142.593378][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 142.593378][ T61] [ 142.604321][ T114] [ 142.604321][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 142.604321][ T114] [ 142.614771][ T5087] [pid 5087] umount2("./73/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./73/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./73/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./73/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 142.614771][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 142.614771][ T5087] [ 142.625476][ T5087] [ 142.625476][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 142.625476][ T5087] [pid 5087] openat(AT_FDCWD, "./73/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./73/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./73") = 0 [pid 5087] mkdir("./74", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5179 attached [pid 5179] set_robust_list(0x55559309e660, 24) = 0 [pid 5087] <... clone resumed>, child_tidptr=0x55559309e650) = 76 [pid 5179] chdir("./74") = 0 [pid 5179] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5179] setpgid(0, 0) = 0 [pid 5179] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5179] write(3, "1000", 4) = 4 [pid 5179] close(3) = 0 [pid 5179] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5179] memfd_create("syzkaller", 0) = 3 [pid 5179] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5179] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5179] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5179] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5179] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5179] close(3) = 0 [pid 5179] close(4) = 0 [pid 5179] mkdir("./file0", 0777) = 0 [pid 5179] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5179] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5179] chdir("./file0") = 0 [pid 5179] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 143.352429][ T5179] loop0: detected capacity change from 0 to 32768 [ 143.383025][ T5179] [ 143.383025][ T5179] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 143.383025][ T5179] [pid 5179] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5179] close(3) = 0 [pid 5179] close(4) = -1 EBADF (Bad file descriptor) [pid 5179] close(5) = -1 EBADF (Bad file descriptor) [pid 5179] close(6) = -1 EBADF (Bad file descriptor) [pid 5179] close(7) = -1 EBADF (Bad file descriptor) [pid 5179] close(8) = -1 EBADF (Bad file descriptor) [pid 5179] close(9) = -1 EBADF (Bad file descriptor) [pid 5179] close(10) = -1 EBADF (Bad file descriptor) [pid 5179] close(11) = -1 EBADF (Bad file descriptor) [pid 5179] close(12) = -1 EBADF (Bad file descriptor) [pid 5179] close(13) = -1 EBADF (Bad file descriptor) [ 143.410662][ T5179] read_mapping_page failed! [ 143.415314][ T5179] ERROR: (device loop0): txCommit: [ 143.415314][ T5179] [pid 5179] close(14) = -1 EBADF (Bad file descriptor) [pid 5179] close(15) = -1 EBADF (Bad file descriptor) [pid 5179] close(16) = -1 EBADF (Bad file descriptor) [pid 5179] close(17) = -1 EBADF (Bad file descriptor) [pid 5179] close(18) = -1 EBADF (Bad file descriptor) [pid 5179] close(19) = -1 EBADF (Bad file descriptor) [pid 5179] close(20) = -1 EBADF (Bad file descriptor) [pid 5179] close(21) = -1 EBADF (Bad file descriptor) [pid 5179] close(22) = -1 EBADF (Bad file descriptor) [pid 5179] close(23) = -1 EBADF (Bad file descriptor) [pid 5179] close(24) = -1 EBADF (Bad file descriptor) [pid 5179] close(25) = -1 EBADF (Bad file descriptor) [pid 5179] close(26) = -1 EBADF (Bad file descriptor) [pid 5179] close(27) = -1 EBADF (Bad file descriptor) [pid 5179] close(28) = -1 EBADF (Bad file descriptor) [pid 5179] close(29) = -1 EBADF (Bad file descriptor) [pid 5179] exit_group(0) = ? [pid 5179] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=76, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./74", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./74/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./74/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./74/binderfs") = 0 [ 143.604059][ T11] [ 143.604059][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 143.604059][ T11] [ 143.614619][ T11] [ 143.614619][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 143.614619][ T11] [ 143.625883][ T113] [ 143.625883][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 143.625883][ T113] [ 143.636603][ T11] [ 143.636603][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 143.636603][ T11] [ 143.647138][ T11] [ 143.647138][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 143.647138][ T11] [ 143.658189][ T114] [ 143.658189][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 143.658189][ T114] [ 143.668978][ T11] [ 143.668978][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 143.668978][ T11] [ 143.679487][ T11] [ 143.679487][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 143.679487][ T11] [ 143.690396][ T114] [ 143.690396][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 143.690396][ T114] [ 143.701157][ T5087] [pid 5087] umount2("./74/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./74/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./74/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./74/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./74/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./74/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./74") = 0 [pid 5087] mkdir("./75", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 143.701157][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 143.701157][ T5087] [ 143.712909][ T5087] [ 143.712909][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 143.712909][ T5087] [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5180 attached , child_tidptr=0x55559309e650) = 77 [pid 5180] set_robust_list(0x55559309e660, 24) = 0 [pid 5180] chdir("./75") = 0 [pid 5180] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5180] setpgid(0, 0) = 0 [pid 5180] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5180] write(3, "1000", 4) = 4 [pid 5180] close(3) = 0 [pid 5180] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5180] memfd_create("syzkaller", 0) = 3 [pid 5180] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5180] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5180] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5180] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5180] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5180] close(3) = 0 [pid 5180] close(4) = 0 [pid 5180] mkdir("./file0", 0777) = 0 [pid 5180] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5180] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5180] chdir("./file0") = 0 [pid 5180] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 144.202151][ T5180] loop0: detected capacity change from 0 to 32768 [ 144.220938][ T5180] [ 144.220938][ T5180] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 144.220938][ T5180] [pid 5180] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5180] close(3) = 0 [pid 5180] close(4) = -1 EBADF (Bad file descriptor) [pid 5180] close(5) = -1 EBADF (Bad file descriptor) [pid 5180] close(6) = -1 EBADF (Bad file descriptor) [pid 5180] close(7) = -1 EBADF (Bad file descriptor) [pid 5180] close(8) = -1 EBADF (Bad file descriptor) [pid 5180] close(9) = -1 EBADF (Bad file descriptor) [pid 5180] close(10) = -1 EBADF (Bad file descriptor) [pid 5180] close(11) = -1 EBADF (Bad file descriptor) [pid 5180] close(12) = -1 EBADF (Bad file descriptor) [pid 5180] close(13) = -1 EBADF (Bad file descriptor) [ 144.254453][ T5180] read_mapping_page failed! [ 144.258968][ T5180] ERROR: (device loop0): txCommit: [ 144.258968][ T5180] [pid 5180] close(14) = -1 EBADF (Bad file descriptor) [pid 5180] close(15) = -1 EBADF (Bad file descriptor) [pid 5180] close(16) = -1 EBADF (Bad file descriptor) [pid 5180] close(17) = -1 EBADF (Bad file descriptor) [pid 5180] close(18) = -1 EBADF (Bad file descriptor) [pid 5180] close(19) = -1 EBADF (Bad file descriptor) [pid 5180] close(20) = -1 EBADF (Bad file descriptor) [pid 5180] close(21) = -1 EBADF (Bad file descriptor) [pid 5180] close(22) = -1 EBADF (Bad file descriptor) [pid 5180] close(23) = -1 EBADF (Bad file descriptor) [pid 5180] close(24) = -1 EBADF (Bad file descriptor) [pid 5180] close(25) = -1 EBADF (Bad file descriptor) [pid 5180] close(26) = -1 EBADF (Bad file descriptor) [pid 5180] close(27) = -1 EBADF (Bad file descriptor) [pid 5180] close(28) = -1 EBADF (Bad file descriptor) [pid 5180] close(29) = -1 EBADF (Bad file descriptor) [pid 5180] exit_group(0) = ? [pid 5180] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=77, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./75", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./75/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./75/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./75/binderfs") = 0 [ 144.420981][ T11] [ 144.420981][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 144.420981][ T11] [ 144.431514][ T11] [ 144.431514][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 144.431514][ T11] [ 144.442899][ T113] [ 144.442899][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 144.442899][ T113] [ 144.453457][ T11] [ 144.453457][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 144.453457][ T11] [ 144.464509][ T11] [ 144.464509][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 144.464509][ T11] [ 144.475509][ T113] [ 144.475509][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 144.475509][ T113] [ 144.486086][ T11] [ 144.486086][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 144.486086][ T11] [ 144.496688][ T11] [ 144.496688][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 144.496688][ T11] [ 144.507655][ T114] [ 144.507655][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 144.507655][ T114] [ 144.518727][ T5087] [pid 5087] umount2("./75/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./75/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./75/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./75/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./75/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [ 144.518727][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 144.518727][ T5087] [ 144.529539][ T5087] [ 144.529539][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 144.529539][ T5087] [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./75/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./75") = 0 [pid 5087] mkdir("./76", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5181 attached , child_tidptr=0x55559309e650) = 78 [pid 5181] set_robust_list(0x55559309e660, 24) = 0 [pid 5181] chdir("./76") = 0 [pid 5181] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5181] setpgid(0, 0) = 0 [pid 5181] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5181] write(3, "1000", 4) = 4 [pid 5181] close(3) = 0 [pid 5181] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5181] memfd_create("syzkaller", 0) = 3 [pid 5181] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5181] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5181] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5181] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5181] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5181] close(3) = 0 [pid 5181] close(4) = 0 [pid 5181] mkdir("./file0", 0777) = 0 [ 145.096974][ T5181] loop0: detected capacity change from 0 to 32768 [ 145.137069][ T5181] [ 145.137069][ T5181] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 5181] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5181] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5181] chdir("./file0") = 0 [pid 5181] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 145.137069][ T5181] [pid 5181] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5181] close(3) = 0 [pid 5181] close(4) = -1 EBADF (Bad file descriptor) [pid 5181] close(5) = -1 EBADF (Bad file descriptor) [pid 5181] close(6) = -1 EBADF (Bad file descriptor) [pid 5181] close(7) = -1 EBADF (Bad file descriptor) [pid 5181] close(8) = -1 EBADF (Bad file descriptor) [pid 5181] close(9) = -1 EBADF (Bad file descriptor) [pid 5181] close(10) = -1 EBADF (Bad file descriptor) [pid 5181] close(11) = -1 EBADF (Bad file descriptor) [pid 5181] close(12) = -1 EBADF (Bad file descriptor) [pid 5181] close(13) = -1 EBADF (Bad file descriptor) [pid 5181] close(14) = -1 EBADF (Bad file descriptor) [pid 5181] close(15) = -1 EBADF (Bad file descriptor) [pid 5181] close(16) = -1 EBADF (Bad file descriptor) [pid 5181] close(17) = -1 EBADF (Bad file descriptor) [pid 5181] close(18) = -1 EBADF (Bad file descriptor) [ 145.172287][ T5181] read_mapping_page failed! [ 145.176821][ T5181] ERROR: (device loop0): txCommit: [ 145.176821][ T5181] [pid 5181] close(19) = -1 EBADF (Bad file descriptor) [pid 5181] close(20) = -1 EBADF (Bad file descriptor) [pid 5181] close(21) = -1 EBADF (Bad file descriptor) [pid 5181] close(22) = -1 EBADF (Bad file descriptor) [pid 5181] close(23) = -1 EBADF (Bad file descriptor) [pid 5181] close(24) = -1 EBADF (Bad file descriptor) [pid 5181] close(25) = -1 EBADF (Bad file descriptor) [pid 5181] close(26) = -1 EBADF (Bad file descriptor) [pid 5181] close(27) = -1 EBADF (Bad file descriptor) [pid 5181] close(28) = -1 EBADF (Bad file descriptor) [pid 5181] close(29) = -1 EBADF (Bad file descriptor) [pid 5181] exit_group(0) = ? [pid 5181] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=78, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=23 /* 0.23 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./76", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./76/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./76/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./76/binderfs") = 0 [ 145.337260][ T1059] [ 145.337260][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 145.337260][ T1059] [ 145.347748][ T1059] [ 145.347748][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 145.347748][ T1059] [ 145.358898][ T113] [ 145.358898][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 145.358898][ T113] [ 145.369780][ T1059] [ 145.369780][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 145.369780][ T1059] [ 145.380273][ T1059] [ 145.380273][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 145.380273][ T1059] [ 145.391276][ T114] [ 145.391276][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 145.391276][ T114] [ 145.401982][ T1059] [ 145.401982][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 145.401982][ T1059] [ 145.412626][ T1059] [ 145.412626][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 145.412626][ T1059] [ 145.423472][ T113] [ 145.423472][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 145.423472][ T113] [ 145.434158][ T5087] [pid 5087] umount2("./76/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./76/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./76/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./76/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./76/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 145.434158][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 145.434158][ T5087] [ 145.445133][ T5087] [ 145.445133][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 145.445133][ T5087] [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./76/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./76") = 0 [pid 5087] mkdir("./77", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5182 attached , child_tidptr=0x55559309e650) = 79 [pid 5182] set_robust_list(0x55559309e660, 24) = 0 [pid 5182] chdir("./77") = 0 [pid 5182] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5182] setpgid(0, 0) = 0 [pid 5182] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5182] write(3, "1000", 4) = 4 [pid 5182] close(3) = 0 [pid 5182] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5182] memfd_create("syzkaller", 0) = 3 [pid 5182] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5182] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5182] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5182] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5182] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5182] close(3) = 0 [pid 5182] close(4) = 0 [pid 5182] mkdir("./file0", 0777) = 0 [pid 5182] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5182] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5182] chdir("./file0") = 0 [pid 5182] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 145.996387][ T5182] loop0: detected capacity change from 0 to 32768 [ 146.028116][ T5182] [ 146.028116][ T5182] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.028116][ T5182] [pid 5182] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5182] close(3) = 0 [pid 5182] close(4) = -1 EBADF (Bad file descriptor) [pid 5182] close(5) = -1 EBADF (Bad file descriptor) [pid 5182] close(6) = -1 EBADF (Bad file descriptor) [pid 5182] close(7) = -1 EBADF (Bad file descriptor) [pid 5182] close(8) = -1 EBADF (Bad file descriptor) [pid 5182] close(9) = -1 EBADF (Bad file descriptor) [pid 5182] close(10) = -1 EBADF (Bad file descriptor) [ 146.070841][ T5182] read_mapping_page failed! [ 146.075710][ T5182] ERROR: (device loop0): txCommit: [ 146.075710][ T5182] [pid 5182] close(11) = -1 EBADF (Bad file descriptor) [pid 5182] close(12) = -1 EBADF (Bad file descriptor) [pid 5182] close(13) = -1 EBADF (Bad file descriptor) [pid 5182] close(14) = -1 EBADF (Bad file descriptor) [pid 5182] close(15) = -1 EBADF (Bad file descriptor) [pid 5182] close(16) = -1 EBADF (Bad file descriptor) [pid 5182] close(17) = -1 EBADF (Bad file descriptor) [pid 5182] close(18) = -1 EBADF (Bad file descriptor) [pid 5182] close(19) = -1 EBADF (Bad file descriptor) [pid 5182] close(20) = -1 EBADF (Bad file descriptor) [pid 5182] close(21) = -1 EBADF (Bad file descriptor) [pid 5182] close(22) = -1 EBADF (Bad file descriptor) [pid 5182] close(23) = -1 EBADF (Bad file descriptor) [pid 5182] close(24) = -1 EBADF (Bad file descriptor) [pid 5182] close(25) = -1 EBADF (Bad file descriptor) [pid 5182] close(26) = -1 EBADF (Bad file descriptor) [pid 5182] close(27) = -1 EBADF (Bad file descriptor) [pid 5182] close(28) = -1 EBADF (Bad file descriptor) [pid 5182] close(29) = -1 EBADF (Bad file descriptor) [pid 5182] exit_group(0) = ? [pid 5182] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=79, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5087] umount2("./77", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./77/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./77/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./77/binderfs") = 0 [ 146.242045][ T11] [ 146.242045][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.242045][ T11] [ 146.252713][ T11] [ 146.252713][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.252713][ T11] [ 146.263979][ T113] [ 146.263979][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.263979][ T113] [ 146.274535][ T11] [ 146.274535][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.274535][ T11] [ 146.285121][ T11] [ 146.285121][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.285121][ T11] [ 146.297214][ T114] [ 146.297214][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.297214][ T114] [ 146.307760][ T11] [ 146.307760][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.307760][ T11] [ 146.318316][ T11] [ 146.318316][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.318316][ T11] [ 146.329180][ T113] [ 146.329180][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.329180][ T113] [ 146.339634][ T5087] [pid 5087] umount2("./77/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./77/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./77/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./77/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./77/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [ 146.339634][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.339634][ T5087] [ 146.350414][ T5087] [ 146.350414][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.350414][ T5087] [pid 5087] rmdir("./77/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./77") = 0 [pid 5087] mkdir("./78", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5183 attached , child_tidptr=0x55559309e650) = 80 [pid 5183] set_robust_list(0x55559309e660, 24) = 0 [pid 5183] chdir("./78") = 0 [pid 5183] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5183] setpgid(0, 0) = 0 [pid 5183] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5183] write(3, "1000", 4) = 4 [pid 5183] close(3) = 0 [pid 5183] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5183] memfd_create("syzkaller", 0) = 3 [pid 5183] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5183] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5183] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5183] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5183] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5183] close(3) = 0 [pid 5183] close(4) = 0 [pid 5183] mkdir("./file0", 0777) = 0 [pid 5183] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5183] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5183] chdir("./file0") = 0 [pid 5183] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 146.881239][ T5183] loop0: detected capacity change from 0 to 32768 [ 146.903256][ T5183] [ 146.903256][ T5183] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.903256][ T5183] [pid 5183] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5183] close(3) = 0 [pid 5183] close(4) = -1 EBADF (Bad file descriptor) [pid 5183] close(5) = -1 EBADF (Bad file descriptor) [pid 5183] close(6) = -1 EBADF (Bad file descriptor) [pid 5183] close(7) = -1 EBADF (Bad file descriptor) [pid 5183] close(8) = -1 EBADF (Bad file descriptor) [ 146.934161][ T5183] read_mapping_page failed! [ 146.938671][ T5183] ERROR: (device loop0): txCommit: [ 146.938671][ T5183] [pid 5183] close(9) = -1 EBADF (Bad file descriptor) [pid 5183] close(10) = -1 EBADF (Bad file descriptor) [pid 5183] close(11) = -1 EBADF (Bad file descriptor) [pid 5183] close(12) = -1 EBADF (Bad file descriptor) [pid 5183] close(13) = -1 EBADF (Bad file descriptor) [pid 5183] close(14) = -1 EBADF (Bad file descriptor) [pid 5183] close(15) = -1 EBADF (Bad file descriptor) [pid 5183] close(16) = -1 EBADF (Bad file descriptor) [pid 5183] close(17) = -1 EBADF (Bad file descriptor) [pid 5183] close(18) = -1 EBADF (Bad file descriptor) [pid 5183] close(19) = -1 EBADF (Bad file descriptor) [pid 5183] close(20) = -1 EBADF (Bad file descriptor) [pid 5183] close(21) = -1 EBADF (Bad file descriptor) [pid 5183] close(22) = -1 EBADF (Bad file descriptor) [pid 5183] close(23) = -1 EBADF (Bad file descriptor) [pid 5183] close(24) = -1 EBADF (Bad file descriptor) [pid 5183] close(25) = -1 EBADF (Bad file descriptor) [pid 5183] close(26) = -1 EBADF (Bad file descriptor) [pid 5183] close(27) = -1 EBADF (Bad file descriptor) [pid 5183] close(28) = -1 EBADF (Bad file descriptor) [pid 5183] close(29) = -1 EBADF (Bad file descriptor) [pid 5183] exit_group(0) = ? [pid 5183] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=80, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=22 /* 0.22 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./78", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./78/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./78/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./78/binderfs") = 0 [ 147.154093][ T61] [ 147.154093][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 147.154093][ T61] [ 147.164682][ T61] [ 147.164682][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 147.164682][ T61] [ 147.175875][ T114] [ 147.175875][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 147.175875][ T114] [ 147.186612][ T61] [ 147.186612][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 147.186612][ T61] [ 147.197214][ T61] [ 147.197214][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 147.197214][ T61] [ 147.209227][ T114] [ 147.209227][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 147.209227][ T114] [ 147.219783][ T61] [ 147.219783][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 147.219783][ T61] [ 147.230249][ T61] [ 147.230249][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 147.230249][ T61] [ 147.241599][ T5087] [ 147.241599][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 147.241599][ T5087] [pid 5087] umount2("./78/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./78/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./78/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./78/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./78/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./78/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [ 147.252511][ T5087] [ 147.252511][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 147.252511][ T5087] [ 147.263188][ T113] [ 147.263188][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 147.263188][ T113] [pid 5087] close(3) = 0 [pid 5087] rmdir("./78") = 0 [pid 5087] mkdir("./79", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5184 attached , child_tidptr=0x55559309e650) = 81 [pid 5184] set_robust_list(0x55559309e660, 24) = 0 [pid 5184] chdir("./79") = 0 [pid 5184] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5184] setpgid(0, 0) = 0 [pid 5184] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5184] write(3, "1000", 4) = 4 [pid 5184] close(3) = 0 [pid 5184] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5184] memfd_create("syzkaller", 0) = 3 [pid 5184] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5184] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5184] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5184] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5184] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5184] close(3) = 0 [pid 5184] close(4) = 0 [pid 5184] mkdir("./file0", 0777) = 0 [pid 5184] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5184] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5184] chdir("./file0") = 0 [pid 5184] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 147.770454][ T5184] loop0: detected capacity change from 0 to 32768 [ 147.798648][ T5184] [ 147.798648][ T5184] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 147.798648][ T5184] [pid 5184] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5184] close(3) = 0 [pid 5184] close(4) = -1 EBADF (Bad file descriptor) [pid 5184] close(5) = -1 EBADF (Bad file descriptor) [pid 5184] close(6) = -1 EBADF (Bad file descriptor) [pid 5184] close(7) = -1 EBADF (Bad file descriptor) [pid 5184] close(8) = -1 EBADF (Bad file descriptor) [pid 5184] close(9) = -1 EBADF (Bad file descriptor) [pid 5184] close(10) = -1 EBADF (Bad file descriptor) [pid 5184] close(11) = -1 EBADF (Bad file descriptor) [pid 5184] close(12) = -1 EBADF (Bad file descriptor) [ 147.827109][ T5184] read_mapping_page failed! [ 147.831842][ T5184] ERROR: (device loop0): txCommit: [ 147.831842][ T5184] [pid 5184] close(13) = -1 EBADF (Bad file descriptor) [pid 5184] close(14) = -1 EBADF (Bad file descriptor) [pid 5184] close(15) = -1 EBADF (Bad file descriptor) [pid 5184] close(16) = -1 EBADF (Bad file descriptor) [pid 5184] close(17) = -1 EBADF (Bad file descriptor) [pid 5184] close(18) = -1 EBADF (Bad file descriptor) [pid 5184] close(19) = -1 EBADF (Bad file descriptor) [pid 5184] close(20) = -1 EBADF (Bad file descriptor) [pid 5184] close(21) = -1 EBADF (Bad file descriptor) [pid 5184] close(22) = -1 EBADF (Bad file descriptor) [pid 5184] close(23) = -1 EBADF (Bad file descriptor) [pid 5184] close(24) = -1 EBADF (Bad file descriptor) [pid 5184] close(25) = -1 EBADF (Bad file descriptor) [pid 5184] close(26) = -1 EBADF (Bad file descriptor) [pid 5184] close(27) = -1 EBADF (Bad file descriptor) [pid 5184] close(28) = -1 EBADF (Bad file descriptor) [pid 5184] close(29) = -1 EBADF (Bad file descriptor) [pid 5184] exit_group(0) = ? [pid 5184] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=81, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./79", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./79/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./79/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./79/binderfs") = 0 [ 148.007725][ T1059] [ 148.007725][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 148.007725][ T1059] [ 148.018277][ T1059] [ 148.018277][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 148.018277][ T1059] [ 148.029329][ T114] [ 148.029329][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 148.029329][ T114] [ 148.039955][ T1059] [ 148.039955][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 148.039955][ T1059] [ 148.050549][ T1059] [ 148.050549][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 148.050549][ T1059] [ 148.062672][ T114] [ 148.062672][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 148.062672][ T114] [ 148.073451][ T1059] [ 148.073451][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 148.073451][ T1059] [ 148.083999][ T1059] [ 148.083999][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 148.083999][ T1059] [ 148.095378][ T113] [ 148.095378][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 148.095378][ T113] [pid 5087] umount2("./79/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./79/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./79/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./79/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./79/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./79/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./79") = 0 [pid 5087] mkdir("./80", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 148.106429][ T5087] [ 148.106429][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 148.106429][ T5087] [ 148.117256][ T5087] [ 148.117256][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 148.117256][ T5087] [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55559309e650) = 82 ./strace-static-x86_64: Process 5185 attached [pid 5185] set_robust_list(0x55559309e660, 24) = 0 [pid 5185] chdir("./80") = 0 [pid 5185] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5185] setpgid(0, 0) = 0 [pid 5185] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5185] write(3, "1000", 4) = 4 [pid 5185] close(3) = 0 [pid 5185] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5185] memfd_create("syzkaller", 0) = 3 [pid 5185] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5185] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5185] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5185] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5185] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5185] close(3) = 0 [pid 5185] close(4) = 0 [pid 5185] mkdir("./file0", 0777) = 0 [pid 5185] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5185] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5185] chdir("./file0") = 0 [pid 5185] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 148.583576][ T5185] loop0: detected capacity change from 0 to 32768 [ 148.621481][ T5185] [ 148.621481][ T5185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 148.621481][ T5185] [pid 5185] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5185] close(3) = 0 [pid 5185] close(4) = -1 EBADF (Bad file descriptor) [pid 5185] close(5) = -1 EBADF (Bad file descriptor) [pid 5185] close(6) = -1 EBADF (Bad file descriptor) [pid 5185] close(7) = -1 EBADF (Bad file descriptor) [pid 5185] close(8) = -1 EBADF (Bad file descriptor) [pid 5185] close(9) = -1 EBADF (Bad file descriptor) [pid 5185] close(10) = -1 EBADF (Bad file descriptor) [pid 5185] close(11) = -1 EBADF (Bad file descriptor) [pid 5185] close(12) = -1 EBADF (Bad file descriptor) [pid 5185] close(13) = -1 EBADF (Bad file descriptor) [pid 5185] close(14) = -1 EBADF (Bad file descriptor) [pid 5185] close(15) = -1 EBADF (Bad file descriptor) [pid 5185] close(16) = -1 EBADF (Bad file descriptor) [pid 5185] close(17) = -1 EBADF (Bad file descriptor) [ 148.636129][ T5185] read_mapping_page failed! [ 148.640641][ T5185] ERROR: (device loop0): txCommit: [ 148.640641][ T5185] [pid 5185] close(18) = -1 EBADF (Bad file descriptor) [pid 5185] close(19) = -1 EBADF (Bad file descriptor) [pid 5185] close(20) = -1 EBADF (Bad file descriptor) [pid 5185] close(21) = -1 EBADF (Bad file descriptor) [pid 5185] close(22) = -1 EBADF (Bad file descriptor) [pid 5185] close(23) = -1 EBADF (Bad file descriptor) [pid 5185] close(24) = -1 EBADF (Bad file descriptor) [pid 5185] close(25) = -1 EBADF (Bad file descriptor) [pid 5185] close(26) = -1 EBADF (Bad file descriptor) [pid 5185] close(27) = -1 EBADF (Bad file descriptor) [pid 5185] close(28) = -1 EBADF (Bad file descriptor) [pid 5185] close(29) = -1 EBADF (Bad file descriptor) [pid 5185] exit_group(0) = ? [pid 5185] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=82, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=24 /* 0.24 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./80", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./80/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./80/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./80/binderfs") = 0 [ 148.784545][ T1097] [ 148.784545][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 148.784545][ T1097] [ 148.795079][ T1097] [ 148.795079][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 148.795079][ T1097] [ 148.806219][ T114] [ 148.806219][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 148.806219][ T114] [ 148.816793][ T1097] [ 148.816793][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 148.816793][ T1097] [ 148.827409][ T1097] [ 148.827409][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 148.827409][ T1097] [ 148.838336][ T113] [ 148.838336][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 148.838336][ T113] [ 148.848881][ T1097] [ 148.848881][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 148.848881][ T1097] [ 148.859350][ T1097] [ 148.859350][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 148.859350][ T1097] [ 148.870348][ T5087] [ 148.870348][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 148.870348][ T5087] [ 148.881259][ T114] [pid 5087] umount2("./80/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./80/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./80/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./80/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./80/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [ 148.881259][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 148.881259][ T114] [ 148.892643][ T5087] [ 148.892643][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 148.892643][ T5087] [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./80/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./80") = 0 [pid 5087] mkdir("./81", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5186 attached , child_tidptr=0x55559309e650) = 83 [pid 5186] set_robust_list(0x55559309e660, 24) = 0 [pid 5186] chdir("./81") = 0 [pid 5186] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5186] setpgid(0, 0) = 0 [pid 5186] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5186] write(3, "1000", 4) = 4 [pid 5186] close(3) = 0 [pid 5186] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5186] memfd_create("syzkaller", 0) = 3 [pid 5186] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5186] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5186] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5186] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5186] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5186] close(3) = 0 [pid 5186] close(4) = 0 [pid 5186] mkdir("./file0", 0777) = 0 [pid 5186] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5186] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5186] chdir("./file0") = 0 [pid 5186] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 149.421248][ T5186] loop0: detected capacity change from 0 to 32768 [ 149.444273][ T5186] [ 149.444273][ T5186] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 149.444273][ T5186] [pid 5186] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5186] close(3) = 0 [pid 5186] close(4) = -1 EBADF (Bad file descriptor) [pid 5186] close(5) = -1 EBADF (Bad file descriptor) [pid 5186] close(6) = -1 EBADF (Bad file descriptor) [pid 5186] close(7) = -1 EBADF (Bad file descriptor) [pid 5186] close(8) = -1 EBADF (Bad file descriptor) [pid 5186] close(9) = -1 EBADF (Bad file descriptor) [pid 5186] close(10) = -1 EBADF (Bad file descriptor) [pid 5186] close(11) = -1 EBADF (Bad file descriptor) [ 149.475156][ T5186] read_mapping_page failed! [ 149.479832][ T5186] ERROR: (device loop0): txCommit: [ 149.479832][ T5186] [pid 5186] close(12) = -1 EBADF (Bad file descriptor) [pid 5186] close(13) = -1 EBADF (Bad file descriptor) [pid 5186] close(14) = -1 EBADF (Bad file descriptor) [pid 5186] close(15) = -1 EBADF (Bad file descriptor) [pid 5186] close(16) = -1 EBADF (Bad file descriptor) [pid 5186] close(17) = -1 EBADF (Bad file descriptor) [pid 5186] close(18) = -1 EBADF (Bad file descriptor) [pid 5186] close(19) = -1 EBADF (Bad file descriptor) [pid 5186] close(20) = -1 EBADF (Bad file descriptor) [pid 5186] close(21) = -1 EBADF (Bad file descriptor) [pid 5186] close(22) = -1 EBADF (Bad file descriptor) [pid 5186] close(23) = -1 EBADF (Bad file descriptor) [pid 5186] close(24) = -1 EBADF (Bad file descriptor) [pid 5186] close(25) = -1 EBADF (Bad file descriptor) [pid 5186] close(26) = -1 EBADF (Bad file descriptor) [pid 5186] close(27) = -1 EBADF (Bad file descriptor) [pid 5186] close(28) = -1 EBADF (Bad file descriptor) [pid 5186] close(29) = -1 EBADF (Bad file descriptor) [pid 5186] exit_group(0) = ? [pid 5186] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=83, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./81", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./81/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./81/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./81/binderfs") = 0 [ 149.656883][ T1059] [ 149.656883][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 149.656883][ T1059] [ 149.667559][ T1059] [ 149.667559][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 149.667559][ T1059] [ 149.678622][ T113] [ 149.678622][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 149.678622][ T113] [ 149.689357][ T1059] [ 149.689357][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 149.689357][ T1059] [ 149.699898][ T1059] [ 149.699898][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 149.699898][ T1059] [ 149.711039][ T113] [ 149.711039][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 149.711039][ T113] [ 149.721755][ T1059] [ 149.721755][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 149.721755][ T1059] [ 149.732250][ T1059] [ 149.732250][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 149.732250][ T1059] [ 149.743168][ T114] [ 149.743168][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 149.743168][ T114] [ 149.754123][ T5087] [pid 5087] umount2("./81/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./81/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./81/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./81/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./81/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [ 149.754123][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 149.754123][ T5087] [ 149.764858][ T5087] [ 149.764858][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 149.764858][ T5087] [pid 5087] close(4) = 0 [pid 5087] rmdir("./81/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./81") = 0 [pid 5087] mkdir("./82", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5187 attached , child_tidptr=0x55559309e650) = 84 [pid 5187] set_robust_list(0x55559309e660, 24) = 0 [pid 5187] chdir("./82") = 0 [pid 5187] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5187] setpgid(0, 0) = 0 [pid 5187] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5187] write(3, "1000", 4) = 4 [pid 5187] close(3) = 0 [pid 5187] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5187] memfd_create("syzkaller", 0) = 3 [pid 5187] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5187] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5187] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5187] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5187] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5187] close(3) = 0 [pid 5187] close(4) = 0 [pid 5187] mkdir("./file0", 0777) = 0 [ 150.317987][ T5187] loop0: detected capacity change from 0 to 32768 [pid 5187] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5187] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5187] chdir("./file0") = 0 [pid 5187] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5187] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5187] close(3) = 0 [pid 5187] close(4) = -1 EBADF (Bad file descriptor) [pid 5187] close(5) = -1 EBADF (Bad file descriptor) [pid 5187] close(6) = -1 EBADF (Bad file descriptor) [pid 5187] close(7) = -1 EBADF (Bad file descriptor) [pid 5187] close(8) = -1 EBADF (Bad file descriptor) [pid 5187] close(9) = -1 EBADF (Bad file descriptor) [pid 5187] close(10) = -1 EBADF (Bad file descriptor) [pid 5187] close(11) = -1 EBADF (Bad file descriptor) [pid 5187] close(12) = -1 EBADF (Bad file descriptor) [pid 5187] close(13) = -1 EBADF (Bad file descriptor) [ 150.367793][ T5187] [ 150.367793][ T5187] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 150.367793][ T5187] [ 150.385523][ T5187] read_mapping_page failed! [ 150.390047][ T5187] ERROR: (device loop0): txCommit: [ 150.390047][ T5187] [pid 5187] close(14) = -1 EBADF (Bad file descriptor) [pid 5187] close(15) = -1 EBADF (Bad file descriptor) [pid 5187] close(16) = -1 EBADF (Bad file descriptor) [pid 5187] close(17) = -1 EBADF (Bad file descriptor) [pid 5187] close(18) = -1 EBADF (Bad file descriptor) [pid 5187] close(19) = -1 EBADF (Bad file descriptor) [pid 5187] close(20) = -1 EBADF (Bad file descriptor) [pid 5187] close(21) = -1 EBADF (Bad file descriptor) [pid 5187] close(22) = -1 EBADF (Bad file descriptor) [pid 5187] close(23) = -1 EBADF (Bad file descriptor) [pid 5187] close(24) = -1 EBADF (Bad file descriptor) [pid 5187] close(25) = -1 EBADF (Bad file descriptor) [pid 5187] close(26) = -1 EBADF (Bad file descriptor) [pid 5187] close(27) = -1 EBADF (Bad file descriptor) [pid 5187] close(28) = -1 EBADF (Bad file descriptor) [pid 5187] close(29) = -1 EBADF (Bad file descriptor) [pid 5187] exit_group(0) = ? [pid 5187] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=84, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./82", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./82/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./82/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./82/binderfs") = 0 [ 150.570836][ T61] [ 150.570836][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 150.570836][ T61] [ 150.581921][ T61] [ 150.581921][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 150.581921][ T61] [ 150.593212][ T113] [ 150.593212][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 150.593212][ T113] [ 150.604051][ T61] [ 150.604051][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 150.604051][ T61] [ 150.614606][ T61] [ 150.614606][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 150.614606][ T61] [ 150.625661][ T113] [ 150.625661][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 150.625661][ T113] [ 150.636186][ T61] [ 150.636186][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 150.636186][ T61] [ 150.646652][ T61] [ 150.646652][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 150.646652][ T61] [ 150.657497][ T114] [ 150.657497][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 150.657497][ T114] [ 150.668426][ T5087] [pid 5087] umount2("./82/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./82/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./82/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./82/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./82/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [ 150.668426][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 150.668426][ T5087] [ 150.679142][ T5087] [ 150.679142][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 150.679142][ T5087] [pid 5087] close(4) = 0 [pid 5087] rmdir("./82/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./82") = 0 [pid 5087] mkdir("./83", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5188 attached , child_tidptr=0x55559309e650) = 85 [pid 5188] set_robust_list(0x55559309e660, 24) = 0 [pid 5188] chdir("./83") = 0 [pid 5188] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5188] setpgid(0, 0) = 0 [pid 5188] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5188] write(3, "1000", 4) = 4 [pid 5188] close(3) = 0 [pid 5188] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5188] memfd_create("syzkaller", 0) = 3 [pid 5188] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5188] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5188] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5188] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5188] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5188] close(3) = 0 [pid 5188] close(4) = 0 [pid 5188] mkdir("./file0", 0777) = 0 [pid 5188] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5188] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5188] chdir("./file0") = 0 [pid 5188] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 151.182667][ T5188] loop0: detected capacity change from 0 to 32768 [ 151.215016][ T5188] [ 151.215016][ T5188] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 151.215016][ T5188] [pid 5188] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5188] close(3) = 0 [pid 5188] close(4) = -1 EBADF (Bad file descriptor) [pid 5188] close(5) = -1 EBADF (Bad file descriptor) [pid 5188] close(6) = -1 EBADF (Bad file descriptor) [pid 5188] close(7) = -1 EBADF (Bad file descriptor) [pid 5188] close(8) = -1 EBADF (Bad file descriptor) [pid 5188] close(9) = -1 EBADF (Bad file descriptor) [pid 5188] close(10) = -1 EBADF (Bad file descriptor) [pid 5188] close(11) = -1 EBADF (Bad file descriptor) [pid 5188] close(12) = -1 EBADF (Bad file descriptor) [pid 5188] close(13) = -1 EBADF (Bad file descriptor) [ 151.260471][ T5188] read_mapping_page failed! [ 151.265065][ T5188] ERROR: (device loop0): txCommit: [ 151.265065][ T5188] [pid 5188] close(14) = -1 EBADF (Bad file descriptor) [pid 5188] close(15) = -1 EBADF (Bad file descriptor) [pid 5188] close(16) = -1 EBADF (Bad file descriptor) [pid 5188] close(17) = -1 EBADF (Bad file descriptor) [pid 5188] close(18) = -1 EBADF (Bad file descriptor) [pid 5188] close(19) = -1 EBADF (Bad file descriptor) [pid 5188] close(20) = -1 EBADF (Bad file descriptor) [pid 5188] close(21) = -1 EBADF (Bad file descriptor) [pid 5188] close(22) = -1 EBADF (Bad file descriptor) [pid 5188] close(23) = -1 EBADF (Bad file descriptor) [pid 5188] close(24) = -1 EBADF (Bad file descriptor) [pid 5188] close(25) = -1 EBADF (Bad file descriptor) [pid 5188] close(26) = -1 EBADF (Bad file descriptor) [pid 5188] close(27) = -1 EBADF (Bad file descriptor) [pid 5188] close(28) = -1 EBADF (Bad file descriptor) [pid 5188] close(29) = -1 EBADF (Bad file descriptor) [pid 5188] exit_group(0) = ? [pid 5188] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=85, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=23 /* 0.23 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./83", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./83/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./83/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./83/binderfs") = 0 [ 151.434156][ T1097] [ 151.434156][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 151.434156][ T1097] [ 151.444826][ T1097] [ 151.444826][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 151.444826][ T1097] [ 151.456115][ T113] [ 151.456115][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 151.456115][ T113] [ 151.466669][ T1097] [ 151.466669][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 151.466669][ T1097] [ 151.477167][ T1097] [ 151.477167][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 151.477167][ T1097] [ 151.488362][ T113] [ 151.488362][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 151.488362][ T113] [ 151.498888][ T1097] [ 151.498888][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 151.498888][ T1097] [ 151.509390][ T1097] [ 151.509390][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 151.509390][ T1097] [ 151.520369][ T113] [ 151.520369][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 151.520369][ T113] [ 151.530959][ T5087] [pid 5087] umount2("./83/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./83/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./83/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./83/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./83/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [ 151.530959][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 151.530959][ T5087] [ 151.542166][ T5087] [ 151.542166][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 151.542166][ T5087] [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./83/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./83") = 0 [pid 5087] mkdir("./84", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55559309e650) = 86 ./strace-static-x86_64: Process 5189 attached [pid 5189] set_robust_list(0x55559309e660, 24) = 0 [pid 5189] chdir("./84") = 0 [pid 5189] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5189] setpgid(0, 0) = 0 [pid 5189] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5189] write(3, "1000", 4) = 4 [pid 5189] close(3) = 0 [pid 5189] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5189] memfd_create("syzkaller", 0) = 3 [pid 5189] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5189] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5189] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5189] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5189] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5189] close(3) = 0 [pid 5189] close(4) = 0 [pid 5189] mkdir("./file0", 0777) = 0 [ 152.090874][ T5189] loop0: detected capacity change from 0 to 32768 [pid 5189] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5189] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5189] chdir("./file0") = 0 [pid 5189] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5189] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5189] close(3) = 0 [pid 5189] close(4) = -1 EBADF (Bad file descriptor) [pid 5189] close(5) = -1 EBADF (Bad file descriptor) [pid 5189] close(6) = -1 EBADF (Bad file descriptor) [pid 5189] close(7) = -1 EBADF (Bad file descriptor) [ 152.133928][ T5189] [ 152.133928][ T5189] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 152.133928][ T5189] [ 152.168775][ T5189] read_mapping_page failed! [ 152.173434][ T5189] ERROR: (device loop0): txCommit: [ 152.173434][ T5189] [pid 5189] close(8) = -1 EBADF (Bad file descriptor) [pid 5189] close(9) = -1 EBADF (Bad file descriptor) [pid 5189] close(10) = -1 EBADF (Bad file descriptor) [pid 5189] close(11) = -1 EBADF (Bad file descriptor) [pid 5189] close(12) = -1 EBADF (Bad file descriptor) [pid 5189] close(13) = -1 EBADF (Bad file descriptor) [pid 5189] close(14) = -1 EBADF (Bad file descriptor) [pid 5189] close(15) = -1 EBADF (Bad file descriptor) [pid 5189] close(16) = -1 EBADF (Bad file descriptor) [pid 5189] close(17) = -1 EBADF (Bad file descriptor) [pid 5189] close(18) = -1 EBADF (Bad file descriptor) [pid 5189] close(19) = -1 EBADF (Bad file descriptor) [pid 5189] close(20) = -1 EBADF (Bad file descriptor) [pid 5189] close(21) = -1 EBADF (Bad file descriptor) [pid 5189] close(22) = -1 EBADF (Bad file descriptor) [pid 5189] close(23) = -1 EBADF (Bad file descriptor) [pid 5189] close(24) = -1 EBADF (Bad file descriptor) [pid 5189] close(25) = -1 EBADF (Bad file descriptor) [pid 5189] close(26) = -1 EBADF (Bad file descriptor) [pid 5189] close(27) = -1 EBADF (Bad file descriptor) [pid 5189] close(28) = -1 EBADF (Bad file descriptor) [pid 5189] close(29) = -1 EBADF (Bad file descriptor) [pid 5189] exit_group(0) = ? [pid 5189] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=86, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./84", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./84/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./84/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./84/binderfs") = 0 [ 152.354950][ T1097] [ 152.354950][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 152.354950][ T1097] [ 152.365559][ T1097] [ 152.365559][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 152.365559][ T1097] [ 152.378089][ T114] [ 152.378089][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 152.378089][ T114] [ 152.388644][ T1097] [ 152.388644][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 152.388644][ T1097] [ 152.399675][ T1097] [ 152.399675][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 152.399675][ T1097] [ 152.410739][ T114] [ 152.410739][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 152.410739][ T114] [ 152.421341][ T1097] [ 152.421341][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 152.421341][ T1097] [ 152.431930][ T1097] [ 152.431930][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 152.431930][ T1097] [ 152.442815][ T113] [ 152.442815][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 152.442815][ T113] [ 152.453286][ T5087] [pid 5087] umount2("./84/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./84/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./84/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./84/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./84/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [ 152.453286][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 152.453286][ T5087] [ 152.464446][ T5087] [ 152.464446][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 152.464446][ T5087] [pid 5087] rmdir("./84/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./84") = 0 [pid 5087] mkdir("./85", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55559309e650) = 87 ./strace-static-x86_64: Process 5190 attached [pid 5190] set_robust_list(0x55559309e660, 24) = 0 [pid 5190] chdir("./85") = 0 [pid 5190] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5190] setpgid(0, 0) = 0 [pid 5190] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5190] write(3, "1000", 4) = 4 [pid 5190] close(3) = 0 [pid 5190] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5190] memfd_create("syzkaller", 0) = 3 [pid 5190] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5190] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5190] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5190] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5190] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5190] close(3) = 0 [pid 5190] close(4) = 0 [pid 5190] mkdir("./file0", 0777) = 0 [ 152.981004][ T5190] loop0: detected capacity change from 0 to 32768 [pid 5190] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5190] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5190] chdir("./file0") = 0 [pid 5190] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5190] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5190] close(3) = 0 [pid 5190] close(4) = -1 EBADF (Bad file descriptor) [pid 5190] close(5) = -1 EBADF (Bad file descriptor) [pid 5190] close(6) = -1 EBADF (Bad file descriptor) [pid 5190] close(7) = -1 EBADF (Bad file descriptor) [pid 5190] close(8) = -1 EBADF (Bad file descriptor) [pid 5190] close(9) = -1 EBADF (Bad file descriptor) [ 153.027104][ T5190] [ 153.027104][ T5190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 153.027104][ T5190] [ 153.062481][ T5190] read_mapping_page failed! [ 153.067020][ T5190] ERROR: (device loop0): txCommit: [ 153.067020][ T5190] [pid 5190] close(10) = -1 EBADF (Bad file descriptor) [pid 5190] close(11) = -1 EBADF (Bad file descriptor) [pid 5190] close(12) = -1 EBADF (Bad file descriptor) [pid 5190] close(13) = -1 EBADF (Bad file descriptor) [pid 5190] close(14) = -1 EBADF (Bad file descriptor) [pid 5190] close(15) = -1 EBADF (Bad file descriptor) [pid 5190] close(16) = -1 EBADF (Bad file descriptor) [pid 5190] close(17) = -1 EBADF (Bad file descriptor) [pid 5190] close(18) = -1 EBADF (Bad file descriptor) [pid 5190] close(19) = -1 EBADF (Bad file descriptor) [pid 5190] close(20) = -1 EBADF (Bad file descriptor) [pid 5190] close(21) = -1 EBADF (Bad file descriptor) [pid 5190] close(22) = -1 EBADF (Bad file descriptor) [pid 5190] close(23) = -1 EBADF (Bad file descriptor) [pid 5190] close(24) = -1 EBADF (Bad file descriptor) [pid 5190] close(25) = -1 EBADF (Bad file descriptor) [pid 5190] close(26) = -1 EBADF (Bad file descriptor) [pid 5190] close(27) = -1 EBADF (Bad file descriptor) [pid 5190] close(28) = -1 EBADF (Bad file descriptor) [pid 5190] close(29) = -1 EBADF (Bad file descriptor) [pid 5190] exit_group(0) = ? [pid 5190] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=87, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=23 /* 0.23 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./85", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./85/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./85/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./85/binderfs") = 0 [ 153.238420][ T61] [ 153.238420][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 153.238420][ T61] [ 153.249089][ T61] [ 153.249089][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 153.249089][ T61] [ 153.260318][ T113] [ 153.260318][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 153.260318][ T113] [ 153.271191][ T61] [ 153.271191][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 153.271191][ T61] [ 153.281814][ T61] [ 153.281814][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 153.281814][ T61] [ 153.293521][ T113] [ 153.293521][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 153.293521][ T113] [ 153.304163][ T61] [ 153.304163][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 153.304163][ T61] [ 153.314691][ T61] [ 153.314691][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 153.314691][ T61] [ 153.325649][ T114] [ 153.325649][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 153.325649][ T114] [ 153.336212][ T5087] [pid 5087] umount2("./85/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./85/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./85/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./85/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./85/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [ 153.336212][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 153.336212][ T5087] [ 153.346946][ T5087] [ 153.346946][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 153.346946][ T5087] [pid 5087] rmdir("./85/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./85") = 0 [pid 5087] mkdir("./86", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5191 attached , child_tidptr=0x55559309e650) = 88 [pid 5191] set_robust_list(0x55559309e660, 24) = 0 [pid 5191] chdir("./86") = 0 [pid 5191] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5191] setpgid(0, 0) = 0 [pid 5191] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5191] write(3, "1000", 4) = 4 [pid 5191] close(3) = 0 [pid 5191] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5191] memfd_create("syzkaller", 0) = 3 [pid 5191] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5191] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5191] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5191] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5191] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5191] close(3) = 0 [pid 5191] close(4) = 0 [pid 5191] mkdir("./file0", 0777) = 0 [pid 5191] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5191] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5191] chdir("./file0") = 0 [pid 5191] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 153.896100][ T5191] loop0: detected capacity change from 0 to 32768 [ 153.933219][ T5191] [ 153.933219][ T5191] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 153.933219][ T5191] [pid 5191] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5191] close(3) = 0 [pid 5191] close(4) = -1 EBADF (Bad file descriptor) [pid 5191] close(5) = -1 EBADF (Bad file descriptor) [pid 5191] close(6) = -1 EBADF (Bad file descriptor) [pid 5191] close(7) = -1 EBADF (Bad file descriptor) [pid 5191] close(8) = -1 EBADF (Bad file descriptor) [pid 5191] close(9) = -1 EBADF (Bad file descriptor) [pid 5191] close(10) = -1 EBADF (Bad file descriptor) [pid 5191] close(11) = -1 EBADF (Bad file descriptor) [pid 5191] close(12) = -1 EBADF (Bad file descriptor) [pid 5191] close(13) = -1 EBADF (Bad file descriptor) [pid 5191] close(14) = -1 EBADF (Bad file descriptor) [pid 5191] close(15) = -1 EBADF (Bad file descriptor) [pid 5191] close(16) = -1 EBADF (Bad file descriptor) [pid 5191] close(17) = -1 EBADF (Bad file descriptor) [pid 5191] close(18) = -1 EBADF (Bad file descriptor) [ 153.967822][ T5191] read_mapping_page failed! [ 153.972742][ T5191] ERROR: (device loop0): txCommit: [ 153.972742][ T5191] [pid 5191] close(19) = -1 EBADF (Bad file descriptor) [pid 5191] close(20) = -1 EBADF (Bad file descriptor) [pid 5191] close(21) = -1 EBADF (Bad file descriptor) [pid 5191] close(22) = -1 EBADF (Bad file descriptor) [pid 5191] close(23) = -1 EBADF (Bad file descriptor) [pid 5191] close(24) = -1 EBADF (Bad file descriptor) [pid 5191] close(25) = -1 EBADF (Bad file descriptor) [pid 5191] close(26) = -1 EBADF (Bad file descriptor) [pid 5191] close(27) = -1 EBADF (Bad file descriptor) [pid 5191] close(28) = -1 EBADF (Bad file descriptor) [pid 5191] close(29) = -1 EBADF (Bad file descriptor) [pid 5191] exit_group(0) = ? [pid 5191] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=88, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=23 /* 0.23 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./86", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./86/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./86/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./86/binderfs") = 0 [ 154.124901][ T1059] [ 154.124901][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 154.124901][ T1059] [ 154.135800][ T1059] [ 154.135800][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 154.135800][ T1059] [ 154.146800][ T113] [ 154.146800][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 154.146800][ T113] [ 154.157499][ T1059] [ 154.157499][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 154.157499][ T1059] [ 154.167981][ T1059] [ 154.167981][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 154.167981][ T1059] [ 154.178902][ T114] [ 154.178902][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 154.178902][ T114] [ 154.189422][ T1059] [ 154.189422][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 154.189422][ T1059] [ 154.199912][ T1059] [ 154.199912][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 154.199912][ T1059] [ 154.210791][ T113] [ 154.210791][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 154.210791][ T113] [ 154.221607][ T5087] [pid 5087] umount2("./86/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./86/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./86/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./86/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./86/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 154.221607][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 154.221607][ T5087] [ 154.239070][ T5087] [ 154.239070][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 154.239070][ T5087] [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./86/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./86") = 0 [pid 5087] mkdir("./87", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55559309e650) = 89 ./strace-static-x86_64: Process 5192 attached [pid 5192] set_robust_list(0x55559309e660, 24) = 0 [pid 5192] chdir("./87") = 0 [pid 5192] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5192] setpgid(0, 0) = 0 [pid 5192] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5192] write(3, "1000", 4) = 4 [pid 5192] close(3) = 0 [pid 5192] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5192] memfd_create("syzkaller", 0) = 3 [pid 5192] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5192] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5192] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5192] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5192] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5192] close(3) = 0 [pid 5192] close(4) = 0 [pid 5192] mkdir("./file0", 0777) = 0 [ 154.775879][ T5192] loop0: detected capacity change from 0 to 32768 [pid 5192] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5192] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5192] chdir("./file0") = 0 [pid 5192] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5192] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5192] close(3) = 0 [pid 5192] close(4) = -1 EBADF (Bad file descriptor) [pid 5192] close(5) = -1 EBADF (Bad file descriptor) [pid 5192] close(6) = -1 EBADF (Bad file descriptor) [pid 5192] close(7) = -1 EBADF (Bad file descriptor) [pid 5192] close(8) = -1 EBADF (Bad file descriptor) [pid 5192] close(9) = -1 EBADF (Bad file descriptor) [pid 5192] close(10) = -1 EBADF (Bad file descriptor) [pid 5192] close(11) = -1 EBADF (Bad file descriptor) [ 154.822749][ T5192] [ 154.822749][ T5192] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 154.822749][ T5192] [ 154.857549][ T5192] read_mapping_page failed! [ 154.862858][ T5192] ERROR: (device loop0): txCommit: [ 154.862858][ T5192] [pid 5192] close(12) = -1 EBADF (Bad file descriptor) [pid 5192] close(13) = -1 EBADF (Bad file descriptor) [pid 5192] close(14) = -1 EBADF (Bad file descriptor) [pid 5192] close(15) = -1 EBADF (Bad file descriptor) [pid 5192] close(16) = -1 EBADF (Bad file descriptor) [pid 5192] close(17) = -1 EBADF (Bad file descriptor) [pid 5192] close(18) = -1 EBADF (Bad file descriptor) [pid 5192] close(19) = -1 EBADF (Bad file descriptor) [pid 5192] close(20) = -1 EBADF (Bad file descriptor) [pid 5192] close(21) = -1 EBADF (Bad file descriptor) [pid 5192] close(22) = -1 EBADF (Bad file descriptor) [pid 5192] close(23) = -1 EBADF (Bad file descriptor) [pid 5192] close(24) = -1 EBADF (Bad file descriptor) [pid 5192] close(25) = -1 EBADF (Bad file descriptor) [pid 5192] close(26) = -1 EBADF (Bad file descriptor) [pid 5192] close(27) = -1 EBADF (Bad file descriptor) [pid 5192] close(28) = -1 EBADF (Bad file descriptor) [pid 5192] close(29) = -1 EBADF (Bad file descriptor) [pid 5192] exit_group(0) = ? [pid 5192] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=89, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=23 /* 0.23 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./87", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./87/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./87/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./87/binderfs") = 0 [ 155.030880][ T11] [ 155.030880][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 155.030880][ T11] [ 155.041525][ T11] [ 155.041525][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 155.041525][ T11] [ 155.052538][ T114] [ 155.052538][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 155.052538][ T114] [ 155.063255][ T11] [ 155.063255][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 155.063255][ T11] [ 155.073763][ T11] [ 155.073763][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 155.073763][ T11] [ 155.084635][ T113] [ 155.084635][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 155.084635][ T113] [ 155.095184][ T11] [ 155.095184][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 155.095184][ T11] [ 155.105807][ T11] [ 155.105807][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 155.105807][ T11] [ 155.117244][ T113] [ 155.117244][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 155.117244][ T113] [ 155.128260][ T5087] [pid 5087] umount2("./87/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./87/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./87/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./87/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./87/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [ 155.128260][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 155.128260][ T5087] [ 155.139621][ T5087] [ 155.139621][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 155.139621][ T5087] [pid 5087] rmdir("./87/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./87") = 0 [pid 5087] mkdir("./88", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5193 attached , child_tidptr=0x55559309e650) = 90 [pid 5193] set_robust_list(0x55559309e660, 24) = 0 [pid 5193] chdir("./88") = 0 [pid 5193] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5193] setpgid(0, 0) = 0 [pid 5193] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5193] write(3, "1000", 4) = 4 [pid 5193] close(3) = 0 [pid 5193] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5193] memfd_create("syzkaller", 0) = 3 [pid 5193] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5193] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5193] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5193] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5193] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5193] close(3) = 0 [pid 5193] close(4) = 0 [pid 5193] mkdir("./file0", 0777) = 0 [pid 5193] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5193] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5193] chdir("./file0") = 0 [pid 5193] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 155.665166][ T5193] loop0: detected capacity change from 0 to 32768 [ 155.697880][ T5193] [ 155.697880][ T5193] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 155.697880][ T5193] [pid 5193] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5193] close(3) = 0 [pid 5193] close(4) = -1 EBADF (Bad file descriptor) [pid 5193] close(5) = -1 EBADF (Bad file descriptor) [pid 5193] close(6) = -1 EBADF (Bad file descriptor) [pid 5193] close(7) = -1 EBADF (Bad file descriptor) [pid 5193] close(8) = -1 EBADF (Bad file descriptor) [pid 5193] close(9) = -1 EBADF (Bad file descriptor) [pid 5193] close(10) = -1 EBADF (Bad file descriptor) [pid 5193] close(11) = -1 EBADF (Bad file descriptor) [pid 5193] close(12) = -1 EBADF (Bad file descriptor) [pid 5193] close(13) = -1 EBADF (Bad file descriptor) [pid 5193] close(14) = -1 EBADF (Bad file descriptor) [pid 5193] close(15) = -1 EBADF (Bad file descriptor) [ 155.732352][ T5193] read_mapping_page failed! [ 155.737336][ T5193] ERROR: (device loop0): txCommit: [ 155.737336][ T5193] [pid 5193] close(16) = -1 EBADF (Bad file descriptor) [pid 5193] close(17) = -1 EBADF (Bad file descriptor) [pid 5193] close(18) = -1 EBADF (Bad file descriptor) [pid 5193] close(19) = -1 EBADF (Bad file descriptor) [pid 5193] close(20) = -1 EBADF (Bad file descriptor) [pid 5193] close(21) = -1 EBADF (Bad file descriptor) [pid 5193] close(22) = -1 EBADF (Bad file descriptor) [pid 5193] close(23) = -1 EBADF (Bad file descriptor) [pid 5193] close(24) = -1 EBADF (Bad file descriptor) [pid 5193] close(25) = -1 EBADF (Bad file descriptor) [pid 5193] close(26) = -1 EBADF (Bad file descriptor) [pid 5193] close(27) = -1 EBADF (Bad file descriptor) [pid 5193] close(28) = -1 EBADF (Bad file descriptor) [pid 5193] close(29) = -1 EBADF (Bad file descriptor) [pid 5193] exit_group(0) = ? [pid 5193] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=90, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=23 /* 0.23 s */} --- [pid 5087] umount2("./88", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./88/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./88/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./88/binderfs") = 0 [ 155.913512][ T1059] [ 155.913512][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 155.913512][ T1059] [ 155.924095][ T1059] [ 155.924095][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 155.924095][ T1059] [ 155.935889][ T114] [ 155.935889][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 155.935889][ T114] [ 155.946499][ T1059] [ 155.946499][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 155.946499][ T1059] [ 155.956999][ T1059] [ 155.956999][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 155.956999][ T1059] [ 155.969047][ T114] [ 155.969047][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 155.969047][ T114] [ 155.980503][ T1059] [ 155.980503][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 155.980503][ T1059] [ 155.990989][ T1059] [ 155.990989][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 155.990989][ T1059] [ 156.001717][ T5087] [ 156.001717][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 156.001717][ T5087] [pid 5087] umount2("./88/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./88/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./88/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./88/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./88/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [ 156.012476][ T114] [ 156.012476][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 156.012476][ T114] [ 156.023054][ T5087] [ 156.023054][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 156.023054][ T5087] [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./88/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./88") = 0 [pid 5087] mkdir("./89", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5194 attached [pid 5194] set_robust_list(0x55559309e660, 24) = 0 [pid 5194] chdir("./89" [pid 5087] <... clone resumed>, child_tidptr=0x55559309e650) = 91 [pid 5194] <... chdir resumed>) = 0 [pid 5194] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5194] setpgid(0, 0) = 0 [pid 5194] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5194] write(3, "1000", 4) = 4 [pid 5194] close(3) = 0 [pid 5194] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5194] memfd_create("syzkaller", 0) = 3 [pid 5194] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5194] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5194] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5194] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5194] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5194] close(3) = 0 [pid 5194] close(4) = 0 [pid 5194] mkdir("./file0", 0777) = 0 [pid 5194] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5194] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5194] chdir("./file0") = 0 [pid 5194] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 156.535993][ T5194] loop0: detected capacity change from 0 to 32768 [ 156.569906][ T5194] [ 156.569906][ T5194] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 156.569906][ T5194] [pid 5194] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5194] close(3) = 0 [pid 5194] close(4) = -1 EBADF (Bad file descriptor) [pid 5194] close(5) = -1 EBADF (Bad file descriptor) [pid 5194] close(6) = -1 EBADF (Bad file descriptor) [pid 5194] close(7) = -1 EBADF (Bad file descriptor) [pid 5194] close(8) = -1 EBADF (Bad file descriptor) [pid 5194] close(9) = -1 EBADF (Bad file descriptor) [pid 5194] close(10) = -1 EBADF (Bad file descriptor) [pid 5194] close(11) = -1 EBADF (Bad file descriptor) [pid 5194] close(12) = -1 EBADF (Bad file descriptor) [pid 5194] close(13) = -1 EBADF (Bad file descriptor) [pid 5194] close(14) = -1 EBADF (Bad file descriptor) [ 156.594542][ T5194] read_mapping_page failed! [ 156.599124][ T5194] ERROR: (device loop0): txCommit: [ 156.599124][ T5194] [pid 5194] close(15) = -1 EBADF (Bad file descriptor) [pid 5194] close(16) = -1 EBADF (Bad file descriptor) [pid 5194] close(17) = -1 EBADF (Bad file descriptor) [pid 5194] close(18) = -1 EBADF (Bad file descriptor) [pid 5194] close(19) = -1 EBADF (Bad file descriptor) [pid 5194] close(20) = -1 EBADF (Bad file descriptor) [pid 5194] close(21) = -1 EBADF (Bad file descriptor) [pid 5194] close(22) = -1 EBADF (Bad file descriptor) [pid 5194] close(23) = -1 EBADF (Bad file descriptor) [pid 5194] close(24) = -1 EBADF (Bad file descriptor) [pid 5194] close(25) = -1 EBADF (Bad file descriptor) [pid 5194] close(26) = -1 EBADF (Bad file descriptor) [pid 5194] close(27) = -1 EBADF (Bad file descriptor) [pid 5194] close(28) = -1 EBADF (Bad file descriptor) [pid 5194] close(29) = -1 EBADF (Bad file descriptor) [pid 5194] exit_group(0) = ? [pid 5194] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=91, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=24 /* 0.24 s */} --- [pid 5087] umount2("./89", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./89/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./89/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./89/binderfs") = 0 [ 156.767399][ T1059] [ 156.767399][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 156.767399][ T1059] [ 156.777870][ T1059] [ 156.777870][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 156.777870][ T1059] [ 156.788985][ T113] [ 156.788985][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 156.788985][ T113] [ 156.799552][ T1059] [ 156.799552][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 156.799552][ T1059] [ 156.810284][ T1059] [ 156.810284][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 156.810284][ T1059] [ 156.822144][ T113] [ 156.822144][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 156.822144][ T113] [ 156.833004][ T1059] [ 156.833004][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 156.833004][ T1059] [ 156.843574][ T1059] [ 156.843574][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 156.843574][ T1059] [ 156.854367][ T5087] [ 156.854367][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 156.854367][ T5087] [ 156.865478][ T5087] [pid 5087] umount2("./89/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./89/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./89/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./89/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./89/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [ 156.865478][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 156.865478][ T5087] [ 156.876593][ T114] [ 156.876593][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 156.876593][ T114] [pid 5087] close(4) = 0 [pid 5087] rmdir("./89/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./89") = 0 [pid 5087] mkdir("./90", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5195 attached , child_tidptr=0x55559309e650) = 92 [pid 5195] set_robust_list(0x55559309e660, 24) = 0 [pid 5195] chdir("./90") = 0 [pid 5195] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5195] setpgid(0, 0) = 0 [pid 5195] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5195] write(3, "1000", 4) = 4 [pid 5195] close(3) = 0 [pid 5195] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5195] memfd_create("syzkaller", 0) = 3 [pid 5195] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5195] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5195] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5195] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5195] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5195] close(3) = 0 [pid 5195] close(4) = 0 [pid 5195] mkdir("./file0", 0777) = 0 [pid 5195] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5195] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5195] chdir("./file0") = 0 [pid 5195] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 157.385560][ T5195] loop0: detected capacity change from 0 to 32768 [ 157.424478][ T5195] [ 157.424478][ T5195] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 157.424478][ T5195] [pid 5195] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5195] close(3) = 0 [pid 5195] close(4) = -1 EBADF (Bad file descriptor) [pid 5195] close(5) = -1 EBADF (Bad file descriptor) [pid 5195] close(6) = -1 EBADF (Bad file descriptor) [pid 5195] close(7) = -1 EBADF (Bad file descriptor) [pid 5195] close(8) = -1 EBADF (Bad file descriptor) [pid 5195] close(9) = -1 EBADF (Bad file descriptor) [pid 5195] close(10) = -1 EBADF (Bad file descriptor) [ 157.469887][ T5195] read_mapping_page failed! [ 157.474539][ T5195] ERROR: (device loop0): txCommit: [ 157.474539][ T5195] [pid 5195] close(11) = -1 EBADF (Bad file descriptor) [pid 5195] close(12) = -1 EBADF (Bad file descriptor) [pid 5195] close(13) = -1 EBADF (Bad file descriptor) [pid 5195] close(14) = -1 EBADF (Bad file descriptor) [pid 5195] close(15) = -1 EBADF (Bad file descriptor) [pid 5195] close(16) = -1 EBADF (Bad file descriptor) [pid 5195] close(17) = -1 EBADF (Bad file descriptor) [pid 5195] close(18) = -1 EBADF (Bad file descriptor) [pid 5195] close(19) = -1 EBADF (Bad file descriptor) [pid 5195] close(20) = -1 EBADF (Bad file descriptor) [pid 5195] close(21) = -1 EBADF (Bad file descriptor) [pid 5195] close(22) = -1 EBADF (Bad file descriptor) [pid 5195] close(23) = -1 EBADF (Bad file descriptor) [pid 5195] close(24) = -1 EBADF (Bad file descriptor) [pid 5195] close(25) = -1 EBADF (Bad file descriptor) [pid 5195] close(26) = -1 EBADF (Bad file descriptor) [pid 5195] close(27) = -1 EBADF (Bad file descriptor) [pid 5195] close(28) = -1 EBADF (Bad file descriptor) [pid 5195] close(29) = -1 EBADF (Bad file descriptor) [pid 5195] exit_group(0) = ? [pid 5195] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=92, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./90", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./90/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./90/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./90/binderfs") = 0 [ 157.653594][ T1059] [ 157.653594][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 157.653594][ T1059] [ 157.664102][ T1059] [ 157.664102][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 157.664102][ T1059] [ 157.675181][ T114] [ 157.675181][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 157.675181][ T114] [ 157.685713][ T1059] [ 157.685713][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 157.685713][ T1059] [ 157.696251][ T1059] [ 157.696251][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 157.696251][ T1059] [ 157.707132][ T113] [ 157.707132][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 157.707132][ T113] [ 157.718118][ T1059] [ 157.718118][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 157.718118][ T1059] [ 157.728616][ T1059] [ 157.728616][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 157.728616][ T1059] [ 157.739269][ T5087] [ 157.739269][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 157.739269][ T5087] [ 157.750089][ T114] [pid 5087] umount2("./90/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./90/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./90/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./90/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./90/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [ 157.750089][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 157.750089][ T114] [ 157.760546][ T5087] [ 157.760546][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 157.760546][ T5087] [pid 5087] close(4) = 0 [pid 5087] rmdir("./90/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./90") = 0 [pid 5087] mkdir("./91", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5196 attached , child_tidptr=0x55559309e650) = 93 [pid 5196] set_robust_list(0x55559309e660, 24) = 0 [pid 5196] chdir("./91") = 0 [pid 5196] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5196] setpgid(0, 0) = 0 [pid 5196] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5196] write(3, "1000", 4) = 4 [pid 5196] close(3) = 0 [pid 5196] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5196] memfd_create("syzkaller", 0) = 3 [pid 5196] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5196] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5196] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5196] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5196] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5196] close(3) = 0 [pid 5196] close(4) = 0 [pid 5196] mkdir("./file0", 0777) = 0 [ 158.270441][ T5196] loop0: detected capacity change from 0 to 32768 [pid 5196] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5196] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5196] chdir("./file0") = 0 [pid 5196] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 158.314865][ T5196] [ 158.314865][ T5196] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 158.314865][ T5196] [pid 5196] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5196] close(3) = 0 [pid 5196] close(4) = -1 EBADF (Bad file descriptor) [pid 5196] close(5) = -1 EBADF (Bad file descriptor) [pid 5196] close(6) = -1 EBADF (Bad file descriptor) [pid 5196] close(7) = -1 EBADF (Bad file descriptor) [pid 5196] close(8) = -1 EBADF (Bad file descriptor) [pid 5196] close(9) = -1 EBADF (Bad file descriptor) [pid 5196] close(10) = -1 EBADF (Bad file descriptor) [pid 5196] close(11) = -1 EBADF (Bad file descriptor) [pid 5196] close(12) = -1 EBADF (Bad file descriptor) [ 158.359183][ T5196] read_mapping_page failed! [ 158.363809][ T5196] ERROR: (device loop0): txCommit: [ 158.363809][ T5196] [pid 5196] close(13) = -1 EBADF (Bad file descriptor) [pid 5196] close(14) = -1 EBADF (Bad file descriptor) [pid 5196] close(15) = -1 EBADF (Bad file descriptor) [pid 5196] close(16) = -1 EBADF (Bad file descriptor) [pid 5196] close(17) = -1 EBADF (Bad file descriptor) [pid 5196] close(18) = -1 EBADF (Bad file descriptor) [pid 5196] close(19) = -1 EBADF (Bad file descriptor) [pid 5196] close(20) = -1 EBADF (Bad file descriptor) [pid 5196] close(21) = -1 EBADF (Bad file descriptor) [pid 5196] close(22) = -1 EBADF (Bad file descriptor) [pid 5196] close(23) = -1 EBADF (Bad file descriptor) [pid 5196] close(24) = -1 EBADF (Bad file descriptor) [pid 5196] close(25) = -1 EBADF (Bad file descriptor) [pid 5196] close(26) = -1 EBADF (Bad file descriptor) [pid 5196] close(27) = -1 EBADF (Bad file descriptor) [pid 5196] close(28) = -1 EBADF (Bad file descriptor) [pid 5196] close(29) = -1 EBADF (Bad file descriptor) [pid 5196] exit_group(0) = ? [pid 5196] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=93, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=22 /* 0.22 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./91", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./91/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./91/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./91/binderfs") = 0 [ 158.524929][ T1097] [ 158.524929][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 158.524929][ T1097] [ 158.535398][ T1097] [ 158.535398][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 158.535398][ T1097] [ 158.547406][ T114] [ 158.547406][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 158.547406][ T114] [ 158.558183][ T1097] [ 158.558183][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 158.558183][ T1097] [ 158.568732][ T1097] [ 158.568732][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 158.568732][ T1097] [ 158.579910][ T114] [ 158.579910][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 158.579910][ T114] [ 158.590660][ T1097] [ 158.590660][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 158.590660][ T1097] [ 158.601133][ T1097] [ 158.601133][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 158.601133][ T1097] [ 158.612032][ T5087] [ 158.612032][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 158.612032][ T5087] [pid 5087] umount2("./91/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./91/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./91/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./91/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./91/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [ 158.623662][ T114] [ 158.623662][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 158.623662][ T114] [ 158.634220][ T5087] [ 158.634220][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 158.634220][ T5087] [pid 5087] rmdir("./91/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./91") = 0 [pid 5087] mkdir("./92", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5197 attached [pid 5197] set_robust_list(0x55559309e660, 24 [pid 5087] <... clone resumed>, child_tidptr=0x55559309e650) = 94 [pid 5197] <... set_robust_list resumed>) = 0 [pid 5197] chdir("./92") = 0 [pid 5197] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5197] setpgid(0, 0) = 0 [pid 5197] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5197] write(3, "1000", 4) = 4 [pid 5197] close(3) = 0 [pid 5197] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5197] memfd_create("syzkaller", 0) = 3 [pid 5197] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5197] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5197] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5197] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5197] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5197] close(3) = 0 [pid 5197] close(4) = 0 [pid 5197] mkdir("./file0", 0777) = 0 [pid 5197] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5197] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5197] chdir("./file0") = 0 [pid 5197] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 159.162997][ T5197] loop0: detected capacity change from 0 to 32768 [ 159.199416][ T5197] [ 159.199416][ T5197] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.199416][ T5197] [pid 5197] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5197] close(3) = 0 [pid 5197] close(4) = -1 EBADF (Bad file descriptor) [pid 5197] close(5) = -1 EBADF (Bad file descriptor) [pid 5197] close(6) = -1 EBADF (Bad file descriptor) [pid 5197] close(7) = -1 EBADF (Bad file descriptor) [pid 5197] close(8) = -1 EBADF (Bad file descriptor) [pid 5197] close(9) = -1 EBADF (Bad file descriptor) [pid 5197] close(10) = -1 EBADF (Bad file descriptor) [pid 5197] close(11) = -1 EBADF (Bad file descriptor) [pid 5197] close(12) = -1 EBADF (Bad file descriptor) [ 159.245270][ T5197] read_mapping_page failed! [ 159.249783][ T5197] ERROR: (device loop0): txCommit: [ 159.249783][ T5197] [pid 5197] close(13) = -1 EBADF (Bad file descriptor) [pid 5197] close(14) = -1 EBADF (Bad file descriptor) [pid 5197] close(15) = -1 EBADF (Bad file descriptor) [pid 5197] close(16) = -1 EBADF (Bad file descriptor) [pid 5197] close(17) = -1 EBADF (Bad file descriptor) [pid 5197] close(18) = -1 EBADF (Bad file descriptor) [pid 5197] close(19) = -1 EBADF (Bad file descriptor) [pid 5197] close(20) = -1 EBADF (Bad file descriptor) [pid 5197] close(21) = -1 EBADF (Bad file descriptor) [pid 5197] close(22) = -1 EBADF (Bad file descriptor) [pid 5197] close(23) = -1 EBADF (Bad file descriptor) [pid 5197] close(24) = -1 EBADF (Bad file descriptor) [pid 5197] close(25) = -1 EBADF (Bad file descriptor) [pid 5197] close(26) = -1 EBADF (Bad file descriptor) [pid 5197] close(27) = -1 EBADF (Bad file descriptor) [pid 5197] close(28) = -1 EBADF (Bad file descriptor) [pid 5197] close(29) = -1 EBADF (Bad file descriptor) [pid 5197] exit_group(0) = ? [pid 5197] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=94, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5087] umount2("./92", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./92", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./92/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./92/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./92/binderfs") = 0 [ 159.435436][ T11] [ 159.435436][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.435436][ T11] [ 159.446312][ T11] [ 159.446312][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.446312][ T11] [ 159.457481][ T113] [ 159.457481][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.457481][ T113] [ 159.468059][ T11] [ 159.468059][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.468059][ T11] [ 159.478553][ T11] [ 159.478553][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.478553][ T11] [ 159.489473][ T113] [ 159.489473][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.489473][ T113] [ 159.500078][ T11] [ 159.500078][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.500078][ T11] [ 159.510529][ T11] [ 159.510529][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.510529][ T11] [ 159.521463][ T5087] [ 159.521463][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.521463][ T5087] [ 159.532134][ T114] [pid 5087] umount2("./92/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./92/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./92/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./92/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./92/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [ 159.532134][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.532134][ T114] [ 159.543952][ T5087] [ 159.543952][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.543952][ T5087] [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./92/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./92") = 0 [pid 5087] mkdir("./93", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5198 attached , child_tidptr=0x55559309e650) = 95 [pid 5198] set_robust_list(0x55559309e660, 24) = 0 [pid 5198] chdir("./93") = 0 [pid 5198] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5198] setpgid(0, 0) = 0 [pid 5198] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5198] write(3, "1000", 4) = 4 [pid 5198] close(3) = 0 [pid 5198] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5198] memfd_create("syzkaller", 0) = 3 [pid 5198] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5198] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5198] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5198] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5198] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5198] close(3) = 0 [pid 5198] close(4) = 0 [pid 5198] mkdir("./file0", 0777) = 0 [pid 5198] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5198] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5198] chdir("./file0") = 0 [pid 5198] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 160.034698][ T5198] loop0: detected capacity change from 0 to 32768 [ 160.070539][ T5198] [ 160.070539][ T5198] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 160.070539][ T5198] [pid 5198] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5198] close(3) = 0 [pid 5198] close(4) = -1 EBADF (Bad file descriptor) [pid 5198] close(5) = -1 EBADF (Bad file descriptor) [pid 5198] close(6) = -1 EBADF (Bad file descriptor) [pid 5198] close(7) = -1 EBADF (Bad file descriptor) [pid 5198] close(8) = -1 EBADF (Bad file descriptor) [pid 5198] close(9) = -1 EBADF (Bad file descriptor) [pid 5198] close(10) = -1 EBADF (Bad file descriptor) [pid 5198] close(11) = -1 EBADF (Bad file descriptor) [pid 5198] close(12) = -1 EBADF (Bad file descriptor) [pid 5198] close(13) = -1 EBADF (Bad file descriptor) [pid 5198] close(14) = -1 EBADF (Bad file descriptor) [pid 5198] close(15) = -1 EBADF (Bad file descriptor) [ 160.107823][ T5198] read_mapping_page failed! [ 160.112555][ T5198] ERROR: (device loop0): txCommit: [ 160.112555][ T5198] [pid 5198] close(16) = -1 EBADF (Bad file descriptor) [pid 5198] close(17) = -1 EBADF (Bad file descriptor) [pid 5198] close(18) = -1 EBADF (Bad file descriptor) [pid 5198] close(19) = -1 EBADF (Bad file descriptor) [pid 5198] close(20) = -1 EBADF (Bad file descriptor) [pid 5198] close(21) = -1 EBADF (Bad file descriptor) [pid 5198] close(22) = -1 EBADF (Bad file descriptor) [pid 5198] close(23) = -1 EBADF (Bad file descriptor) [pid 5198] close(24) = -1 EBADF (Bad file descriptor) [pid 5198] close(25) = -1 EBADF (Bad file descriptor) [pid 5198] close(26) = -1 EBADF (Bad file descriptor) [pid 5198] close(27) = -1 EBADF (Bad file descriptor) [pid 5198] close(28) = -1 EBADF (Bad file descriptor) [pid 5198] close(29) = -1 EBADF (Bad file descriptor) [pid 5198] exit_group(0) = ? [pid 5198] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=95, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=23 /* 0.23 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./93", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./93", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./93/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./93/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./93/binderfs") = 0 [ 160.271764][ T1097] [ 160.271764][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 160.271764][ T1097] [ 160.282569][ T1097] [ 160.282569][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 160.282569][ T1097] [ 160.293826][ T113] [ 160.293826][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 160.293826][ T113] [ 160.304886][ T1097] [ 160.304886][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 160.304886][ T1097] [ 160.315535][ T1097] [ 160.315535][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 160.315535][ T1097] [ 160.326429][ T113] [ 160.326429][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 160.326429][ T113] [ 160.336989][ T1097] [ 160.336989][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 160.336989][ T1097] [ 160.347458][ T1097] [ 160.347458][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 160.347458][ T1097] [ 160.358353][ T113] [ 160.358353][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 160.358353][ T113] [ 160.368998][ T5087] [pid 5087] umount2("./93/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./93/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./93/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./93/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./93/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [ 160.368998][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 160.368998][ T5087] [ 160.379923][ T5087] [ 160.379923][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 160.379923][ T5087] [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./93/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./93") = 0 [pid 5087] mkdir("./94", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5199 attached , child_tidptr=0x55559309e650) = 96 [pid 5199] set_robust_list(0x55559309e660, 24) = 0 [pid 5199] chdir("./94") = 0 [pid 5199] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5199] setpgid(0, 0) = 0 [pid 5199] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5199] write(3, "1000", 4) = 4 [pid 5199] close(3) = 0 [pid 5199] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5199] memfd_create("syzkaller", 0) = 3 [pid 5199] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5199] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5199] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5199] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5199] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5199] close(3) = 0 [pid 5199] close(4) = 0 [pid 5199] mkdir("./file0", 0777) = 0 [pid 5199] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5199] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5199] chdir("./file0") = 0 [pid 5199] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 160.898083][ T5199] loop0: detected capacity change from 0 to 32768 [ 160.929021][ T5199] [ 160.929021][ T5199] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 160.929021][ T5199] [pid 5199] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5199] close(3) = 0 [pid 5199] close(4) = -1 EBADF (Bad file descriptor) [pid 5199] close(5) = -1 EBADF (Bad file descriptor) [pid 5199] close(6) = -1 EBADF (Bad file descriptor) [pid 5199] close(7) = -1 EBADF (Bad file descriptor) [pid 5199] close(8) = -1 EBADF (Bad file descriptor) [pid 5199] close(9) = -1 EBADF (Bad file descriptor) [pid 5199] close(10) = -1 EBADF (Bad file descriptor) [pid 5199] close(11) = -1 EBADF (Bad file descriptor) [pid 5199] close(12) = -1 EBADF (Bad file descriptor) [pid 5199] close(13) = -1 EBADF (Bad file descriptor) [pid 5199] close(14) = -1 EBADF (Bad file descriptor) [ 160.962635][ T5199] read_mapping_page failed! [ 160.967180][ T5199] ERROR: (device loop0): txCommit: [ 160.967180][ T5199] [pid 5199] close(15) = -1 EBADF (Bad file descriptor) [pid 5199] close(16) = -1 EBADF (Bad file descriptor) [pid 5199] close(17) = -1 EBADF (Bad file descriptor) [pid 5199] close(18) = -1 EBADF (Bad file descriptor) [pid 5199] close(19) = -1 EBADF (Bad file descriptor) [pid 5199] close(20) = -1 EBADF (Bad file descriptor) [pid 5199] close(21) = -1 EBADF (Bad file descriptor) [pid 5199] close(22) = -1 EBADF (Bad file descriptor) [pid 5199] close(23) = -1 EBADF (Bad file descriptor) [pid 5199] close(24) = -1 EBADF (Bad file descriptor) [pid 5199] close(25) = -1 EBADF (Bad file descriptor) [pid 5199] close(26) = -1 EBADF (Bad file descriptor) [pid 5199] close(27) = -1 EBADF (Bad file descriptor) [pid 5199] close(28) = -1 EBADF (Bad file descriptor) [pid 5199] close(29) = -1 EBADF (Bad file descriptor) [pid 5199] exit_group(0) = ? [pid 5199] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=96, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./94", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./94", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./94/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./94/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./94/binderfs") = 0 [ 161.137462][ T1097] [ 161.137462][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 161.137462][ T1097] [ 161.148471][ T1097] [ 161.148471][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 161.148471][ T1097] [ 161.159485][ T114] [ 161.159485][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 161.159485][ T114] [ 161.170198][ T1097] [ 161.170198][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 161.170198][ T1097] [ 161.180683][ T1097] [ 161.180683][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 161.180683][ T1097] [ 161.191820][ T114] [ 161.191820][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 161.191820][ T114] [ 161.203063][ T1097] [ 161.203063][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 161.203063][ T1097] [ 161.213533][ T1097] [ 161.213533][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 161.213533][ T1097] [ 161.224585][ T114] [ 161.224585][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 161.224585][ T114] [ 161.235360][ T5087] [pid 5087] umount2("./94/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./94/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./94/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./94/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./94/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./94/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./94") = 0 [pid 5087] mkdir("./95", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 161.235360][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 161.235360][ T5087] [ 161.246204][ T5087] [ 161.246204][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 161.246204][ T5087] [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5200 attached [pid 5200] set_robust_list(0x55559309e660, 24 [pid 5087] <... clone resumed>, child_tidptr=0x55559309e650) = 97 [pid 5200] <... set_robust_list resumed>) = 0 [pid 5200] chdir("./95") = 0 [pid 5200] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5200] setpgid(0, 0) = 0 [pid 5200] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5200] write(3, "1000", 4) = 4 [pid 5200] close(3) = 0 [pid 5200] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5200] memfd_create("syzkaller", 0) = 3 [pid 5200] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5200] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5200] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5200] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5200] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5200] close(3) = 0 [pid 5200] close(4) = 0 [pid 5200] mkdir("./file0", 0777) = 0 [pid 5200] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5200] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5200] chdir("./file0") = 0 [pid 5200] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 161.727632][ T5200] loop0: detected capacity change from 0 to 32768 [ 161.757479][ T5200] [ 161.757479][ T5200] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 161.757479][ T5200] [pid 5200] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5200] close(3) = 0 [pid 5200] close(4) = -1 EBADF (Bad file descriptor) [pid 5200] close(5) = -1 EBADF (Bad file descriptor) [pid 5200] close(6) = -1 EBADF (Bad file descriptor) [pid 5200] close(7) = -1 EBADF (Bad file descriptor) [pid 5200] close(8) = -1 EBADF (Bad file descriptor) [pid 5200] close(9) = -1 EBADF (Bad file descriptor) [pid 5200] close(10) = -1 EBADF (Bad file descriptor) [ 161.783232][ T5200] read_mapping_page failed! [ 161.787771][ T5200] ERROR: (device loop0): txCommit: [ 161.787771][ T5200] [pid 5200] close(11) = -1 EBADF (Bad file descriptor) [pid 5200] close(12) = -1 EBADF (Bad file descriptor) [pid 5200] close(13) = -1 EBADF (Bad file descriptor) [pid 5200] close(14) = -1 EBADF (Bad file descriptor) [pid 5200] close(15) = -1 EBADF (Bad file descriptor) [pid 5200] close(16) = -1 EBADF (Bad file descriptor) [pid 5200] close(17) = -1 EBADF (Bad file descriptor) [pid 5200] close(18) = -1 EBADF (Bad file descriptor) [pid 5200] close(19) = -1 EBADF (Bad file descriptor) [pid 5200] close(20) = -1 EBADF (Bad file descriptor) [pid 5200] close(21) = -1 EBADF (Bad file descriptor) [pid 5200] close(22) = -1 EBADF (Bad file descriptor) [pid 5200] close(23) = -1 EBADF (Bad file descriptor) [pid 5200] close(24) = -1 EBADF (Bad file descriptor) [pid 5200] close(25) = -1 EBADF (Bad file descriptor) [pid 5200] close(26) = -1 EBADF (Bad file descriptor) [pid 5200] close(27) = -1 EBADF (Bad file descriptor) [pid 5200] close(28) = -1 EBADF (Bad file descriptor) [pid 5200] close(29) = -1 EBADF (Bad file descriptor) [pid 5200] exit_group(0) = ? [pid 5200] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=97, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 5087] umount2("./95", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./95", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./95/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./95/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./95/binderfs") = 0 [ 161.928196][ T1097] [ 161.928196][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 161.928196][ T1097] [ 161.938841][ T1097] [ 161.938841][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 161.938841][ T1097] [ 161.950263][ T114] [ 161.950263][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 161.950263][ T114] [ 161.960809][ T1097] [ 161.960809][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 161.960809][ T1097] [ 161.971336][ T1097] [ 161.971336][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 161.971336][ T1097] [ 161.982253][ T113] [ 161.982253][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 161.982253][ T113] [ 161.992944][ T1097] [ 161.992944][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 161.992944][ T1097] [ 162.003424][ T1097] [ 162.003424][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 162.003424][ T1097] [ 162.014152][ T5087] [ 162.014152][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 162.014152][ T5087] [ 162.025035][ T113] [pid 5087] umount2("./95/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./95/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./95/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./95/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./95/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./95/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./95") = 0 [pid 5087] mkdir("./96", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 162.025035][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 162.025035][ T113] [ 162.035612][ T5087] [ 162.035612][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 162.035612][ T5087] [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5201 attached , child_tidptr=0x55559309e650) = 98 [pid 5201] set_robust_list(0x55559309e660, 24) = 0 [pid 5201] chdir("./96") = 0 [pid 5201] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5201] setpgid(0, 0) = 0 [pid 5201] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5201] write(3, "1000", 4) = 4 [pid 5201] close(3) = 0 [pid 5201] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5201] memfd_create("syzkaller", 0) = 3 [pid 5201] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5201] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5201] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5201] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5201] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5201] close(3) = 0 [pid 5201] close(4) = 0 [pid 5201] mkdir("./file0", 0777) = 0 [ 162.511726][ T5201] loop0: detected capacity change from 0 to 32768 [pid 5201] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5201] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5201] chdir("./file0") = 0 [pid 5201] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5201] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5201] close(3) = 0 [pid 5201] close(4) = -1 EBADF (Bad file descriptor) [pid 5201] close(5) = -1 EBADF (Bad file descriptor) [pid 5201] close(6) = -1 EBADF (Bad file descriptor) [pid 5201] close(7) = -1 EBADF (Bad file descriptor) [pid 5201] close(8) = -1 EBADF (Bad file descriptor) [pid 5201] close(9) = -1 EBADF (Bad file descriptor) [pid 5201] close(10) = -1 EBADF (Bad file descriptor) [pid 5201] close(11) = -1 EBADF (Bad file descriptor) [pid 5201] close(12) = -1 EBADF (Bad file descriptor) [pid 5201] close(13) = -1 EBADF (Bad file descriptor) [ 162.568817][ T5201] [ 162.568817][ T5201] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 162.568817][ T5201] [ 162.604089][ T5201] read_mapping_page failed! [ 162.608610][ T5201] ERROR: (device loop0): txCommit: [ 162.608610][ T5201] [pid 5201] close(14) = -1 EBADF (Bad file descriptor) [pid 5201] close(15) = -1 EBADF (Bad file descriptor) [pid 5201] close(16) = -1 EBADF (Bad file descriptor) [pid 5201] close(17) = -1 EBADF (Bad file descriptor) [pid 5201] close(18) = -1 EBADF (Bad file descriptor) [pid 5201] close(19) = -1 EBADF (Bad file descriptor) [pid 5201] close(20) = -1 EBADF (Bad file descriptor) [pid 5201] close(21) = -1 EBADF (Bad file descriptor) [pid 5201] close(22) = -1 EBADF (Bad file descriptor) [pid 5201] close(23) = -1 EBADF (Bad file descriptor) [pid 5201] close(24) = -1 EBADF (Bad file descriptor) [pid 5201] close(25) = -1 EBADF (Bad file descriptor) [pid 5201] close(26) = -1 EBADF (Bad file descriptor) [pid 5201] close(27) = -1 EBADF (Bad file descriptor) [pid 5201] close(28) = -1 EBADF (Bad file descriptor) [pid 5201] close(29) = -1 EBADF (Bad file descriptor) [pid 5201] exit_group(0) = ? [pid 5201] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=98, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./96", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./96", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./96/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./96/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./96/binderfs") = 0 [ 162.788727][ T1059] [ 162.788727][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 162.788727][ T1059] [ 162.800257][ T1059] [ 162.800257][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 162.800257][ T1059] [ 162.811406][ T114] [ 162.811406][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 162.811406][ T114] [ 162.822041][ T1059] [ 162.822041][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 162.822041][ T1059] [ 162.832506][ T1059] [ 162.832506][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 162.832506][ T1059] [ 162.843630][ T113] [ 162.843630][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 162.843630][ T113] [ 162.854230][ T1059] [ 162.854230][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 162.854230][ T1059] [ 162.864734][ T1059] [ 162.864734][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 162.864734][ T1059] [ 162.875328][ T5087] [ 162.875328][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 162.875328][ T5087] [ 162.886104][ T113] [pid 5087] umount2("./96/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./96/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./96/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./96/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./96/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./96/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./96") = 0 [pid 5087] mkdir("./97", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 162.886104][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 162.886104][ T113] [ 162.896573][ T5087] [ 162.896573][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 162.896573][ T5087] [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5202 attached [pid 5202] set_robust_list(0x55559309e660, 24) = 0 [pid 5087] <... clone resumed>, child_tidptr=0x55559309e650) = 99 [pid 5202] chdir("./97") = 0 [pid 5202] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5202] setpgid(0, 0) = 0 [pid 5202] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5202] write(3, "1000", 4) = 4 [pid 5202] close(3) = 0 [pid 5202] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5202] memfd_create("syzkaller", 0) = 3 [pid 5202] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5202] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5202] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5202] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5202] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5202] close(3) = 0 [pid 5202] close(4) = 0 [pid 5202] mkdir("./file0", 0777) = 0 [pid 5202] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5202] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5202] chdir("./file0") = 0 [pid 5202] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 163.363764][ T5202] loop0: detected capacity change from 0 to 32768 [ 163.395211][ T5202] [ 163.395211][ T5202] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 163.395211][ T5202] [pid 5202] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5202] close(3) = 0 [pid 5202] close(4) = -1 EBADF (Bad file descriptor) [pid 5202] close(5) = -1 EBADF (Bad file descriptor) [pid 5202] close(6) = -1 EBADF (Bad file descriptor) [pid 5202] close(7) = -1 EBADF (Bad file descriptor) [pid 5202] close(8) = -1 EBADF (Bad file descriptor) [pid 5202] close(9) = -1 EBADF (Bad file descriptor) [pid 5202] close(10) = -1 EBADF (Bad file descriptor) [pid 5202] close(11) = -1 EBADF (Bad file descriptor) [pid 5202] close(12) = -1 EBADF (Bad file descriptor) [pid 5202] close(13) = -1 EBADF (Bad file descriptor) [pid 5202] close(14) = -1 EBADF (Bad file descriptor) [ 163.423932][ T5202] read_mapping_page failed! [ 163.428489][ T5202] ERROR: (device loop0): txCommit: [ 163.428489][ T5202] [pid 5202] close(15) = -1 EBADF (Bad file descriptor) [pid 5202] close(16) = -1 EBADF (Bad file descriptor) [pid 5202] close(17) = -1 EBADF (Bad file descriptor) [pid 5202] close(18) = -1 EBADF (Bad file descriptor) [pid 5202] close(19) = -1 EBADF (Bad file descriptor) [pid 5202] close(20) = -1 EBADF (Bad file descriptor) [pid 5202] close(21) = -1 EBADF (Bad file descriptor) [pid 5202] close(22) = -1 EBADF (Bad file descriptor) [pid 5202] close(23) = -1 EBADF (Bad file descriptor) [pid 5202] close(24) = -1 EBADF (Bad file descriptor) [pid 5202] close(25) = -1 EBADF (Bad file descriptor) [pid 5202] close(26) = -1 EBADF (Bad file descriptor) [pid 5202] close(27) = -1 EBADF (Bad file descriptor) [pid 5202] close(28) = -1 EBADF (Bad file descriptor) [pid 5202] close(29) = -1 EBADF (Bad file descriptor) [pid 5202] exit_group(0) = ? [pid 5202] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=99, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=23 /* 0.23 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./97", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./97", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./97/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./97/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./97/binderfs") = 0 [ 163.596260][ T1097] [ 163.596260][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 163.596260][ T1097] [ 163.606867][ T1097] [ 163.606867][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 163.606867][ T1097] [ 163.618953][ T114] [ 163.618953][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 163.618953][ T114] [ 163.630008][ T1097] [ 163.630008][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 163.630008][ T1097] [ 163.640556][ T1097] [ 163.640556][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 163.640556][ T1097] [ 163.651979][ T113] [ 163.651979][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 163.651979][ T113] [ 163.662680][ T1097] [ 163.662680][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 163.662680][ T1097] [ 163.673280][ T1097] [ 163.673280][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 163.673280][ T1097] [ 163.684102][ T5087] [ 163.684102][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 163.684102][ T5087] [pid 5087] umount2("./97/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./97/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./97/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./97/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./97/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [ 163.694770][ T113] [ 163.694770][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 163.694770][ T113] [ 163.705354][ T5087] [ 163.705354][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 163.705354][ T5087] [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./97/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./97") = 0 [pid 5087] mkdir("./98", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5203 attached [pid 5203] set_robust_list(0x55559309e660, 24) = 0 [pid 5087] <... clone resumed>, child_tidptr=0x55559309e650) = 100 [pid 5203] chdir("./98") = 0 [pid 5203] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5203] setpgid(0, 0) = 0 [pid 5203] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5203] write(3, "1000", 4) = 4 [pid 5203] close(3) = 0 [pid 5203] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5203] memfd_create("syzkaller", 0) = 3 [pid 5203] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5203] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5203] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5203] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5203] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5203] close(3) = 0 [pid 5203] close(4) = 0 [pid 5203] mkdir("./file0", 0777) = 0 [pid 5203] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5203] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5203] chdir("./file0") = 0 [pid 5203] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 164.225607][ T5203] loop0: detected capacity change from 0 to 32768 [ 164.262886][ T5203] [ 164.262886][ T5203] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 164.262886][ T5203] [pid 5203] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5203] close(3) = 0 [pid 5203] close(4) = -1 EBADF (Bad file descriptor) [pid 5203] close(5) = -1 EBADF (Bad file descriptor) [pid 5203] close(6) = -1 EBADF (Bad file descriptor) [pid 5203] close(7) = -1 EBADF (Bad file descriptor) [pid 5203] close(8) = -1 EBADF (Bad file descriptor) [pid 5203] close(9) = -1 EBADF (Bad file descriptor) [pid 5203] close(10) = -1 EBADF (Bad file descriptor) [ 164.306270][ T5203] read_mapping_page failed! [ 164.310811][ T5203] ERROR: (device loop0): txCommit: [ 164.310811][ T5203] [pid 5203] close(11) = -1 EBADF (Bad file descriptor) [pid 5203] close(12) = -1 EBADF (Bad file descriptor) [pid 5203] close(13) = -1 EBADF (Bad file descriptor) [pid 5203] close(14) = -1 EBADF (Bad file descriptor) [pid 5203] close(15) = -1 EBADF (Bad file descriptor) [pid 5203] close(16) = -1 EBADF (Bad file descriptor) [pid 5203] close(17) = -1 EBADF (Bad file descriptor) [pid 5203] close(18) = -1 EBADF (Bad file descriptor) [pid 5203] close(19) = -1 EBADF (Bad file descriptor) [pid 5203] close(20) = -1 EBADF (Bad file descriptor) [pid 5203] close(21) = -1 EBADF (Bad file descriptor) [pid 5203] close(22) = -1 EBADF (Bad file descriptor) [pid 5203] close(23) = -1 EBADF (Bad file descriptor) [pid 5203] close(24) = -1 EBADF (Bad file descriptor) [pid 5203] close(25) = -1 EBADF (Bad file descriptor) [pid 5203] close(26) = -1 EBADF (Bad file descriptor) [pid 5203] close(27) = -1 EBADF (Bad file descriptor) [pid 5203] close(28) = -1 EBADF (Bad file descriptor) [pid 5203] close(29) = -1 EBADF (Bad file descriptor) [pid 5203] exit_group(0) = ? [pid 5203] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=100, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 5087] umount2("./98", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./98", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./98/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./98/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./98/binderfs") = 0 [ 164.445102][ T11] [ 164.445102][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 164.445102][ T11] [ 164.455588][ T11] [ 164.455588][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 164.455588][ T11] [ 164.467745][ T113] [ 164.467745][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 164.467745][ T113] [ 164.478415][ T11] [ 164.478415][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 164.478415][ T11] [ 164.489178][ T11] [ 164.489178][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 164.489178][ T11] [ 164.500154][ T114] [ 164.500154][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 164.500154][ T114] [ 164.510750][ T11] [ 164.510750][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 164.510750][ T11] [ 164.521255][ T11] [ 164.521255][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 164.521255][ T11] [ 164.532240][ T114] [ 164.532240][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 164.532240][ T114] [ 164.543337][ T5087] [pid 5087] umount2("./98/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./98/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./98/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./98/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./98/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./98/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./98") = 0 [pid 5087] mkdir("./99", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 164.543337][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 164.543337][ T5087] [ 164.554139][ T5087] [ 164.554139][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 164.554139][ T5087] [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5204 attached [pid 5204] set_robust_list(0x55559309e660, 24) = 0 [pid 5087] <... clone resumed>, child_tidptr=0x55559309e650) = 101 [pid 5204] chdir("./99") = 0 [pid 5204] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5204] setpgid(0, 0) = 0 [pid 5204] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5204] write(3, "1000", 4) = 4 [pid 5204] close(3) = 0 [pid 5204] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5204] memfd_create("syzkaller", 0) = 3 [pid 5204] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5204] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5204] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5204] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5204] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5204] close(3) = 0 [pid 5204] close(4) = 0 [pid 5204] mkdir("./file0", 0777) = 0 [ 165.020344][ T5204] loop0: detected capacity change from 0 to 32768 [ 165.060413][ T5204] [ 165.060413][ T5204] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 5204] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5204] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5204] chdir("./file0") = 0 [pid 5204] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5204] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5204] close(3) = 0 [pid 5204] close(4) = -1 EBADF (Bad file descriptor) [pid 5204] close(5) = -1 EBADF (Bad file descriptor) [pid 5204] close(6) = -1 EBADF (Bad file descriptor) [pid 5204] close(7) = -1 EBADF (Bad file descriptor) [pid 5204] close(8) = -1 EBADF (Bad file descriptor) [pid 5204] close(9) = -1 EBADF (Bad file descriptor) [pid 5204] close(10) = -1 EBADF (Bad file descriptor) [pid 5204] close(11) = -1 EBADF (Bad file descriptor) [pid 5204] close(12) = -1 EBADF (Bad file descriptor) [pid 5204] close(13) = -1 EBADF (Bad file descriptor) [pid 5204] close(14) = -1 EBADF (Bad file descriptor) [pid 5204] close(15) = -1 EBADF (Bad file descriptor) [ 165.060413][ T5204] [ 165.089498][ T5204] read_mapping_page failed! [ 165.094344][ T5204] ERROR: (device loop0): txCommit: [ 165.094344][ T5204] [pid 5204] close(16) = -1 EBADF (Bad file descriptor) [pid 5204] close(17) = -1 EBADF (Bad file descriptor) [pid 5204] close(18) = -1 EBADF (Bad file descriptor) [pid 5204] close(19) = -1 EBADF (Bad file descriptor) [pid 5204] close(20) = -1 EBADF (Bad file descriptor) [pid 5204] close(21) = -1 EBADF (Bad file descriptor) [pid 5204] close(22) = -1 EBADF (Bad file descriptor) [pid 5204] close(23) = -1 EBADF (Bad file descriptor) [pid 5204] close(24) = -1 EBADF (Bad file descriptor) [pid 5204] close(25) = -1 EBADF (Bad file descriptor) [pid 5204] close(26) = -1 EBADF (Bad file descriptor) [pid 5204] close(27) = -1 EBADF (Bad file descriptor) [pid 5204] close(28) = -1 EBADF (Bad file descriptor) [pid 5204] close(29) = -1 EBADF (Bad file descriptor) [pid 5204] exit_group(0) = ? [pid 5204] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=101, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=24 /* 0.24 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./99", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./99", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./99/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./99/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./99/binderfs") = 0 [ 165.244305][ T1097] [ 165.244305][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 165.244305][ T1097] [ 165.255305][ T1097] [ 165.255305][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 165.255305][ T1097] [ 165.266502][ T113] [ 165.266502][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 165.266502][ T113] [ 165.277241][ T1097] [ 165.277241][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 165.277241][ T1097] [ 165.287732][ T1097] [ 165.287732][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 165.287732][ T1097] [ 165.298612][ T114] [ 165.298612][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 165.298612][ T114] [ 165.309486][ T1097] [ 165.309486][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 165.309486][ T1097] [ 165.320033][ T1097] [ 165.320033][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 165.320033][ T1097] [ 165.330950][ T5087] [ 165.330950][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 165.330950][ T5087] [pid 5087] umount2("./99/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./99/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./99/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./99/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./99/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [ 165.343198][ T114] [ 165.343198][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 165.343198][ T114] [ 165.353696][ T5087] [ 165.353696][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 165.353696][ T5087] [pid 5087] close(4) = 0 [pid 5087] rmdir("./99/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./99") = 0 [pid 5087] mkdir("./100", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5205 attached , child_tidptr=0x55559309e650) = 102 [pid 5205] set_robust_list(0x55559309e660, 24) = 0 [pid 5205] chdir("./100") = 0 [pid 5205] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5205] setpgid(0, 0) = 0 [pid 5205] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5205] write(3, "1000", 4) = 4 [pid 5205] close(3) = 0 [pid 5205] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5205] memfd_create("syzkaller", 0) = 3 [pid 5205] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5205] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5205] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5205] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5205] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5205] close(3) = 0 [pid 5205] close(4) = 0 [pid 5205] mkdir("./file0", 0777) = 0 [pid 5205] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5205] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5205] chdir("./file0") = 0 [pid 5205] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 165.868280][ T5205] loop0: detected capacity change from 0 to 32768 [ 165.888026][ T5205] [ 165.888026][ T5205] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 165.888026][ T5205] [pid 5205] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5205] close(3) = 0 [pid 5205] close(4) = -1 EBADF (Bad file descriptor) [pid 5205] close(5) = -1 EBADF (Bad file descriptor) [pid 5205] close(6) = -1 EBADF (Bad file descriptor) [pid 5205] close(7) = -1 EBADF (Bad file descriptor) [pid 5205] close(8) = -1 EBADF (Bad file descriptor) [pid 5205] close(9) = -1 EBADF (Bad file descriptor) [ 165.926515][ T5205] read_mapping_page failed! [ 165.931035][ T5205] ERROR: (device loop0): txCommit: [ 165.931035][ T5205] [pid 5205] close(10) = -1 EBADF (Bad file descriptor) [pid 5205] close(11) = -1 EBADF (Bad file descriptor) [pid 5205] close(12) = -1 EBADF (Bad file descriptor) [pid 5205] close(13) = -1 EBADF (Bad file descriptor) [pid 5205] close(14) = -1 EBADF (Bad file descriptor) [pid 5205] close(15) = -1 EBADF (Bad file descriptor) [pid 5205] close(16) = -1 EBADF (Bad file descriptor) [pid 5205] close(17) = -1 EBADF (Bad file descriptor) [pid 5205] close(18) = -1 EBADF (Bad file descriptor) [pid 5205] close(19) = -1 EBADF (Bad file descriptor) [pid 5205] close(20) = -1 EBADF (Bad file descriptor) [pid 5205] close(21) = -1 EBADF (Bad file descriptor) [pid 5205] close(22) = -1 EBADF (Bad file descriptor) [pid 5205] close(23) = -1 EBADF (Bad file descriptor) [pid 5205] close(24) = -1 EBADF (Bad file descriptor) [pid 5205] close(25) = -1 EBADF (Bad file descriptor) [pid 5205] close(26) = -1 EBADF (Bad file descriptor) [pid 5205] close(27) = -1 EBADF (Bad file descriptor) [pid 5205] close(28) = -1 EBADF (Bad file descriptor) [pid 5205] close(29) = -1 EBADF (Bad file descriptor) [pid 5205] exit_group(0) = ? [pid 5205] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=102, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=22 /* 0.22 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./100", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./100", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./100/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./100/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./100/binderfs") = 0 [ 166.137399][ T11] [ 166.137399][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 166.137399][ T11] [ 166.147964][ T11] [ 166.147964][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 166.147964][ T11] [ 166.159159][ T113] [ 166.159159][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 166.159159][ T113] [ 166.169671][ T11] [ 166.169671][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 166.169671][ T11] [ 166.180126][ T11] [ 166.180126][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 166.180126][ T11] [ 166.190991][ T114] [ 166.190991][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 166.190991][ T114] [ 166.201799][ T11] [ 166.201799][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 166.201799][ T11] [ 166.212326][ T11] [ 166.212326][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 166.212326][ T11] [ 166.223610][ T5087] [ 166.223610][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 166.223610][ T5087] [ 166.234503][ T114] [pid 5087] umount2("./100/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./100/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./100/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./100/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./100/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [ 166.234503][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 166.234503][ T114] [ 166.245027][ T5087] [ 166.245027][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 166.245027][ T5087] [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./100/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./100") = 0 [pid 5087] mkdir("./101", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5206 attached [pid 5206] set_robust_list(0x55559309e660, 24 [pid 5087] <... clone resumed>, child_tidptr=0x55559309e650) = 103 [pid 5206] <... set_robust_list resumed>) = 0 [pid 5206] chdir("./101") = 0 [pid 5206] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5206] setpgid(0, 0) = 0 [pid 5206] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5206] write(3, "1000", 4) = 4 [pid 5206] close(3) = 0 [pid 5206] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5206] memfd_create("syzkaller", 0) = 3 [pid 5206] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5206] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5206] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5206] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5206] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5206] close(3) = 0 [pid 5206] close(4) = 0 [pid 5206] mkdir("./file0", 0777) = 0 [pid 5206] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5206] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5206] chdir("./file0") = 0 [pid 5206] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 166.779013][ T5206] loop0: detected capacity change from 0 to 32768 [ 166.810600][ T5206] [ 166.810600][ T5206] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 166.810600][ T5206] [pid 5206] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5206] close(3) = 0 [pid 5206] close(4) = -1 EBADF (Bad file descriptor) [pid 5206] close(5) = -1 EBADF (Bad file descriptor) [pid 5206] close(6) = -1 EBADF (Bad file descriptor) [pid 5206] close(7) = -1 EBADF (Bad file descriptor) [pid 5206] close(8) = -1 EBADF (Bad file descriptor) [pid 5206] close(9) = -1 EBADF (Bad file descriptor) [pid 5206] close(10) = -1 EBADF (Bad file descriptor) [pid 5206] close(11) = -1 EBADF (Bad file descriptor) [ 166.848564][ T5206] read_mapping_page failed! [ 166.853685][ T5206] ERROR: (device loop0): txCommit: [ 166.853685][ T5206] [pid 5206] close(12) = -1 EBADF (Bad file descriptor) [pid 5206] close(13) = -1 EBADF (Bad file descriptor) [pid 5206] close(14) = -1 EBADF (Bad file descriptor) [pid 5206] close(15) = -1 EBADF (Bad file descriptor) [pid 5206] close(16) = -1 EBADF (Bad file descriptor) [pid 5206] close(17) = -1 EBADF (Bad file descriptor) [pid 5206] close(18) = -1 EBADF (Bad file descriptor) [pid 5206] close(19) = -1 EBADF (Bad file descriptor) [pid 5206] close(20) = -1 EBADF (Bad file descriptor) [pid 5206] close(21) = -1 EBADF (Bad file descriptor) [pid 5206] close(22) = -1 EBADF (Bad file descriptor) [pid 5206] close(23) = -1 EBADF (Bad file descriptor) [pid 5206] close(24) = -1 EBADF (Bad file descriptor) [pid 5206] close(25) = -1 EBADF (Bad file descriptor) [pid 5206] close(26) = -1 EBADF (Bad file descriptor) [pid 5206] close(27) = -1 EBADF (Bad file descriptor) [pid 5206] close(28) = -1 EBADF (Bad file descriptor) [pid 5206] close(29) = -1 EBADF (Bad file descriptor) [pid 5206] exit_group(0) = ? [pid 5206] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=103, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5087] umount2("./101", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./101", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./101/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./101/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./101/binderfs") = 0 [ 167.039328][ T11] [ 167.039328][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 167.039328][ T11] [ 167.049992][ T11] [ 167.049992][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 167.049992][ T11] [ 167.061550][ T113] [ 167.061550][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 167.061550][ T113] [ 167.072297][ T11] [ 167.072297][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 167.072297][ T11] [ 167.082788][ T11] [ 167.082788][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 167.082788][ T11] [ 167.093738][ T114] [ 167.093738][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 167.093738][ T114] [ 167.104377][ T11] [ 167.104377][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 167.104377][ T11] [ 167.115216][ T11] [ 167.115216][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 167.115216][ T11] [ 167.126140][ T114] [ 167.126140][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 167.126140][ T114] [ 167.136870][ T5087] [pid 5087] umount2("./101/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./101/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./101/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./101/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./101/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [ 167.136870][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 167.136870][ T5087] [ 167.148075][ T5087] [ 167.148075][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 167.148075][ T5087] [pid 5087] rmdir("./101/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./101") = 0 [pid 5087] mkdir("./102", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5207 attached , child_tidptr=0x55559309e650) = 104 [pid 5207] set_robust_list(0x55559309e660, 24) = 0 [pid 5207] chdir("./102") = 0 [pid 5207] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5207] setpgid(0, 0) = 0 [pid 5207] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5207] write(3, "1000", 4) = 4 [pid 5207] close(3) = 0 [pid 5207] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5207] memfd_create("syzkaller", 0) = 3 [pid 5207] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5207] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5207] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5207] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5207] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5207] close(3) = 0 [pid 5207] close(4) = 0 [pid 5207] mkdir("./file0", 0777) = 0 [pid 5207] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5207] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5207] chdir("./file0") = 0 [ 167.651100][ T5207] loop0: detected capacity change from 0 to 32768 [ 167.689580][ T5207] [ 167.689580][ T5207] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 167.689580][ T5207] [pid 5207] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5207] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5207] close(3) = 0 [pid 5207] close(4) = -1 EBADF (Bad file descriptor) [pid 5207] close(5) = -1 EBADF (Bad file descriptor) [pid 5207] close(6) = -1 EBADF (Bad file descriptor) [pid 5207] close(7) = -1 EBADF (Bad file descriptor) [pid 5207] close(8) = -1 EBADF (Bad file descriptor) [pid 5207] close(9) = -1 EBADF (Bad file descriptor) [pid 5207] close(10) = -1 EBADF (Bad file descriptor) [pid 5207] close(11) = -1 EBADF (Bad file descriptor) [ 167.736433][ T5207] read_mapping_page failed! [ 167.741018][ T5207] ERROR: (device loop0): txCommit: [ 167.741018][ T5207] [pid 5207] close(12) = -1 EBADF (Bad file descriptor) [pid 5207] close(13) = -1 EBADF (Bad file descriptor) [pid 5207] close(14) = -1 EBADF (Bad file descriptor) [pid 5207] close(15) = -1 EBADF (Bad file descriptor) [pid 5207] close(16) = -1 EBADF (Bad file descriptor) [pid 5207] close(17) = -1 EBADF (Bad file descriptor) [pid 5207] close(18) = -1 EBADF (Bad file descriptor) [pid 5207] close(19) = -1 EBADF (Bad file descriptor) [pid 5207] close(20) = -1 EBADF (Bad file descriptor) [pid 5207] close(21) = -1 EBADF (Bad file descriptor) [pid 5207] close(22) = -1 EBADF (Bad file descriptor) [pid 5207] close(23) = -1 EBADF (Bad file descriptor) [pid 5207] close(24) = -1 EBADF (Bad file descriptor) [pid 5207] close(25) = -1 EBADF (Bad file descriptor) [pid 5207] close(26) = -1 EBADF (Bad file descriptor) [pid 5207] close(27) = -1 EBADF (Bad file descriptor) [pid 5207] close(28) = -1 EBADF (Bad file descriptor) [pid 5207] close(29) = -1 EBADF (Bad file descriptor) [pid 5207] exit_group(0) = ? [pid 5207] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=104, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5087] umount2("./102", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./102", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./102/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./102/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./102/binderfs") = 0 [ 167.926948][ T1043] [ 167.926948][ T1043] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 167.926948][ T1043] [ 167.937518][ T1043] [ 167.937518][ T1043] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 167.937518][ T1043] [ 167.948577][ T113] [ 167.948577][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 167.948577][ T113] [ 167.959216][ T1043] [ 167.959216][ T1043] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 167.959216][ T1043] [ 167.969673][ T1043] [ 167.969673][ T1043] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 167.969673][ T1043] [ 167.980720][ T114] [ 167.980720][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 167.980720][ T114] [ 167.991357][ T1043] [ 167.991357][ T1043] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 167.991357][ T1043] [ 168.002190][ T1043] [ 168.002190][ T1043] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 168.002190][ T1043] [ 168.013582][ T5087] [ 168.013582][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 168.013582][ T5087] [ 168.024376][ T113] [pid 5087] umount2("./102/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./102/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./102/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./102/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./102/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 168.024376][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 168.024376][ T113] [ 168.034843][ T5087] [ 168.034843][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 168.034843][ T5087] [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./102/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./102") = 0 [pid 5087] mkdir("./103", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5208 attached , child_tidptr=0x55559309e650) = 105 [pid 5208] set_robust_list(0x55559309e660, 24) = 0 [pid 5208] chdir("./103") = 0 [pid 5208] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5208] setpgid(0, 0) = 0 [pid 5208] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5208] write(3, "1000", 4) = 4 [pid 5208] close(3) = 0 [pid 5208] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5208] memfd_create("syzkaller", 0) = 3 [pid 5208] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5208] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5208] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5208] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5208] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5208] close(3) = 0 [pid 5208] close(4) = 0 [pid 5208] mkdir("./file0", 0777) = 0 [pid 5208] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5208] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5208] chdir("./file0") = 0 [pid 5208] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 168.579097][ T5208] loop0: detected capacity change from 0 to 32768 [ 168.616608][ T5208] [ 168.616608][ T5208] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 168.616608][ T5208] [pid 5208] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5208] close(3) = 0 [pid 5208] close(4) = -1 EBADF (Bad file descriptor) [pid 5208] close(5) = -1 EBADF (Bad file descriptor) [pid 5208] close(6) = -1 EBADF (Bad file descriptor) [pid 5208] close(7) = -1 EBADF (Bad file descriptor) [pid 5208] close(8) = -1 EBADF (Bad file descriptor) [pid 5208] close(9) = -1 EBADF (Bad file descriptor) [pid 5208] close(10) = -1 EBADF (Bad file descriptor) [pid 5208] close(11) = -1 EBADF (Bad file descriptor) [pid 5208] close(12) = -1 EBADF (Bad file descriptor) [pid 5208] close(13) = -1 EBADF (Bad file descriptor) [pid 5208] close(14) = -1 EBADF (Bad file descriptor) [pid 5208] close(15) = -1 EBADF (Bad file descriptor) [ 168.654865][ T5208] read_mapping_page failed! [ 168.659376][ T5208] ERROR: (device loop0): txCommit: [ 168.659376][ T5208] [pid 5208] close(16) = -1 EBADF (Bad file descriptor) [pid 5208] close(17) = -1 EBADF (Bad file descriptor) [pid 5208] close(18) = -1 EBADF (Bad file descriptor) [pid 5208] close(19) = -1 EBADF (Bad file descriptor) [pid 5208] close(20) = -1 EBADF (Bad file descriptor) [pid 5208] close(21) = -1 EBADF (Bad file descriptor) [pid 5208] close(22) = -1 EBADF (Bad file descriptor) [pid 5208] close(23) = -1 EBADF (Bad file descriptor) [pid 5208] close(24) = -1 EBADF (Bad file descriptor) [pid 5208] close(25) = -1 EBADF (Bad file descriptor) [pid 5208] close(26) = -1 EBADF (Bad file descriptor) [pid 5208] close(27) = -1 EBADF (Bad file descriptor) [pid 5208] close(28) = -1 EBADF (Bad file descriptor) [pid 5208] close(29) = -1 EBADF (Bad file descriptor) [pid 5208] exit_group(0) = ? [pid 5208] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=105, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./103", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./103", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./103/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./103/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./103/binderfs") = 0 [ 168.819836][ T1097] [ 168.819836][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 168.819836][ T1097] [ 168.830555][ T1097] [ 168.830555][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 168.830555][ T1097] [ 168.841776][ T114] [ 168.841776][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 168.841776][ T114] [ 168.852502][ T1097] [ 168.852502][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 168.852502][ T1097] [ 168.863088][ T1097] [ 168.863088][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 168.863088][ T1097] [ 168.874124][ T114] [ 168.874124][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 168.874124][ T114] [ 168.884729][ T1097] [ 168.884729][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 168.884729][ T1097] [ 168.895202][ T1097] [ 168.895202][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 168.895202][ T1097] [ 168.906226][ T113] [ 168.906226][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 168.906226][ T113] [ 168.916736][ T5087] [pid 5087] umount2("./103/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./103/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./103/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./103/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./103/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [ 168.916736][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 168.916736][ T5087] [ 168.927457][ T5087] [ 168.927457][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 168.927457][ T5087] [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./103/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./103") = 0 [pid 5087] mkdir("./104", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55559309e650) = 106 ./strace-static-x86_64: Process 5209 attached [pid 5209] set_robust_list(0x55559309e660, 24) = 0 [pid 5209] chdir("./104") = 0 [pid 5209] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5209] setpgid(0, 0) = 0 [pid 5209] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5209] write(3, "1000", 4) = 4 [pid 5209] close(3) = 0 [pid 5209] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5209] memfd_create("syzkaller", 0) = 3 [pid 5209] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5209] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5209] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5209] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5209] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5209] close(3) = 0 [pid 5209] close(4) = 0 [pid 5209] mkdir("./file0", 0777) = 0 [pid 5209] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5209] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5209] chdir("./file0") = 0 [pid 5209] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 169.452634][ T5209] loop0: detected capacity change from 0 to 32768 [ 169.483960][ T5209] [ 169.483960][ T5209] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 169.483960][ T5209] [pid 5209] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5209] close(3) = 0 [pid 5209] close(4) = -1 EBADF (Bad file descriptor) [pid 5209] close(5) = -1 EBADF (Bad file descriptor) [pid 5209] close(6) = -1 EBADF (Bad file descriptor) [pid 5209] close(7) = -1 EBADF (Bad file descriptor) [pid 5209] close(8) = -1 EBADF (Bad file descriptor) [pid 5209] close(9) = -1 EBADF (Bad file descriptor) [pid 5209] close(10) = -1 EBADF (Bad file descriptor) [pid 5209] close(11) = -1 EBADF (Bad file descriptor) [pid 5209] close(12) = -1 EBADF (Bad file descriptor) [pid 5209] close(13) = -1 EBADF (Bad file descriptor) [pid 5209] close(14) = -1 EBADF (Bad file descriptor) [pid 5209] close(15) = -1 EBADF (Bad file descriptor) [ 169.500100][ T5209] read_mapping_page failed! [ 169.505048][ T5209] ERROR: (device loop0): txCommit: [ 169.505048][ T5209] [pid 5209] close(16) = -1 EBADF (Bad file descriptor) [pid 5209] close(17) = -1 EBADF (Bad file descriptor) [pid 5209] close(18) = -1 EBADF (Bad file descriptor) [pid 5209] close(19) = -1 EBADF (Bad file descriptor) [pid 5209] close(20) = -1 EBADF (Bad file descriptor) [pid 5209] close(21) = -1 EBADF (Bad file descriptor) [pid 5209] close(22) = -1 EBADF (Bad file descriptor) [pid 5209] close(23) = -1 EBADF (Bad file descriptor) [pid 5209] close(24) = -1 EBADF (Bad file descriptor) [pid 5209] close(25) = -1 EBADF (Bad file descriptor) [pid 5209] close(26) = -1 EBADF (Bad file descriptor) [pid 5209] close(27) = -1 EBADF (Bad file descriptor) [pid 5209] close(28) = -1 EBADF (Bad file descriptor) [pid 5209] close(29) = -1 EBADF (Bad file descriptor) [pid 5209] exit_group(0) = ? [pid 5209] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=106, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=24 /* 0.24 s */} --- [pid 5087] umount2("./104", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./104", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./104/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./104/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./104/binderfs") = 0 [ 169.668632][ T11] [ 169.668632][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 169.668632][ T11] [ 169.679482][ T11] [ 169.679482][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 169.679482][ T11] [ 169.690612][ T114] [ 169.690612][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 169.690612][ T114] [ 169.701278][ T11] [ 169.701278][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 169.701278][ T11] [ 169.711876][ T11] [ 169.711876][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 169.711876][ T11] [ 169.722935][ T113] [ 169.722935][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 169.722935][ T113] [ 169.733539][ T11] [ 169.733539][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 169.733539][ T11] [ 169.744099][ T11] [ 169.744099][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 169.744099][ T11] [ 169.755013][ T114] [ 169.755013][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 169.755013][ T114] [ 169.765637][ T5087] [pid 5087] umount2("./104/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./104/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./104/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./104/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./104/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./104/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./104") = 0 [pid 5087] mkdir("./105", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 169.765637][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 169.765637][ T5087] [ 169.776340][ T5087] [ 169.776340][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 169.776340][ T5087] [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5210 attached , child_tidptr=0x55559309e650) = 107 [pid 5210] set_robust_list(0x55559309e660, 24) = 0 [pid 5210] chdir("./105") = 0 [pid 5210] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5210] setpgid(0, 0) = 0 [pid 5210] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5210] write(3, "1000", 4) = 4 [pid 5210] close(3) = 0 [pid 5210] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5210] memfd_create("syzkaller", 0) = 3 [pid 5210] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5210] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5210] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5210] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5210] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5210] close(3) = 0 [pid 5210] close(4) = 0 [pid 5210] mkdir("./file0", 0777) = 0 [pid 5210] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5210] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5210] chdir("./file0") = 0 [pid 5210] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5210] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5210] close(3) = 0 [pid 5210] close(4) = -1 EBADF (Bad file descriptor) [pid 5210] close(5) = -1 EBADF (Bad file descriptor) [pid 5210] close(6) = -1 EBADF (Bad file descriptor) [ 170.268434][ T5210] loop0: detected capacity change from 0 to 32768 [ 170.291116][ T5210] [ 170.291116][ T5210] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 170.291116][ T5210] [ 170.306369][ T5210] read_mapping_page failed! [ 170.310901][ T5210] ERROR: (device loop0): txCommit: [ 170.310901][ T5210] [pid 5210] close(7) = -1 EBADF (Bad file descriptor) [pid 5210] close(8) = -1 EBADF (Bad file descriptor) [pid 5210] close(9) = -1 EBADF (Bad file descriptor) [pid 5210] close(10) = -1 EBADF (Bad file descriptor) [pid 5210] close(11) = -1 EBADF (Bad file descriptor) [pid 5210] close(12) = -1 EBADF (Bad file descriptor) [pid 5210] close(13) = -1 EBADF (Bad file descriptor) [pid 5210] close(14) = -1 EBADF (Bad file descriptor) [pid 5210] close(15) = -1 EBADF (Bad file descriptor) [pid 5210] close(16) = -1 EBADF (Bad file descriptor) [pid 5210] close(17) = -1 EBADF (Bad file descriptor) [pid 5210] close(18) = -1 EBADF (Bad file descriptor) [pid 5210] close(19) = -1 EBADF (Bad file descriptor) [pid 5210] close(20) = -1 EBADF (Bad file descriptor) [pid 5210] close(21) = -1 EBADF (Bad file descriptor) [pid 5210] close(22) = -1 EBADF (Bad file descriptor) [pid 5210] close(23) = -1 EBADF (Bad file descriptor) [pid 5210] close(24) = -1 EBADF (Bad file descriptor) [pid 5210] close(25) = -1 EBADF (Bad file descriptor) [pid 5210] close(26) = -1 EBADF (Bad file descriptor) [pid 5210] close(27) = -1 EBADF (Bad file descriptor) [pid 5210] close(28) = -1 EBADF (Bad file descriptor) [pid 5210] close(29) = -1 EBADF (Bad file descriptor) [pid 5210] exit_group(0) = ? [pid 5210] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=107, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=23 /* 0.23 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./105", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./105/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./105/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./105/binderfs") = 0 [ 170.490779][ T1097] [ 170.490779][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 170.490779][ T1097] [ 170.501723][ T1097] [ 170.501723][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 170.501723][ T1097] [ 170.513020][ T113] [ 170.513020][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 170.513020][ T113] [ 170.523859][ T1097] [ 170.523859][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 170.523859][ T1097] [ 170.534341][ T1097] [ 170.534341][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 170.534341][ T1097] [ 170.545322][ T114] [ 170.545322][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 170.545322][ T114] [ 170.555986][ T1097] [ 170.555986][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 170.555986][ T1097] [ 170.566504][ T1097] [ 170.566504][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 170.566504][ T1097] [ 170.577441][ T113] [ 170.577441][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 170.577441][ T113] [ 170.587911][ T5087] [pid 5087] umount2("./105/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./105/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./105/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./105/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./105/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./105/file0") = 0 [ 170.587911][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 170.587911][ T5087] [ 170.598803][ T5087] [ 170.598803][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 170.598803][ T5087] [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./105") = 0 [pid 5087] mkdir("./106", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5211 attached , child_tidptr=0x55559309e650) = 108 [pid 5211] set_robust_list(0x55559309e660, 24) = 0 [pid 5211] chdir("./106") = 0 [pid 5211] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5211] setpgid(0, 0) = 0 [pid 5211] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5211] write(3, "1000", 4) = 4 [pid 5211] close(3) = 0 [pid 5211] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5211] memfd_create("syzkaller", 0) = 3 [pid 5211] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5211] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5211] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5211] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5211] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5211] close(3) = 0 [pid 5211] close(4) = 0 [pid 5211] mkdir("./file0", 0777) = 0 [pid 5211] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5211] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5211] chdir("./file0") = 0 [pid 5211] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 171.090082][ T5211] loop0: detected capacity change from 0 to 32768 [ 171.122701][ T5211] [ 171.122701][ T5211] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 171.122701][ T5211] [pid 5211] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5211] close(3) = 0 [pid 5211] close(4) = -1 EBADF (Bad file descriptor) [pid 5211] close(5) = -1 EBADF (Bad file descriptor) [pid 5211] close(6) = -1 EBADF (Bad file descriptor) [pid 5211] close(7) = -1 EBADF (Bad file descriptor) [pid 5211] close(8) = -1 EBADF (Bad file descriptor) [pid 5211] close(9) = -1 EBADF (Bad file descriptor) [pid 5211] close(10) = -1 EBADF (Bad file descriptor) [pid 5211] close(11) = -1 EBADF (Bad file descriptor) [pid 5211] close(12) = -1 EBADF (Bad file descriptor) [pid 5211] close(13) = -1 EBADF (Bad file descriptor) [pid 5211] close(14) = -1 EBADF (Bad file descriptor) [pid 5211] close(15) = -1 EBADF (Bad file descriptor) [pid 5211] close(16) = -1 EBADF (Bad file descriptor) [ 171.142975][ T5211] read_mapping_page failed! [ 171.147500][ T5211] ERROR: (device loop0): txCommit: [ 171.147500][ T5211] [pid 5211] close(17) = -1 EBADF (Bad file descriptor) [pid 5211] close(18) = -1 EBADF (Bad file descriptor) [pid 5211] close(19) = -1 EBADF (Bad file descriptor) [pid 5211] close(20) = -1 EBADF (Bad file descriptor) [pid 5211] close(21) = -1 EBADF (Bad file descriptor) [pid 5211] close(22) = -1 EBADF (Bad file descriptor) [pid 5211] close(23) = -1 EBADF (Bad file descriptor) [pid 5211] close(24) = -1 EBADF (Bad file descriptor) [pid 5211] close(25) = -1 EBADF (Bad file descriptor) [pid 5211] close(26) = -1 EBADF (Bad file descriptor) [pid 5211] close(27) = -1 EBADF (Bad file descriptor) [pid 5211] close(28) = -1 EBADF (Bad file descriptor) [pid 5211] close(29) = -1 EBADF (Bad file descriptor) [pid 5211] exit_group(0) = ? [pid 5211] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=108, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=22 /* 0.22 s */} --- [pid 5087] umount2("./106", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./106/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./106/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./106/binderfs") = 0 [ 171.327154][ T1043] [ 171.327154][ T1043] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 171.327154][ T1043] [ 171.337719][ T1043] [ 171.337719][ T1043] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 171.337719][ T1043] [ 171.349015][ T114] [ 171.349015][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 171.349015][ T114] [ 171.361235][ T1043] [ 171.361235][ T1043] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 171.361235][ T1043] [ 171.371770][ T1043] [ 171.371770][ T1043] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 171.371770][ T1043] [ 171.382796][ T114] [ 171.382796][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 171.382796][ T114] [ 171.393389][ T1043] [ 171.393389][ T1043] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 171.393389][ T1043] [ 171.403903][ T1043] [ 171.403903][ T1043] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 171.403903][ T1043] [ 171.414779][ T113] [ 171.414779][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 171.414779][ T113] [ 171.425372][ T5087] [pid 5087] umount2("./106/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./106/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./106/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./106/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./106/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [ 171.425372][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 171.425372][ T5087] [ 171.436746][ T5087] [ 171.436746][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 171.436746][ T5087] [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./106/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./106") = 0 [pid 5087] mkdir("./107", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5212 attached , child_tidptr=0x55559309e650) = 109 [pid 5212] set_robust_list(0x55559309e660, 24) = 0 [pid 5212] chdir("./107") = 0 [pid 5212] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5212] setpgid(0, 0) = 0 [pid 5212] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5212] write(3, "1000", 4) = 4 [pid 5212] close(3) = 0 [pid 5212] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5212] memfd_create("syzkaller", 0) = 3 [pid 5212] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5212] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5212] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5212] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5212] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5212] close(3) = 0 [pid 5212] close(4) = 0 [pid 5212] mkdir("./file0", 0777) = 0 [pid 5212] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5212] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5212] chdir("./file0") = 0 [pid 5212] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 171.974667][ T5212] loop0: detected capacity change from 0 to 32768 [ 172.013424][ T5212] [ 172.013424][ T5212] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 172.013424][ T5212] [pid 5212] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5212] close(3) = 0 [pid 5212] close(4) = -1 EBADF (Bad file descriptor) [pid 5212] close(5) = -1 EBADF (Bad file descriptor) [pid 5212] close(6) = -1 EBADF (Bad file descriptor) [pid 5212] close(7) = -1 EBADF (Bad file descriptor) [pid 5212] close(8) = -1 EBADF (Bad file descriptor) [pid 5212] close(9) = -1 EBADF (Bad file descriptor) [pid 5212] close(10) = -1 EBADF (Bad file descriptor) [pid 5212] close(11) = -1 EBADF (Bad file descriptor) [pid 5212] close(12) = -1 EBADF (Bad file descriptor) [pid 5212] close(13) = -1 EBADF (Bad file descriptor) [pid 5212] close(14) = -1 EBADF (Bad file descriptor) [pid 5212] close(15) = -1 EBADF (Bad file descriptor) [pid 5212] close(16) = -1 EBADF (Bad file descriptor) [pid 5212] close(17) = -1 EBADF (Bad file descriptor) [pid 5212] close(18) = -1 EBADF (Bad file descriptor) [pid 5212] close(19) = -1 EBADF (Bad file descriptor) [ 172.049190][ T5212] read_mapping_page failed! [ 172.053856][ T5212] ERROR: (device loop0): txCommit: [ 172.053856][ T5212] [pid 5212] close(20) = -1 EBADF (Bad file descriptor) [pid 5212] close(21) = -1 EBADF (Bad file descriptor) [pid 5212] close(22) = -1 EBADF (Bad file descriptor) [pid 5212] close(23) = -1 EBADF (Bad file descriptor) [pid 5212] close(24) = -1 EBADF (Bad file descriptor) [pid 5212] close(25) = -1 EBADF (Bad file descriptor) [pid 5212] close(26) = -1 EBADF (Bad file descriptor) [pid 5212] close(27) = -1 EBADF (Bad file descriptor) [pid 5212] close(28) = -1 EBADF (Bad file descriptor) [pid 5212] close(29) = -1 EBADF (Bad file descriptor) [pid 5212] exit_group(0) = ? [pid 5212] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=109, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=20 /* 0.20 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./107", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./107/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./107/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./107/binderfs") = 0 [ 172.204634][ T1043] [ 172.204634][ T1043] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 172.204634][ T1043] [ 172.215320][ T1043] [ 172.215320][ T1043] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 172.215320][ T1043] [ 172.226483][ T114] [ 172.226483][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 172.226483][ T114] [ 172.237134][ T1043] [ 172.237134][ T1043] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 172.237134][ T1043] [ 172.247640][ T1043] [ 172.247640][ T1043] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 172.247640][ T1043] [ 172.258673][ T114] [ 172.258673][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 172.258673][ T114] [ 172.270493][ T1043] [ 172.270493][ T1043] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 172.270493][ T1043] [ 172.281009][ T1043] [ 172.281009][ T1043] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 172.281009][ T1043] [ 172.291917][ T113] [ 172.291917][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 172.291917][ T113] [ 172.302510][ T5087] [pid 5087] umount2("./107/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./107/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./107/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./107/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./107/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [ 172.302510][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 172.302510][ T5087] [ 172.313509][ T5087] [ 172.313509][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 172.313509][ T5087] [pid 5087] close(4) = 0 [pid 5087] rmdir("./107/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./107") = 0 [pid 5087] mkdir("./108", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5213 attached , child_tidptr=0x55559309e650) = 110 [pid 5213] set_robust_list(0x55559309e660, 24) = 0 [pid 5213] chdir("./108") = 0 [pid 5213] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5213] setpgid(0, 0) = 0 [pid 5213] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5213] write(3, "1000", 4) = 4 [pid 5213] close(3) = 0 [pid 5213] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5213] memfd_create("syzkaller", 0) = 3 [pid 5213] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5213] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5213] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5213] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5213] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5213] close(3) = 0 [pid 5213] close(4) = 0 [pid 5213] mkdir("./file0", 0777) = 0 [ 172.833647][ T5213] loop0: detected capacity change from 0 to 32768 [pid 5213] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5213] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5213] chdir("./file0") = 0 [pid 5213] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5213] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5213] close(3) = 0 [pid 5213] close(4) = -1 EBADF (Bad file descriptor) [pid 5213] close(5) = -1 EBADF (Bad file descriptor) [pid 5213] close(6) = -1 EBADF (Bad file descriptor) [pid 5213] close(7) = -1 EBADF (Bad file descriptor) [pid 5213] close(8) = -1 EBADF (Bad file descriptor) [pid 5213] close(9) = -1 EBADF (Bad file descriptor) [pid 5213] close(10) = -1 EBADF (Bad file descriptor) [pid 5213] close(11) = -1 EBADF (Bad file descriptor) [pid 5213] close(12) = -1 EBADF (Bad file descriptor) [pid 5213] close(13) = -1 EBADF (Bad file descriptor) [ 172.880670][ T5213] [ 172.880670][ T5213] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 172.880670][ T5213] [ 172.907050][ T5213] read_mapping_page failed! [ 172.911569][ T5213] ERROR: (device loop0): txCommit: [ 172.911569][ T5213] [pid 5213] close(14) = -1 EBADF (Bad file descriptor) [pid 5213] close(15) = -1 EBADF (Bad file descriptor) [pid 5213] close(16) = -1 EBADF (Bad file descriptor) [pid 5213] close(17) = -1 EBADF (Bad file descriptor) [pid 5213] close(18) = -1 EBADF (Bad file descriptor) [pid 5213] close(19) = -1 EBADF (Bad file descriptor) [pid 5213] close(20) = -1 EBADF (Bad file descriptor) [pid 5213] close(21) = -1 EBADF (Bad file descriptor) [pid 5213] close(22) = -1 EBADF (Bad file descriptor) [pid 5213] close(23) = -1 EBADF (Bad file descriptor) [pid 5213] close(24) = -1 EBADF (Bad file descriptor) [pid 5213] close(25) = -1 EBADF (Bad file descriptor) [pid 5213] close(26) = -1 EBADF (Bad file descriptor) [pid 5213] close(27) = -1 EBADF (Bad file descriptor) [pid 5213] close(28) = -1 EBADF (Bad file descriptor) [pid 5213] close(29) = -1 EBADF (Bad file descriptor) [pid 5213] exit_group(0) = ? [pid 5213] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=110, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./108", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./108/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./108/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./108/binderfs") = 0 [ 173.073108][ T11] [ 173.073108][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 173.073108][ T11] [ 173.083881][ T11] [ 173.083881][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 173.083881][ T11] [ 173.095316][ T114] [ 173.095316][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 173.095316][ T114] [ 173.106001][ T11] [ 173.106001][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 173.106001][ T11] [ 173.117146][ T11] [ 173.117146][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 173.117146][ T11] [ 173.128108][ T113] [ 173.128108][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 173.128108][ T113] [ 173.138653][ T11] [ 173.138653][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 173.138653][ T11] [ 173.149142][ T11] [ 173.149142][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 173.149142][ T11] [ 173.160173][ T114] [ 173.160173][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 173.160173][ T114] [pid 5087] umount2("./108/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./108/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./108/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./108/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./108/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [ 173.171999][ T5087] [ 173.171999][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 173.171999][ T5087] [ 173.182786][ T5087] [ 173.182786][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 173.182786][ T5087] [pid 5087] close(4) = 0 [pid 5087] rmdir("./108/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./108") = 0 [pid 5087] mkdir("./109", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5214 attached , child_tidptr=0x55559309e650) = 111 [pid 5214] set_robust_list(0x55559309e660, 24) = 0 [pid 5214] chdir("./109") = 0 [pid 5214] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5214] setpgid(0, 0) = 0 [pid 5214] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5214] write(3, "1000", 4) = 4 [pid 5214] close(3) = 0 [pid 5214] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5214] memfd_create("syzkaller", 0) = 3 [pid 5214] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5214] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5214] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5214] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5214] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5214] close(3) = 0 [pid 5214] close(4) = 0 [pid 5214] mkdir("./file0", 0777) = 0 [ 173.670916][ T5214] loop0: detected capacity change from 0 to 32768 [ 173.710892][ T5214] [ 173.710892][ T5214] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 173.710892][ T5214] [pid 5214] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5214] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5214] chdir("./file0") = 0 [pid 5214] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5214] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5214] close(3) = 0 [pid 5214] close(4) = -1 EBADF (Bad file descriptor) [pid 5214] close(5) = -1 EBADF (Bad file descriptor) [pid 5214] close(6) = -1 EBADF (Bad file descriptor) [pid 5214] close(7) = -1 EBADF (Bad file descriptor) [pid 5214] close(8) = -1 EBADF (Bad file descriptor) [pid 5214] close(9) = -1 EBADF (Bad file descriptor) [pid 5214] close(10) = -1 EBADF (Bad file descriptor) [pid 5214] close(11) = -1 EBADF (Bad file descriptor) [pid 5214] close(12) = -1 EBADF (Bad file descriptor) [pid 5214] close(13) = -1 EBADF (Bad file descriptor) [pid 5214] close(14) = -1 EBADF (Bad file descriptor) [pid 5214] close(15) = -1 EBADF (Bad file descriptor) [pid 5214] close(16) = -1 EBADF (Bad file descriptor) [pid 5214] close(17) = -1 EBADF (Bad file descriptor) [pid 5214] close(18) = -1 EBADF (Bad file descriptor) [pid 5214] close(19) = -1 EBADF (Bad file descriptor) [pid 5214] close(20) = -1 EBADF (Bad file descriptor) [ 173.730618][ T5214] read_mapping_page failed! [ 173.736705][ T5214] ERROR: (device loop0): txCommit: [ 173.736705][ T5214] [pid 5214] close(21) = -1 EBADF (Bad file descriptor) [pid 5214] close(22) = -1 EBADF (Bad file descriptor) [pid 5214] close(23) = -1 EBADF (Bad file descriptor) [pid 5214] close(24) = -1 EBADF (Bad file descriptor) [pid 5214] close(25) = -1 EBADF (Bad file descriptor) [pid 5214] close(26) = -1 EBADF (Bad file descriptor) [pid 5214] close(27) = -1 EBADF (Bad file descriptor) [pid 5214] close(28) = -1 EBADF (Bad file descriptor) [pid 5214] close(29) = -1 EBADF (Bad file descriptor) [pid 5214] exit_group(0) = ? [pid 5214] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=111, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./109", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./109/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./109/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./109/binderfs") = 0 [ 173.895255][ T1097] [ 173.895255][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 173.895255][ T1097] [ 173.905746][ T1097] [ 173.905746][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 173.905746][ T1097] [ 173.916845][ T113] [ 173.916845][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 173.916845][ T113] [ 173.927443][ T1097] [ 173.927443][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 173.927443][ T1097] [ 173.937976][ T1097] [ 173.937976][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 173.937976][ T1097] [ 173.948906][ T114] [ 173.948906][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 173.948906][ T114] [ 173.959469][ T1097] [ 173.959469][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 173.959469][ T1097] [ 173.970042][ T1097] [ 173.970042][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 173.970042][ T1097] [ 173.982115][ T114] [ 173.982115][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 173.982115][ T114] [pid 5087] umount2("./109/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./109/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./109/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./109/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./109/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 173.995846][ T5087] [ 173.995846][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 173.995846][ T5087] [ 174.006668][ T5087] [ 174.006668][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 174.006668][ T5087] [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./109/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./109") = 0 [pid 5087] mkdir("./110", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55559309e650) = 112 ./strace-static-x86_64: Process 5215 attached [pid 5215] set_robust_list(0x55559309e660, 24) = 0 [pid 5215] chdir("./110") = 0 [pid 5215] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5215] setpgid(0, 0) = 0 [pid 5215] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5215] write(3, "1000", 4) = 4 [pid 5215] close(3) = 0 [pid 5215] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5215] memfd_create("syzkaller", 0) = 3 [pid 5215] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5215] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5215] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5215] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5215] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5215] close(3) = 0 [pid 5215] close(4) = 0 [pid 5215] mkdir("./file0", 0777) = 0 [ 174.541900][ T5215] loop0: detected capacity change from 0 to 32768 [pid 5215] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5215] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5215] chdir("./file0") = 0 [pid 5215] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5215] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5215] close(3) = 0 [pid 5215] close(4) = -1 EBADF (Bad file descriptor) [pid 5215] close(5) = -1 EBADF (Bad file descriptor) [pid 5215] close(6) = -1 EBADF (Bad file descriptor) [pid 5215] close(7) = -1 EBADF (Bad file descriptor) [pid 5215] close(8) = -1 EBADF (Bad file descriptor) [pid 5215] close(9) = -1 EBADF (Bad file descriptor) [pid 5215] close(10) = -1 EBADF (Bad file descriptor) [pid 5215] close(11) = -1 EBADF (Bad file descriptor) [pid 5215] close(12) = -1 EBADF (Bad file descriptor) [pid 5215] close(13) = -1 EBADF (Bad file descriptor) [pid 5215] close(14) = -1 EBADF (Bad file descriptor) [pid 5215] close(15) = -1 EBADF (Bad file descriptor) [pid 5215] close(16) = -1 EBADF (Bad file descriptor) [pid 5215] close(17) = -1 EBADF (Bad file descriptor) [pid 5215] close(18) = -1 EBADF (Bad file descriptor) [pid 5215] close(19) = -1 EBADF (Bad file descriptor) [pid 5215] close(20) = -1 EBADF (Bad file descriptor) [pid 5215] close(21) = -1 EBADF (Bad file descriptor) [pid 5215] close(22) = -1 EBADF (Bad file descriptor) [pid 5215] close(23) = -1 EBADF (Bad file descriptor) [pid 5215] close(24) = -1 EBADF (Bad file descriptor) [ 174.595517][ T5215] [ 174.595517][ T5215] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 174.595517][ T5215] [ 174.622840][ T5215] read_mapping_page failed! [ 174.627370][ T5215] ERROR: (device loop0): txCommit: [ 174.627370][ T5215] [pid 5215] close(25) = -1 EBADF (Bad file descriptor) [pid 5215] close(26) = -1 EBADF (Bad file descriptor) [pid 5215] close(27) = -1 EBADF (Bad file descriptor) [pid 5215] close(28) = -1 EBADF (Bad file descriptor) [pid 5215] close(29) = -1 EBADF (Bad file descriptor) [pid 5215] exit_group(0) = ? [pid 5215] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=112, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=24 /* 0.24 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./110", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./110/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./110/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./110/binderfs") = 0 [ 174.764439][ T1043] [ 174.764439][ T1043] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 174.764439][ T1043] [ 174.774968][ T1043] [ 174.774968][ T1043] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 174.774968][ T1043] [ 174.786214][ T113] [ 174.786214][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 174.786214][ T113] [ 174.796851][ T1043] [ 174.796851][ T1043] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 174.796851][ T1043] [ 174.807524][ T1043] [ 174.807524][ T1043] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 174.807524][ T1043] [ 174.819182][ T113] [ 174.819182][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 174.819182][ T113] [ 174.830226][ T1043] [ 174.830226][ T1043] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 174.830226][ T1043] [ 174.840754][ T1043] [ 174.840754][ T1043] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 174.840754][ T1043] [ 174.851476][ T5087] [ 174.851476][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 174.851476][ T5087] [ 174.862742][ T5087] [pid 5087] umount2("./110/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./110/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./110/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./110/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./110/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./110/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [ 174.862742][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 174.862742][ T5087] [ 174.873307][ T114] [ 174.873307][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 174.873307][ T114] [pid 5087] rmdir("./110") = 0 [pid 5087] mkdir("./111", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5216 attached , child_tidptr=0x55559309e650) = 113 [pid 5216] set_robust_list(0x55559309e660, 24) = 0 [pid 5216] chdir("./111") = 0 [pid 5216] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5216] setpgid(0, 0) = 0 [pid 5216] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5216] write(3, "1000", 4) = 4 [pid 5216] close(3) = 0 [pid 5216] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5216] memfd_create("syzkaller", 0) = 3 [pid 5216] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5216] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5216] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5216] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5216] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5216] close(3) = 0 [pid 5216] close(4) = 0 [pid 5216] mkdir("./file0", 0777) = 0 [pid 5216] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5216] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5216] chdir("./file0") = 0 [pid 5216] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 175.379653][ T5216] loop0: detected capacity change from 0 to 32768 [ 175.414733][ T5216] [ 175.414733][ T5216] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 175.414733][ T5216] [pid 5216] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5216] close(3) = 0 [pid 5216] close(4) = -1 EBADF (Bad file descriptor) [pid 5216] close(5) = -1 EBADF (Bad file descriptor) [pid 5216] close(6) = -1 EBADF (Bad file descriptor) [pid 5216] close(7) = -1 EBADF (Bad file descriptor) [pid 5216] close(8) = -1 EBADF (Bad file descriptor) [pid 5216] close(9) = -1 EBADF (Bad file descriptor) [pid 5216] close(10) = -1 EBADF (Bad file descriptor) [pid 5216] close(11) = -1 EBADF (Bad file descriptor) [pid 5216] close(12) = -1 EBADF (Bad file descriptor) [ 175.460941][ T5216] read_mapping_page failed! [ 175.465573][ T5216] ERROR: (device loop0): txCommit: [ 175.465573][ T5216] [pid 5216] close(13) = -1 EBADF (Bad file descriptor) [pid 5216] close(14) = -1 EBADF (Bad file descriptor) [pid 5216] close(15) = -1 EBADF (Bad file descriptor) [pid 5216] close(16) = -1 EBADF (Bad file descriptor) [pid 5216] close(17) = -1 EBADF (Bad file descriptor) [pid 5216] close(18) = -1 EBADF (Bad file descriptor) [pid 5216] close(19) = -1 EBADF (Bad file descriptor) [pid 5216] close(20) = -1 EBADF (Bad file descriptor) [pid 5216] close(21) = -1 EBADF (Bad file descriptor) [pid 5216] close(22) = -1 EBADF (Bad file descriptor) [pid 5216] close(23) = -1 EBADF (Bad file descriptor) [pid 5216] close(24) = -1 EBADF (Bad file descriptor) [pid 5216] close(25) = -1 EBADF (Bad file descriptor) [pid 5216] close(26) = -1 EBADF (Bad file descriptor) [pid 5216] close(27) = -1 EBADF (Bad file descriptor) [pid 5216] close(28) = -1 EBADF (Bad file descriptor) [pid 5216] close(29) = -1 EBADF (Bad file descriptor) [pid 5216] exit_group(0) = ? [pid 5216] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=113, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=22 /* 0.22 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./111", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./111/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./111/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./111/binderfs") = 0 [ 175.663013][ T11] [ 175.663013][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 175.663013][ T11] [ 175.673578][ T11] [ 175.673578][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 175.673578][ T11] [ 175.685464][ T113] [ 175.685464][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 175.685464][ T113] [ 175.696109][ T11] [ 175.696109][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 175.696109][ T11] [ 175.706592][ T11] [ 175.706592][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 175.706592][ T11] [ 175.717594][ T114] [ 175.717594][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 175.717594][ T114] [ 175.728318][ T11] [ 175.728318][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 175.728318][ T11] [ 175.738801][ T11] [ 175.738801][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 175.738801][ T11] [ 175.749765][ T114] [ 175.749765][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 175.749765][ T114] [ 175.760320][ T5087] [pid 5087] umount2("./111/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./111/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./111/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./111/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./111/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [ 175.760320][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 175.760320][ T5087] [ 175.771072][ T5087] [ 175.771072][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 175.771072][ T5087] [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./111/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./111") = 0 [pid 5087] mkdir("./112", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5217 attached [pid 5217] set_robust_list(0x55559309e660, 24 [pid 5087] <... clone resumed>, child_tidptr=0x55559309e650) = 114 [pid 5217] <... set_robust_list resumed>) = 0 [pid 5217] chdir("./112") = 0 [pid 5217] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5217] setpgid(0, 0) = 0 [pid 5217] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5217] write(3, "1000", 4) = 4 [pid 5217] close(3) = 0 [pid 5217] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5217] memfd_create("syzkaller", 0) = 3 [pid 5217] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5217] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5217] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5217] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5217] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5217] close(3) = 0 [pid 5217] close(4) = 0 [pid 5217] mkdir("./file0", 0777) = 0 [ 176.305765][ T5217] loop0: detected capacity change from 0 to 32768 [pid 5217] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5217] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5217] chdir("./file0") = 0 [pid 5217] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5217] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5217] close(3) = 0 [pid 5217] close(4) = -1 EBADF (Bad file descriptor) [pid 5217] close(5) = -1 EBADF (Bad file descriptor) [pid 5217] close(6) = -1 EBADF (Bad file descriptor) [pid 5217] close(7) = -1 EBADF (Bad file descriptor) [pid 5217] close(8) = -1 EBADF (Bad file descriptor) [ 176.351894][ T5217] [ 176.351894][ T5217] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 176.351894][ T5217] [ 176.386727][ T5217] read_mapping_page failed! [ 176.391266][ T5217] ERROR: (device loop0): txCommit: [ 176.391266][ T5217] [pid 5217] close(9) = -1 EBADF (Bad file descriptor) [pid 5217] close(10) = -1 EBADF (Bad file descriptor) [pid 5217] close(11) = -1 EBADF (Bad file descriptor) [pid 5217] close(12) = -1 EBADF (Bad file descriptor) [pid 5217] close(13) = -1 EBADF (Bad file descriptor) [pid 5217] close(14) = -1 EBADF (Bad file descriptor) [pid 5217] close(15) = -1 EBADF (Bad file descriptor) [pid 5217] close(16) = -1 EBADF (Bad file descriptor) [pid 5217] close(17) = -1 EBADF (Bad file descriptor) [pid 5217] close(18) = -1 EBADF (Bad file descriptor) [pid 5217] close(19) = -1 EBADF (Bad file descriptor) [pid 5217] close(20) = -1 EBADF (Bad file descriptor) [pid 5217] close(21) = -1 EBADF (Bad file descriptor) [pid 5217] close(22) = -1 EBADF (Bad file descriptor) [pid 5217] close(23) = -1 EBADF (Bad file descriptor) [pid 5217] close(24) = -1 EBADF (Bad file descriptor) [pid 5217] close(25) = -1 EBADF (Bad file descriptor) [pid 5217] close(26) = -1 EBADF (Bad file descriptor) [pid 5217] close(27) = -1 EBADF (Bad file descriptor) [pid 5217] close(28) = -1 EBADF (Bad file descriptor) [pid 5217] close(29) = -1 EBADF (Bad file descriptor) [pid 5217] exit_group(0) = ? [pid 5217] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=114, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./112", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./112/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./112/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./112/binderfs") = 0 [ 176.575474][ T1097] [ 176.575474][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 176.575474][ T1097] [ 176.586392][ T1097] [ 176.586392][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 176.586392][ T1097] [ 176.597573][ T113] [ 176.597573][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 176.597573][ T113] [ 176.608480][ T1097] [ 176.608480][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 176.608480][ T1097] [ 176.619140][ T1097] [ 176.619140][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 176.619140][ T1097] [ 176.630232][ T114] [ 176.630232][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 176.630232][ T114] [ 176.640814][ T1097] [ 176.640814][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 176.640814][ T1097] [ 176.651308][ T1097] [ 176.651308][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 176.651308][ T1097] [ 176.662233][ T5087] [ 176.662233][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 176.662233][ T5087] [ 176.673555][ T113] [pid 5087] umount2("./112/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./112/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./112/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./112/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./112/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [ 176.673555][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 176.673555][ T113] [ 176.684166][ T5087] [ 176.684166][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 176.684166][ T5087] [pid 5087] rmdir("./112/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./112") = 0 [pid 5087] mkdir("./113", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55559309e650) = 115 ./strace-static-x86_64: Process 5218 attached [pid 5218] set_robust_list(0x55559309e660, 24) = 0 [pid 5218] chdir("./113") = 0 [pid 5218] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5218] setpgid(0, 0) = 0 [pid 5218] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5218] write(3, "1000", 4) = 4 [pid 5218] close(3) = 0 [pid 5218] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5218] memfd_create("syzkaller", 0) = 3 [pid 5218] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5218] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5218] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5218] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5218] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5218] close(3) = 0 [pid 5218] close(4) = 0 [pid 5218] mkdir("./file0", 0777) = 0 [pid 5218] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5218] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5218] chdir("./file0") = 0 [pid 5218] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 177.220655][ T5218] loop0: detected capacity change from 0 to 32768 [ 177.258506][ T5218] [ 177.258506][ T5218] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 177.258506][ T5218] [pid 5218] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5218] close(3) = 0 [pid 5218] close(4) = -1 EBADF (Bad file descriptor) [pid 5218] close(5) = -1 EBADF (Bad file descriptor) [pid 5218] close(6) = -1 EBADF (Bad file descriptor) [pid 5218] close(7) = -1 EBADF (Bad file descriptor) [pid 5218] close(8) = -1 EBADF (Bad file descriptor) [pid 5218] close(9) = -1 EBADF (Bad file descriptor) [pid 5218] close(10) = -1 EBADF (Bad file descriptor) [pid 5218] close(11) = -1 EBADF (Bad file descriptor) [pid 5218] close(12) = -1 EBADF (Bad file descriptor) [pid 5218] close(13) = -1 EBADF (Bad file descriptor) [pid 5218] close(14) = -1 EBADF (Bad file descriptor) [pid 5218] close(15) = -1 EBADF (Bad file descriptor) [pid 5218] close(16) = -1 EBADF (Bad file descriptor) [ 177.285548][ T5218] read_mapping_page failed! [ 177.290089][ T5218] ERROR: (device loop0): txCommit: [ 177.290089][ T5218] [pid 5218] close(17) = -1 EBADF (Bad file descriptor) [pid 5218] close(18) = -1 EBADF (Bad file descriptor) [pid 5218] close(19) = -1 EBADF (Bad file descriptor) [pid 5218] close(20) = -1 EBADF (Bad file descriptor) [pid 5218] close(21) = -1 EBADF (Bad file descriptor) [pid 5218] close(22) = -1 EBADF (Bad file descriptor) [pid 5218] close(23) = -1 EBADF (Bad file descriptor) [pid 5218] close(24) = -1 EBADF (Bad file descriptor) [pid 5218] close(25) = -1 EBADF (Bad file descriptor) [pid 5218] close(26) = -1 EBADF (Bad file descriptor) [pid 5218] close(27) = -1 EBADF (Bad file descriptor) [pid 5218] close(28) = -1 EBADF (Bad file descriptor) [pid 5218] close(29) = -1 EBADF (Bad file descriptor) [pid 5218] exit_group(0) = ? [pid 5218] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=115, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./113", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./113/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./113/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./113/binderfs") = 0 [ 177.440985][ T1097] [ 177.440985][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 177.440985][ T1097] [ 177.451560][ T1097] [ 177.451560][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 177.451560][ T1097] [ 177.462881][ T113] [ 177.462881][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 177.462881][ T113] [ 177.473585][ T1097] [ 177.473585][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 177.473585][ T1097] [ 177.484320][ T1097] [ 177.484320][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 177.484320][ T1097] [ 177.495219][ T114] [ 177.495219][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 177.495219][ T114] [ 177.505775][ T1097] [ 177.505775][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 177.505775][ T1097] [ 177.516271][ T1097] [ 177.516271][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 177.516271][ T1097] [ 177.527197][ T114] [ 177.527197][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 177.527197][ T114] [ 177.537830][ T5087] [pid 5087] umount2("./113/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./113/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./113/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./113/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./113/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./113/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [ 177.537830][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 177.537830][ T5087] [ 177.548810][ T5087] [ 177.548810][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 177.548810][ T5087] [pid 5087] close(3) = 0 [pid 5087] rmdir("./113") = 0 [pid 5087] mkdir("./114", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55559309e650) = 116 ./strace-static-x86_64: Process 5219 attached [pid 5219] set_robust_list(0x55559309e660, 24) = 0 [pid 5219] chdir("./114") = 0 [pid 5219] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5219] setpgid(0, 0) = 0 [pid 5219] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5219] write(3, "1000", 4) = 4 [pid 5219] close(3) = 0 [pid 5219] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5219] memfd_create("syzkaller", 0) = 3 [pid 5219] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5219] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5219] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5219] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5219] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5219] close(3) = 0 [pid 5219] close(4) = 0 [pid 5219] mkdir("./file0", 0777) = 0 [pid 5219] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5219] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5219] chdir("./file0") = 0 [pid 5219] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 178.055809][ T5219] loop0: detected capacity change from 0 to 32768 [ 178.093514][ T5219] [ 178.093514][ T5219] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 178.093514][ T5219] [pid 5219] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5219] close(3) = 0 [pid 5219] close(4) = -1 EBADF (Bad file descriptor) [pid 5219] close(5) = -1 EBADF (Bad file descriptor) [pid 5219] close(6) = -1 EBADF (Bad file descriptor) [pid 5219] close(7) = -1 EBADF (Bad file descriptor) [pid 5219] close(8) = -1 EBADF (Bad file descriptor) [pid 5219] close(9) = -1 EBADF (Bad file descriptor) [pid 5219] close(10) = -1 EBADF (Bad file descriptor) [pid 5219] close(11) = -1 EBADF (Bad file descriptor) [ 178.113975][ T5219] read_mapping_page failed! [ 178.118754][ T5219] ERROR: (device loop0): txCommit: [ 178.118754][ T5219] [pid 5219] close(12) = -1 EBADF (Bad file descriptor) [pid 5219] close(13) = -1 EBADF (Bad file descriptor) [pid 5219] close(14) = -1 EBADF (Bad file descriptor) [pid 5219] close(15) = -1 EBADF (Bad file descriptor) [pid 5219] close(16) = -1 EBADF (Bad file descriptor) [pid 5219] close(17) = -1 EBADF (Bad file descriptor) [pid 5219] close(18) = -1 EBADF (Bad file descriptor) [pid 5219] close(19) = -1 EBADF (Bad file descriptor) [pid 5219] close(20) = -1 EBADF (Bad file descriptor) [pid 5219] close(21) = -1 EBADF (Bad file descriptor) [pid 5219] close(22) = -1 EBADF (Bad file descriptor) [pid 5219] close(23) = -1 EBADF (Bad file descriptor) [pid 5219] close(24) = -1 EBADF (Bad file descriptor) [pid 5219] close(25) = -1 EBADF (Bad file descriptor) [pid 5219] close(26) = -1 EBADF (Bad file descriptor) [pid 5219] close(27) = -1 EBADF (Bad file descriptor) [pid 5219] close(28) = -1 EBADF (Bad file descriptor) [pid 5219] close(29) = -1 EBADF (Bad file descriptor) [pid 5219] exit_group(0) = ? [pid 5219] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=116, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=22 /* 0.22 s */} --- [pid 5087] umount2("./114", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./114/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./114/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./114/binderfs") = 0 [ 178.307986][ T1097] [ 178.307986][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 178.307986][ T1097] [ 178.318838][ T1097] [ 178.318838][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 178.318838][ T1097] [ 178.331277][ T114] [ 178.331277][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 178.331277][ T114] [ 178.341913][ T1097] [ 178.341913][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 178.341913][ T1097] [ 178.352405][ T1097] [ 178.352405][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 178.352405][ T1097] [ 178.364551][ T114] [ 178.364551][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 178.364551][ T114] [ 178.375287][ T1097] [ 178.375287][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 178.375287][ T1097] [ 178.385777][ T1097] [ 178.385777][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 178.385777][ T1097] [ 178.396862][ T113] [ 178.396862][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 178.396862][ T113] [pid 5087] umount2("./114/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./114/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./114/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./114/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./114/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 178.408109][ T5087] [ 178.408109][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 178.408109][ T5087] [ 178.418965][ T5087] [ 178.418965][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 178.418965][ T5087] [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./114/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./114") = 0 [pid 5087] mkdir("./115", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5220 attached , child_tidptr=0x55559309e650) = 117 [pid 5220] set_robust_list(0x55559309e660, 24) = 0 [pid 5220] chdir("./115") = 0 [pid 5220] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5220] setpgid(0, 0) = 0 [pid 5220] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5220] write(3, "1000", 4) = 4 [pid 5220] close(3) = 0 [pid 5220] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5220] memfd_create("syzkaller", 0) = 3 [pid 5220] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5220] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5220] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5220] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5220] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5220] close(3) = 0 [pid 5220] close(4) = 0 [pid 5220] mkdir("./file0", 0777) = 0 [ 178.964756][ T5220] loop0: detected capacity change from 0 to 32768 [pid 5220] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5220] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5220] chdir("./file0") = 0 [pid 5220] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5220] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5220] close(3) = 0 [pid 5220] close(4) = -1 EBADF (Bad file descriptor) [pid 5220] close(5) = -1 EBADF (Bad file descriptor) [pid 5220] close(6) = -1 EBADF (Bad file descriptor) [pid 5220] close(7) = -1 EBADF (Bad file descriptor) [pid 5220] close(8) = -1 EBADF (Bad file descriptor) [pid 5220] close(9) = -1 EBADF (Bad file descriptor) [pid 5220] close(10) = -1 EBADF (Bad file descriptor) [pid 5220] close(11) = -1 EBADF (Bad file descriptor) [pid 5220] close(12) = -1 EBADF (Bad file descriptor) [pid 5220] close(13) = -1 EBADF (Bad file descriptor) [pid 5220] close(14) = -1 EBADF (Bad file descriptor) [ 179.008051][ T5220] [ 179.008051][ T5220] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.008051][ T5220] [ 179.025606][ T5220] read_mapping_page failed! [ 179.030183][ T5220] ERROR: (device loop0): txCommit: [ 179.030183][ T5220] [pid 5220] close(15) = -1 EBADF (Bad file descriptor) [pid 5220] close(16) = -1 EBADF (Bad file descriptor) [pid 5220] close(17) = -1 EBADF (Bad file descriptor) [pid 5220] close(18) = -1 EBADF (Bad file descriptor) [pid 5220] close(19) = -1 EBADF (Bad file descriptor) [pid 5220] close(20) = -1 EBADF (Bad file descriptor) [pid 5220] close(21) = -1 EBADF (Bad file descriptor) [pid 5220] close(22) = -1 EBADF (Bad file descriptor) [pid 5220] close(23) = -1 EBADF (Bad file descriptor) [pid 5220] close(24) = -1 EBADF (Bad file descriptor) [pid 5220] close(25) = -1 EBADF (Bad file descriptor) [pid 5220] close(26) = -1 EBADF (Bad file descriptor) [pid 5220] close(27) = -1 EBADF (Bad file descriptor) [pid 5220] close(28) = -1 EBADF (Bad file descriptor) [pid 5220] close(29) = -1 EBADF (Bad file descriptor) [pid 5220] exit_group(0) = ? [pid 5220] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=117, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5087] umount2("./115", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./115/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./115/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./115/binderfs") = 0 [ 179.211521][ T1043] [ 179.211521][ T1043] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.211521][ T1043] [ 179.222383][ T1043] [ 179.222383][ T1043] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.222383][ T1043] [ 179.233372][ T114] [ 179.233372][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.233372][ T114] [ 179.243965][ T1043] [ 179.243965][ T1043] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.243965][ T1043] [ 179.254449][ T1043] [ 179.254449][ T1043] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.254449][ T1043] [ 179.265501][ T113] [ 179.265501][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.265501][ T113] [ 179.277498][ T1043] [ 179.277498][ T1043] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.277498][ T1043] [ 179.288181][ T1043] [ 179.288181][ T1043] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.288181][ T1043] [ 179.299088][ T114] [ 179.299088][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.299088][ T114] [ 179.309651][ T5087] [pid 5087] umount2("./115/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./115/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./115/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./115/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./115/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [ 179.309651][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.309651][ T5087] [ 179.320441][ T5087] [ 179.320441][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.320441][ T5087] [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./115/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./115") = 0 [pid 5087] mkdir("./116", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5221 attached , child_tidptr=0x55559309e650) = 118 [pid 5221] set_robust_list(0x55559309e660, 24) = 0 [pid 5221] chdir("./116") = 0 [pid 5221] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5221] setpgid(0, 0) = 0 [pid 5221] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5221] write(3, "1000", 4) = 4 [pid 5221] close(3) = 0 [pid 5221] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5221] memfd_create("syzkaller", 0) = 3 [pid 5221] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5221] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5221] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5221] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5221] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5221] close(3) = 0 [pid 5221] close(4) = 0 [pid 5221] mkdir("./file0", 0777) = 0 [pid 5221] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5221] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5221] chdir("./file0") = 0 [pid 5221] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 179.829194][ T5221] loop0: detected capacity change from 0 to 32768 [ 179.862635][ T5221] [ 179.862635][ T5221] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.862635][ T5221] [pid 5221] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5221] close(3) = 0 [pid 5221] close(4) = -1 EBADF (Bad file descriptor) [pid 5221] close(5) = -1 EBADF (Bad file descriptor) [pid 5221] close(6) = -1 EBADF (Bad file descriptor) [pid 5221] close(7) = -1 EBADF (Bad file descriptor) [pid 5221] close(8) = -1 EBADF (Bad file descriptor) [pid 5221] close(9) = -1 EBADF (Bad file descriptor) [pid 5221] close(10) = -1 EBADF (Bad file descriptor) [pid 5221] close(11) = -1 EBADF (Bad file descriptor) [pid 5221] close(12) = -1 EBADF (Bad file descriptor) [pid 5221] close(13) = -1 EBADF (Bad file descriptor) [pid 5221] close(14) = -1 EBADF (Bad file descriptor) [pid 5221] close(15) = -1 EBADF (Bad file descriptor) [pid 5221] close(16) = -1 EBADF (Bad file descriptor) [pid 5221] close(17) = -1 EBADF (Bad file descriptor) [pid 5221] close(18) = -1 EBADF (Bad file descriptor) [pid 5221] close(19) = -1 EBADF (Bad file descriptor) [pid 5221] close(20) = -1 EBADF (Bad file descriptor) [pid 5221] close(21) = -1 EBADF (Bad file descriptor) [pid 5221] close(22) = -1 EBADF (Bad file descriptor) [pid 5221] close(23) = -1 EBADF (Bad file descriptor) [pid 5221] close(24) = -1 EBADF (Bad file descriptor) [pid 5221] close(25) = -1 EBADF (Bad file descriptor) [pid 5221] close(26) = -1 EBADF (Bad file descriptor) [pid 5221] close(27) = -1 EBADF (Bad file descriptor) [pid 5221] close(28) = -1 EBADF (Bad file descriptor) [pid 5221] close(29) = -1 EBADF (Bad file descriptor) [pid 5221] exit_group(0) = ? [ 179.910185][ T5221] read_mapping_page failed! [ 179.915105][ T5221] ERROR: (device loop0): txCommit: [ 179.915105][ T5221] [pid 5221] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=118, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 5087] umount2("./116", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./116/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./116/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./116/binderfs") = 0 [ 180.020543][ T1059] [ 180.020543][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.020543][ T1059] [ 180.031295][ T1059] [ 180.031295][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.031295][ T1059] [ 180.042872][ T113] [ 180.042872][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.042872][ T113] [ 180.053519][ T1059] [ 180.053519][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.053519][ T1059] [ 180.064055][ T1059] [ 180.064055][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.064055][ T1059] [ 180.075131][ T114] [ 180.075131][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.075131][ T114] [ 180.085688][ T1059] [ 180.085688][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.085688][ T1059] [ 180.096173][ T1059] [ 180.096173][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.096173][ T1059] [ 180.106778][ T5087] [ 180.106778][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.106778][ T5087] [ 180.118290][ T114] [pid 5087] umount2("./116/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./116/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./116/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./116/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./116/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [ 180.118290][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.118290][ T114] [ 180.128932][ T5087] [ 180.128932][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.128932][ T5087] [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./116/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./116") = 0 [pid 5087] mkdir("./117", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5222 attached , child_tidptr=0x55559309e650) = 119 [pid 5222] set_robust_list(0x55559309e660, 24) = 0 [pid 5222] chdir("./117") = 0 [pid 5222] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5222] setpgid(0, 0) = 0 [pid 5222] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5222] write(3, "1000", 4) = 4 [pid 5222] close(3) = 0 [pid 5222] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5222] memfd_create("syzkaller", 0) = 3 [pid 5222] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5222] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5222] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5222] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5222] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5222] close(3) = 0 [pid 5222] close(4) = 0 [pid 5222] mkdir("./file0", 0777) = 0 [pid 5222] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5222] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5222] chdir("./file0") = 0 [pid 5222] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 180.634520][ T5222] loop0: detected capacity change from 0 to 32768 [ 180.673232][ T5222] [ 180.673232][ T5222] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.673232][ T5222] [pid 5222] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5222] close(3) = 0 [pid 5222] close(4) = -1 EBADF (Bad file descriptor) [pid 5222] close(5) = -1 EBADF (Bad file descriptor) [pid 5222] close(6) = -1 EBADF (Bad file descriptor) [pid 5222] close(7) = -1 EBADF (Bad file descriptor) [pid 5222] close(8) = -1 EBADF (Bad file descriptor) [pid 5222] close(9) = -1 EBADF (Bad file descriptor) [pid 5222] close(10) = -1 EBADF (Bad file descriptor) [pid 5222] close(11) = -1 EBADF (Bad file descriptor) [pid 5222] close(12) = -1 EBADF (Bad file descriptor) [pid 5222] close(13) = -1 EBADF (Bad file descriptor) [pid 5222] close(14) = -1 EBADF (Bad file descriptor) [pid 5222] close(15) = -1 EBADF (Bad file descriptor) [pid 5222] close(16) = -1 EBADF (Bad file descriptor) [pid 5222] close(17) = -1 EBADF (Bad file descriptor) [ 180.704712][ T5222] read_mapping_page failed! [ 180.709248][ T5222] ERROR: (device loop0): txCommit: [ 180.709248][ T5222] [pid 5222] close(18) = -1 EBADF (Bad file descriptor) [pid 5222] close(19) = -1 EBADF (Bad file descriptor) [pid 5222] close(20) = -1 EBADF (Bad file descriptor) [pid 5222] close(21) = -1 EBADF (Bad file descriptor) [pid 5222] close(22) = -1 EBADF (Bad file descriptor) [pid 5222] close(23) = -1 EBADF (Bad file descriptor) [pid 5222] close(24) = -1 EBADF (Bad file descriptor) [pid 5222] close(25) = -1 EBADF (Bad file descriptor) [pid 5222] close(26) = -1 EBADF (Bad file descriptor) [pid 5222] close(27) = -1 EBADF (Bad file descriptor) [pid 5222] close(28) = -1 EBADF (Bad file descriptor) [pid 5222] close(29) = -1 EBADF (Bad file descriptor) [pid 5222] exit_group(0) = ? [pid 5222] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=119, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./117", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./117/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./117/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./117/binderfs") = 0 [ 180.887237][ T1097] [ 180.887237][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.887237][ T1097] [ 180.897760][ T1097] [ 180.897760][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.897760][ T1097] [ 180.909081][ T113] [ 180.909081][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.909081][ T113] [ 180.919713][ T1097] [ 180.919713][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.919713][ T1097] [ 180.930292][ T1097] [ 180.930292][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.930292][ T1097] [ 180.941437][ T113] [ 180.941437][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.941437][ T113] [ 180.951968][ T1097] [ 180.951968][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.951968][ T1097] [ 180.962617][ T1097] [ 180.962617][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.962617][ T1097] [ 180.973473][ T113] [ 180.973473][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.973473][ T113] [ 180.984043][ T5087] [pid 5087] umount2("./117/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./117/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./117/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./117/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./117/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [ 180.984043][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.984043][ T5087] [ 180.994800][ T5087] [ 180.994800][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.994800][ T5087] [pid 5087] close(4) = 0 [pid 5087] rmdir("./117/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./117") = 0 [pid 5087] mkdir("./118", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5223 attached , child_tidptr=0x55559309e650) = 120 [pid 5223] set_robust_list(0x55559309e660, 24) = 0 [pid 5223] chdir("./118") = 0 [pid 5223] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5223] setpgid(0, 0) = 0 [pid 5223] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5223] write(3, "1000", 4) = 4 [pid 5223] close(3) = 0 [pid 5223] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5223] memfd_create("syzkaller", 0) = 3 [pid 5223] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5223] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5223] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5223] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5223] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5223] close(3) = 0 [pid 5223] close(4) = 0 [pid 5223] mkdir("./file0", 0777) = 0 [pid 5223] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5223] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5223] chdir("./file0") = 0 [pid 5223] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 181.543951][ T5223] loop0: detected capacity change from 0 to 32768 [ 181.575209][ T5223] [ 181.575209][ T5223] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.575209][ T5223] [pid 5223] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5223] close(3) = 0 [pid 5223] close(4) = -1 EBADF (Bad file descriptor) [pid 5223] close(5) = -1 EBADF (Bad file descriptor) [pid 5223] close(6) = -1 EBADF (Bad file descriptor) [pid 5223] close(7) = -1 EBADF (Bad file descriptor) [pid 5223] close(8) = -1 EBADF (Bad file descriptor) [pid 5223] close(9) = -1 EBADF (Bad file descriptor) [pid 5223] close(10) = -1 EBADF (Bad file descriptor) [ 181.601551][ T5223] read_mapping_page failed! [ 181.606383][ T5223] ERROR: (device loop0): txCommit: [ 181.606383][ T5223] [pid 5223] close(11) = -1 EBADF (Bad file descriptor) [pid 5223] close(12) = -1 EBADF (Bad file descriptor) [pid 5223] close(13) = -1 EBADF (Bad file descriptor) [pid 5223] close(14) = -1 EBADF (Bad file descriptor) [pid 5223] close(15) = -1 EBADF (Bad file descriptor) [pid 5223] close(16) = -1 EBADF (Bad file descriptor) [pid 5223] close(17) = -1 EBADF (Bad file descriptor) [pid 5223] close(18) = -1 EBADF (Bad file descriptor) [pid 5223] close(19) = -1 EBADF (Bad file descriptor) [pid 5223] close(20) = -1 EBADF (Bad file descriptor) [pid 5223] close(21) = -1 EBADF (Bad file descriptor) [pid 5223] close(22) = -1 EBADF (Bad file descriptor) [pid 5223] close(23) = -1 EBADF (Bad file descriptor) [pid 5223] close(24) = -1 EBADF (Bad file descriptor) [pid 5223] close(25) = -1 EBADF (Bad file descriptor) [pid 5223] close(26) = -1 EBADF (Bad file descriptor) [pid 5223] close(27) = -1 EBADF (Bad file descriptor) [pid 5223] close(28) = -1 EBADF (Bad file descriptor) [pid 5223] close(29) = -1 EBADF (Bad file descriptor) [pid 5223] exit_group(0) = ? [pid 5223] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=120, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=20 /* 0.20 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./118", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./118/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./118/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./118/binderfs") = 0 [ 181.785162][ T1097] [ 181.785162][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.785162][ T1097] [ 181.795663][ T1097] [ 181.795663][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.795663][ T1097] [ 181.806932][ T114] [ 181.806932][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.806932][ T114] [ 181.817592][ T1097] [ 181.817592][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.817592][ T1097] [ 181.828242][ T1097] [ 181.828242][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.828242][ T1097] [ 181.839107][ T114] [ 181.839107][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.839107][ T114] [ 181.849747][ T1097] [ 181.849747][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.849747][ T1097] [ 181.860215][ T1097] [ 181.860215][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.860215][ T1097] [ 181.871043][ T113] [ 181.871043][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.871043][ T113] [ 181.882026][ T5087] [pid 5087] umount2("./118/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./118/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./118/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./118/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./118/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./118/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [ 181.882026][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.882026][ T5087] [ 181.892887][ T5087] [ 181.892887][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.892887][ T5087] [pid 5087] rmdir("./118") = 0 [pid 5087] mkdir("./119", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5224 attached , child_tidptr=0x55559309e650) = 121 [pid 5224] set_robust_list(0x55559309e660, 24) = 0 [pid 5224] chdir("./119") = 0 [pid 5224] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5224] setpgid(0, 0) = 0 [pid 5224] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5224] write(3, "1000", 4) = 4 [pid 5224] close(3) = 0 [pid 5224] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5224] memfd_create("syzkaller", 0) = 3 [pid 5224] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5224] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5224] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5224] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5224] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5224] close(3) = 0 [pid 5224] close(4) = 0 [pid 5224] mkdir("./file0", 0777) = 0 [pid 5224] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5224] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5224] chdir("./file0") = 0 [pid 5224] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 182.408545][ T5224] loop0: detected capacity change from 0 to 32768 [ 182.439171][ T5224] [ 182.439171][ T5224] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.439171][ T5224] [pid 5224] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5224] close(3) = 0 [pid 5224] close(4) = -1 EBADF (Bad file descriptor) [pid 5224] close(5) = -1 EBADF (Bad file descriptor) [pid 5224] close(6) = -1 EBADF (Bad file descriptor) [pid 5224] close(7) = -1 EBADF (Bad file descriptor) [pid 5224] close(8) = -1 EBADF (Bad file descriptor) [pid 5224] close(9) = -1 EBADF (Bad file descriptor) [pid 5224] close(10) = -1 EBADF (Bad file descriptor) [ 182.466033][ T5224] read_mapping_page failed! [ 182.470544][ T5224] ERROR: (device loop0): txCommit: [ 182.470544][ T5224] [pid 5224] close(11) = -1 EBADF (Bad file descriptor) [pid 5224] close(12) = -1 EBADF (Bad file descriptor) [pid 5224] close(13) = -1 EBADF (Bad file descriptor) [pid 5224] close(14) = -1 EBADF (Bad file descriptor) [pid 5224] close(15) = -1 EBADF (Bad file descriptor) [pid 5224] close(16) = -1 EBADF (Bad file descriptor) [pid 5224] close(17) = -1 EBADF (Bad file descriptor) [pid 5224] close(18) = -1 EBADF (Bad file descriptor) [pid 5224] close(19) = -1 EBADF (Bad file descriptor) [pid 5224] close(20) = -1 EBADF (Bad file descriptor) [pid 5224] close(21) = -1 EBADF (Bad file descriptor) [pid 5224] close(22) = -1 EBADF (Bad file descriptor) [pid 5224] close(23) = -1 EBADF (Bad file descriptor) [pid 5224] close(24) = -1 EBADF (Bad file descriptor) [pid 5224] close(25) = -1 EBADF (Bad file descriptor) [pid 5224] close(26) = -1 EBADF (Bad file descriptor) [pid 5224] close(27) = -1 EBADF (Bad file descriptor) [pid 5224] close(28) = -1 EBADF (Bad file descriptor) [pid 5224] close(29) = -1 EBADF (Bad file descriptor) [pid 5224] exit_group(0) = ? [pid 5224] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=121, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./119", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./119/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./119/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./119/binderfs") = 0 [ 182.658456][ T1097] [ 182.658456][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.658456][ T1097] [ 182.669003][ T1097] [ 182.669003][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.669003][ T1097] [ 182.680048][ T113] [ 182.680048][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.680048][ T113] [ 182.691123][ T1097] [ 182.691123][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.691123][ T1097] [ 182.701735][ T1097] [ 182.701735][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.701735][ T1097] [ 182.712819][ T113] [ 182.712819][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.712819][ T113] [ 182.723426][ T1097] [ 182.723426][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.723426][ T1097] [ 182.733892][ T1097] [ 182.733892][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.733892][ T1097] [ 182.744651][ T5087] [ 182.744651][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.744651][ T5087] [ 182.755681][ T113] [pid 5087] umount2("./119/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./119/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./119/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./119/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./119/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./119/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [ 182.755681][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.755681][ T113] [ 182.766187][ T5087] [ 182.766187][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.766187][ T5087] [pid 5087] rmdir("./119") = 0 [pid 5087] mkdir("./120", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5225 attached , child_tidptr=0x55559309e650) = 122 [pid 5225] set_robust_list(0x55559309e660, 24) = 0 [pid 5225] chdir("./120") = 0 [pid 5225] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5225] setpgid(0, 0) = 0 [pid 5225] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5225] write(3, "1000", 4) = 4 [pid 5225] close(3) = 0 [pid 5225] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5225] memfd_create("syzkaller", 0) = 3 [pid 5225] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5225] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5225] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5225] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5225] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5225] close(3) = 0 [pid 5225] close(4) = 0 [pid 5225] mkdir("./file0", 0777) = 0 [ 183.259454][ T5225] loop0: detected capacity change from 0 to 32768 [pid 5225] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5225] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5225] chdir("./file0") = 0 [pid 5225] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5225] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5225] close(3) = 0 [pid 5225] close(4) = -1 EBADF (Bad file descriptor) [pid 5225] close(5) = -1 EBADF (Bad file descriptor) [pid 5225] close(6) = -1 EBADF (Bad file descriptor) [pid 5225] close(7) = -1 EBADF (Bad file descriptor) [pid 5225] close(8) = -1 EBADF (Bad file descriptor) [pid 5225] close(9) = -1 EBADF (Bad file descriptor) [pid 5225] close(10) = -1 EBADF (Bad file descriptor) [pid 5225] close(11) = -1 EBADF (Bad file descriptor) [ 183.304871][ T5225] [ 183.304871][ T5225] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.304871][ T5225] [ 183.323189][ T5225] read_mapping_page failed! [ 183.327710][ T5225] ERROR: (device loop0): txCommit: [ 183.327710][ T5225] [pid 5225] close(12) = -1 EBADF (Bad file descriptor) [pid 5225] close(13) = -1 EBADF (Bad file descriptor) [pid 5225] close(14) = -1 EBADF (Bad file descriptor) [pid 5225] close(15) = -1 EBADF (Bad file descriptor) [pid 5225] close(16) = -1 EBADF (Bad file descriptor) [pid 5225] close(17) = -1 EBADF (Bad file descriptor) [pid 5225] close(18) = -1 EBADF (Bad file descriptor) [pid 5225] close(19) = -1 EBADF (Bad file descriptor) [pid 5225] close(20) = -1 EBADF (Bad file descriptor) [pid 5225] close(21) = -1 EBADF (Bad file descriptor) [pid 5225] close(22) = -1 EBADF (Bad file descriptor) [pid 5225] close(23) = -1 EBADF (Bad file descriptor) [pid 5225] close(24) = -1 EBADF (Bad file descriptor) [pid 5225] close(25) = -1 EBADF (Bad file descriptor) [pid 5225] close(26) = -1 EBADF (Bad file descriptor) [pid 5225] close(27) = -1 EBADF (Bad file descriptor) [pid 5225] close(28) = -1 EBADF (Bad file descriptor) [pid 5225] close(29) = -1 EBADF (Bad file descriptor) [pid 5225] exit_group(0) = ? [pid 5225] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=122, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5087] umount2("./120", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./120/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./120/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./120/binderfs") = 0 [ 183.494809][ T1059] [ 183.494809][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.494809][ T1059] [ 183.505322][ T1059] [ 183.505322][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.505322][ T1059] [ 183.516504][ T113] [ 183.516504][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.516504][ T113] [ 183.527116][ T1059] [ 183.527116][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.527116][ T1059] [ 183.537609][ T1059] [ 183.537609][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.537609][ T1059] [ 183.548512][ T113] [ 183.548512][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.548512][ T113] [ 183.559038][ T1059] [ 183.559038][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.559038][ T1059] [ 183.569533][ T1059] [ 183.569533][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.569533][ T1059] [ 183.580436][ T114] [ 183.580436][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.580436][ T114] [pid 5087] umount2("./120/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./120/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./120/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./120/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./120/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [ 183.593251][ T5087] [ 183.593251][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.593251][ T5087] [ 183.604220][ T5087] [ 183.604220][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.604220][ T5087] [pid 5087] close(4) = 0 [pid 5087] rmdir("./120/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./120") = 0 [pid 5087] mkdir("./121", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5226 attached [pid 5226] set_robust_list(0x55559309e660, 24 [pid 5087] <... clone resumed>, child_tidptr=0x55559309e650) = 123 [pid 5226] <... set_robust_list resumed>) = 0 [pid 5226] chdir("./121") = 0 [pid 5226] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5226] setpgid(0, 0) = 0 [pid 5226] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5226] write(3, "1000", 4) = 4 [pid 5226] close(3) = 0 [pid 5226] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5226] memfd_create("syzkaller", 0) = 3 [pid 5226] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5226] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5226] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5226] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5226] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5226] close(3) = 0 [pid 5226] close(4) = 0 [pid 5226] mkdir("./file0", 0777) = 0 [ 184.089166][ T5226] loop0: detected capacity change from 0 to 32768 [pid 5226] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5226] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5226] chdir("./file0") = 0 [pid 5226] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5226] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5226] close(3) = 0 [pid 5226] close(4) = -1 EBADF (Bad file descriptor) [pid 5226] close(5) = -1 EBADF (Bad file descriptor) [pid 5226] close(6) = -1 EBADF (Bad file descriptor) [pid 5226] close(7) = -1 EBADF (Bad file descriptor) [pid 5226] close(8) = -1 EBADF (Bad file descriptor) [pid 5226] close(9) = -1 EBADF (Bad file descriptor) [ 184.134115][ T5226] [ 184.134115][ T5226] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.134115][ T5226] [ 184.162070][ T5226] read_mapping_page failed! [ 184.166635][ T5226] ERROR: (device loop0): txCommit: [ 184.166635][ T5226] [pid 5226] close(10) = -1 EBADF (Bad file descriptor) [pid 5226] close(11) = -1 EBADF (Bad file descriptor) [pid 5226] close(12) = -1 EBADF (Bad file descriptor) [pid 5226] close(13) = -1 EBADF (Bad file descriptor) [pid 5226] close(14) = -1 EBADF (Bad file descriptor) [pid 5226] close(15) = -1 EBADF (Bad file descriptor) [pid 5226] close(16) = -1 EBADF (Bad file descriptor) [pid 5226] close(17) = -1 EBADF (Bad file descriptor) [pid 5226] close(18) = -1 EBADF (Bad file descriptor) [pid 5226] close(19) = -1 EBADF (Bad file descriptor) [pid 5226] close(20) = -1 EBADF (Bad file descriptor) [pid 5226] close(21) = -1 EBADF (Bad file descriptor) [pid 5226] close(22) = -1 EBADF (Bad file descriptor) [pid 5226] close(23) = -1 EBADF (Bad file descriptor) [pid 5226] close(24) = -1 EBADF (Bad file descriptor) [pid 5226] close(25) = -1 EBADF (Bad file descriptor) [pid 5226] close(26) = -1 EBADF (Bad file descriptor) [pid 5226] close(27) = -1 EBADF (Bad file descriptor) [pid 5226] close(28) = -1 EBADF (Bad file descriptor) [pid 5226] close(29) = -1 EBADF (Bad file descriptor) [pid 5226] exit_group(0) = ? [pid 5226] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=123, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=23 /* 0.23 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./121", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./121", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./121/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./121/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./121/binderfs") = 0 [ 184.366396][ T1097] [ 184.366396][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.366396][ T1097] [ 184.376942][ T1097] [ 184.376942][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.376942][ T1097] [ 184.387957][ T113] [ 184.387957][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.387957][ T113] [ 184.399599][ T1097] [ 184.399599][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.399599][ T1097] [ 184.410091][ T1097] [ 184.410091][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.410091][ T1097] [ 184.421367][ T114] [ 184.421367][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.421367][ T114] [ 184.431907][ T1097] [ 184.431907][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.431907][ T1097] [ 184.442377][ T1097] [ 184.442377][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.442377][ T1097] [ 184.453151][ T5087] [ 184.453151][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.453151][ T5087] [ 184.463792][ T113] [pid 5087] umount2("./121/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./121/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./121/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./121/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./121/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [ 184.463792][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.463792][ T113] [ 184.475087][ T5087] [ 184.475087][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.475087][ T5087] [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./121/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./121") = 0 [pid 5087] mkdir("./122", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55559309e650) = 124 ./strace-static-x86_64: Process 5227 attached [pid 5227] set_robust_list(0x55559309e660, 24) = 0 [pid 5227] chdir("./122") = 0 [pid 5227] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5227] setpgid(0, 0) = 0 [pid 5227] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5227] write(3, "1000", 4) = 4 [pid 5227] close(3) = 0 [pid 5227] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5227] memfd_create("syzkaller", 0) = 3 [pid 5227] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5227] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5227] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5227] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5227] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5227] close(3) = 0 [pid 5227] close(4) = 0 [pid 5227] mkdir("./file0", 0777) = 0 [ 185.007537][ T5227] loop0: detected capacity change from 0 to 32768 [pid 5227] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5227] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5227] chdir("./file0") = 0 [pid 5227] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 185.059860][ T5227] [ 185.059860][ T5227] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 185.059860][ T5227] [pid 5227] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5227] close(3) = 0 [pid 5227] close(4) = -1 EBADF (Bad file descriptor) [pid 5227] close(5) = -1 EBADF (Bad file descriptor) [pid 5227] close(6) = -1 EBADF (Bad file descriptor) [pid 5227] close(7) = -1 EBADF (Bad file descriptor) [pid 5227] close(8) = -1 EBADF (Bad file descriptor) [pid 5227] close(9) = -1 EBADF (Bad file descriptor) [pid 5227] close(10) = -1 EBADF (Bad file descriptor) [pid 5227] close(11) = -1 EBADF (Bad file descriptor) [pid 5227] close(12) = -1 EBADF (Bad file descriptor) [pid 5227] close(13) = -1 EBADF (Bad file descriptor) [pid 5227] close(14) = -1 EBADF (Bad file descriptor) [pid 5227] close(15) = -1 EBADF (Bad file descriptor) [pid 5227] close(16) = -1 EBADF (Bad file descriptor) [ 185.104941][ T5227] read_mapping_page failed! [ 185.109508][ T5227] ERROR: (device loop0): txCommit: [ 185.109508][ T5227] [pid 5227] close(17) = -1 EBADF (Bad file descriptor) [pid 5227] close(18) = -1 EBADF (Bad file descriptor) [pid 5227] close(19) = -1 EBADF (Bad file descriptor) [pid 5227] close(20) = -1 EBADF (Bad file descriptor) [pid 5227] close(21) = -1 EBADF (Bad file descriptor) [pid 5227] close(22) = -1 EBADF (Bad file descriptor) [pid 5227] close(23) = -1 EBADF (Bad file descriptor) [pid 5227] close(24) = -1 EBADF (Bad file descriptor) [pid 5227] close(25) = -1 EBADF (Bad file descriptor) [pid 5227] close(26) = -1 EBADF (Bad file descriptor) [pid 5227] close(27) = -1 EBADF (Bad file descriptor) [pid 5227] close(28) = -1 EBADF (Bad file descriptor) [pid 5227] close(29) = -1 EBADF (Bad file descriptor) [pid 5227] exit_group(0) = ? [pid 5227] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=124, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5087] umount2("./122", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./122", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./122/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./122/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./122/binderfs") = 0 [ 185.268046][ T1097] [ 185.268046][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 185.268046][ T1097] [ 185.278663][ T1097] [ 185.278663][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 185.278663][ T1097] [ 185.289783][ T114] [ 185.289783][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 185.289783][ T114] [ 185.300364][ T1097] [ 185.300364][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 185.300364][ T1097] [ 185.311033][ T1097] [ 185.311033][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 185.311033][ T1097] [ 185.322095][ T113] [ 185.322095][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 185.322095][ T113] [ 185.332883][ T1097] [ 185.332883][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 185.332883][ T1097] [ 185.343482][ T1097] [ 185.343482][ T1097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 185.343482][ T1097] [ 185.354152][ T5087] [ 185.354152][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 185.354152][ T5087] [ 185.365198][ T113] [pid 5087] umount2("./122/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./122/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./122/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./122/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./122/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./122/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./122") = 0 [pid 5087] mkdir("./123", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 185.365198][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 185.365198][ T113] [ 185.375759][ T5087] [ 185.375759][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 185.375759][ T5087] [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55559309e650) = 125 ./strace-static-x86_64: Process 5228 attached [pid 5228] set_robust_list(0x55559309e660, 24) = 0 [pid 5228] chdir("./123") = 0 [pid 5228] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5228] setpgid(0, 0) = 0 [pid 5228] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5228] write(3, "1000", 4) = 4 [pid 5228] close(3) = 0 [pid 5228] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5228] memfd_create("syzkaller", 0) = 3 [pid 5228] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5228] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5228] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5228] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5228] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5228] close(3) = 0 [pid 5228] close(4) = 0 [pid 5228] mkdir("./file0", 0777) = 0 [pid 5228] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5228] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5228] chdir("./file0") = 0 [pid 5228] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 185.866141][ T5228] loop0: detected capacity change from 0 to 32768 [ 185.898443][ T5228] [ 185.898443][ T5228] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 185.898443][ T5228] [pid 5228] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5228] close(3) = 0 [pid 5228] close(4) = -1 EBADF (Bad file descriptor) [pid 5228] close(5) = -1 EBADF (Bad file descriptor) [pid 5228] close(6) = -1 EBADF (Bad file descriptor) [pid 5228] close(7) = -1 EBADF (Bad file descriptor) [pid 5228] close(8) = -1 EBADF (Bad file descriptor) [pid 5228] close(9) = -1 EBADF (Bad file descriptor) [pid 5228] close(10) = -1 EBADF (Bad file descriptor) [pid 5228] close(11) = -1 EBADF (Bad file descriptor) [pid 5228] close(12) = -1 EBADF (Bad file descriptor) [pid 5228] close(13) = -1 EBADF (Bad file descriptor) [pid 5228] close(14) = -1 EBADF (Bad file descriptor) [pid 5228] close(15) = -1 EBADF (Bad file descriptor) [pid 5228] close(16) = -1 EBADF (Bad file descriptor) [pid 5228] close(17) = -1 EBADF (Bad file descriptor) [pid 5228] close(18) = -1 EBADF (Bad file descriptor) [ 185.945545][ T5228] read_mapping_page failed! [ 185.950062][ T5228] ERROR: (device loop0): txCommit: [ 185.950062][ T5228] [pid 5228] close(19) = -1 EBADF (Bad file descriptor) [pid 5228] close(20) = -1 EBADF (Bad file descriptor) [pid 5228] close(21) = -1 EBADF (Bad file descriptor) [pid 5228] close(22) = -1 EBADF (Bad file descriptor) [pid 5228] close(23) = -1 EBADF (Bad file descriptor) [pid 5228] close(24) = -1 EBADF (Bad file descriptor) [pid 5228] close(25) = -1 EBADF (Bad file descriptor) [pid 5228] close(26) = -1 EBADF (Bad file descriptor) [pid 5228] close(27) = -1 EBADF (Bad file descriptor) [pid 5228] close(28) = -1 EBADF (Bad file descriptor) [pid 5228] close(29) = -1 EBADF (Bad file descriptor) [pid 5228] exit_group(0) = ? [pid 5228] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=125, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 5087] umount2("./123", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./123", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./123/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./123/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./123/binderfs") = 0 [ 186.090177][ T11] [ 186.090177][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.090177][ T11] [ 186.100770][ T11] [ 186.100770][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.100770][ T11] [ 186.112290][ T113] [ 186.112290][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.112290][ T113] [ 186.123082][ T11] [ 186.123082][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.123082][ T11] [ 186.133597][ T11] [ 186.133597][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.133597][ T11] [ 186.144649][ T114] [ 186.144649][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.144649][ T114] [ 186.155228][ T11] [ 186.155228][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.155228][ T11] [ 186.165703][ T11] [ 186.165703][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.165703][ T11] [ 186.176885][ T114] [ 186.176885][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.176885][ T114] [ 186.187561][ T5087] [pid 5087] umount2("./123/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./123/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./123/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./123/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./123/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [ 186.187561][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.187561][ T5087] [ 186.199106][ T5087] [ 186.199106][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.199106][ T5087] [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./123/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./123") = 0 [pid 5087] mkdir("./124", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5229 attached , child_tidptr=0x55559309e650) = 126 [pid 5229] set_robust_list(0x55559309e660, 24) = 0 [pid 5229] chdir("./124") = 0 [pid 5229] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5229] setpgid(0, 0) = 0 [pid 5229] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5229] write(3, "1000", 4) = 4 [pid 5229] close(3) = 0 [pid 5229] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5229] memfd_create("syzkaller", 0) = 3 [pid 5229] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5229] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5229] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5229] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5229] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5229] close(3) = 0 [pid 5229] close(4) = 0 [pid 5229] mkdir("./file0", 0777) = 0 [ 186.736989][ T5229] loop0: detected capacity change from 0 to 32768 [pid 5229] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5229] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5229] chdir("./file0") = 0 [pid 5229] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5229] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5229] close(3) = 0 [pid 5229] close(4) = -1 EBADF (Bad file descriptor) [pid 5229] close(5) = -1 EBADF (Bad file descriptor) [pid 5229] close(6) = -1 EBADF (Bad file descriptor) [pid 5229] close(7) = -1 EBADF (Bad file descriptor) [pid 5229] close(8) = -1 EBADF (Bad file descriptor) [ 186.781896][ T5229] [ 186.781896][ T5229] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.781896][ T5229] [ 186.819249][ T5229] read_mapping_page failed! [ 186.823904][ T5229] ERROR: (device loop0): txCommit: [ 186.823904][ T5229] [pid 5229] close(9) = -1 EBADF (Bad file descriptor) [pid 5229] close(10) = -1 EBADF (Bad file descriptor) [pid 5229] close(11) = -1 EBADF (Bad file descriptor) [pid 5229] close(12) = -1 EBADF (Bad file descriptor) [pid 5229] close(13) = -1 EBADF (Bad file descriptor) [pid 5229] close(14) = -1 EBADF (Bad file descriptor) [pid 5229] close(15) = -1 EBADF (Bad file descriptor) [pid 5229] close(16) = -1 EBADF (Bad file descriptor) [pid 5229] close(17) = -1 EBADF (Bad file descriptor) [pid 5229] close(18) = -1 EBADF (Bad file descriptor) [pid 5229] close(19) = -1 EBADF (Bad file descriptor) [pid 5229] close(20) = -1 EBADF (Bad file descriptor) [pid 5229] close(21) = -1 EBADF (Bad file descriptor) [pid 5229] close(22) = -1 EBADF (Bad file descriptor) [pid 5229] close(23) = -1 EBADF (Bad file descriptor) [pid 5229] close(24) = -1 EBADF (Bad file descriptor) [pid 5229] close(25) = -1 EBADF (Bad file descriptor) [pid 5229] close(26) = -1 EBADF (Bad file descriptor) [pid 5229] close(27) = -1 EBADF (Bad file descriptor) [pid 5229] close(28) = -1 EBADF (Bad file descriptor) [pid 5229] close(29) = -1 EBADF (Bad file descriptor) [pid 5229] exit_group(0) = ? [pid 5229] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=126, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=24 /* 0.24 s */} --- [pid 5087] umount2("./124", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./124", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./124/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./124/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./124/binderfs") = 0 [ 186.981899][ T11] [ 186.981899][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.981899][ T11] [ 186.992423][ T11] [ 186.992423][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.992423][ T11] [ 187.003557][ T113] [ 187.003557][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.003557][ T113] [ 187.014244][ T11] [ 187.014244][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.014244][ T11] [ 187.024749][ T11] [ 187.024749][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.024749][ T11] [ 187.036441][ T114] [ 187.036441][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.036441][ T114] [ 187.047031][ T11] [ 187.047031][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.047031][ T11] [ 187.057594][ T11] [ 187.057594][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.057594][ T11] [ 187.068567][ T114] [ 187.068567][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.068567][ T114] [ 187.080188][ T5087] [pid 5087] umount2("./124/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./124/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./124/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./124/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./124/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [ 187.080188][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.080188][ T5087] [ 187.090883][ T5087] [ 187.090883][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.090883][ T5087] [pid 5087] rmdir("./124/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./124") = 0 [pid 5087] mkdir("./125", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5230 attached , child_tidptr=0x55559309e650) = 127 [pid 5230] set_robust_list(0x55559309e660, 24) = 0 [pid 5230] chdir("./125") = 0 [pid 5230] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5230] setpgid(0, 0) = 0 [pid 5230] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5230] write(3, "1000", 4) = 4 [pid 5230] close(3) = 0 [pid 5230] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5230] memfd_create("syzkaller", 0) = 3 [pid 5230] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5230] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5230] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5230] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5230] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5230] close(3) = 0 [pid 5230] close(4) = 0 [pid 5230] mkdir("./file0", 0777) = 0 [ 187.594454][ T5230] loop0: detected capacity change from 0 to 32768 [pid 5230] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5230] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5230] chdir("./file0") = 0 [pid 5230] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5230] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5230] close(3) = 0 [pid 5230] close(4) = -1 EBADF (Bad file descriptor) [pid 5230] close(5) = -1 EBADF (Bad file descriptor) [pid 5230] close(6) = -1 EBADF (Bad file descriptor) [pid 5230] close(7) = -1 EBADF (Bad file descriptor) [pid 5230] close(8) = -1 EBADF (Bad file descriptor) [pid 5230] close(9) = -1 EBADF (Bad file descriptor) [ 187.642885][ T5230] [ 187.642885][ T5230] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.642885][ T5230] [ 187.677423][ T5230] read_mapping_page failed! [ 187.682066][ T5230] ERROR: (device loop0): txCommit: [ 187.682066][ T5230] [pid 5230] close(10) = -1 EBADF (Bad file descriptor) [pid 5230] close(11) = -1 EBADF (Bad file descriptor) [pid 5230] close(12) = -1 EBADF (Bad file descriptor) [pid 5230] close(13) = -1 EBADF (Bad file descriptor) [pid 5230] close(14) = -1 EBADF (Bad file descriptor) [pid 5230] close(15) = -1 EBADF (Bad file descriptor) [pid 5230] close(16) = -1 EBADF (Bad file descriptor) [pid 5230] close(17) = -1 EBADF (Bad file descriptor) [pid 5230] close(18) = -1 EBADF (Bad file descriptor) [pid 5230] close(19) = -1 EBADF (Bad file descriptor) [pid 5230] close(20) = -1 EBADF (Bad file descriptor) [pid 5230] close(21) = -1 EBADF (Bad file descriptor) [pid 5230] close(22) = -1 EBADF (Bad file descriptor) [pid 5230] close(23) = -1 EBADF (Bad file descriptor) [pid 5230] close(24) = -1 EBADF (Bad file descriptor) [pid 5230] close(25) = -1 EBADF (Bad file descriptor) [pid 5230] close(26) = -1 EBADF (Bad file descriptor) [pid 5230] close(27) = -1 EBADF (Bad file descriptor) [pid 5230] close(28) = -1 EBADF (Bad file descriptor) [pid 5230] close(29) = -1 EBADF (Bad file descriptor) [pid 5230] exit_group(0) = ? [pid 5230] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=127, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=24 /* 0.24 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./125", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./125", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./125/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./125/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./125/binderfs") = 0 [ 187.858093][ T1059] [ 187.858093][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.858093][ T1059] [ 187.868948][ T1059] [ 187.868948][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.868948][ T1059] [ 187.880140][ T113] [ 187.880140][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.880140][ T113] [ 187.891109][ T1059] [ 187.891109][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.891109][ T1059] [ 187.901605][ T1059] [ 187.901605][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.901605][ T1059] [ 187.912974][ T113] [ 187.912974][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.912974][ T113] [ 187.923527][ T1059] [ 187.923527][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.923527][ T1059] [ 187.934011][ T1059] [ 187.934011][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.934011][ T1059] [ 187.944861][ T113] [ 187.944861][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.944861][ T113] [ 187.955314][ T5087] [pid 5087] umount2("./125/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./125/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./125/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./125/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./125/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [ 187.955314][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.955314][ T5087] [ 187.966103][ T5087] [ 187.966103][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.966103][ T5087] [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./125/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./125") = 0 [pid 5087] mkdir("./126", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5231 attached [pid 5231] set_robust_list(0x55559309e660, 24) = 0 [pid 5087] <... clone resumed>, child_tidptr=0x55559309e650) = 128 [pid 5231] chdir("./126") = 0 [pid 5231] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5231] setpgid(0, 0) = 0 [pid 5231] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5231] write(3, "1000", 4) = 4 [pid 5231] close(3) = 0 [pid 5231] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5231] memfd_create("syzkaller", 0) = 3 [pid 5231] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5231] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5231] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5231] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5231] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5231] close(3) = 0 [pid 5231] close(4) = 0 [pid 5231] mkdir("./file0", 0777) = 0 [pid 5231] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5231] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5231] chdir("./file0") = 0 [pid 5231] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 188.487140][ T5231] loop0: detected capacity change from 0 to 32768 [ 188.519946][ T5231] [ 188.519946][ T5231] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.519946][ T5231] [pid 5231] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5231] close(3) = 0 [pid 5231] close(4) = -1 EBADF (Bad file descriptor) [pid 5231] close(5) = -1 EBADF (Bad file descriptor) [pid 5231] close(6) = -1 EBADF (Bad file descriptor) [pid 5231] close(7) = -1 EBADF (Bad file descriptor) [pid 5231] close(8) = -1 EBADF (Bad file descriptor) [pid 5231] close(9) = -1 EBADF (Bad file descriptor) [pid 5231] close(10) = -1 EBADF (Bad file descriptor) [pid 5231] close(11) = -1 EBADF (Bad file descriptor) [pid 5231] close(12) = -1 EBADF (Bad file descriptor) [pid 5231] close(13) = -1 EBADF (Bad file descriptor) [pid 5231] close(14) = -1 EBADF (Bad file descriptor) [pid 5231] close(15) = -1 EBADF (Bad file descriptor) [pid 5231] close(16) = -1 EBADF (Bad file descriptor) [pid 5231] close(17) = -1 EBADF (Bad file descriptor) [pid 5231] close(18) = -1 EBADF (Bad file descriptor) [pid 5231] close(19) = -1 EBADF (Bad file descriptor) [pid 5231] close(20) = -1 EBADF (Bad file descriptor) [pid 5231] close(21) = -1 EBADF (Bad file descriptor) [pid 5231] close(22) = -1 EBADF (Bad file descriptor) [pid 5231] close(23) = -1 EBADF (Bad file descriptor) [pid 5231] close(24) = -1 EBADF (Bad file descriptor) [pid 5231] close(25) = -1 EBADF (Bad file descriptor) [pid 5231] close(26) = -1 EBADF (Bad file descriptor) [pid 5231] close(27) = -1 EBADF (Bad file descriptor) [pid 5231] close(28) = -1 EBADF (Bad file descriptor) [pid 5231] close(29) = -1 EBADF (Bad file descriptor) [pid 5231] exit_group(0) = ? [pid 5231] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=128, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./126", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./126", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./126/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./126/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./126/binderfs") = 0 [ 188.570153][ T5231] read_mapping_page failed! [ 188.575163][ T5231] ERROR: (device loop0): txCommit: [ 188.575163][ T5231] [ 188.630530][ T1059] [ 188.630530][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.630530][ T1059] [ 188.641328][ T1059] [ 188.641328][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.641328][ T1059] [ 188.652421][ T114] [ 188.652421][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.652421][ T114] [ 188.663005][ T1059] [ 188.663005][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.663005][ T1059] [ 188.673491][ T1059] [ 188.673491][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.673491][ T1059] [ 188.684332][ T114] [ 188.684332][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.684332][ T114] [ 188.694878][ T1059] [ 188.694878][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.694878][ T1059] [ 188.705327][ T1059] [ 188.705327][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.705327][ T1059] [ 188.716380][ T5087] [ 188.716380][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.716380][ T5087] [ 188.727282][ T114] [pid 5087] umount2("./126/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./126/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./126/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./126/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./126/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [ 188.727282][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.727282][ T114] [ 188.737855][ T5087] [ 188.737855][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.737855][ T5087] [pid 5087] close(4) = 0 [pid 5087] rmdir("./126/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./126") = 0 [pid 5087] mkdir("./127", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5232 attached [pid 5232] set_robust_list(0x55559309e660, 24) = 0 [pid 5232] chdir("./127" [pid 5087] <... clone resumed>, child_tidptr=0x55559309e650) = 129 [pid 5232] <... chdir resumed>) = 0 [pid 5232] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5232] setpgid(0, 0) = 0 [pid 5232] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5232] write(3, "1000", 4) = 4 [pid 5232] close(3) = 0 [pid 5232] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5232] memfd_create("syzkaller", 0) = 3 [pid 5232] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5232] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5232] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5232] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5232] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5232] close(3) = 0 [pid 5232] close(4) = 0 [pid 5232] mkdir("./file0", 0777) = 0 [pid 5232] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5232] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5232] chdir("./file0") = 0 [pid 5232] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 189.237460][ T5232] loop0: detected capacity change from 0 to 32768 [ 189.266561][ T5232] [ 189.266561][ T5232] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.266561][ T5232] [pid 5232] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5232] close(3) = 0 [pid 5232] close(4) = -1 EBADF (Bad file descriptor) [pid 5232] close(5) = -1 EBADF (Bad file descriptor) [pid 5232] close(6) = -1 EBADF (Bad file descriptor) [pid 5232] close(7) = -1 EBADF (Bad file descriptor) [pid 5232] close(8) = -1 EBADF (Bad file descriptor) [pid 5232] close(9) = -1 EBADF (Bad file descriptor) [pid 5232] close(10) = -1 EBADF (Bad file descriptor) [pid 5232] close(11) = -1 EBADF (Bad file descriptor) [pid 5232] close(12) = -1 EBADF (Bad file descriptor) [pid 5232] close(13) = -1 EBADF (Bad file descriptor) [ 189.292525][ T5232] read_mapping_page failed! [ 189.297055][ T5232] ERROR: (device loop0): txCommit: [ 189.297055][ T5232] [pid 5232] close(14) = -1 EBADF (Bad file descriptor) [pid 5232] close(15) = -1 EBADF (Bad file descriptor) [pid 5232] close(16) = -1 EBADF (Bad file descriptor) [pid 5232] close(17) = -1 EBADF (Bad file descriptor) [pid 5232] close(18) = -1 EBADF (Bad file descriptor) [pid 5232] close(19) = -1 EBADF (Bad file descriptor) [pid 5232] close(20) = -1 EBADF (Bad file descriptor) [pid 5232] close(21) = -1 EBADF (Bad file descriptor) [pid 5232] close(22) = -1 EBADF (Bad file descriptor) [pid 5232] close(23) = -1 EBADF (Bad file descriptor) [pid 5232] close(24) = -1 EBADF (Bad file descriptor) [pid 5232] close(25) = -1 EBADF (Bad file descriptor) [pid 5232] close(26) = -1 EBADF (Bad file descriptor) [pid 5232] close(27) = -1 EBADF (Bad file descriptor) [pid 5232] close(28) = -1 EBADF (Bad file descriptor) [pid 5232] close(29) = -1 EBADF (Bad file descriptor) [pid 5232] exit_group(0) = ? [pid 5232] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=129, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./127", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./127", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./127/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./127/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./127/binderfs") = 0 [ 189.477449][ T11] [ 189.477449][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.477449][ T11] [ 189.488035][ T11] [ 189.488035][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.488035][ T11] [ 189.499339][ T113] [ 189.499339][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.499339][ T113] [ 189.510264][ T11] [ 189.510264][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.510264][ T11] [ 189.520932][ T11] [ 189.520932][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.520932][ T11] [ 189.532050][ T114] [ 189.532050][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.532050][ T114] [ 189.542617][ T11] [ 189.542617][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.542617][ T11] [ 189.553078][ T11] [ 189.553078][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.553078][ T11] [ 189.563961][ T5087] [ 189.563961][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.563961][ T5087] [ 189.574896][ T114] [pid 5087] umount2("./127/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./127/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./127/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./127/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./127/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [ 189.574896][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.574896][ T114] [ 189.585361][ T5087] [ 189.585361][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.585361][ T5087] [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./127/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./127") = 0 [pid 5087] mkdir("./128", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5233 attached [pid 5233] set_robust_list(0x55559309e660, 24) = 0 [pid 5233] chdir("./128" [pid 5087] <... clone resumed>, child_tidptr=0x55559309e650) = 130 [pid 5233] <... chdir resumed>) = 0 [pid 5233] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5233] setpgid(0, 0) = 0 [pid 5233] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5233] write(3, "1000", 4) = 4 [pid 5233] close(3) = 0 [pid 5233] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5233] memfd_create("syzkaller", 0) = 3 [pid 5233] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5233] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5233] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5233] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5233] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5233] close(3) = 0 [pid 5233] close(4) = 0 [pid 5233] mkdir("./file0", 0777) = 0 [ 190.109373][ T5233] loop0: detected capacity change from 0 to 32768 [pid 5233] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5233] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5233] chdir("./file0") = 0 [pid 5233] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5233] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5233] close(3) = 0 [pid 5233] close(4) = -1 EBADF (Bad file descriptor) [pid 5233] close(5) = -1 EBADF (Bad file descriptor) [pid 5233] close(6) = -1 EBADF (Bad file descriptor) [pid 5233] close(7) = -1 EBADF (Bad file descriptor) [pid 5233] close(8) = -1 EBADF (Bad file descriptor) [pid 5233] close(9) = -1 EBADF (Bad file descriptor) [ 190.150865][ T5233] [ 190.150865][ T5233] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 190.150865][ T5233] [ 190.187151][ T5233] read_mapping_page failed! [ 190.192223][ T5233] ERROR: (device loop0): txCommit: [ 190.192223][ T5233] [pid 5233] close(10) = -1 EBADF (Bad file descriptor) [pid 5233] close(11) = -1 EBADF (Bad file descriptor) [pid 5233] close(12) = -1 EBADF (Bad file descriptor) [pid 5233] close(13) = -1 EBADF (Bad file descriptor) [pid 5233] close(14) = -1 EBADF (Bad file descriptor) [pid 5233] close(15) = -1 EBADF (Bad file descriptor) [pid 5233] close(16) = -1 EBADF (Bad file descriptor) [pid 5233] close(17) = -1 EBADF (Bad file descriptor) [pid 5233] close(18) = -1 EBADF (Bad file descriptor) [pid 5233] close(19) = -1 EBADF (Bad file descriptor) [pid 5233] close(20) = -1 EBADF (Bad file descriptor) [pid 5233] close(21) = -1 EBADF (Bad file descriptor) [pid 5233] close(22) = -1 EBADF (Bad file descriptor) [pid 5233] close(23) = -1 EBADF (Bad file descriptor) [pid 5233] close(24) = -1 EBADF (Bad file descriptor) [pid 5233] close(25) = -1 EBADF (Bad file descriptor) [pid 5233] close(26) = -1 EBADF (Bad file descriptor) [pid 5233] close(27) = -1 EBADF (Bad file descriptor) [pid 5233] close(28) = -1 EBADF (Bad file descriptor) [pid 5233] close(29) = -1 EBADF (Bad file descriptor) [pid 5233] exit_group(0) = ? [pid 5233] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=130, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- [pid 5087] umount2("./128", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./128", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./128/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./128/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./128/binderfs") = 0 [ 190.361137][ T61] [ 190.361137][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 190.361137][ T61] [ 190.371986][ T61] [ 190.371986][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 190.371986][ T61] [ 190.383147][ T113] [ 190.383147][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 190.383147][ T113] [ 190.393772][ T61] [ 190.393772][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 190.393772][ T61] [ 190.404370][ T61] [ 190.404370][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 190.404370][ T61] [ 190.415323][ T114] [ 190.415323][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 190.415323][ T114] [ 190.425969][ T61] [ 190.425969][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 190.425969][ T61] [ 190.436419][ T61] [ 190.436419][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 190.436419][ T61] [ 190.447688][ T114] [ 190.447688][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 190.447688][ T114] [ 190.459144][ T5087] [pid 5087] umount2("./128/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./128/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./128/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./128/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./128/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [ 190.459144][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 190.459144][ T5087] [ 190.469989][ T5087] [ 190.469989][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 190.469989][ T5087] [pid 5087] rmdir("./128/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./128") = 0 [pid 5087] mkdir("./129", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5234 attached , child_tidptr=0x55559309e650) = 131 [pid 5234] set_robust_list(0x55559309e660, 24) = 0 [pid 5234] chdir("./129") = 0 [pid 5234] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5234] setpgid(0, 0) = 0 [pid 5234] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5234] write(3, "1000", 4) = 4 [pid 5234] close(3) = 0 [pid 5234] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5234] memfd_create("syzkaller", 0) = 3 [pid 5234] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5234] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5234] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5234] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5234] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5234] close(3) = 0 [pid 5234] close(4) = 0 [pid 5234] mkdir("./file0", 0777) = 0 [pid 5234] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5234] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5234] chdir("./file0") = 0 [pid 5234] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 190.983029][ T5234] loop0: detected capacity change from 0 to 32768 [ 191.017013][ T5234] [ 191.017013][ T5234] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.017013][ T5234] [pid 5234] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5234] close(3) = 0 [pid 5234] close(4) = -1 EBADF (Bad file descriptor) [pid 5234] close(5) = -1 EBADF (Bad file descriptor) [pid 5234] close(6) = -1 EBADF (Bad file descriptor) [pid 5234] close(7) = -1 EBADF (Bad file descriptor) [pid 5234] close(8) = -1 EBADF (Bad file descriptor) [pid 5234] close(9) = -1 EBADF (Bad file descriptor) [pid 5234] close(10) = -1 EBADF (Bad file descriptor) [pid 5234] close(11) = -1 EBADF (Bad file descriptor) [pid 5234] close(12) = -1 EBADF (Bad file descriptor) [pid 5234] close(13) = -1 EBADF (Bad file descriptor) [pid 5234] close(14) = -1 EBADF (Bad file descriptor) [pid 5234] close(15) = -1 EBADF (Bad file descriptor) [ 191.064098][ T5234] read_mapping_page failed! [ 191.068621][ T5234] ERROR: (device loop0): txCommit: [ 191.068621][ T5234] [pid 5234] close(16) = -1 EBADF (Bad file descriptor) [pid 5234] close(17) = -1 EBADF (Bad file descriptor) [pid 5234] close(18) = -1 EBADF (Bad file descriptor) [pid 5234] close(19) = -1 EBADF (Bad file descriptor) [pid 5234] close(20) = -1 EBADF (Bad file descriptor) [pid 5234] close(21) = -1 EBADF (Bad file descriptor) [pid 5234] close(22) = -1 EBADF (Bad file descriptor) [pid 5234] close(23) = -1 EBADF (Bad file descriptor) [pid 5234] close(24) = -1 EBADF (Bad file descriptor) [pid 5234] close(25) = -1 EBADF (Bad file descriptor) [pid 5234] close(26) = -1 EBADF (Bad file descriptor) [pid 5234] close(27) = -1 EBADF (Bad file descriptor) [pid 5234] close(28) = -1 EBADF (Bad file descriptor) [pid 5234] close(29) = -1 EBADF (Bad file descriptor) [pid 5234] exit_group(0) = ? [pid 5234] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=131, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=22 /* 0.22 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./129", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./129", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./129/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./129/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./129/binderfs") = 0 [ 191.251509][ T1059] [ 191.251509][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.251509][ T1059] [ 191.262112][ T1059] [ 191.262112][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.262112][ T1059] [ 191.273319][ T114] [ 191.273319][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.273319][ T114] [ 191.284130][ T1059] [ 191.284130][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.284130][ T1059] [ 191.294656][ T1059] [ 191.294656][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.294656][ T1059] [ 191.305549][ T113] [ 191.305549][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.305549][ T113] [ 191.316435][ T1059] [ 191.316435][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.316435][ T1059] [ 191.326915][ T1059] [ 191.326915][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.326915][ T1059] [ 191.337724][ T5087] [ 191.337724][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.337724][ T5087] [ 191.348416][ T113] [pid 5087] umount2("./129/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./129/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./129/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./129/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./129/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./129/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [ 191.348416][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.348416][ T113] [ 191.358965][ T5087] [ 191.358965][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.358965][ T5087] [pid 5087] close(3) = 0 [pid 5087] rmdir("./129") = 0 [pid 5087] mkdir("./130", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55559309e650) = 132 ./strace-static-x86_64: Process 5235 attached [pid 5235] set_robust_list(0x55559309e660, 24) = 0 [pid 5235] chdir("./130") = 0 [pid 5235] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5235] setpgid(0, 0) = 0 [pid 5235] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5235] write(3, "1000", 4) = 4 [pid 5235] close(3) = 0 [pid 5235] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5235] memfd_create("syzkaller", 0) = 3 [pid 5235] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5235] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5235] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5235] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5235] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5235] close(3) = 0 [pid 5235] close(4) = 0 [pid 5235] mkdir("./file0", 0777) = 0 [pid 5235] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5235] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5235] chdir("./file0") = 0 [ 191.884540][ T5235] loop0: detected capacity change from 0 to 32768 [ 191.923639][ T5235] [ 191.923639][ T5235] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.923639][ T5235] [pid 5235] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5235] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5235] close(3) = 0 [pid 5235] close(4) = -1 EBADF (Bad file descriptor) [pid 5235] close(5) = -1 EBADF (Bad file descriptor) [pid 5235] close(6) = -1 EBADF (Bad file descriptor) [pid 5235] close(7) = -1 EBADF (Bad file descriptor) [pid 5235] close(8) = -1 EBADF (Bad file descriptor) [pid 5235] close(9) = -1 EBADF (Bad file descriptor) [pid 5235] close(10) = -1 EBADF (Bad file descriptor) [pid 5235] close(11) = -1 EBADF (Bad file descriptor) [pid 5235] close(12) = -1 EBADF (Bad file descriptor) [pid 5235] close(13) = -1 EBADF (Bad file descriptor) [ 191.969077][ T5235] read_mapping_page failed! [ 191.973728][ T5235] ERROR: (device loop0): txCommit: [ 191.973728][ T5235] [pid 5235] close(14) = -1 EBADF (Bad file descriptor) [pid 5235] close(15) = -1 EBADF (Bad file descriptor) [pid 5235] close(16) = -1 EBADF (Bad file descriptor) [pid 5235] close(17) = -1 EBADF (Bad file descriptor) [pid 5235] close(18) = -1 EBADF (Bad file descriptor) [pid 5235] close(19) = -1 EBADF (Bad file descriptor) [pid 5235] close(20) = -1 EBADF (Bad file descriptor) [pid 5235] close(21) = -1 EBADF (Bad file descriptor) [pid 5235] close(22) = -1 EBADF (Bad file descriptor) [pid 5235] close(23) = -1 EBADF (Bad file descriptor) [pid 5235] close(24) = -1 EBADF (Bad file descriptor) [pid 5235] close(25) = -1 EBADF (Bad file descriptor) [pid 5235] close(26) = -1 EBADF (Bad file descriptor) [pid 5235] close(27) = -1 EBADF (Bad file descriptor) [pid 5235] close(28) = -1 EBADF (Bad file descriptor) [pid 5235] close(29) = -1 EBADF (Bad file descriptor) [pid 5235] exit_group(0) = ? [pid 5235] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=132, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=20 /* 0.20 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./130", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./130", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./130/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./130/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./130/binderfs") = 0 [ 192.150708][ T1059] [ 192.150708][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 192.150708][ T1059] [ 192.161277][ T1059] [ 192.161277][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 192.161277][ T1059] [ 192.172363][ T113] [ 192.172363][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 192.172363][ T113] [ 192.182990][ T1059] [ 192.182990][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 192.182990][ T1059] [ 192.193454][ T1059] [ 192.193454][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 192.193454][ T1059] [ 192.204381][ T113] [ 192.204381][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 192.204381][ T113] [ 192.214906][ T1059] [ 192.214906][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 192.214906][ T1059] [ 192.225382][ T1059] [ 192.225382][ T1059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 192.225382][ T1059] [ 192.236715][ T114] [ 192.236715][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 192.236715][ T114] [ 192.247237][ T5087] [pid 5087] umount2("./130/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./130/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./130/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./130/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./130/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [ 192.247237][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 192.247237][ T5087] [ 192.258233][ T5087] [ 192.258233][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 192.258233][ T5087] [pid 5087] close(4) = 0 [pid 5087] rmdir("./130/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./130") = 0 [pid 5087] mkdir("./131", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5236 attached , child_tidptr=0x55559309e650) = 133 [pid 5236] set_robust_list(0x55559309e660, 24) = 0 [pid 5236] chdir("./131") = 0 [pid 5236] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5236] setpgid(0, 0) = 0 [pid 5236] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5236] write(3, "1000", 4) = 4 [pid 5236] close(3) = 0 [pid 5236] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5236] memfd_create("syzkaller", 0) = 3 [pid 5236] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5236] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5236] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5236] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5236] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5236] close(3) = 0 [pid 5236] close(4) = 0 [pid 5236] mkdir("./file0", 0777) = 0 [pid 5236] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5236] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5236] chdir("./file0") = 0 [pid 5236] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 192.796669][ T5236] loop0: detected capacity change from 0 to 32768 [ 192.833841][ T5236] [ 192.833841][ T5236] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 192.833841][ T5236] [pid 5236] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5236] close(3) = 0 [pid 5236] close(4) = -1 EBADF (Bad file descriptor) [pid 5236] close(5) = -1 EBADF (Bad file descriptor) [pid 5236] close(6) = -1 EBADF (Bad file descriptor) [pid 5236] close(7) = -1 EBADF (Bad file descriptor) [pid 5236] close(8) = -1 EBADF (Bad file descriptor) [pid 5236] close(9) = -1 EBADF (Bad file descriptor) [pid 5236] close(10) = -1 EBADF (Bad file descriptor) [ 192.852278][ T5236] read_mapping_page failed! [ 192.856882][ T5236] ERROR: (device loop0): txCommit: [ 192.856882][ T5236] [pid 5236] close(11) = -1 EBADF (Bad file descriptor) [pid 5236] close(12) = -1 EBADF (Bad file descriptor) [pid 5236] close(13) = -1 EBADF (Bad file descriptor) [pid 5236] close(14) = -1 EBADF (Bad file descriptor) [pid 5236] close(15) = -1 EBADF (Bad file descriptor) [pid 5236] close(16) = -1 EBADF (Bad file descriptor) [pid 5236] close(17) = -1 EBADF (Bad file descriptor) [pid 5236] close(18) = -1 EBADF (Bad file descriptor) [pid 5236] close(19) = -1 EBADF (Bad file descriptor) [pid 5236] close(20) = -1 EBADF (Bad file descriptor) [pid 5236] close(21) = -1 EBADF (Bad file descriptor) [pid 5236] close(22) = -1 EBADF (Bad file descriptor) [pid 5236] close(23) = -1 EBADF (Bad file descriptor) [pid 5236] close(24) = -1 EBADF (Bad file descriptor) [pid 5236] close(25) = -1 EBADF (Bad file descriptor) [pid 5236] close(26) = -1 EBADF (Bad file descriptor) [pid 5236] close(27) = -1 EBADF (Bad file descriptor) [pid 5236] close(28) = -1 EBADF (Bad file descriptor) [pid 5236] close(29) = -1 EBADF (Bad file descriptor) [pid 5236] exit_group(0) = ? [pid 5236] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=133, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- [pid 5087] umount2("./131", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./131", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./131/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./131/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./131/binderfs") = 0 [ 193.035350][ T11] [ 193.035350][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.035350][ T11] [ 193.045893][ T11] [ 193.045893][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.045893][ T11] [ 193.057092][ T113] [ 193.057092][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.057092][ T113] [ 193.067803][ T11] [ 193.067803][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.067803][ T11] [ 193.078275][ T11] [ 193.078275][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.078275][ T11] [ 193.089236][ T114] [ 193.089236][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.089236][ T114] [ 193.100031][ T11] [ 193.100031][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.100031][ T11] [ 193.110561][ T11] [ 193.110561][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.110561][ T11] [ 193.121768][ T113] [ 193.121768][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.121768][ T113] [ 193.132272][ T5087] [pid 5087] umount2("./131/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./131/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./131/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./131/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./131/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./131/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./131") = 0 [pid 5087] mkdir("./132", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 193.132272][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.132272][ T5087] [ 193.144043][ T5087] [ 193.144043][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.144043][ T5087] [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5237 attached [pid 5237] set_robust_list(0x55559309e660, 24 [pid 5087] <... clone resumed>, child_tidptr=0x55559309e650) = 134 [pid 5237] <... set_robust_list resumed>) = 0 [pid 5237] chdir("./132") = 0 [pid 5237] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5237] setpgid(0, 0) = 0 [pid 5237] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5237] write(3, "1000", 4) = 4 [pid 5237] close(3) = 0 [pid 5237] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5237] memfd_create("syzkaller", 0) = 3 [pid 5237] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5237] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5237] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5237] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5237] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5237] close(3) = 0 [pid 5237] close(4) = 0 [pid 5237] mkdir("./file0", 0777) = 0 [pid 5237] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5237] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5237] chdir("./file0") = 0 [pid 5237] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 193.624052][ T5237] loop0: detected capacity change from 0 to 32768 [ 193.661915][ T5237] [ 193.661915][ T5237] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.661915][ T5237] [pid 5237] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5237] close(3) = 0 [pid 5237] close(4) = -1 EBADF (Bad file descriptor) [pid 5237] close(5) = -1 EBADF (Bad file descriptor) [pid 5237] close(6) = -1 EBADF (Bad file descriptor) [pid 5237] close(7) = -1 EBADF (Bad file descriptor) [pid 5237] close(8) = -1 EBADF (Bad file descriptor) [pid 5237] close(9) = -1 EBADF (Bad file descriptor) [pid 5237] close(10) = -1 EBADF (Bad file descriptor) [pid 5237] close(11) = -1 EBADF (Bad file descriptor) [pid 5237] close(12) = -1 EBADF (Bad file descriptor) [pid 5237] close(13) = -1 EBADF (Bad file descriptor) [pid 5237] close(14) = -1 EBADF (Bad file descriptor) [pid 5237] close(15) = -1 EBADF (Bad file descriptor) [pid 5237] close(16) = -1 EBADF (Bad file descriptor) [pid 5237] close(17) = -1 EBADF (Bad file descriptor) [pid 5237] close(18) = -1 EBADF (Bad file descriptor) [pid 5237] close(19) = -1 EBADF (Bad file descriptor) [ 193.698117][ T5237] read_mapping_page failed! [ 193.702767][ T5237] ERROR: (device loop0): txCommit: [ 193.702767][ T5237] [pid 5237] close(20) = -1 EBADF (Bad file descriptor) [pid 5237] close(21) = -1 EBADF (Bad file descriptor) [pid 5237] close(22) = -1 EBADF (Bad file descriptor) [pid 5237] close(23) = -1 EBADF (Bad file descriptor) [pid 5237] close(24) = -1 EBADF (Bad file descriptor) [pid 5237] close(25) = -1 EBADF (Bad file descriptor) [pid 5237] close(26) = -1 EBADF (Bad file descriptor) [pid 5237] close(27) = -1 EBADF (Bad file descriptor) [pid 5237] close(28) = -1 EBADF (Bad file descriptor) [pid 5237] close(29) = -1 EBADF (Bad file descriptor) [pid 5237] exit_group(0) = ? [pid 5237] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=134, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./132", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./132", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./132/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./132/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./132/binderfs") = 0 [ 193.845983][ T61] [ 193.845983][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.845983][ T61] [ 193.856792][ T61] [ 193.856792][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.856792][ T61] [ 193.868107][ T113] [ 193.868107][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.868107][ T113] [ 193.878687][ T61] [ 193.878687][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.878687][ T61] [ 193.889490][ T61] [ 193.889490][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.889490][ T61] [ 193.900438][ T114] [ 193.900438][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.900438][ T114] [ 193.910975][ T61] [ 193.910975][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.910975][ T61] [ 193.922571][ T61] [ 193.922571][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.922571][ T61] [ 193.933388][ T5087] [ 193.933388][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.933388][ T5087] [pid 5087] umount2("./132/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./132/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./132/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./132/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./132/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./132/file0") = 0 [ 193.944488][ T113] [ 193.944488][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.944488][ T113] [ 193.955020][ T5087] [ 193.955020][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.955020][ T5087] [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./132") = 0 [pid 5087] mkdir("./133", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5238 attached , child_tidptr=0x55559309e650) = 135 [pid 5238] set_robust_list(0x55559309e660, 24) = 0 [pid 5238] chdir("./133") = 0 [pid 5238] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5238] setpgid(0, 0) = 0 [pid 5238] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5238] write(3, "1000", 4) = 4 [pid 5238] close(3) = 0 [pid 5238] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5238] memfd_create("syzkaller", 0) = 3 [pid 5238] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5238] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5238] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5238] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5238] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5238] close(3) = 0 [pid 5238] close(4) = 0 [pid 5238] mkdir("./file0", 0777) = 0 [pid 5238] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5238] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5238] chdir("./file0") = 0 [pid 5238] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 194.456846][ T5238] loop0: detected capacity change from 0 to 32768 [ 194.483218][ T5238] [ 194.483218][ T5238] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 194.483218][ T5238] [pid 5238] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5238] close(3) = 0 [pid 5238] close(4) = -1 EBADF (Bad file descriptor) [pid 5238] close(5) = -1 EBADF (Bad file descriptor) [pid 5238] close(6) = -1 EBADF (Bad file descriptor) [pid 5238] close(7) = -1 EBADF (Bad file descriptor) [pid 5238] close(8) = -1 EBADF (Bad file descriptor) [pid 5238] close(9) = -1 EBADF (Bad file descriptor) [pid 5238] close(10) = -1 EBADF (Bad file descriptor) [pid 5238] close(11) = -1 EBADF (Bad file descriptor) [pid 5238] close(12) = -1 EBADF (Bad file descriptor) [pid 5238] close(13) = -1 EBADF (Bad file descriptor) [pid 5238] close(14) = -1 EBADF (Bad file descriptor) [pid 5238] close(15) = -1 EBADF (Bad file descriptor) [pid 5238] close(16) = -1 EBADF (Bad file descriptor) [ 194.530086][ T5238] read_mapping_page failed! [ 194.534974][ T5238] ERROR: (device loop0): txCommit: [ 194.534974][ T5238] [pid 5238] close(17) = -1 EBADF (Bad file descriptor) [pid 5238] close(18) = -1 EBADF (Bad file descriptor) [pid 5238] close(19) = -1 EBADF (Bad file descriptor) [pid 5238] close(20) = -1 EBADF (Bad file descriptor) [pid 5238] close(21) = -1 EBADF (Bad file descriptor) [pid 5238] close(22) = -1 EBADF (Bad file descriptor) [pid 5238] close(23) = -1 EBADF (Bad file descriptor) [pid 5238] close(24) = -1 EBADF (Bad file descriptor) [pid 5238] close(25) = -1 EBADF (Bad file descriptor) [pid 5238] close(26) = -1 EBADF (Bad file descriptor) [pid 5238] close(27) = -1 EBADF (Bad file descriptor) [pid 5238] close(28) = -1 EBADF (Bad file descriptor) [pid 5238] close(29) = -1 EBADF (Bad file descriptor) [pid 5238] exit_group(0) = ? [pid 5238] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=135, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=22 /* 0.22 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./133", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./133", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./133/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./133/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./133/binderfs") = 0 [ 194.714690][ T11] [ 194.714690][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 194.714690][ T11] [ 194.725253][ T11] [ 194.725253][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 194.725253][ T11] [ 194.736413][ T114] [ 194.736413][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 194.736413][ T114] [ 194.746986][ T11] [ 194.746986][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 194.746986][ T11] [ 194.757539][ T11] [ 194.757539][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 194.757539][ T11] [ 194.768806][ T114] [ 194.768806][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 194.768806][ T114] [ 194.779335][ T11] [ 194.779335][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 194.779335][ T11] [ 194.789803][ T11] [ 194.789803][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 194.789803][ T11] [ 194.800800][ T113] [ 194.800800][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 194.800800][ T113] [ 194.811339][ T5087] [pid 5087] umount2("./133/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5087] umount2("./133/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./133/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] umount2("./133/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./133/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(4, 0x5555930a7730 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x5555930a7730 /* 0 entries */, 32768) = 0 [ 194.811339][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 194.811339][ T5087] [ 194.822469][ T5087] [ 194.822469][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 194.822469][ T5087] [pid 5087] close(4) = 0 [pid 5087] rmdir("./133/file0") = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./133") = 0 [pid 5087] mkdir("./134", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = 0 [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5239 attached , child_tidptr=0x55559309e650) = 136 [pid 5239] set_robust_list(0x55559309e660, 24) = 0 [pid 5239] chdir("./134") = 0 [pid 5239] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5239] setpgid(0, 0) = 0 [pid 5239] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5239] write(3, "1000", 4) = 4 [pid 5239] close(3) = 0 [pid 5239] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5239] memfd_create("syzkaller", 0) = 3 [pid 5239] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5e0d200000 [pid 5239] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5239] munmap(0x7f5e0d200000, 138412032) = 0 [pid 5239] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5239] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5239] close(3) = 0 [pid 5239] close(4) = 0 [pid 5239] mkdir("./file0", 0777) = 0 [pid 5239] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5239] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5239] chdir("./file0") = 0 [pid 5239] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 195.354462][ T5239] loop0: detected capacity change from 0 to 32768 [ 195.391733][ T5239] [ 195.391733][ T5239] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.391733][ T5239] [pid 5239] rename("./file0/file1", "./file3") = -1 EIO (Input/output error) [pid 5239] close(3) = 0 [pid 5239] close(4) = -1 EBADF (Bad file descriptor) [pid 5239] close(5) = -1 EBADF (Bad file descriptor) [pid 5239] close(6) = -1 EBADF (Bad file descriptor) [pid 5239] close(7) = -1 EBADF (Bad file descriptor) [pid 5239] close(8) = -1 EBADF (Bad file descriptor) [pid 5239] close(9) = -1 EBADF (Bad file descriptor) [pid 5239] close(10) = -1 EBADF (Bad file descriptor) [pid 5239] close(11) = -1 EBADF (Bad file descriptor) [pid 5239] close(12) = -1 EBADF (Bad file descriptor) [pid 5239] close(13) = -1 EBADF (Bad file descriptor) [pid 5239] close(14) = -1 EBADF (Bad file descriptor) [ 195.436339][ T5239] read_mapping_page failed! [ 195.440884][ T5239] ERROR: (device loop0): txCommit: [ 195.440884][ T5239] [pid 5239] close(15) = -1 EBADF (Bad file descriptor) [pid 5239] close(16) = -1 EBADF (Bad file descriptor) [pid 5239] close(17) = -1 EBADF (Bad file descriptor) [pid 5239] close(18) = -1 EBADF (Bad file descriptor) [pid 5239] close(19) = -1 EBADF (Bad file descriptor) [pid 5239] close(20) = -1 EBADF (Bad file descriptor) [pid 5239] close(21) = -1 EBADF (Bad file descriptor) [pid 5239] close(22) = -1 EBADF (Bad file descriptor) [pid 5239] close(23) = -1 EBADF (Bad file descriptor) [pid 5239] close(24) = -1 EBADF (Bad file descriptor) [pid 5239] close(25) = -1 EBADF (Bad file descriptor) [pid 5239] close(26) = -1 EBADF (Bad file descriptor) [pid 5239] close(27) = -1 EBADF (Bad file descriptor) [pid 5239] close(28) = -1 EBADF (Bad file descriptor) [pid 5239] close(29) = -1 EBADF (Bad file descriptor) [pid 5239] exit_group(0) = ? [pid 5239] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=136, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=23 /* 0.23 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./134", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x55559309f6f0 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./134/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] newfstatat(AT_FDCWD, "./134/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5087] unlink("./134/binderfs") = 0 [ 195.583833][ T61] [ 195.583833][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.583833][ T61] [ 195.594454][ T61] [ 195.594454][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.594454][ T61] [ 195.606107][ T114] [ 195.606107][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.606107][ T114] [ 195.616712][ T61] [ 195.616712][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.616712][ T61] [ 195.627437][ T61] [ 195.627437][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.627437][ T61] [ 195.638472][ T113] [ 195.638472][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.638472][ T113] [ 195.649089][ T61] [ 195.649089][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.649089][ T61] [ 195.659581][ T61] [ 195.659581][ T61] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.659581][ T61] [ 195.670250][ T5087] [ 195.670250][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.670250][ T5087] [ 195.681190][ T5087] [ 195.681190][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.681190][ T5087] [ 195.692923][ T114] general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 195.705213][ T114] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 195.713612][ T114] CPU: 1 PID: 114 Comm: jfsCommit Not tainted 6.9.0-rc7-syzkaller #0 [ 195.721670][ T114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 195.731725][ T114] RIP: 0010:lmLogSync+0x130/0xae0 [ 195.736762][ T114] Code: a2 fe 49 8d 5f f0 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 6e 1b d2 fe 48 8b 1b 48 83 c3 30 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 51 1b d2 fe 48 8b 3b e8 29 9c a2 [ 195.756368][ T114] RSP: 0018:ffffc90002ccfc00 EFLAGS: 00010216 [ 195.762434][ T114] RAX: 0000000000000006 RBX: 0000000000000030 RCX: 7610ce2ab3880c00 [ 195.770412][ T114] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 195.778376][ T114] RBP: ffffc90002ccfd18 R08: ffffffff81cb31ba R09: ffffc90002ccf9e8 [ 195.786347][ T114] R10: dffffc0000000000 R11: fffff52000599f6b R12: ffff88804edfa800 [ 195.794315][ T114] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff88802d92da38 [ 195.802284][ T114] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 195.811209][ T114] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 195.817787][ T114] CR2: 00007ffd6f89a15c CR3: 0000000028432000 CR4: 0000000000350ef0 [ 195.825762][ T114] Call Trace: [ 195.829037][ T114] [ 195.831966][ T114] ? __die_body+0x88/0xe0 [ 195.836302][ T114] ? die_addr+0x108/0x140 [ 195.840630][ T114] ? exc_general_protection+0x3dd/0x5d0 [ 195.846203][ T114] ? asm_exc_general_protection+0x26/0x30 [ 195.851950][ T114] ? filemap_fdatawrite_wbc+0xaa/0x180 [ 195.857422][ T114] ? lmLogSync+0x130/0xae0 [ 195.861850][ T114] ? jfs_syncpt+0x26/0xa0 [ 195.866187][ T114] ? __pfx_lmLogSync+0x10/0x10 [ 195.870955][ T114] ? do_raw_spin_lock+0x14f/0x370 [ 195.876002][ T114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.881655][ T114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.887298][ T114] ? do_raw_spin_unlock+0x13c/0x8b0 [ 195.892504][ T114] ? __wake_up_common_lock+0x18c/0x1e0 [ 195.897964][ T114] jfs_syncpt+0x7d/0xa0 [ 195.902137][ T114] txEnd+0x30f/0x560 [ 195.906033][ T114] jfs_lazycommit+0x634/0xb80 [ 195.910708][ T114] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 195.916612][ T114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.922256][ T114] ? lockdep_hardirqs_on+0x99/0x150 [ 195.927465][ T114] ? __pfx_jfs_lazycommit+0x10/0x10 [ 195.932662][ T114] ? __pfx_default_wake_function+0x10/0x10 [ 195.938479][ T114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.944116][ T114] ? __kthread_parkme+0x169/0x1d0 [ 195.949150][ T114] ? __pfx_jfs_lazycommit+0x10/0x10 [ 195.954349][ T114] kthread+0x2f2/0x390 [ 195.958422][ T114] ? __pfx_jfs_lazycommit+0x10/0x10 [ 195.963617][ T114] ? __pfx_kthread+0x10/0x10 [ 195.968209][ T114] ret_from_fork+0x4d/0x80 [ 195.972639][ T114] ? __pfx_kthread+0x10/0x10 [ 195.977234][ T114] ret_from_fork_asm+0x1a/0x30 [ 195.982020][ T114] [ 195.985031][ T114] Modules linked in: [ 195.989163][ T114] ---[ end trace 0000000000000000 ]--- [ 195.995761][ T114] RIP: 0010:lmLogSync+0x130/0xae0 [ 196.000834][ T114] Code: a2 fe 49 8d 5f f0 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 6e 1b d2 fe 48 8b 1b 48 83 c3 30 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 51 1b d2 fe 48 8b 3b e8 29 9c a2 [ 196.020586][ T114] RSP: 0018:ffffc90002ccfc00 EFLAGS: 00010216 [ 196.026683][ T114] RAX: 0000000000000006 RBX: 0000000000000030 RCX: 7610ce2ab3880c00 [ 196.034771][ T114] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 196.042882][ T114] RBP: ffffc90002ccfd18 R08: ffffffff81cb31ba R09: ffffc90002ccf9e8 [ 196.050850][ T114] R10: dffffc0000000000 R11: fffff52000599f6b R12: ffff88804edfa800 [ 196.058864][ T114] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff88802d92da38 [ 196.066879][ T114] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 196.076068][ T114] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 196.082715][ T114] CR2: 00007ffd6f89a15c CR3: 0000000028432000 CR4: 0000000000350ef0 [ 196.090700][ T114] Kernel panic - not syncing: Fatal exception [ 196.096968][ T114] Kernel Offset: disabled [ 196.101283][ T114] Rebooting in 86400 seconds..